$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft File: UgGonTDEgplFBBjJVrh3JJcG6Vc.mft (raw, json) Hash identifier: DeX0GBombqhDe8VOfbQWJFF9/liF50L8krYIUNUCwZk= Subject key identifier: 71:CC:7D:1C:3E:79:2B:46:53:A2:01:4C:34:E2:EA:7E:FB:F7:E4:97 Authority key identifier: 52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57 Certificate issuer: /CN=A91E7E94/serialNumber=5201A89D30C48299450418C956B877249706E957 Certificate serial: 055E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft Manifest number: 0559 Signing time: Fri 22 Aug 2025 23:34:07 +0000 Manifest this update: Fri 22 Aug 2025 23:34:06 +0000 Manifest next update: Fri 29 Aug 2025 23:34:06 +0000 Files and hashes: 1: UgGonTDEgplFBBjJVrh3JJcG6Vc.crl (hash: lWWb1ZtKOKU55cAYJ4cXdsksf+F14vTMgAQhxf7qYzU=) 2: FAF4A0E0FB3211EB967B1759C4F9AE02.roa (hash: AT0FYlyWfj+1bO0S/edzqRk8wR14Cvm5X0J48iKWZlw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1374 (0x55e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E94, serialNumber=5201A89D30C48299450418C956B877249706E957 Validity Not Before: Aug 22 23:34:06 2025 GMT Not After : Aug 29 23:34:06 2025 GMT Subject: CN=68a8fe6f-e8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:63:bc:bb:9c:a2:82:79:e5:9f:dd:66:39:8a: 34:08:85:19:f4:bd:29:ad:75:65:ce:88:0a:c1:b2: 56:8c:1a:b0:f8:2e:92:2c:46:8a:b0:de:01:4c:48: f4:08:4e:bb:bb:70:8a:d2:45:77:15:74:27:8b:fe: ff:56:48:49:0b:ba:05:cd:17:6f:7d:27:cc:16:50: 21:ec:09:22:dd:fb:2d:dd:b7:a2:82:9d:5f:96:53: 18:83:36:aa:a4:9e:93:84:f7:e2:f5:97:5f:89:42: 3e:92:da:6d:9b:ee:ed:a0:a6:ab:9b:1e:b7:31:b2: ca:55:80:84:ed:10:f8:45:cb:c0:68:c8:1b:88:b0: 69:f2:73:1d:ea:17:28:d1:74:54:26:1c:48:d9:c8: 69:d0:a3:c0:04:ff:51:89:43:ad:6d:7d:c5:5e:10: 38:95:81:05:db:2a:69:84:9c:57:7f:69:d0:4b:04: 8d:95:4a:30:96:f0:8e:b3:91:e6:2f:fd:16:84:10: 2e:19:05:5e:3d:86:0f:ab:b2:b5:67:29:68:f6:48: 2a:4f:ba:d8:88:9b:42:22:85:f7:80:f8:41:4e:09: a4:3f:a2:88:93:d1:02:2c:af:dd:d9:ef:f3:c2:26: 05:ac:5a:2e:ed:0a:90:eb:1d:6d:50:26:3f:79:83: f9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CC:7D:1C:3E:79:2B:46:53:A2:01:4C:34:E2:EA:7E:FB:F7:E4:97 X509v3 Authority Key Identifier: keyid:52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:6b:86:99:4b:d6:5d:70:38:95:55:d8:be:7e:67:8b:2d:03: d7:95:29:cb:ed:7e:6e:71:5e:94:75:a2:d5:05:87:75:0a:67: 10:61:b3:32:0f:93:f4:be:71:07:a7:61:55:79:6c:e3:00:fd: ab:fc:45:d8:fe:d8:8e:e2:d3:f1:1e:d8:df:c8:51:26:7d:c5: 33:c2:5e:69:1c:6d:4e:33:10:b7:2b:d2:a7:9f:9d:43:cc:f9: 8f:66:d1:e2:aa:23:69:3b:a1:65:1e:39:a0:35:08:ca:06:a4: fd:9d:ed:d6:2f:53:de:f8:99:4a:14:c3:eb:95:f6:2d:f0:f3: 43:4a:8b:60:d9:d1:40:44:6a:0c:ef:20:36:b9:10:7c:f4:cf: 4a:bd:3a:85:03:be:ca:79:da:78:35:b5:75:c5:19:7c:46:fe: 8c:d7:a3:a2:ac:57:ec:26:66:24:e7:bf:16:5d:fa:f6:8d:2f: ed:41:a7:61:1e:26:92:36:14:2d:4a:4f:05:3f:82:b2:96:f1: 29:97:67:05:86:c1:4a:a5:e6:88:b2:56:4b:c1:2a:a2:1c:42: fd:a8:d5:24:02:46:d3:8b:0f:5c:c0:08:0c:ea:96:32:63:7d: 88:43:84:7f:b4:71:a1:0e:22:51:00:06:d0:c9:65:a0:a8:9f: c0:9d:b8:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFOTQxMTAvBgNVBAUTKDUyMDFBODlEMzBDNDgyOTk0NTA0MThDOTU2Qjg3NzI0 OTcwNkU5NTcwHhcNMjUwODIyMjMzNDA2WhcNMjUwODI5MjMzNDA2WjAYMRYwFAYD VQQDEw02OGE4ZmU2Zi1lOGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWO8u5yignnln91mOYo0CIUZ9L0prXVlzogKwbJWjBqw+C6SLEaKsN4BTEj0 CE67u3CK0kV3FXQni/7/VkhJC7oFzRdvfSfMFlAh7Aki3fst3beigp1fllMYgzaq pJ6ThPfi9ZdfiUI+ktptm+7toKarmx63MbLKVYCE7RD4RcvAaMgbiLBp8nMd6hco 0XRUJhxI2chp0KPABP9RiUOtbX3FXhA4lYEF2ypphJxXf2nQSwSNlUowlvCOs5Hm L/0WhBAuGQVePYYPq7K1Zylo9kgqT7rYiJtCIoX3gPhBTgmkP6KIk9ECLK/d2e/z wiYFrFou7QqQ6x1tUCY/eYP5GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHMfRw+ eStGU6IBTDTi6n779+SXMB8GA1UdIwQYMBaAFFIBqJ0wxIKZRQQYyVa4dySXBulX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U5NC9BMkE3MEM1QUZC MkYxMUVCQTg0MDlFNTRDNEY5QUUwMi9VZ0dvblRERWdwbEZCQmpKVnJoM0pKY0c2 VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VnR29uVERFZ3BsRkJCakpWcmgzSkpjRzZWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0U5NC9BMkE3MEM1QUZCMkYxMUVCQTg0MDlFNTRDNEY5QUUwMi9VZ0dvblRERWdw bEZCQmpKVnJoM0pKY0c2VmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQa4aZS9ZdcDiVVdi+fmeLLQPXlSnL7X5ucV6UdaLVBYd1CmcQYbMy D5P0vnEHp2FVeWzjAP2r/EXY/tiO4tPxHtjfyFEmfcUzwl5pHG1OMxC3K9Knn51D zPmPZtHiqiNpO6FlHjmgNQjKBqT9ne3WL1Pe+JlKFMPrlfYt8PNDSotg2dFARGoM 7yA2uRB89M9KvTqFA77Kedp4NbV1xRl8Rv6M16OirFfsJmYk578WXfr2jS/tQadh HiaSNhQtSk8FP4KylvEpl2cFhsFKpeaIslZLwSqiHEL9qNUkAkbTiw9cwAgM6pYy Y32IQ4R/tHGhDiJRAAbQyWWgqJ/AnbiD -----END CERTIFICATE-----Generated at Sat Aug 23 14:31:47 2025 by rpki-client