$ rpki-client -vvf rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft File: uN9D7us1RpuyzAulIS0b_yaKe24.mft (raw, json) Hash identifier: scd0fShjLA4nHDW5pAfK5C11XGzZ4vGG8J+bedRmbkE= Subject key identifier: AB:C9:2F:26:F7:5B:AA:17:5A:11:D4:06:3E:8A:FA:50:16:8B:AD:41 Authority key identifier: B8:DF:43:EE:EB:35:46:9B:B2:CC:0B:A5:21:2D:1B:FF:26:8A:7B:6E Certificate issuer: /CN=A91F134A/serialNumber=B8DF43EEEB35469BB2CC0BA5212D1BFF268A7B6E Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft Manifest number: 0201 Signing time: Sat 23 Aug 2025 02:29:37 +0000 Manifest this update: Sat 23 Aug 2025 02:29:36 +0000 Manifest next update: Sat 30 Aug 2025 02:29:36 +0000 Files and hashes: 1: uN9D7us1RpuyzAulIS0b_yaKe24.crl (hash: wqR6uuM60pl9TJknfOpk5VNFInvs1Sv96Wg+8GGn4qk=) 2: 90269D3A716611ED9D80F448C4F9AE02.roa (hash: MO9P1WGnI9RODyxLdTa3D8Yco4aTU5+oDDX9VBwpv+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.crl rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F134A, serialNumber=B8DF43EEEB35469BB2CC0BA5212D1BFF268A7B6E Validity Not Before: Aug 23 02:29:36 2025 GMT Not After : Aug 30 02:29:36 2025 GMT Subject: CN=68a92790-669c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:be:d4:3c:73:c0:11:f6:d4:be:5c:e1:f4:e6: ea:36:bc:4a:89:cb:1a:1b:1a:83:99:a8:b6:ec:c6: 97:74:db:70:ab:53:a5:1d:88:03:14:f8:cc:ff:6f: 03:c3:ae:a0:40:63:e5:c9:17:3a:ee:77:6b:17:70: e9:bb:3f:8d:c1:23:e0:35:6e:94:e7:26:f7:de:43: ad:db:ea:23:22:3c:68:e8:32:c0:df:25:6d:a8:18: a8:a0:32:5a:82:f3:35:6f:3a:20:78:7e:e8:5f:a4: 2f:db:33:8c:c0:23:8f:94:8c:0d:ae:89:b9:24:24: 4b:14:7a:83:67:85:e4:30:6b:ec:4e:01:77:0b:31: a0:12:40:db:63:86:b3:7a:be:7f:73:78:fe:5c:f3: 36:06:40:ac:70:27:b9:7b:dd:d5:ad:2f:20:29:c9: 89:fb:c1:02:f7:b4:8e:41:d7:60:2b:91:d6:26:16: f0:74:ba:87:5a:8d:94:65:e4:68:57:80:8c:87:81: e9:ee:a3:b5:fd:18:0b:4f:0c:e0:7e:94:3f:04:ca: 9e:98:50:b9:89:c4:57:57:6f:33:0f:5c:e9:0e:d1: 03:f1:69:01:3b:b6:08:66:d7:2a:79:37:66:e9:3d: 84:9d:be:9c:e4:3f:4b:94:60:d2:81:83:0d:ac:d9: a6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C9:2F:26:F7:5B:AA:17:5A:11:D4:06:3E:8A:FA:50:16:8B:AD:41 X509v3 Authority Key Identifier: keyid:B8:DF:43:EE:EB:35:46:9B:B2:CC:0B:A5:21:2D:1B:FF:26:8A:7B:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ce:8f:f9:e6:50:30:86:af:d6:91:3f:33:41:8e:0e:6e:86: 6e:bc:07:8d:8d:74:79:7c:bd:c7:27:73:af:23:cf:1d:1c:65: 0e:ba:66:ca:6b:13:59:de:85:32:71:5f:2c:7a:ef:54:12:8f: 6e:3a:69:46:9e:65:8d:29:dc:95:9f:23:e1:90:60:7f:a0:de: d1:07:0a:aa:ab:94:be:cc:2a:48:41:98:9b:c8:fb:d6:91:a8: c8:f9:08:d3:13:e1:23:8b:eb:b2:db:af:ef:b5:19:63:b0:78: 74:e8:7d:76:57:71:68:ad:6a:ef:28:cc:50:1e:60:92:b8:5f: c7:da:6d:65:8c:ed:91:05:ee:29:82:79:33:a1:cd:ab:36:52: 55:aa:11:4e:2b:c4:90:68:4d:32:99:69:48:b0:d1:f3:04:cd: c0:82:16:90:db:eb:ff:83:69:af:77:c2:b6:8b:0e:d1:a1:31: 93:f9:bf:4e:68:b7:04:1b:1d:a7:2a:ce:8e:a4:68:88:e6:cd: 8c:ee:79:a0:86:8f:b7:6d:01:b7:75:3c:da:54:f0:25:67:cb: 62:c7:d1:be:c9:e5:c5:c0:cd:4d:c7:d9:54:2f:2f:e3:4b:f0: b0:8c:ef:36:9d:67:b3:81:2f:01:10:ff:7e:c9:6a:ad:90:e3: 85:7b:2f:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzNEExMTAvBgNVBAUTKEI4REY0M0VFRUIzNTQ2OUJCMkNDMEJBNTIxMkQxQkZG MjY4QTdCNkUwHhcNMjUwODIzMDIyOTM2WhcNMjUwODMwMDIyOTM2WjAYMRYwFAYD VQQDEw02OGE5Mjc5MC02NjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt77UPHPAEfbUvlzh9ObqNrxKicsaGxqDmai27MaXdNtwq1OlHYgDFPjM/28D w66gQGPlyRc67ndrF3Dpuz+NwSPgNW6U5yb33kOt2+ojIjxo6DLA3yVtqBiooDJa gvM1bzogeH7oX6Qv2zOMwCOPlIwNrom5JCRLFHqDZ4XkMGvsTgF3CzGgEkDbY4az er5/c3j+XPM2BkCscCe5e93VrS8gKcmJ+8EC97SOQddgK5HWJhbwdLqHWo2UZeRo V4CMh4Hp7qO1/RgLTwzgfpQ/BMqemFC5icRXV28zD1zpDtED8WkBO7YIZtcqeTdm 6T2Enb6c5D9LlGDSgYMNrNmmEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvJLyb3 W6oXWhHUBj6K+lAWi61BMB8GA1UdIwQYMBaAFLjfQ+7rNUabsswLpSEtG/8mintu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTM0QS9GOTc2QkZEQTcx NjIxMUVEODg5MzEzMzFDNEY5QUUwMi91TjlEN3VzMVJwdXl6QXVsSVMwYl95YUtl MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VOOUQ3dXMxUnB1eXpBdWxJUzBiX3lhS2UyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTM0QS9GOTc2QkZEQTcxNjIxMUVEODg5MzEzMzFDNEY5QUUwMi91TjlEN3VzMVJw dXl6QXVsSVMwYl95YUtlMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATzo/55lAwhq/WkT8zQY4OboZuvAeNjXR5fL3HJ3OvI88dHGUOumbK axNZ3oUycV8seu9UEo9uOmlGnmWNKdyVnyPhkGB/oN7RBwqqq5S+zCpIQZibyPvW kajI+QjTE+Eji+uy26/vtRljsHh06H12V3ForWrvKMxQHmCSuF/H2m1ljO2RBe4p gnkzoc2rNlJVqhFOK8SQaE0ymWlIsNHzBM3AghaQ2+v/g2mvd8K2iw7RoTGT+b9O aLcEGx2nKs6OpGiI5s2M7nmgho+3bQG3dTzaVPAlZ8tix9G+yeXFwM1Nx9lULy/j S/CwjO82nWezgS8BEP9+yWqtkOOFey/c -----END CERTIFICATE-----Generated at Sat Aug 23 10:55:26 2025 by rpki-client