$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft File: UdUxrvegh8GOMB4OaixjcbJkw-g.mft (raw, json) Hash identifier: +SJqJl0CiMHCktHKFBABHAoKPNeZp560i/ziEkn69L4= Subject key identifier: CF:6A:7C:83:46:79:90:3B:0F:1D:F9:6F:C5:F6:FE:C6:25:77:E3:AE Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft Manifest number: 01DE Signing time: Sat 23 Aug 2025 03:04:30 +0000 Manifest this update: Sat 23 Aug 2025 03:04:29 +0000 Manifest next update: Sat 30 Aug 2025 03:04:29 +0000 Files and hashes: 1: UdUxrvegh8GOMB4OaixjcbJkw-g.crl (hash: DjOolQwEN0iwazAhHyNGxKxy3ntyGcNgQUsJAI4U41A=) 2: 891E633CB7F111EFA500D67CC4F9AE02.roa (hash: O4FUSN5LS+aElz5VOCMijpDVd7ugBsWS/neaZYIhjDU=) 3: 7D215B2CC3C111EE8F83CE1AC4F9AE02.roa (hash: WiLdUkxZVUsyLYaXHR0WIvWbfxTpV9CYC+KkS9rRgFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Validity Not Before: Aug 23 03:04:29 2025 GMT Not After : Aug 30 03:04:29 2025 GMT Subject: CN=68a92fbe-ca2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cd:a8:0b:1e:ff:55:57:44:75:fa:a4:53:48: 0b:83:c5:5b:e6:52:54:89:4a:1d:5d:e3:1d:94:93: 07:15:d0:32:b6:34:49:c3:f5:65:e3:50:bd:4f:eb: e8:07:2b:9f:26:74:fc:5f:28:0a:57:02:5c:9b:b8: 1c:d5:a0:d6:ea:70:3e:a7:39:3f:fa:29:c2:f8:19: f3:2f:63:23:bf:d3:82:bc:61:b7:39:62:73:57:14: b7:c7:fd:11:3b:0b:fe:b6:6e:6c:21:bb:ce:c3:fa: c8:b2:ab:be:41:bb:cf:12:17:72:8e:e8:20:db:11: c3:95:2e:bf:2b:cd:79:31:f0:14:0f:f6:ea:47:f6: 82:8f:52:76:51:d0:2d:8b:7e:ac:1a:b8:4b:95:19: c3:a9:0d:bb:ab:02:c7:c9:09:73:4e:a1:13:8c:5e: 25:cf:a6:e5:53:06:5b:89:c5:80:0a:f9:e4:c7:7f: 6b:5c:b9:d0:28:b2:49:26:ef:02:87:37:76:8a:e4: 60:16:35:e1:92:c0:c0:3f:06:20:d8:ea:46:56:de: 39:9e:fb:6b:0b:ef:f8:6d:37:c1:7b:b9:36:e5:9d: 1e:ca:84:c3:a5:b1:bd:b5:a9:c3:de:a2:26:d0:2e: 90:78:18:37:77:80:9d:8c:cd:6d:05:f9:34:5d:aa: fa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6A:7C:83:46:79:90:3B:0F:1D:F9:6F:C5:F6:FE:C6:25:77:E3:AE X509v3 Authority Key Identifier: keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:04:95:a5:bf:56:3a:e6:47:40:c4:83:72:32:7f:be:7c:1f: 93:86:6a:6f:6e:c0:f2:1b:11:cd:d8:a5:d9:be:88:57:5d:6c: a9:0d:93:6f:af:6e:5a:14:b0:5b:45:60:36:d2:9a:b9:9d:9e: e9:1e:cb:da:ed:f4:9c:7f:d3:52:85:87:d0:12:8a:93:0a:a5: e4:c6:1e:68:4c:96:4f:3e:9b:a3:34:1f:19:a1:eb:09:98:f0: 14:75:9b:3a:34:27:95:6b:b8:f3:c0:fa:9b:13:0c:c0:0d:59: 40:1a:ef:66:3c:7b:99:95:54:11:1a:e3:02:ef:b6:25:5a:46: 44:bf:a5:3c:29:6b:79:d3:00:34:f6:a5:a2:84:ca:c7:51:e4: fa:d3:c6:63:a6:0f:09:d2:61:59:b5:69:b3:49:e0:18:59:6f: ab:31:e9:98:02:b7:ee:41:d5:66:f2:e1:33:f8:e3:8a:e8:57: 77:34:77:f4:71:fb:74:c1:18:23:a7:8d:f1:5b:42:b2:92:0e: f8:39:df:23:22:ac:e2:30:32:a8:59:8a:68:3d:14:dd:4d:0f: 0d:86:64:db:75:5c:2c:43:c0:5e:e3:c5:b0:13:12:46:1c:31: af:7e:db:51:df:5c:03:cc:44:0f:8f:69:86:18:a3:bd:5d:25: b6:24:a8:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZBRkYxMTAvBgNVBAUTKDUxRDUzMUFFRjdBMDg3QzE4RTMwMUUwRTZBMkM2Mzcx QjI2NEMzRTgwHhcNMjUwODIzMDMwNDI5WhcNMjUwODMwMDMwNDI5WjAYMRYwFAYD VQQDEw02OGE5MmZiZS1jYTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAms2oCx7/VVdEdfqkU0gLg8Vb5lJUiUodXeMdlJMHFdAytjRJw/Vl41C9T+vo ByufJnT8XygKVwJcm7gc1aDW6nA+pzk/+inC+BnzL2Mjv9OCvGG3OWJzVxS3x/0R Owv+tm5sIbvOw/rIsqu+QbvPEhdyjugg2xHDlS6/K815MfAUD/bqR/aCj1J2UdAt i36sGrhLlRnDqQ27qwLHyQlzTqETjF4lz6blUwZbicWACvnkx39rXLnQKLJJJu8C hzd2iuRgFjXhksDAPwYg2OpGVt45nvtrC+/4bTfBe7k25Z0eyoTDpbG9tanD3qIm 0C6QeBg3d4CdjM1tBfk0Xar6dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9qfING eZA7Dx35b8X2/sYld+OuMB8GA1UdIwQYMBaAFFHVMa73oIfBjjAeDmosY3GyZMPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkFGRi9EMDYxMUYwNEND NDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4R09NQjRPYWl4amNiSmt3 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkVXhydmVnaDhHT01CNE9haXhqY2JKa3ctZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkFGRi9EMDYxMUYwNENDNDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4 R09NQjRPYWl4amNiSmt3LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeBJWlv1Y65kdAxINyMn++fB+ThmpvbsDyGxHN2KXZvohXXWypDZNv r25aFLBbRWA20pq5nZ7pHsva7fScf9NShYfQEoqTCqXkxh5oTJZPPpujNB8ZoesJ mPAUdZs6NCeVa7jzwPqbEwzADVlAGu9mPHuZlVQRGuMC77YlWkZEv6U8KWt50wA0 9qWihMrHUeT608Zjpg8J0mFZtWmzSeAYWW+rMemYArfuQdVm8uEz+OOK6Fd3NHf0 cft0wRgjp43xW0Kykg74Od8jIqziMDKoWYpoPRTdTQ8NhmTbdVwsQ8Be48WwExJG HDGvfttR31wDzEQPj2mGGKO9XSW2JKga -----END CERTIFICATE-----Generated at Sun Aug 24 03:11:59 2025 by rpki-client