$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft File: uo1v5dgowFOZs-GqZY_AWIYf3OA.mft (raw, json) Hash identifier: 4i3fqM044xjvqbV/SmR1yNJ8ETkJ7S12vfkpXyOLfjQ= Subject key identifier: 58:FC:44:94:04:3F:43:38:67:24:6E:5B:82:A1:53:4C:3F:F6:34:60 Authority key identifier: BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0 Certificate issuer: /CN=A91AAF02/serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0 Certificate serial: 0F51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft Manifest number: 0F46 Signing time: Mon 04 Aug 2025 17:48:07 +0000 Manifest this update: Mon 04 Aug 2025 17:48:06 +0000 Manifest next update: Mon 11 Aug 2025 17:48:06 +0000 Files and hashes: 1: uo1v5dgowFOZs-GqZY_AWIYf3OA.crl (hash: qhPk3osxrM3rIDMdxg4HdMaMnqYh79pavY12f6I06pw=) 2: 7EA856A6C3F511EEB2610F2FC4F9AE02.roa (hash: tn6ujwfx2fxOjVcWSqeXpg3bHl3JICdgt6OHucuWivU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 17:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3921 (0xf51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02, serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0 Validity Not Before: Aug 4 17:48:06 2025 GMT Not After : Aug 11 17:48:06 2025 GMT Subject: CN=6890f257-483d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4c:34:33:c8:c4:e1:ea:10:ed:1f:87:31:bd: d6:c2:a5:ba:a0:c1:5a:e3:b9:15:b0:d8:41:c8:e1: 23:4f:07:c4:32:ca:55:75:48:56:1b:44:55:9b:da: 99:af:75:ab:ac:3e:da:b3:8b:54:2f:9b:2c:8d:cf: 3c:18:f6:a7:72:ae:ed:d4:9f:76:ed:9e:5d:89:05: c8:a7:2a:23:b9:00:13:11:cb:85:53:b3:cc:53:bb: a8:f6:fa:8d:8f:a3:f5:3b:48:14:af:9b:8e:31:a3: 07:41:01:92:35:db:37:22:c5:88:fd:e2:b8:a1:ee: c5:09:d8:b4:b2:1b:5e:3e:b9:cb:a2:0c:49:94:00: e2:21:24:36:a9:af:1d:14:57:6d:fb:b6:60:39:d9: aa:81:b2:7b:6f:4c:8d:74:1b:dd:06:3a:6b:80:cc: e5:b7:79:c1:5e:17:58:1f:52:45:3e:d8:14:c6:ae: ca:f2:40:be:08:cf:40:aa:85:d7:dc:79:4e:70:d4: 4a:6e:7e:9b:8c:04:ef:41:a3:f0:b0:5a:3c:d5:d3: ab:6f:d7:ff:d4:85:8c:c8:eb:6b:b8:87:b2:55:96: 45:85:4a:b7:66:0d:54:bb:eb:b9:8b:cf:2e:d6:60: d9:a8:fd:dd:c8:98:fe:ec:40:fe:2e:55:6f:1b:40: 5f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FC:44:94:04:3F:43:38:67:24:6E:5B:82:A1:53:4C:3F:F6:34:60 X509v3 Authority Key Identifier: keyid:BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:1c:6d:6e:76:8a:6b:bf:a7:25:c1:70:c0:f9:50:4f:2d:0f: 5a:c7:1f:a8:d3:f5:aa:d8:6e:ab:00:a2:a6:76:62:b8:ea:11: fe:2c:1e:c0:e3:d5:e4:d2:fd:ff:bf:12:e0:6d:df:bd:dc:72: 95:3c:71:67:2b:db:f7:52:7c:8f:f6:2e:e8:6f:17:4f:14:ed: 77:3f:26:24:8c:4f:2f:a4:ce:a0:54:9b:09:d9:65:f4:48:16: fa:8f:95:70:98:60:0f:99:cb:ef:f8:6e:d1:35:ee:85:44:7e: fa:c7:20:f6:3a:3b:8f:18:85:64:90:12:19:a4:d3:f3:a2:25: 34:37:53:c5:e2:3f:fd:ce:c4:b0:11:4c:0c:50:b6:5e:1e:ce: 2b:bd:3c:04:67:e4:45:72:82:69:b3:cb:97:f3:7c:8e:84:c2: 8c:7c:e4:cc:24:9a:b8:1a:ef:77:68:3e:a9:af:99:87:7a:6b: fd:e4:5d:31:e4:40:3f:3f:58:89:d5:a3:49:ea:7b:38:aa:2b: 8a:f0:4a:9b:4c:35:d4:4d:41:15:de:27:c6:be:b8:74:80:fb: 4a:64:79:2f:dd:f5:c5:c1:bc:c1:88:61:83:29:69:b6:33:08: 58:3a:9b:de:45:db:ab:eb:0f:00:e1:27:f9:73:e8:9e:8e:8d: 68:90:0f:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKEJBOEQ2RkU1RDgyOEMwNTM5OUIzRTFBQTY1OEZDMDU4 ODYxRkRDRTAwHhcNMjUwODA0MTc0ODA2WhcNMjUwODExMTc0ODA2WjAYMRYwFAYD VQQDEw02ODkwZjI1Ny00ODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUw0M8jE4eoQ7R+HMb3WwqW6oMFa47kVsNhByOEjTwfEMspVdUhWG0RVm9qZ r3WrrD7as4tUL5ssjc88GPancq7t1J927Z5diQXIpyojuQATEcuFU7PMU7uo9vqN j6P1O0gUr5uOMaMHQQGSNds3IsWI/eK4oe7FCdi0shtePrnLogxJlADiISQ2qa8d FFdt+7ZgOdmqgbJ7b0yNdBvdBjprgMzlt3nBXhdYH1JFPtgUxq7K8kC+CM9AqoXX 3HlOcNRKbn6bjATvQaPwsFo81dOrb9f/1IWMyOtruIeyVZZFhUq3Zg1Uu+u5i88u 1mDZqP3dyJj+7ED+LlVvG0BfBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFj8RJQE P0M4ZyRuW4KhU0w/9jRgMB8GA1UdIwQYMBaAFLqNb+XYKMBTmbPhqmWPwFiGH9zg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi9FQUNENDg3Njc2 NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dGT1pzLUdxWllfQVdJWWYz T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VvMXY1ZGdvd0ZPWnMtR3FaWV9BV0lZZjNPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUYwMi9FQUNENDg3Njc2NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dG T1pzLUdxWllfQVdJWWYzT0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2HG1udoprv6clwXDA+VBPLQ9axx+o0/Wq2G6rAKKmdmK46hH+LB7A 49Xk0v3/vxLgbd+93HKVPHFnK9v3UnyP9i7obxdPFO13PyYkjE8vpM6gVJsJ2WX0 SBb6j5VwmGAPmcvv+G7RNe6FRH76xyD2OjuPGIVkkBIZpNPzoiU0N1PF4j/9zsSw EUwMULZeHs4rvTwEZ+RFcoJps8uX83yOhMKMfOTMJJq4Gu93aD6pr5mHemv95F0x 5EA/P1iJ1aNJ6ns4qiuK8EqbTDXUTUEV3ifGvrh0gPtKZHkv3fXFwbzBiGGDKWm2 MwhYOpveRdur6w8A4Sf5c+iejo1okA/G -----END CERTIFICATE-----Generated at Wed Aug 6 05:29:25 2025 by rpki-client