$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft File: UyhhbneUVH65zpK0qPBF5LLMwPw.mft (raw, json) Hash identifier: G+7502h4oNMfCjPeioM6pgs3Mf6YlVq0Q0uJ+7Od4ok= Subject key identifier: 8D:69:18:D1:33:A0:1C:5B:29:33:E2:CF:D0:49:D2:B7:C6:1A:C4:6C Authority key identifier: 53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC Certificate issuer: /CN=A91847A0/serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC Certificate serial: 1D34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft Manifest number: 1D28 Signing time: Sun 10 Aug 2025 16:07:23 +0000 Manifest this update: Sun 10 Aug 2025 16:07:23 +0000 Manifest next update: Sun 17 Aug 2025 16:07:23 +0000 Files and hashes: 1: UyhhbneUVH65zpK0qPBF5LLMwPw.crl (hash: OxEXNzBYVTNz1jfcJzHX3mxpz79WXO14Kohg7INgBG0=) 2: 82E0D450BC5011E6B01A8D4CC4F9AE02.roa (hash: 0pFtdAh/nKnP5eoxsGxODsFcMEqhXHUTJ4P3f5IMFhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7476 (0x1d34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A0, serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC Validity Not Before: Aug 10 16:07:23 2025 GMT Not After : Aug 17 16:07:23 2025 GMT Subject: CN=6898c3bb-9ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c0:4c:14:e4:c8:58:69:6b:25:05:2c:da:2f: bf:89:78:c5:e1:4c:98:a7:87:42:29:e4:14:3c:1c: 49:c3:83:1a:18:20:2b:87:e7:91:62:c1:76:f8:a0: 60:20:ff:f4:60:72:3e:e1:b2:75:30:ee:02:c8:93: 6c:b0:76:54:6d:5f:03:1c:79:5d:63:9b:28:fb:10: 3e:42:1b:51:40:8e:07:e2:2a:13:09:bb:88:f9:d1: 56:f7:ef:d7:85:10:60:0b:e1:ca:34:92:b8:53:6c: 60:97:75:81:ee:d4:6f:4e:a1:d4:15:19:14:2f:89: 43:9a:e6:2d:a1:9e:39:01:ae:37:d5:34:7d:47:f3: 74:ca:fa:a7:dd:47:db:d7:ae:e1:a1:c1:7d:45:77: cb:81:7a:f7:5f:24:d7:e5:cd:0e:f1:c3:fa:69:a5: 66:a1:d8:fa:9f:d7:7d:72:41:af:71:8c:e1:15:89: 21:7d:5b:05:9c:67:a9:a2:81:9e:a4:1a:15:a6:c0: 7c:de:df:2d:d7:b7:e2:fe:f1:b0:71:82:63:87:58: 82:84:2b:96:bd:de:c4:cd:83:4f:70:98:00:9c:cb: 45:f0:79:ac:c9:f8:4c:71:cc:16:18:18:04:61:ac: 29:7a:8a:31:0f:98:fe:4b:4c:ed:54:10:b9:96:e5: 15:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:69:18:D1:33:A0:1C:5B:29:33:E2:CF:D0:49:D2:B7:C6:1A:C4:6C X509v3 Authority Key Identifier: keyid:53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7c:37:eb:0b:01:8e:bf:ff:40:03:80:09:6a:42:d4:2d:a6: cd:72:ef:1d:13:00:50:fb:84:43:95:d2:c6:e3:ec:1e:3a:43: 13:5c:90:d2:30:df:f9:7b:8b:54:3b:53:a3:08:7e:2a:9e:09: 46:31:e6:6d:25:36:bf:29:15:1b:1f:fd:5e:05:7c:d5:e9:0a: 1a:87:bc:18:ae:6c:24:37:be:97:d7:f6:56:bd:51:6a:39:cc: b1:01:29:18:2f:5f:03:33:8a:39:17:d1:9f:8c:be:84:65:b7: 90:8c:fb:c3:59:f2:8d:cd:50:a6:23:60:b5:9e:b6:2a:b1:6e: 48:2f:43:b9:17:b2:f5:98:ca:50:58:c9:9e:fb:5b:e5:63:57: e8:60:de:d5:f0:7d:3b:a4:bf:3c:b8:21:43:87:22:d8:08:a8: 20:73:32:60:74:67:1e:29:a5:e9:13:f8:20:c0:9b:6b:df:3b: 06:f1:de:01:7c:d7:0a:9a:37:01:ec:de:1c:a4:91:f2:5a:57: 26:12:23:fd:07:c4:e3:56:d8:73:02:3d:b8:5e:30:63:16:68: 66:a0:c3:80:a1:84:53:a5:4f:e7:f3:92:45:aa:f5:93:1f:71: 59:29:04:43:39:47:1b:46:e9:ad:c5:f0:76:55:05:c4:cc:39: 98:9d:31:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTAxMTAvBgNVBAUTKDUzMjg2MTZFNzc5NDU0N0VCOUNFOTJCNEE4RjA0NUU0 QjJDQ0MwRkMwHhcNMjUwODEwMTYwNzIzWhcNMjUwODE3MTYwNzIzWjAYMRYwFAYD VQQDEw02ODk4YzNiYi05YWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcBMFOTIWGlrJQUs2i+/iXjF4UyYp4dCKeQUPBxJw4MaGCArh+eRYsF2+KBg IP/0YHI+4bJ1MO4CyJNssHZUbV8DHHldY5so+xA+QhtRQI4H4ioTCbuI+dFW9+/X hRBgC+HKNJK4U2xgl3WB7tRvTqHUFRkUL4lDmuYtoZ45Aa431TR9R/N0yvqn3Ufb 167hocF9RXfLgXr3XyTX5c0O8cP6aaVmodj6n9d9ckGvcYzhFYkhfVsFnGepooGe pBoVpsB83t8t17fi/vGwcYJjh1iChCuWvd7EzYNPcJgAnMtF8HmsyfhMccwWGBgE YawpeooxD5j+S0ztVBC5luUVuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1pGNEz oBxbKTPiz9BJ0rfGGsRsMB8GA1UdIwQYMBaAFFMoYW53lFR+uc6StKjwReSyzMD8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMC8wRTRBRDEyOEJD NEYxMUU2QkFGMUMyNEFDNEY5QUUwMi9VeWhoYm5lVVZINjV6cEswcVBCRjVMTE13 UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5aGhibmVVVkg2NXpwSzBxUEJGNUxMTXdQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMC8wRTRBRDEyOEJDNEYxMUU2QkFGMUMyNEFDNEY5QUUwMi9VeWhoYm5lVVZI NjV6cEswcVBCRjVMTE13UHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKfDfrCwGOv/9AA4AJakLULabNcu8dEwBQ+4RDldLG4+weOkMTXJDS MN/5e4tUO1OjCH4qnglGMeZtJTa/KRUbH/1eBXzV6Qoah7wYrmwkN76X1/ZWvVFq OcyxASkYL18DM4o5F9GfjL6EZbeQjPvDWfKNzVCmI2C1nrYqsW5IL0O5F7L1mMpQ WMme+1vlY1foYN7V8H07pL88uCFDhyLYCKggczJgdGceKaXpE/ggwJtr3zsG8d4B fNcKmjcB7N4cpJHyWlcmEiP9B8TjVthzAj24XjBjFmhmoMOAoYRTpU/n85JFqvWT H3FZKQRDOUcbRumtxfB2VQXEzDmYnTEC -----END CERTIFICATE-----Generated at Mon Aug 11 04:10:34 2025 by rpki-client