$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft File: uV2VSq65WdNCfBB2qfV98hw4v8w.mft (raw, json) Hash identifier: B8O+53ycs3Z5Z4dNR1syZbLeszGzep1HJm7xSr9hycM= Subject key identifier: 0D:C2:88:52:56:72:DB:98:CE:BD:26:4B:D4:D8:C7:EC:7D:EB:9F:34 Authority key identifier: B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC Certificate issuer: /CN=A91FBD28/serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC Certificate serial: 26E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft Manifest number: 26C4 Signing time: Fri 22 Aug 2025 15:43:57 +0000 Manifest this update: Fri 22 Aug 2025 15:43:57 +0000 Manifest next update: Fri 29 Aug 2025 15:43:57 +0000 Files and hashes: 1: uV2VSq65WdNCfBB2qfV98hw4v8w.crl (hash: WUw/G5qJtlFK64iinXom2V+JDNAt7jYdEckMp1FIbHE=) 2: 94688318A57B11EA964E0C3DC4F9AE02.roa (hash: qb9PKTbJFEWjVkrorFJajJwU9G8YZ7gNAVQpMrR1dv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9955 (0x26e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD28, serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC Validity Not Before: Aug 22 15:43:57 2025 GMT Not After : Aug 29 15:43:57 2025 GMT Subject: CN=68a8903d-bca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:af:3f:4c:d3:f5:cb:0e:db:29:3b:a2:93:c1: be:d8:42:53:f5:1f:03:7f:7d:9a:e9:9c:85:05:91: 9f:b5:6e:11:1c:c9:cf:fc:e7:0a:6c:39:41:dc:6a: 3b:68:95:96:10:f8:15:43:11:31:c1:96:5b:d9:a1: 87:d4:5a:4e:b1:00:2f:fd:3f:ff:d7:fe:85:a7:6b: b4:09:e2:a6:2d:98:92:32:72:77:65:b2:3e:08:0d: db:25:91:55:72:16:6b:e3:0b:09:61:ff:93:c0:e9: 04:fa:ca:cc:00:d3:88:c0:b1:87:a1:1e:b5:7e:1c: 3e:83:40:ea:34:43:58:df:ce:f8:a1:38:00:91:97: 2a:f6:4c:2c:4e:fc:0f:2a:64:c0:af:b2:6d:d3:44: 42:89:ed:1f:21:32:9e:6f:04:54:70:4d:bf:a5:be: f6:0e:62:1a:86:d5:57:39:78:c7:f1:41:e1:78:1b: 86:79:75:91:31:0b:e1:ff:f2:ba:7a:90:50:d3:5b: 2d:7f:e0:36:f2:b6:e4:c4:c5:41:23:94:8c:a4:5c: 0a:bf:e3:59:8a:20:07:de:09:92:c7:0e:a3:5d:07: d4:7f:fc:7b:ff:48:6c:e2:e6:67:f2:f9:32:67:d0: 83:83:c0:cb:ad:2a:24:ee:d2:c2:99:9c:82:17:5f: 4c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C2:88:52:56:72:DB:98:CE:BD:26:4B:D4:D8:C7:EC:7D:EB:9F:34 X509v3 Authority Key Identifier: keyid:B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:5a:10:9d:e7:67:d2:23:32:ac:7e:91:99:8e:58:f4:23:ff: f1:5d:84:b5:de:9d:1f:d3:bb:31:ee:c2:41:f5:ae:9f:2a:4b: 4f:0d:fd:9a:5e:69:0e:47:f1:78:6d:c2:d6:25:c9:75:11:8a: 0f:75:ed:60:ef:9f:82:63:6a:89:e0:e9:57:ee:28:14:06:d7: 8b:46:53:13:02:ab:a9:29:8a:8c:1d:8b:ea:e2:5d:d2:50:c8: 32:cc:ce:64:46:8e:c0:3e:a0:78:bb:e7:64:42:a9:30:a0:59: e8:7a:dd:8f:2d:c3:82:f3:54:57:46:a4:a4:a8:93:1f:08:5c: aa:0b:87:aa:5e:9d:3a:44:05:f1:c2:cb:6d:e5:ca:76:c2:87: bb:11:c9:54:c8:97:e0:59:75:b3:7f:0a:a2:0a:7e:49:17:01: 5b:2d:3c:7f:0a:fc:1c:08:be:67:2d:e5:81:2a:42:8a:42:95: 40:8a:d1:95:60:83:29:c7:6f:76:0f:2e:8e:a3:13:d1:a9:f2: e1:c4:5f:ce:27:2c:76:01:44:67:a7:70:93:7e:88:a1:12:b1: 26:ab:fb:a2:d2:90:63:87:81:dc:c5:85:a4:6e:95:26:05:d6: d1:6a:dd:a9:09:1c:6b:f1:5b:e8:3c:1f:53:77:77:03:c1:b6: 5b:89:71:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEMjgxMTAvBgNVBAUTKEI5NUQ5NTRBQUVCOTU5RDM0MjdDMTA3NkE5RjU3REYy MUMzOEJGQ0MwHhcNMjUwODIyMTU0MzU3WhcNMjUwODI5MTU0MzU3WjAYMRYwFAYD VQQDEw02OGE4OTAzZC1iY2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAza8/TNP1yw7bKTuik8G+2EJT9R8Df32a6ZyFBZGftW4RHMnP/OcKbDlB3Go7 aJWWEPgVQxExwZZb2aGH1FpOsQAv/T//1/6Fp2u0CeKmLZiSMnJ3ZbI+CA3bJZFV chZr4wsJYf+TwOkE+srMANOIwLGHoR61fhw+g0DqNENY3874oTgAkZcq9kwsTvwP KmTAr7Jt00RCie0fITKebwRUcE2/pb72DmIahtVXOXjH8UHheBuGeXWRMQvh//K6 epBQ01stf+A28rbkxMVBI5SMpFwKv+NZiiAH3gmSxw6jXQfUf/x7/0hs4uZn8vky Z9CDg8DLrSok7tLCmZyCF19MzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3CiFJW ctuYzr0mS9TYx+x96580MB8GA1UdIwQYMBaAFLldlUquuVnTQnwQdqn1ffIcOL/M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQyOC9FNkNFRDcyMkUx QjAxMUU0OEMyRERFMTZDNEY5QUUwMi91VjJWU3E2NVdkTkNmQkIycWZWOThodzR2 OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VWMlZTcTY1V2ROQ2ZCQjJxZlY5OGh3NHY4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQyOC9FNkNFRDcyMkUxQjAxMUU0OEMyRERFMTZDNEY5QUUwMi91VjJWU3E2NVdk TkNmQkIycWZWOThodzR2OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYWhCd52fSIzKsfpGZjlj0I//xXYS13p0f07sx7sJB9a6fKktPDf2a XmkOR/F4bcLWJcl1EYoPde1g75+CY2qJ4OlX7igUBteLRlMTAqupKYqMHYvq4l3S UMgyzM5kRo7APqB4u+dkQqkwoFnoet2PLcOC81RXRqSkqJMfCFyqC4eqXp06RAXx wstt5cp2woe7EclUyJfgWXWzfwqiCn5JFwFbLTx/CvwcCL5nLeWBKkKKQpVAitGV YIMpx292Dy6OoxPRqfLhxF/OJyx2AURnp3CTfoihErEmq/ui0pBjh4HcxYWkbpUm BdbRat2pCRxr8VvoPB9Td3cDwbZbiXEG -----END CERTIFICATE-----Generated at Sat Aug 23 20:43:21 2025 by rpki-client