$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft File: UtXW_72oj1ReUbr5n32s4ZPAblc.mft (raw, json) Hash identifier: EO5sHClSZRuiTATkrlPqV+1ryooblE7frymzYEl48/A= Subject key identifier: 05:1C:E1:5C:14:85:C5:72:89:3B:F4:CF:F4:61:1C:99:43:A0:19:FA Authority key identifier: 52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57 Certificate issuer: /CN=A91F17F6/serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57 Certificate serial: 0803 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft Manifest number: 07FC Signing time: Fri 22 Aug 2025 21:05:39 +0000 Manifest this update: Fri 22 Aug 2025 21:05:39 +0000 Manifest next update: Fri 29 Aug 2025 21:05:39 +0000 Files and hashes: 1: UtXW_72oj1ReUbr5n32s4ZPAblc.crl (hash: CWe8IIVGGOyPwdxna5+UKXMzoTSYdIIs6edVbhVr2wQ=) 2: AF95E6D8F2B711EAA1C01744C4F9AE02.roa (hash: X3Zxmzy65RFAr4wRuSkQChvufHFA8zifcOkEqKI8dKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2051 (0x803) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17F6, serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57 Validity Not Before: Aug 22 21:05:39 2025 GMT Not After : Aug 29 21:05:39 2025 GMT Subject: CN=68a8dba3-a12e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4f:ed:be:db:4d:49:0a:17:23:86:60:0d:7f: e0:96:43:c8:f5:1a:b3:fd:18:17:d9:55:ee:61:7a: b7:fa:d4:77:7a:c8:56:b6:ce:9e:e3:4e:5a:bf:b7: 7d:d7:b1:a8:89:0c:2a:e1:a6:f3:6d:ad:9a:17:6a: 66:e8:5f:40:2b:60:29:f6:4e:62:bb:d6:6b:52:1c: 3c:a1:8f:3b:c7:fc:bb:17:22:e2:e9:93:9a:96:8b: 20:c9:0b:54:d6:8c:12:3b:1f:81:c0:56:ef:5d:2a: 6c:48:38:6c:33:76:34:79:d4:f4:86:04:d4:d4:d1: 3c:2a:31:cf:21:3e:aa:b8:e4:bd:e6:d5:a0:33:7b: 60:1e:25:d7:d3:74:67:1a:2b:76:7b:03:19:71:f7: ce:23:59:13:26:c1:d0:d1:ac:af:26:63:34:3b:b9: 22:7d:96:0e:ef:62:11:ba:79:ac:a4:4f:1c:33:fe: 76:53:7a:67:cc:8e:1a:c4:08:e7:06:b5:44:ad:2e: 21:23:04:1e:63:0b:64:7b:ed:74:1a:a1:0b:5e:21: 73:49:a7:0d:1c:52:fc:fc:15:34:dc:83:74:2e:96: 76:02:96:4b:3d:7d:4f:94:93:d5:a1:ca:d9:4b:22: f4:6c:29:f5:3a:1f:72:5e:ab:08:7b:b2:49:2e:54: f9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1C:E1:5C:14:85:C5:72:89:3B:F4:CF:F4:61:1C:99:43:A0:19:FA X509v3 Authority Key Identifier: keyid:52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:16:d3:f4:c4:a1:cb:35:87:4a:8a:ce:28:06:66:91:48:67: 40:f5:4b:f6:f4:02:88:34:49:8e:04:d3:9f:ee:ab:63:e3:b9: ef:98:7c:f1:7c:00:a8:8c:07:1e:95:f1:ba:65:ca:eb:a4:96: c4:fc:81:da:ff:42:9d:60:40:ec:15:cd:b2:9b:84:96:7a:c3: 05:66:3d:1c:89:9e:f6:85:31:27:75:b8:30:3a:3a:01:63:e5: eb:04:c4:8b:91:e4:99:1b:be:1a:fb:a3:65:e7:09:85:4c:62: 9d:c8:14:7d:fe:93:a7:ab:95:83:89:4d:d3:13:3a:cf:48:a7: 7f:4a:22:e5:3b:c1:37:41:30:83:a7:b1:69:b3:4a:9b:29:25: d7:96:2e:19:d7:06:dc:c6:23:a0:4a:af:f8:88:4c:8d:86:2a: c4:25:e6:44:1c:ce:c6:9c:ba:ed:48:91:c8:cc:8a:61:dd:ff: c1:a8:aa:87:29:c7:9e:60:a5:84:8c:5d:28:a1:17:f9:1f:55: 60:8e:71:7e:ef:a5:69:5d:82:7e:8d:a9:b3:ed:04:34:d3:80: 4f:09:ee:8d:08:c0:cb:98:2e:e0:d1:33:f9:7d:de:bf:8a:5f: ae:99:39:77:6f:94:06:f7:97:97:c3:91:66:0b:80:e3:c5:6e: 07:48:34:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3RjYxMTAvBgNVBAUTKDUyRDVENkZGQkRBODhGNTQ1RTUxQkFGOTlGN0RBQ0Ux OTNDMDZFNTcwHhcNMjUwODIyMjEwNTM5WhcNMjUwODI5MjEwNTM5WjAYMRYwFAYD VQQDEw02OGE4ZGJhMy1hMTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0/tvttNSQoXI4ZgDX/glkPI9Rqz/RgX2VXuYXq3+tR3eshWts6e405av7d9 17GoiQwq4abzba2aF2pm6F9AK2Ap9k5iu9ZrUhw8oY87x/y7FyLi6ZOalosgyQtU 1owSOx+BwFbvXSpsSDhsM3Y0edT0hgTU1NE8KjHPIT6quOS95tWgM3tgHiXX03Rn Git2ewMZcffOI1kTJsHQ0ayvJmM0O7kifZYO72IRunmspE8cM/52U3pnzI4axAjn BrVErS4hIwQeYwtke+10GqELXiFzSacNHFL8/BU03IN0LpZ2ApZLPX1PlJPVocrZ SyL0bCn1Oh9yXqsIe7JJLlT5lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUc4VwU hcVyiTv0z/RhHJlDoBn6MB8GA1UdIwQYMBaAFFLV1v+9qI9UXlG6+Z99rOGTwG5X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdGNi9FRDkzQ0VFOEYy QjUxMUVBOUEzRjYzNDFDNEY5QUUwMi9VdFhXXzcyb2oxUmVVYnI1bjMyczRaUEFi bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V0WFdfNzJvajFSZVVicjVuMzJzNFpQQWJsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdGNi9FRDkzQ0VFOEYyQjUxMUVBOUEzRjYzNDFDNEY5QUUwMi9VdFhXXzcyb2ox UmVVYnI1bjMyczRaUEFibGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeFtP0xKHLNYdKis4oBmaRSGdA9Uv29AKINEmOBNOf7qtj47nvmHzx fACojAcelfG6ZcrrpJbE/IHa/0KdYEDsFc2ym4SWesMFZj0ciZ72hTEndbgwOjoB Y+XrBMSLkeSZG74a+6Nl5wmFTGKdyBR9/pOnq5WDiU3TEzrPSKd/SiLlO8E3QTCD p7Fps0qbKSXXli4Z1wbcxiOgSq/4iEyNhirEJeZEHM7GnLrtSJHIzIph3f/BqKqH KceeYKWEjF0ooRf5H1VgjnF+76VpXYJ+jamz7QQ004BPCe6NCMDLmC7g0TP5fd6/ il+umTl3b5QG95eXw5FmC4DjxW4HSDTw -----END CERTIFICATE-----Generated at Sat Aug 23 18:57:07 2025 by rpki-client