$ rpki-client -vvf rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft File: aUCPaxygKBZoPM5MCOAEkyUZRLI.mft (raw, json) Hash identifier: n5TRfSY3z7e05/QHVAaqXcUT9bJvCcAgi/nkCOuZhm4= Subject key identifier: 28:23:81:1D:8D:D0:A2:E4:62:B0:59:85:22:05:D6:7C:E3:CA:09:7A Authority key identifier: 69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2 Certificate issuer: /CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2 Certificate serial: 0A68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft Manifest number: 0A52 Signing time: Fri 08 Aug 2025 20:02:42 +0000 Manifest this update: Fri 08 Aug 2025 20:02:41 +0000 Manifest next update: Fri 15 Aug 2025 20:02:41 +0000 Files and hashes: 1: aUCPaxygKBZoPM5MCOAEkyUZRLI.crl (hash: AEKAsPfgyV3qPOPsR3/BDB+gHX+M1TpSzkTk9jNHIf8=) 2: 834C938A12C711F09998A234C4F9AE02.roa (hash: M4mfahqMzwmq58j++0Teybq9n4Aqspe3mvfksixkbgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2664 (0xa68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91166FC, serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2 Validity Not Before: Aug 8 20:02:41 2025 GMT Not After : Aug 15 20:02:41 2025 GMT Subject: CN=689657e2-c265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:43:14:ff:83:ad:de:6f:a8:a0:b6:7e:ae:94: a0:c1:05:df:7f:67:23:67:23:9a:12:5b:d8:90:a3: 58:56:55:6a:ca:25:9b:92:14:d0:a6:3b:75:69:dc: 43:07:f3:72:a5:9c:cb:aa:5f:4d:5d:76:66:17:db: 16:6d:28:aa:61:17:69:a4:88:a0:d2:d6:b0:97:44: 47:03:e7:f2:23:6e:59:3d:b0:e7:f3:08:b6:36:00: d0:86:fe:b5:b7:12:b2:4b:f2:51:7a:7d:91:08:d4: 22:91:00:75:6b:cf:12:68:2f:dd:36:8d:c6:83:c9: df:16:85:c2:b3:4e:d4:dd:db:92:c4:48:60:52:02: ca:d1:18:43:7e:c5:50:9e:af:a0:7b:db:ce:50:e4: 7c:8b:34:3d:b7:db:fc:d3:75:7e:e3:8c:94:a6:7e: 36:e2:ef:43:f9:4a:e2:be:19:f2:db:05:19:5a:21: 27:cd:6f:58:dd:d6:b0:29:aa:6d:99:17:21:51:1d: 63:4f:0b:a8:57:9b:b0:27:91:ff:c7:bf:91:5b:af: 5f:43:14:c2:0e:b2:5e:b2:d4:81:df:0d:00:59:ee: 34:69:99:bd:6f:c4:16:f6:dc:80:9f:10:8e:ba:36: 58:51:72:2c:29:4c:0b:1a:98:e4:ba:38:86:f1:f2: 28:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:23:81:1D:8D:D0:A2:E4:62:B0:59:85:22:05:D6:7C:E3:CA:09:7A X509v3 Authority Key Identifier: keyid:69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:c3:10:f9:76:d0:6d:9b:59:7e:1b:39:ed:16:6c:21:d8:a3: b3:b0:c5:bd:9e:fb:ea:a1:b5:0a:15:80:ce:d1:ca:56:c2:cf: 72:e2:44:5c:1e:6a:75:2d:9e:16:ee:55:51:8b:ce:1c:12:df: 85:3a:82:dd:7f:9a:24:ff:6d:7a:8b:09:71:20:a6:9b:40:b9: 4d:89:bb:27:c4:8b:8e:ef:e2:66:38:a5:cc:66:b0:6b:49:1d: ab:fa:53:55:2b:dc:98:4a:7e:38:e8:60:29:b9:2e:6b:98:ae: 37:a1:e3:d9:ff:2b:77:67:91:07:91:d3:ec:2e:1b:dc:ab:e9: 62:87:a1:9a:df:ae:af:ba:60:5c:75:13:4f:d1:68:dd:dd:0b: f9:a9:f4:eb:f0:3f:6e:16:70:52:fb:17:70:c9:51:d6:8d:0d: 82:48:48:7e:62:3a:24:51:35:16:52:ab:d8:90:d4:06:50:0a: cd:23:70:48:19:7a:2f:f9:d5:5d:b7:4a:13:ce:1d:c9:de:90: 72:f0:5d:e4:8d:db:a9:e9:47:db:5c:46:22:ba:42:17:d4:43: 39:a0:86:7e:16:fe:e7:d4:4c:31:e7:bb:5f:e4:9f:ba:35:15: fc:dc:42:d2:6e:e7:8a:00:2a:e5:6c:96:0e:c0:8a:ea:3d:35: 26:d9:4e:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY2RkMxMTAvBgNVBAUTKDY5NDA4RjZCMUNBMDI4MTY2ODNDQ0U0QzA4RTAwNDkz MjUxOTQ0QjIwHhcNMjUwODA4MjAwMjQxWhcNMjUwODE1MjAwMjQxWjAYMRYwFAYD VQQDEw02ODk2NTdlMi1jMjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmEMU/4Ot3m+ooLZ+rpSgwQXff2cjZyOaElvYkKNYVlVqyiWbkhTQpjt1adxD B/NypZzLql9NXXZmF9sWbSiqYRdppIig0tawl0RHA+fyI25ZPbDn8wi2NgDQhv61 txKyS/JRen2RCNQikQB1a88SaC/dNo3Gg8nfFoXCs07U3duSxEhgUgLK0RhDfsVQ nq+ge9vOUOR8izQ9t9v803V+44yUpn424u9D+Urivhny2wUZWiEnzW9Y3dawKapt mRchUR1jTwuoV5uwJ5H/x7+RW69fQxTCDrJestSB3w0AWe40aZm9b8QW9tyAnxCO ujZYUXIsKUwLGpjkujiG8fIoMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgjgR2N 0KLkYrBZhSIF1nzjygl6MB8GA1UdIwQYMBaAFGlAj2scoCgWaDzOTAjgBJMlGUSy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZGQy9BQjFGNEVDQTcy OUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tCWm9QTTVNQ09BRWt5VVpS TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FVQ1BheHlnS0Jab1BNNU1DT0FFa3lVWlJMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjZGQy9BQjFGNEVDQTcyOUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tC Wm9QTTVNQ09BRWt5VVpSTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADwxD5dtBtm1l+GzntFmwh2KOzsMW9nvvqobUKFYDO0cpWws9y4kRc Hmp1LZ4W7lVRi84cEt+FOoLdf5ok/216iwlxIKabQLlNibsnxIuO7+JmOKXMZrBr SR2r+lNVK9yYSn446GApuS5rmK43oePZ/yt3Z5EHkdPsLhvcq+lih6Ga366vumBc dRNP0Wjd3Qv5qfTr8D9uFnBS+xdwyVHWjQ2CSEh+YjokUTUWUqvYkNQGUArNI3BI GXov+dVdt0oTzh3J3pBy8F3kjdup6UfbXEYiukIX1EM5oIZ+Fv7n1Ewx57tf5J+6 NRX83ELSbueKACrlbJYOwIrqPTUm2U5o -----END CERTIFICATE-----Generated at Sat Aug 9 15:17:37 2025 by rpki-client