$ rpki-client -vvf rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft File: uHDS4OMcipEO37p2W7fPBMPBDL4.mft (raw, json) Hash identifier: fbFzQBaqEpWsNslDFGgzeXzMi/WiMfUP5npDAgvNwf8= Subject key identifier: FE:C8:F2:7B:54:59:FD:02:49:DF:81:C1:6B:5C:21:23:A4:AD:83:9F Authority key identifier: B8:70:D2:E0:E3:1C:8A:91:0E:DF:BA:76:5B:B7:CF:04:C3:C1:0C:BE Certificate issuer: /CN=A91731AD/serialNumber=B870D2E0E31C8A910EDFBA765BB7CF04C3C10CBE Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft Manifest number: 1A Signing time: Sat 09 Aug 2025 08:26:56 +0000 Manifest this update: Sat 09 Aug 2025 08:26:56 +0000 Manifest next update: Sat 16 Aug 2025 08:26:56 +0000 Files and hashes: 1: uHDS4OMcipEO37p2W7fPBMPBDL4.crl (hash: jS8zD5ogW5ix8MKN3AtERa4KsFacpSdSh2s0DTDk9YY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.crl rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91731AD, serialNumber=B870D2E0E31C8A910EDFBA765BB7CF04C3C10CBE Validity Not Before: Aug 9 08:26:56 2025 GMT Not After : Aug 16 08:26:56 2025 GMT Subject: CN=68970650-d313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4f:8b:e6:62:d8:ee:de:43:96:f8:17:4d:71: 5a:66:78:6d:83:6b:6c:12:10:a4:f4:15:d2:34:51: 4a:70:ff:e0:10:3b:73:59:50:ff:9c:12:68:25:92: 96:c1:4a:ea:78:51:e0:29:35:e9:f3:e5:da:1f:0d: 25:24:21:53:34:fc:06:e4:6c:01:91:aa:77:9a:73: c9:08:1c:82:87:b0:8d:4f:bd:66:06:cc:0f:61:cb: 72:72:32:1d:5b:0a:80:ec:e8:38:ec:18:3a:b8:15: 5d:76:65:ec:da:f8:60:77:fc:92:38:c8:13:3a:8c: c6:29:c3:56:0f:a0:b1:00:c2:e1:e9:0f:b3:ec:2f: c2:ed:47:cf:04:da:20:23:1a:99:c9:70:a7:4e:a3: ae:4f:03:24:52:06:2f:ff:0a:7e:4d:71:ea:8d:7d: f4:da:dd:c2:4b:e0:a7:f5:cd:be:37:cc:47:b7:43: 1c:ed:c4:81:c8:86:46:cf:f3:31:ed:35:8f:60:6f: a9:af:f3:3d:80:36:99:f6:11:0b:71:4c:75:ec:e5: 4b:8b:5b:c6:e6:0e:cf:e0:85:76:8c:ec:94:3f:42: 00:98:ac:c1:b3:a0:93:91:dd:16:37:cd:cb:44:fb: 1f:dd:06:fa:a6:a0:64:58:6c:fc:1f:72:68:e9:92: 58:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C8:F2:7B:54:59:FD:02:49:DF:81:C1:6B:5C:21:23:A4:AD:83:9F X509v3 Authority Key Identifier: keyid:B8:70:D2:E0:E3:1C:8A:91:0E:DF:BA:76:5B:B7:CF:04:C3:C1:0C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:4e:74:da:29:f8:16:b1:e3:0f:b5:ed:1f:48:67:b1:07:22: fd:4e:e1:c5:a8:70:5b:ac:db:9c:70:b2:65:89:f7:60:ce:f4: 7e:04:a3:02:01:d6:b2:09:49:48:7e:a5:a0:5f:ec:0c:11:4c: 4e:81:4f:75:66:0f:51:a8:14:98:48:2e:e8:04:90:7c:5b:d1: 99:9e:86:a7:02:d2:87:8d:d7:17:f4:31:45:e7:75:c0:cd:9e: 8d:db:70:71:ec:ab:d4:71:11:13:4e:0e:51:0b:44:2f:2b:6a: a6:32:2b:0a:71:fa:5f:99:23:ff:61:4c:c5:3e:2b:5a:f8:67: 31:d9:3d:e4:4c:6b:c7:00:19:c7:aa:be:c4:81:ce:15:5f:01: 76:e0:c8:e9:ea:fe:4a:6b:dd:26:cf:cb:2c:7b:c3:a6:d7:31: b3:6e:fa:0e:bf:d0:c8:8a:c1:a3:7c:83:49:dd:fd:a8:c6:9d: d3:b5:92:df:80:9e:f7:d3:9f:47:27:87:e1:5d:03:db:cb:b2: f7:0d:49:55:54:5e:25:21:5e:cb:fc:b2:4b:b7:e5:e0:9b:d2: a4:36:ce:b1:01:d2:f9:83:f7:d9:a0:ce:26:1d:5b:f6:44:39: 01:4e:78:67:c8:c2:8b:77:a2:d4:75:4d:bd:21:7f:3e:2f:51: 79:df:b9:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzFBRDExMC8GA1UEBRMoQjg3MEQyRTBFMzFDOEE5MTBFREZCQTc2NUJCN0NGMDRD M0MxMENCRTAeFw0yNTA4MDkwODI2NTZaFw0yNTA4MTYwODI2NTZaMBgxFjAUBgNV BAMTDTY4OTcwNjUwLWQzMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/T4vmYtju3kOW+BdNcVpmeG2Da2wSEKT0FdI0UUpw/+AQO3NZUP+cEmglkpbB Sup4UeApNenz5dofDSUkIVM0/AbkbAGRqneac8kIHIKHsI1PvWYGzA9hy3JyMh1b CoDs6DjsGDq4FV12Zeza+GB3/JI4yBM6jMYpw1YPoLEAwuHpD7PsL8LtR88E2iAj GpnJcKdOo65PAyRSBi//Cn5NceqNffTa3cJL4Kf1zb43zEe3QxztxIHIhkbP8zHt NY9gb6mv8z2ANpn2EQtxTHXs5UuLW8bmDs/ghXaM7JQ/QgCYrMGzoJOR3RY3zctE +x/dBvqmoGRYbPwfcmjpklgBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/sjye1RZ /QJJ34HBa1whI6Stg58wHwYDVR0jBBgwFoAUuHDS4OMcipEO37p2W7fPBMPBDL4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMUFEL0M0RTI2OTU2NTA5 QzExRjA4NkQ5MkQzOEM0RjlBRTAyL3VIRFM0T01jaXBFTzM3cDJXN2ZQQk1QQkRM NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdUhEUzRPTWNpcEVPMzdwMlc3ZlBCTVBCREw0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz MUFEL0M0RTI2OTU2NTA5QzExRjA4NkQ5MkQzOEM0RjlBRTAyL3VIRFM0T01jaXBF TzM3cDJXN2ZQQk1QQkRMNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALVOdNop+Bax4w+17R9IZ7EHIv1O4cWocFus25xwsmWJ92DO9H4EowIB 1rIJSUh+paBf7AwRTE6BT3VmD1GoFJhILugEkHxb0ZmehqcC0oeN1xf0MUXndcDN no3bcHHsq9RxERNODlELRC8raqYyKwpx+l+ZI/9hTMU+K1r4ZzHZPeRMa8cAGceq vsSBzhVfAXbgyOnq/kpr3SbPyyx7w6bXMbNu+g6/0MiKwaN8g0nd/ajGndO1kt+A nvfTn0cnh+FdA9vLsvcNSVVUXiUhXsv8sku35eCb0qQ2zrEB0vmD99mgziYdW/ZE OQFOeGfIwot3otR1Tb0hfz4vUXnfuZE= -----END CERTIFICATE-----Generated at Sat Aug 9 23:26:53 2025 by rpki-client