$ rpki-client -vvf rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft File: uEHIC-gYxhquhBeUDKPmnMFB348.mft (raw, json) Hash identifier: nSS6El5NgaNAiLV03BwI1EcLMtxY+bv6Qai/I6JRrcg= Subject key identifier: 2C:23:1C:1B:C1:81:97:41:06:D9:98:83:F4:50:1F:0E:29:D8:87:DC Authority key identifier: B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F Certificate issuer: /CN=A91859A3/serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F Certificate serial: 0FAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft Manifest number: 0FA1 Signing time: Sun 10 Aug 2025 17:31:59 +0000 Manifest this update: Sun 10 Aug 2025 17:31:59 +0000 Manifest next update: Sun 17 Aug 2025 17:31:59 +0000 Files and hashes: 1: uEHIC-gYxhquhBeUDKPmnMFB348.crl (hash: Sk20V1pDZ3J5tEQlXkD11ZNiNjBzNKB3aV7dHJGpCqg=) 2: FB45F610638211E9A58B4C45C4F9AE02.roa (hash: IofhJ7EiHeyM1r1MV+JctpkNg1pbQMhCCkdpR4fk3JY=) 3: 65EADA381A8011ECAD1E4B30C4F9AE02.roa (hash: WDBmQN8GrovE0YfJl6NcfDbYlw4MdWA6w33AFuBSc4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4015 (0xfaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91859A3, serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F Validity Not Before: Aug 10 17:31:59 2025 GMT Not After : Aug 17 17:31:59 2025 GMT Subject: CN=6898d78f-c48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d5:b2:8d:13:79:43:d3:58:a3:f9:70:a5:46: 36:0b:f9:65:e8:3c:57:c7:e1:35:1f:64:0f:1e:d7: 58:85:73:c1:b0:ed:41:18:07:d0:b3:49:0c:56:d1: dc:a0:66:22:59:35:59:d3:8f:82:33:c3:97:7c:cb: 0f:14:e3:ef:60:cd:ae:fc:69:66:b6:2b:65:79:9d: f2:79:5f:08:f7:47:69:5f:3c:17:da:8d:5e:36:52: 96:38:48:8d:fe:e4:8f:c3:ac:0d:19:0e:32:28:4f: be:88:78:4a:ff:b5:a0:d0:44:45:45:19:c9:de:50: eb:8b:3c:d0:55:89:42:b8:a9:82:91:08:a8:dd:24: 98:77:95:19:63:43:74:1b:39:dd:0c:2e:4e:24:16: e4:24:db:0d:c7:66:0f:71:7c:75:df:d1:37:cb:bc: b6:17:30:ce:91:b1:6c:e8:42:77:ea:8a:ef:93:a9: 1a:d7:59:7f:30:e1:fd:4c:a8:cb:1e:f0:00:9f:6e: 5b:37:45:fe:7c:6b:83:69:64:8e:f4:ac:90:c7:50: a3:a3:14:f3:82:fc:d8:cf:52:f9:99:06:bd:4f:cf: 8e:a2:f1:dd:9f:71:af:57:79:4d:02:0e:df:09:1f: 6f:64:1a:2a:d2:f4:05:5c:5f:22:44:24:f1:0a:db: b5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:23:1C:1B:C1:81:97:41:06:D9:98:83:F4:50:1F:0E:29:D8:87:DC X509v3 Authority Key Identifier: keyid:B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d0:05:79:03:56:60:a3:b1:8f:5a:69:2e:a1:e0:be:24:6c: ea:48:43:dd:d5:98:08:0c:1e:2e:cf:14:db:8c:1a:08:2d:b3: 44:23:8c:d1:ce:4f:e4:07:7d:ba:c2:c7:c0:32:56:e0:2c:a4: 2f:c1:26:11:70:7d:c3:dd:a2:82:94:88:44:8e:91:50:8c:b2: 3b:6b:18:0c:8a:cb:d7:9e:bb:35:6b:f6:a2:01:39:7f:4a:51: d9:b8:c1:40:f0:d6:ca:ab:a9:6e:e9:ec:a9:ea:18:51:12:26: c5:88:8c:24:3f:19:80:db:44:40:75:8a:ec:8c:15:2d:ff:65: 65:50:1a:61:19:86:03:c1:f4:7a:09:01:3e:a9:38:cd:9b:b8: b8:b4:aa:97:14:be:cc:65:37:8f:c9:ff:88:16:70:1f:a2:02: b8:1b:f0:80:cc:a7:c4:66:88:d5:3c:65:c5:9d:27:6d:d8:3e: 30:92:5c:71:3e:35:73:f2:53:5d:85:5e:2b:18:45:18:53:66: da:ca:05:a8:06:a9:de:4e:ee:29:8a:87:7a:c2:29:1a:25:19: 67:44:76:95:1e:ed:22:08:d2:e8:f9:e1:ca:c5:86:43:bc:d5: 3e:fd:d2:3e:79:4c:e8:3c:88:7c:a9:71:be:d3:af:c0:2f:a4: f6:07:31:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU5QTMxMTAvBgNVBAUTKEI4NDFDODBCRTgxOEM2MUFBRTg0MTc5NDBDQTNFNjlD QzE0MURGOEYwHhcNMjUwODEwMTczMTU5WhcNMjUwODE3MTczMTU5WjAYMRYwFAYD VQQDEw02ODk4ZDc4Zi1jNDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9WyjRN5Q9NYo/lwpUY2C/ll6DxXx+E1H2QPHtdYhXPBsO1BGAfQs0kMVtHc oGYiWTVZ04+CM8OXfMsPFOPvYM2u/GlmtitleZ3yeV8I90dpXzwX2o1eNlKWOEiN /uSPw6wNGQ4yKE++iHhK/7Wg0ERFRRnJ3lDrizzQVYlCuKmCkQio3SSYd5UZY0N0 GzndDC5OJBbkJNsNx2YPcXx139E3y7y2FzDOkbFs6EJ36orvk6ka11l/MOH9TKjL HvAAn25bN0X+fGuDaWSO9KyQx1CjoxTzgvzYz1L5mQa9T8+OovHdn3GvV3lNAg7f CR9vZBoq0vQFXF8iRCTxCtu1YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwjHBvB gZdBBtmYg/RQHw4p2IfcMB8GA1UdIwQYMBaAFLhByAvoGMYaroQXlAyj5pzBQd+P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTlBMy83NjQzNUZFRTYz ODExMUU5OUE1MUE2NDJDNEY5QUUwMi91RUhJQy1nWXhocXVoQmVVREtQbW5NRkIz NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VFSElDLWdZeGhxdWhCZVVES1Btbk1GQjM0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTlBMy83NjQzNUZFRTYzODExMUU5OUE1MUE2NDJDNEY5QUUwMi91RUhJQy1nWXho cXVoQmVVREtQbW5NRkIzNDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO0AV5A1Zgo7GPWmkuoeC+JGzqSEPd1ZgIDB4uzxTbjBoILbNEI4zR zk/kB326wsfAMlbgLKQvwSYRcH3D3aKClIhEjpFQjLI7axgMisvXnrs1a/aiATl/ SlHZuMFA8NbKq6lu6eyp6hhREibFiIwkPxmA20RAdYrsjBUt/2VlUBphGYYDwfR6 CQE+qTjNm7i4tKqXFL7MZTePyf+IFnAfogK4G/CAzKfEZojVPGXFnSdt2D4wklxx PjVz8lNdhV4rGEUYU2baygWoBqneTu4piod6wikaJRlnRHaVHu0iCNLo+eHKxYZD vNU+/dI+eUzoPIh8qXG+06/AL6T2BzFa -----END CERTIFICATE-----Generated at Sun Aug 10 18:57:47 2025 by rpki-client