$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft File: uV2VSq65WdNCfBB2qfV98hw4v8w.mft (raw, json) Hash identifier: NaL4TNaEgM8EPeVOhNwQ7u98ZiKXK3nKTfzXiYMiqXg= Subject key identifier: 67:9C:8E:1C:27:DD:3C:63:43:82:25:3D:7D:6B:27:7E:E2:AB:21:95 Authority key identifier: B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC Certificate issuer: /CN=A91FBD28/serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC Certificate serial: 26C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft Manifest number: 26AA Signing time: Wed 02 Jul 2025 15:48:09 +0000 Manifest this update: Wed 02 Jul 2025 15:48:08 +0000 Manifest next update: Wed 09 Jul 2025 15:48:08 +0000 Files and hashes: 1: uV2VSq65WdNCfBB2qfV98hw4v8w.crl (hash: GMfTCBZb5d4bO5Y6jDdNXy7mN28rn4vt6EgC50z4aUk=) 2: 94688318A57B11EA964E0C3DC4F9AE02.roa (hash: qb9PKTbJFEWjVkrorFJajJwU9G8YZ7gNAVQpMrR1dv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9929 (0x26c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD28, serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC Validity Not Before: Jul 2 15:48:08 2025 GMT Not After : Jul 9 15:48:08 2025 GMT Subject: CN=686554b9-e739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:99:c3:25:8f:aa:bc:e1:8c:5a:7c:1a:42: 9b:66:7b:88:b2:0a:c2:da:5a:6c:3b:bc:d2:cb:fe: 26:5f:ba:d3:28:07:73:15:32:0e:7b:d0:3b:1d:78: cc:3b:ac:f7:e3:24:8e:af:a7:31:aa:f0:09:8c:c6: 62:fc:49:c0:da:f2:ca:85:db:e4:f7:53:b4:6a:ef: 06:0f:dc:d4:77:df:46:0d:a6:d6:43:ab:bf:55:d1: a1:b1:c6:fc:d6:25:81:06:46:b0:24:dc:cb:de:bc: 68:91:d1:ff:0e:a9:21:bb:e3:30:94:12:fe:dc:30: 4e:62:82:51:da:e1:c5:71:82:6d:29:56:be:28:51: 54:0f:54:a8:02:71:93:bc:df:a5:d5:8b:4d:85:d8: 1c:db:f5:1e:4e:2b:43:b1:53:ab:c8:b3:64:59:27: 2a:bb:3f:1b:ed:20:61:44:c3:41:5b:ad:bf:83:9f: 08:6f:3e:3e:2d:57:cc:6c:69:87:56:49:fd:90:72: b3:f9:e6:39:43:e9:57:b0:ea:98:e9:f8:ee:16:56: 85:a2:99:4f:57:b4:15:e9:5a:90:ef:06:8c:45:ee: 30:ea:29:a2:ea:41:df:52:d2:a0:0a:35:09:6c:d5: ed:d0:0e:bc:e8:68:29:00:41:c1:8a:0f:50:53:b8: df:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9C:8E:1C:27:DD:3C:63:43:82:25:3D:7D:6B:27:7E:E2:AB:21:95 X509v3 Authority Key Identifier: keyid:B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:07:d2:d6:5b:cb:09:bd:a7:e3:a6:da:f1:0f:6b:19:7e:f8: e8:6a:70:b0:1d:d0:04:fc:8c:42:56:53:5d:8e:82:ae:cc:76: 92:e1:2a:6b:b6:45:85:05:8e:95:51:d0:e0:3b:98:4c:54:5d: 19:7a:26:85:d4:c4:16:34:c3:29:81:5f:93:fb:e7:6c:ec:52: e3:b3:58:7b:9b:93:4a:85:42:26:94:92:ef:8a:83:91:4a:1b: 82:cd:3e:a4:c3:d4:df:a3:ea:ad:cd:9c:9d:ff:53:07:47:f5: ec:e0:92:1d:d1:61:6d:2e:2e:ad:2d:7b:f1:d5:df:71:2e:0f: a6:78:a0:aa:8f:d8:e6:7b:f1:ee:f9:4c:34:4c:89:47:52:6e: 7f:d6:2c:fc:01:96:8f:3c:34:44:77:8e:2d:80:4a:34:eb:a9: 5d:72:3e:89:13:4f:01:5d:3d:46:48:0c:91:3e:3d:dd:e7:64: 76:7f:d1:f9:dc:77:96:46:29:8b:27:3b:9b:2c:f3:bb:6e:52: 83:1f:e2:6d:0a:cf:22:d1:52:71:c5:21:85:57:2e:eb:d4:1c: 16:c5:d4:51:0f:33:5b:1c:2c:de:05:76:bb:f9:7e:16:64:45: 2a:c3:1b:49:77:e6:22:0e:cb:1f:b2:6e:51:b4:5a:0e:98:37: 81:5d:fb:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEMjgxMTAvBgNVBAUTKEI5NUQ5NTRBQUVCOTU5RDM0MjdDMTA3NkE5RjU3REYy MUMzOEJGQ0MwHhcNMjUwNzAyMTU0ODA4WhcNMjUwNzA5MTU0ODA4WjAYMRYwFAYD VQQDEw02ODY1NTRiOS1lNzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9uZwyWPqrzhjFp8GkKbZnuIsgrC2lpsO7zSy/4mX7rTKAdzFTIOe9A7HXjM O6z34ySOr6cxqvAJjMZi/EnA2vLKhdvk91O0au8GD9zUd99GDabWQ6u/VdGhscb8 1iWBBkawJNzL3rxokdH/Dqkhu+MwlBL+3DBOYoJR2uHFcYJtKVa+KFFUD1SoAnGT vN+l1YtNhdgc2/UeTitDsVOryLNkWScquz8b7SBhRMNBW62/g58Ibz4+LVfMbGmH Vkn9kHKz+eY5Q+lXsOqY6fjuFlaFoplPV7QV6VqQ7waMRe4w6imi6kHfUtKgCjUJ bNXt0A686GgpAEHBig9QU7jf3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGecjhwn 3TxjQ4IlPX1rJ37iqyGVMB8GA1UdIwQYMBaAFLldlUquuVnTQnwQdqn1ffIcOL/M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQyOC9FNkNFRDcyMkUx QjAxMUU0OEMyRERFMTZDNEY5QUUwMi91VjJWU3E2NVdkTkNmQkIycWZWOThodzR2 OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VWMlZTcTY1V2ROQ2ZCQjJxZlY5OGh3NHY4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQyOC9FNkNFRDcyMkUxQjAxMUU0OEMyRERFMTZDNEY5QUUwMi91VjJWU3E2NVdk TkNmQkIycWZWOThodzR2OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRB9LWW8sJvafjptrxD2sZfvjoanCwHdAE/IxCVlNdjoKuzHaS4Spr tkWFBY6VUdDgO5hMVF0ZeiaF1MQWNMMpgV+T++ds7FLjs1h7m5NKhUImlJLvioOR ShuCzT6kw9Tfo+qtzZyd/1MHR/Xs4JId0WFtLi6tLXvx1d9xLg+meKCqj9jme/Hu +Uw0TIlHUm5/1iz8AZaPPDREd44tgEo066ldcj6JE08BXT1GSAyRPj3d52R2f9H5 3HeWRimLJzubLPO7blKDH+JtCs8i0VJxxSGFVy7r1BwWxdRRDzNbHCzeBXa7+X4W ZEUqwxtJd+YiDssfsm5RtFoOmDeBXfti -----END CERTIFICATE-----Generated at Thu Jul 3 18:07:17 2025 by rpki-client