$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft File: uXgEM1AwWT1tlle8RdvRFLEpHSg.mft (raw, json) Hash identifier: v4KvnO+tr7p+1qZAfxTl/jxETg1AI67/K/2B6I/IrVM= Subject key identifier: 86:57:7A:43:E9:9E:F2:D9:B2:AE:E7:C1:D4:87:70:A7:76:17:E8:1E Authority key identifier: B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28 Certificate issuer: /CN=A91E9310/serialNumber=B97804335030593D6D9657BC45DBD114B1291D28 Certificate serial: 0488 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft Manifest number: 0480 Signing time: Sat 23 Aug 2025 00:18:13 +0000 Manifest this update: Sat 23 Aug 2025 00:18:13 +0000 Manifest next update: Sat 30 Aug 2025 00:18:13 +0000 Files and hashes: 1: uXgEM1AwWT1tlle8RdvRFLEpHSg.crl (hash: QLnvhrvB2vVbGofsxPVnSaohwYzRcRMbad7tsuCimZo=) 2: 785EB284773D11F0AB969921C4F9AE02.roa (hash: 8Zp/aagGSHH88DTb+DNr1X++0HtBH9A2tNVSmLSIRBM=) 3: E985185E773D11F0B023A932C4F9AE02.roa (hash: mISRfVX+s35IuBCQPh+4h139jbl1K2kLytqStI4mDZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1160 (0x488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9310, serialNumber=B97804335030593D6D9657BC45DBD114B1291D28 Validity Not Before: Aug 23 00:18:13 2025 GMT Not After : Aug 30 00:18:13 2025 GMT Subject: CN=68a908c5-fb0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:61:e3:b4:aa:a4:e1:f5:8e:18:db:4c:58:2e: 00:37:fa:f4:0b:d2:cd:3c:20:11:61:04:2a:d2:b7: 1a:cb:8b:f8:98:24:ec:d2:9d:3e:a9:27:b9:e1:d2: a7:af:74:97:ac:97:d3:76:5b:df:57:44:fb:c9:6c: 7a:54:7f:b3:0d:89:1e:f9:f0:3c:2e:c0:7a:c5:9c: 63:27:cc:93:72:3a:16:f0:25:d9:fe:08:ad:c1:8d: b2:f7:1b:e2:51:c9:8d:ac:8a:2a:23:cb:27:c3:eb: 7b:92:02:42:ed:05:ef:35:c1:9a:c4:7b:c6:fb:53: 56:c2:93:b3:c8:4a:cc:bf:a0:6c:a0:e6:f2:78:d3: 4d:b1:54:d8:69:1e:bb:cd:02:04:27:66:e8:c4:55: 02:a4:d5:e2:49:75:60:d9:b5:42:01:21:35:43:db: a8:25:8f:4d:34:ad:87:f5:ca:83:1d:b1:4a:3a:90: ed:ab:e1:b8:12:e1:64:e9:23:20:b1:d7:41:af:36: 38:b1:f7:c8:90:3f:e2:4f:fa:29:71:1f:c9:87:c0: 82:9d:6a:3b:ce:88:13:90:d3:e8:45:2e:af:c7:2c: f6:0c:9f:2d:d6:20:be:65:ed:41:df:27:ea:9d:77: a0:f8:17:73:94:ef:8e:80:f9:66:2b:8a:cc:80:47: e8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:57:7A:43:E9:9E:F2:D9:B2:AE:E7:C1:D4:87:70:A7:76:17:E8:1E X509v3 Authority Key Identifier: keyid:B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a1:f6:fc:21:43:65:86:bd:ef:73:13:78:84:ce:51:66:f7: 92:44:d4:5b:6f:2e:38:ad:3d:55:a6:07:3b:cd:76:09:1c:90: e1:5f:a5:e3:b5:32:b8:6e:57:3d:02:16:37:6f:f7:7c:78:86: dc:11:b5:4c:26:e7:fe:d5:2b:30:cd:9d:18:44:eb:e8:8b:91: 00:0a:1b:8a:55:2f:f3:2c:a0:3b:21:02:ee:a5:b2:de:b0:2e: a1:68:e9:c3:45:da:0a:0d:7b:66:f5:7d:2f:7f:01:28:2b:d4: ac:54:1c:38:ea:93:f2:46:93:8e:59:6c:f3:be:5f:28:42:28: 30:42:06:b1:ec:b9:67:3f:ea:1e:51:1c:cb:a3:20:b9:4c:7f: cc:79:8a:c1:c5:e1:96:4c:19:3d:a9:49:39:d1:4a:f5:6f:e6: 09:26:2a:c4:cd:05:20:ed:17:8a:05:ac:36:91:15:af:5f:ea: d4:8f:66:8d:67:28:31:08:68:da:b8:64:9a:67:f6:7c:65:3e: b2:cc:e0:84:40:56:70:02:48:72:92:64:46:11:9f:aa:e3:67: 5a:81:b8:a7:a2:df:77:6a:69:f1:05:9e:79:8a:f8:d1:77:ee: 44:20:de:ba:bc:10:d9:54:0e:89:d4:ca:b4:01:e9:ae:37:83: 1e:ab:d4:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkzMTAxMTAvBgNVBAUTKEI5NzgwNDMzNTAzMDU5M0Q2RDk2NTdCQzQ1REJEMTE0 QjEyOTFEMjgwHhcNMjUwODIzMDAxODEzWhcNMjUwODMwMDAxODEzWjAYMRYwFAYD VQQDEw02OGE5MDhjNS1mYjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6WHjtKqk4fWOGNtMWC4AN/r0C9LNPCARYQQq0rcay4v4mCTs0p0+qSe54dKn r3SXrJfTdlvfV0T7yWx6VH+zDYke+fA8LsB6xZxjJ8yTcjoW8CXZ/gitwY2y9xvi UcmNrIoqI8snw+t7kgJC7QXvNcGaxHvG+1NWwpOzyErMv6BsoObyeNNNsVTYaR67 zQIEJ2boxFUCpNXiSXVg2bVCASE1Q9uoJY9NNK2H9cqDHbFKOpDtq+G4EuFk6SMg sddBrzY4sffIkD/iT/opcR/Jh8CCnWo7zogTkNPoRS6vxyz2DJ8t1iC+Ze1B3yfq nXeg+BdzlO+OgPlmK4rMgEfovQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZXekPp nvLZsq7nwdSHcKd2F+geMB8GA1UdIwQYMBaAFLl4BDNQMFk9bZZXvEXb0RSxKR0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTMxMC9EMUIxRDM0NDU0 NjMxMUVDQThGQTQ5NkFDNEY5QUUwMi91WGdFTTFBd1dUMXRsbGU4UmR2UkZMRXBI U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYZ0VNMUF3V1QxdGxsZThSZHZSRkxFcEhTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTMxMC9EMUIxRDM0NDU0NjMxMUVDQThGQTQ5NkFDNEY5QUUwMi91WGdFTTFBd1dU MXRsbGU4UmR2UkZMRXBIU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsofb8IUNlhr3vcxN4hM5RZveSRNRbby44rT1Vpgc7zXYJHJDhX6Xj tTK4blc9AhY3b/d8eIbcEbVMJuf+1SswzZ0YROvoi5EAChuKVS/zLKA7IQLupbLe sC6haOnDRdoKDXtm9X0vfwEoK9SsVBw46pPyRpOOWWzzvl8oQigwQgax7LlnP+oe URzLoyC5TH/MeYrBxeGWTBk9qUk50Ur1b+YJJirEzQUg7ReKBaw2kRWvX+rUj2aN ZygxCGjauGSaZ/Z8ZT6yzOCEQFZwAkhykmRGEZ+q42dagbinot93amnxBZ55ivjR d+5EIN66vBDZVA6J1Mq0AemuN4Meq9Ro -----END CERTIFICATE-----Generated at Sat Aug 23 16:44:05 2025 by rpki-client