$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft File: UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft (raw, json) Hash identifier: DqsZSxQjNDBPrWBs6THSrqLLK/DAwxkBS0w1KqPXuis= Subject key identifier: 32:9C:55:D1:40:62:67:A1:8A:60:92:A2:8A:47:F9:71:3F:C2:D0:CD Authority key identifier: 50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3 Certificate issuer: /CN=A91E5191/serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3 Certificate serial: 07A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft Manifest number: 079C Signing time: Fri 22 Aug 2025 21:33:29 +0000 Manifest this update: Fri 22 Aug 2025 21:33:28 +0000 Manifest next update: Fri 29 Aug 2025 21:33:28 +0000 Files and hashes: 1: UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl (hash: XaW5M5I6PNHkeR8fCGkxTRUsitj725bn/dYTTnSaKXo=) 2: 3E78F3541E2D11EB95754317C4F9AE02.roa (hash: L4y/BSdD8jixu1gcFYl1/VYG0pr8T2e5WODxblJYDOg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1957 (0x7a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5191, serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3 Validity Not Before: Aug 22 21:33:28 2025 GMT Not After : Aug 29 21:33:28 2025 GMT Subject: CN=68a8e229-1346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:66:b4:cf:e2:cd:c8:06:aa:70:50:bb:d8:6f: c2:40:8c:60:2c:83:8a:b9:b8:7a:47:ca:ce:4e:2c: d4:97:fe:ef:e8:04:b3:ad:34:25:91:36:33:36:f1: 57:7b:9a:e9:c6:b8:cb:67:b5:e8:e9:89:33:3e:fe: fe:49:54:08:f5:6d:85:58:18:41:10:d8:f1:dc:fb: e7:13:0b:81:ed:00:26:40:0e:c0:6d:a0:a3:67:bb: 76:13:2a:b1:ba:3d:63:4a:08:db:51:cf:10:1f:dd: a1:78:ad:89:98:78:1b:c2:3b:3e:71:3e:4a:40:a2: c4:06:83:39:61:71:43:d5:ad:da:2b:92:56:68:1c: 7a:96:9d:36:43:f9:f1:69:98:a0:4c:e7:1a:d5:c6: 89:c2:35:18:fb:15:49:1d:eb:05:fa:fd:67:c7:a5: 73:5e:5c:85:ee:81:03:c6:3d:93:2e:d3:ca:22:aa: 05:7f:22:b2:0d:a5:75:25:7b:1a:03:64:34:55:4e: 47:cc:c2:73:ed:70:99:8c:8d:97:41:71:bc:81:3c: 97:3b:6f:e4:f0:a1:5e:c0:d8:c1:86:63:bc:c5:92: 7a:50:d2:7f:5b:3e:61:20:28:63:7c:2e:e8:2e:58: 88:ff:7f:e2:b4:0f:a5:a9:ed:2e:8a:16:3f:1a:ed: 8f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9C:55:D1:40:62:67:A1:8A:60:92:A2:8A:47:F9:71:3F:C2:D0:CD X509v3 Authority Key Identifier: keyid:50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:4d:d0:f7:df:76:74:8b:27:05:55:3b:7e:15:35:f8:6e:c2: cc:a9:81:66:25:16:8d:c7:14:e1:94:f9:00:12:c6:0c:d6:42: 2e:0b:cd:93:a0:55:15:1e:0e:17:9f:bd:03:5b:0f:c5:5c:d8: 1e:e8:2e:b4:18:3d:bc:d1:f2:1a:1d:5a:d9:71:78:8a:79:f0: de:78:49:13:2c:4a:90:23:78:71:91:c4:d9:3a:df:87:13:4a: 7a:82:1a:88:fe:6b:3a:ae:be:49:4d:36:1b:a5:d0:f5:73:4f: 39:4e:c7:db:15:31:f8:8f:30:2a:a4:8a:81:1d:4d:56:7c:f8: 80:ea:66:15:ac:5c:2e:c2:7b:bb:46:81:6c:69:65:47:15:3b: 11:f6:d4:be:8e:e8:72:35:0e:e0:20:ab:e3:54:20:2c:63:a0: c4:a6:83:ca:13:71:fc:2d:9b:6b:71:b3:b4:e1:ef:e1:df:77: b6:c8:b8:ef:70:14:8e:19:22:ce:80:f3:f5:bd:96:38:4b:b7: 3c:c6:d7:b5:ee:13:6d:da:36:e7:1b:f6:aa:96:74:ae:bb:87: b0:08:a3:00:bb:ec:a2:10:db:1f:da:c4:9e:99:d6:92:66:27: 58:65:f7:2e:7d:0f:58:4f:33:82:5f:99:39:82:f7:0e:e5:49: f1:ab:b9:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUxOTExMTAvBgNVBAUTKDUwQTcxMTZCQjlGMzY5N0JDNUUzRTIyMkVGMDM1Rjcw MzQyQ0REQTMwHhcNMjUwODIyMjEzMzI4WhcNMjUwODI5MjEzMzI4WjAYMRYwFAYD VQQDEw02OGE4ZTIyOS0xMzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Ga0z+LNyAaqcFC72G/CQIxgLIOKubh6R8rOTizUl/7v6ASzrTQlkTYzNvFX e5rpxrjLZ7Xo6YkzPv7+SVQI9W2FWBhBENjx3PvnEwuB7QAmQA7AbaCjZ7t2Eyqx uj1jSgjbUc8QH92heK2JmHgbwjs+cT5KQKLEBoM5YXFD1a3aK5JWaBx6lp02Q/nx aZigTOca1caJwjUY+xVJHesF+v1nx6VzXlyF7oEDxj2TLtPKIqoFfyKyDaV1JXsa A2Q0VU5HzMJz7XCZjI2XQXG8gTyXO2/k8KFewNjBhmO8xZJ6UNJ/Wz5hIChjfC7o LliI/3/itA+lqe0uihY/Gu2P6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKcVdFA YmehimCSoopH+XE/wtDNMB8GA1UdIwQYMBaAFFCnEWu582l7xePiIu8DX3A0LN2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTE5MS80OEFBMDcwNjE5 NzIxMUVCODA1RTZCN0ZDNEY5QUUwMi9VS2NSYTduemFYdkY0LUlpN3dOZmNEUXMz YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLY1JhN256YVh2RjQtSWk3d05mY0RRczNhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTE5MS80OEFBMDcwNjE5NzIxMUVCODA1RTZCN0ZDNEY5QUUwMi9VS2NSYTduemFY dkY0LUlpN3dOZmNEUXMzYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHTdD333Z0iycFVTt+FTX4bsLMqYFmJRaNxxThlPkAEsYM1kIuC82T oFUVHg4Xn70DWw/FXNge6C60GD280fIaHVrZcXiKefDeeEkTLEqQI3hxkcTZOt+H E0p6ghqI/ms6rr5JTTYbpdD1c085TsfbFTH4jzAqpIqBHU1WfPiA6mYVrFwuwnu7 RoFsaWVHFTsR9tS+juhyNQ7gIKvjVCAsY6DEpoPKE3H8LZtrcbO04e/h33e2yLjv cBSOGSLOgPP1vZY4S7c8xte17hNt2jbnG/aqlnSuu4ewCKMAu+yiENsf2sSemdaS ZidYZfcufQ9YTzOCX5k5gvcO5Unxq7m1 -----END CERTIFICATE-----Generated at Sat Aug 23 18:26:45 2025 by rpki-client