$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft File: UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft (raw, json) Hash identifier: RcNHdW4G9kTV8tlTU3WHMi71bqLUv+lDaO6o6uOdImE= Subject key identifier: D2:99:07:6D:A3:1E:39:E8:D2:C8:3F:B8:D1:8C:D4:A5:F8:A5:E6:EC Authority key identifier: 52:F3:E7:FB:5E:D8:53:37:F7:E1:9E:10:73:3D:49:0C:2B:1C:0B:64 Certificate issuer: /CN=A91A3277/serialNumber=52F3E7FB5ED85337F7E19E10733D490C2B1C0B64 Certificate serial: 0357 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UvPn-17YUzf34Z4Qcz1JDCscC2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft Manifest number: 0352 Signing time: Mon 11 Aug 2025 01:12:56 +0000 Manifest this update: Mon 11 Aug 2025 01:12:55 +0000 Manifest next update: Mon 18 Aug 2025 01:12:55 +0000 Files and hashes: 1: UvPn-17YUzf34Z4Qcz1JDCscC2Q.crl (hash: TRGohTdnfSNsA1CQXW10O54sFNXAnQ8BLXeboc8JMWw=) 2: F52D264EC6C211EC87251528C4F9AE02.roa (hash: o082/qE7KnRTR5fE6jGL87EK8Un5n2KKqzOv1p2PmKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.crl rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UvPn-17YUzf34Z4Qcz1JDCscC2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 855 (0x357) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3277, serialNumber=52F3E7FB5ED85337F7E19E10733D490C2B1C0B64 Validity Not Before: Aug 11 01:12:55 2025 GMT Not After : Aug 18 01:12:55 2025 GMT Subject: CN=68994398-e3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2c:2d:8d:b3:8b:e3:8b:c5:09:4a:26:d8:16: 2a:1f:bf:8c:ca:0f:8c:c8:7a:03:3f:b2:e1:07:55: 0d:1f:94:1a:44:25:3c:72:8f:34:b4:e9:0c:ab:8c: 44:24:94:f8:d1:05:71:8e:aa:2b:ed:a6:42:1a:53: f0:96:4f:bb:9b:d1:e2:dc:eb:6c:5f:7f:b4:c1:5c: 16:08:79:3b:80:7f:bb:fd:ab:63:3f:8a:33:d1:cb: 58:83:f1:8d:eb:3d:9c:b2:e0:cd:e0:90:6c:ef:0b: 26:a1:e5:01:11:99:8f:fd:64:1c:68:a7:86:d3:40: b1:5d:09:aa:bf:1c:f0:be:26:a9:6f:c1:c3:e8:39: c3:8a:f6:b9:72:a3:b3:a6:9e:6a:89:c8:18:2c:3c: d7:5d:f9:40:80:57:de:fe:60:ad:b1:43:9c:5e:61: 73:79:a4:e5:12:d2:2c:10:d6:73:db:d1:6b:45:ba: a4:40:bf:38:1d:36:b0:da:15:01:68:4b:b5:6b:e0: ad:72:0d:a2:3a:d9:b4:9f:11:43:d2:44:4d:13:48: d7:e2:3c:71:1f:97:c4:4c:84:e2:08:d4:e1:6b:93: 22:03:4f:64:89:80:1b:86:d2:ad:58:8b:de:3a:0b: 9d:52:9c:d0:0f:59:27:28:6f:fb:51:74:6a:a6:52: 00:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:99:07:6D:A3:1E:39:E8:D2:C8:3F:B8:D1:8C:D4:A5:F8:A5:E6:EC X509v3 Authority Key Identifier: keyid:52:F3:E7:FB:5E:D8:53:37:F7:E1:9E:10:73:3D:49:0C:2B:1C:0B:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UvPn-17YUzf34Z4Qcz1JDCscC2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:29:9b:5c:05:3c:75:39:c4:24:31:3b:7d:a0:9d:53:dd:a0: 48:93:cb:81:5c:30:2c:9b:e6:6b:e3:cc:11:69:5d:5e:9c:59: b5:6b:d8:27:0f:ff:ff:b4:fb:65:0f:b2:0f:8c:fc:a2:37:6e: dc:16:90:b1:54:c7:67:06:39:ca:af:fe:43:11:41:13:75:7a: de:76:ab:9d:bd:7c:21:10:2a:44:86:dc:82:be:c2:1f:db:61: 92:e5:a7:1e:7c:cf:56:b6:e5:1a:dd:61:9c:8e:cf:c8:76:8e: 6b:e6:76:45:99:3b:bd:55:81:a3:e6:ac:e1:aa:51:2f:c4:ff: ca:86:d7:3f:6c:44:74:5a:fb:1a:8e:23:30:fd:3f:ad:83:4d: a6:51:8e:d2:88:12:3a:dd:5f:e1:0c:8a:c9:85:55:88:3a:fd: d4:4f:30:83:ed:68:14:c8:1d:b2:cf:6c:05:25:1c:4b:80:c6: 94:1e:81:75:81:01:4a:f5:14:dd:75:ea:cb:38:94:72:b9:09: 7b:68:ed:01:36:12:df:bf:cb:c7:51:20:b5:63:3e:77:c1:45: 1a:b1:a1:51:46:8d:77:8b:fb:36:c2:31:c2:6a:e3:df:1d:22: 51:34:e9:33:b1:45:67:99:d7:31:4f:d5:f5:bc:e9:a3:f7:02: 31:12:b5:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMyNzcxMTAvBgNVBAUTKDUyRjNFN0ZCNUVEODUzMzdGN0UxOUUxMDczM0Q0OTBD MkIxQzBCNjQwHhcNMjUwODExMDExMjU1WhcNMjUwODE4MDExMjU1WjAYMRYwFAYD VQQDEw02ODk5NDM5OC1lM2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCwtjbOL44vFCUom2BYqH7+Myg+MyHoDP7LhB1UNH5QaRCU8co80tOkMq4xE JJT40QVxjqor7aZCGlPwlk+7m9Hi3OtsX3+0wVwWCHk7gH+7/atjP4oz0ctYg/GN 6z2csuDN4JBs7wsmoeUBEZmP/WQcaKeG00CxXQmqvxzwviapb8HD6DnDiva5cqOz pp5qicgYLDzXXflAgFfe/mCtsUOcXmFzeaTlEtIsENZz29FrRbqkQL84HTaw2hUB aEu1a+Ctcg2iOtm0nxFD0kRNE0jX4jxxH5fETITiCNTha5MiA09kiYAbhtKtWIve OgudUpzQD1knKG/7UXRqplIA4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKZB22j Hjno0sg/uNGM1KX4pebsMB8GA1UdIwQYMBaAFFLz5/te2FM39+GeEHM9SQwrHAtk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzI3Ny9DMUIwMjI5NkM2 QzAxMUVDQTg1NEQ2MjdDNEY5QUUwMi9VdlBuLTE3WVV6ZjM0WjRRY3oxSkRDc2ND MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V2UG4tMTdZVXpmMzRaNFFjejFKRENzY0MyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzI3Ny9DMUIwMjI5NkM2QzAxMUVDQTg1NEQ2MjdDNEY5QUUwMi9VdlBuLTE3WVV6 ZjM0WjRRY3oxSkRDc2NDMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2KZtcBTx1OcQkMTt9oJ1T3aBIk8uBXDAsm+Zr48wRaV1enFm1a9gn D///tPtlD7IPjPyiN27cFpCxVMdnBjnKr/5DEUETdXredqudvXwhECpEhtyCvsIf 22GS5acefM9WtuUa3WGcjs/Ido5r5nZFmTu9VYGj5qzhqlEvxP/Khtc/bER0Wvsa jiMw/T+tg02mUY7SiBI63V/hDIrJhVWIOv3UTzCD7WgUyB2yz2wFJRxLgMaUHoF1 gQFK9RTdderLOJRyuQl7aO0BNhLfv8vHUSC1Yz53wUUasaFRRo13i/s2wjHCauPf HSJRNOkzsUVnmdcxT9X1vOmj9wIxErWl -----END CERTIFICATE-----Generated at Mon Aug 11 05:21:03 2025 by rpki-client