$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft File: UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft (raw, json) Hash identifier: nfgmV/9OX8RNmMCPo4chTwzzylZEzC2aG43o1ybq0Eg= Subject key identifier: 70:53:9E:53:5E:EF:9B:BB:0D:4C:06:A6:6F:2A:8D:35:B3:2D:71:1E Authority key identifier: 51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB Certificate issuer: /CN=A91EBA1C/serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB Certificate serial: 22B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft Manifest number: 226A Signing time: Fri 22 Aug 2025 15:55:39 +0000 Manifest this update: Fri 22 Aug 2025 15:55:39 +0000 Manifest next update: Fri 29 Aug 2025 15:55:39 +0000 Files and hashes: 1: UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl (hash: cBYTvEbAK+dZshdcsXtFq0P5cwjLUsgmSPdBRv1+AXo=) 2: 410B457E609811F0A70C2B32C4F9AE02.roa (hash: AJZwPASrCJ7F+xJTKr0sCmRQySB9T9a/QWn2vj0KBKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8885 (0x22b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA1C, serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB Validity Not Before: Aug 22 15:55:39 2025 GMT Not After : Aug 29 15:55:39 2025 GMT Subject: CN=68a892fb-f66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b8:16:25:83:82:de:07:5f:83:df:f8:35:44: 2b:d2:0a:22:17:ff:f0:59:e2:b1:88:ab:d6:76:1c: 15:a7:b8:b9:d1:c8:51:d9:e2:df:9b:68:5f:0d:f4: 15:ef:8b:3d:5e:b1:af:5d:7c:6c:2d:37:8d:42:b6: f1:a3:8c:89:fa:1a:15:33:df:de:20:b7:9c:e9:26: ab:77:fe:64:66:23:39:39:69:39:6d:fc:56:79:35: 5f:9f:53:d3:65:9f:fd:2b:35:4f:a3:92:f7:4f:29: 76:c5:14:85:3c:24:88:7c:51:29:95:44:3c:71:42: 13:18:d1:fb:40:44:8c:6c:7f:ce:17:9b:71:6a:73: 63:b3:83:9b:36:4b:44:06:b6:0e:d2:38:12:14:0d: 8e:64:f9:af:06:0b:b4:49:01:1c:59:f4:d8:bb:0e: 2b:d6:20:fb:d7:04:d5:fe:47:21:df:96:71:18:43: 77:51:65:ca:34:b7:e9:b1:fb:84:be:31:0e:1e:8f: 3c:81:1b:39:9a:1e:86:7a:4b:2d:3b:62:d1:c6:54: b2:b0:e0:65:66:fe:12:50:1d:82:ad:06:b9:69:e3: 2a:d5:74:34:fb:93:45:37:54:14:70:3e:85:c2:1f: 1c:7c:b2:49:c8:d9:64:90:1f:fa:f5:64:77:0a:23: a1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:53:9E:53:5E:EF:9B:BB:0D:4C:06:A6:6F:2A:8D:35:B3:2D:71:1E X509v3 Authority Key Identifier: keyid:51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:56:18:86:26:de:31:e1:9a:53:c6:1c:53:c7:81:42:aa:ea: 3f:ab:a1:46:d7:a8:aa:eb:0e:8b:b9:c8:10:21:2c:93:c2:58: 92:50:97:93:a5:76:66:86:b9:f0:dd:4e:a4:68:bc:ca:f8:f5: 78:5f:b7:f3:9b:1e:34:0d:a3:a2:35:f9:fe:5a:35:47:aa:99: d2:8e:f1:dc:ab:6a:c2:bf:87:ce:41:47:d1:25:19:03:56:2d: ea:e4:97:1e:65:9a:6b:5f:c0:a9:94:61:a7:ab:b1:5e:bc:6b: e4:8f:79:2f:81:d5:13:12:0b:f7:24:57:c3:ec:b4:da:6b:a6: a6:48:ef:de:d1:71:a2:90:cc:02:90:d4:3b:bf:36:b3:14:aa: b1:c6:19:58:9c:11:2a:64:21:9e:cf:e8:eb:70:f5:de:48:b6: d2:1d:2f:ca:eb:61:3e:c9:22:8a:07:2e:d7:5b:96:c0:15:16: 6b:e7:b5:2b:d6:c9:fb:54:5b:92:b4:de:44:be:40:f7:04:4c: 96:18:d7:f6:a3:54:78:3a:00:8d:52:e9:fe:c4:b7:43:1e:1b: c6:dc:7a:00:10:2c:9b:b0:e7:78:b4:94:a0:59:e3:71:16:88: c3:60:23:af:93:c6:82:2c:4e:c9:db:21:1d:e4:45:7f:f1:64: e0:80:b7:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBMUMxMTAvBgNVBAUTKDUxQzI2MTFCNDYxREQ1MTE4MzVBNTE0MUY4QUVFNTAy RDNBMzlBRUIwHhcNMjUwODIyMTU1NTM5WhcNMjUwODI5MTU1NTM5WjAYMRYwFAYD VQQDEw02OGE4OTJmYi1mNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybgWJYOC3gdfg9/4NUQr0goiF//wWeKxiKvWdhwVp7i50chR2eLfm2hfDfQV 74s9XrGvXXxsLTeNQrbxo4yJ+hoVM9/eILec6Sard/5kZiM5OWk5bfxWeTVfn1PT ZZ/9KzVPo5L3Tyl2xRSFPCSIfFEplUQ8cUITGNH7QESMbH/OF5txanNjs4ObNktE BrYO0jgSFA2OZPmvBgu0SQEcWfTYuw4r1iD71wTV/kch35ZxGEN3UWXKNLfpsfuE vjEOHo88gRs5mh6GekstO2LRxlSysOBlZv4SUB2CrQa5aeMq1XQ0+5NFN1QUcD6F wh8cfLJJyNlkkB/69WR3CiOhiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBTnlNe 75u7DUwGpm8qjTWzLXEeMB8GA1UdIwQYMBaAFFHCYRtGHdURg1pRQfiu5QLTo5rr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkExQy82M0IyMTRBMkM4 MTUxMUU1ODFEMjA4ODRDNEY5QUUwMi9VY0poRzBZZDFSR0RXbEZCLUs3bEF0T2pt dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VjSmhHMFlkMVJHRFdsRkItSzdsQXRPam11cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkExQy82M0IyMTRBMkM4MTUxMUU1ODFEMjA4ODRDNEY5QUUwMi9VY0poRzBZZDFS R0RXbEZCLUs3bEF0T2ptdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDYVhiGJt4x4ZpTxhxTx4FCquo/q6FG16iq6w6LucgQISyTwliSUJeT pXZmhrnw3U6kaLzK+PV4X7fzmx40DaOiNfn+WjVHqpnSjvHcq2rCv4fOQUfRJRkD Vi3q5JceZZprX8CplGGnq7FevGvkj3kvgdUTEgv3JFfD7LTaa6amSO/e0XGikMwC kNQ7vzazFKqxxhlYnBEqZCGez+jrcPXeSLbSHS/K62E+ySKKBy7XW5bAFRZr57Ur 1sn7VFuStN5EvkD3BEyWGNf2o1R4OgCNUun+xLdDHhvG3HoAECybsOd4tJSgWeNx FojDYCOvk8aCLE7J2yEd5EV/8WTggLeI -----END CERTIFICATE-----Generated at Sat Aug 23 19:16:20 2025 by rpki-client