$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft File: Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft (raw, json) Hash identifier: jhBaY9iIqq+FDrR2JBcauEoSq3bIzGP0BL+fsyHC7NI= Subject key identifier: C6:67:AE:41:C7:1A:C6:D0:83:93:16:AD:7B:60:C0:04:8A:84:A5:73 Authority key identifier: 52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94 Certificate issuer: /CN=A91AFA16/serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894 Certificate serial: 0B75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft Manifest number: 0B6D Signing time: Fri 08 Aug 2025 19:18:23 +0000 Manifest this update: Fri 08 Aug 2025 19:18:23 +0000 Manifest next update: Fri 15 Aug 2025 19:18:23 +0000 Files and hashes: 1: Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl (hash: pkUIoHSE23P6818tLUsJLDLGEaJsAdCjdex/rPoBjhE=) 2: 11DB043CF61E11EEB39BD261C4F9AE02.roa (hash: e4wDPqjhV3r7vEA4MsvAFc5ifRump5FxJZTH+nviBcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2933 (0xb75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFA16, serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894 Validity Not Before: Aug 8 19:18:23 2025 GMT Not After : Aug 15 19:18:23 2025 GMT Subject: CN=68964d7f-017a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:0b:7f:9e:12:04:71:9c:7b:a8:a0:66:69: 9a:0c:3c:ed:52:8f:09:4c:e5:f1:7a:d0:3b:8b:c5: 4a:9f:ed:07:fc:a3:88:93:76:10:2e:c8:c2:bb:e1: 69:98:bd:22:07:04:f1:35:3f:70:7a:bb:89:3c:f4: f4:71:dd:69:fa:df:4a:e3:4a:53:5b:b9:b0:d6:82: a2:6b:d0:7c:8d:f9:21:d0:6a:94:1e:7b:05:c4:de: 5e:f6:54:91:ef:d4:e9:f8:3c:06:7c:05:ff:34:79: b9:79:0b:7a:ee:82:02:86:a5:7c:37:b8:35:28:76: 2f:05:29:1e:69:1d:b7:7e:75:82:6e:fc:36:73:7f: 5c:72:59:ed:e7:87:22:31:c4:26:07:37:92:cc:5e: e1:64:48:85:ea:3c:ba:48:e9:4f:a8:33:8f:af:39: 2b:c8:5f:68:ba:d3:df:db:b9:d7:1a:45:73:cc:85: 4c:db:cf:37:ac:95:5c:46:c8:b5:50:13:e2:5f:57: 10:28:d3:d4:ab:58:8e:3f:bc:e0:e0:9f:51:05:e6: 92:e6:de:a2:74:25:71:ad:43:fc:98:e0:2f:58:74: 4e:94:1e:84:b6:c1:d6:ff:a7:d2:59:4f:f8:22:28: 96:c6:59:1f:43:24:d8:0a:6b:8c:fa:db:f4:84:91: f3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:67:AE:41:C7:1A:C6:D0:83:93:16:AD:7B:60:C0:04:8A:84:A5:73 X509v3 Authority Key Identifier: keyid:52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:da:83:47:ed:31:9f:f2:8a:cc:da:12:8e:40:9f:bb:71:ec: 58:4d:04:31:b3:43:3d:15:64:1f:12:4b:bc:74:40:19:05:78: ee:8f:5a:af:e0:6a:7c:d8:06:0a:99:51:3b:d2:25:54:4e:e9: 0b:14:33:1b:3f:d2:eb:6c:c3:22:4f:6a:c4:86:c0:d1:c8:6b: 63:4e:92:f7:6a:79:86:8d:27:c9:98:23:95:63:3a:70:7a:b7: 38:df:8b:16:bd:ff:22:8b:99:dd:27:fe:d9:f7:20:66:67:e2: 8f:f3:db:d3:c7:ec:1f:62:28:ef:f3:82:2a:aa:be:c1:7d:12: c7:f8:0f:65:b6:3c:c9:f0:54:d3:b1:d6:77:5e:73:47:89:8e: ea:40:f7:a7:1b:d4:a1:51:4e:54:17:8e:3e:a3:b8:02:9b:49: e6:d4:af:26:19:37:79:df:f7:ed:08:5c:bf:64:3f:c1:bd:31: 2f:ad:4c:e1:2d:5c:bd:35:9c:0c:3b:9a:17:2a:55:52:05:49: 86:66:ce:f7:4f:a5:e3:62:0b:4f:ff:09:19:ea:ee:6c:7c:a3: e1:d2:52:6e:b8:8f:e9:92:db:87:1d:06:62:f7:7d:ca:6e:b0: 4a:3f:a5:dd:02:32:c4:0e:0b:97:39:ef:79:2e:49:dc:b4:4d: 54:11:16:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZBMTYxMTAvBgNVBAUTKDUyRkQxREUyNERBRjhERDVGQzNBQTAwNzhCMDc3MzJG QzI3NDc4OTQwHhcNMjUwODA4MTkxODIzWhcNMjUwODE1MTkxODIzWjAYMRYwFAYD VQQDEw02ODk2NGQ3Zi0wMTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIwLf54SBHGce6igZmmaDDztUo8JTOXxetA7i8VKn+0H/KOIk3YQLsjCu+Fp mL0iBwTxNT9weruJPPT0cd1p+t9K40pTW7mw1oKia9B8jfkh0GqUHnsFxN5e9lSR 79Tp+DwGfAX/NHm5eQt67oIChqV8N7g1KHYvBSkeaR23fnWCbvw2c39cclnt54ci McQmBzeSzF7hZEiF6jy6SOlPqDOPrzkryF9outPf27nXGkVzzIVM2883rJVcRsi1 UBPiX1cQKNPUq1iOP7zg4J9RBeaS5t6idCVxrUP8mOAvWHROlB6EtsHW/6fSWU/4 IiiWxlkfQyTYCmuM+tv0hJHzdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZnrkHH GsbQg5MWrXtgwASKhKVzMB8GA1UdIwQYMBaAFFL9HeJNr43V/DqgB4sHcy/CdHiU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkExNi9DNTU0MjA4MDM1 QzkxMUVBQjRBRkNCMTVDNEY5QUUwMi9VdjBkNGsydmpkWDhPcUFIaXdkekw4SjBl SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V2MGQ0azJ2amRYOE9xQUhpd2R6TDhKMGVKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkExNi9DNTU0MjA4MDM1QzkxMUVBQjRBRkNCMTVDNEY5QUUwMi9VdjBkNGsydmpk WDhPcUFIaXdkekw4SjBlSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz2oNH7TGf8orM2hKOQJ+7cexYTQQxs0M9FWQfEku8dEAZBXjuj1qv 4Gp82AYKmVE70iVUTukLFDMbP9LrbMMiT2rEhsDRyGtjTpL3anmGjSfJmCOVYzpw erc434sWvf8ii5ndJ/7Z9yBmZ+KP89vTx+wfYijv84Iqqr7BfRLH+A9ltjzJ8FTT sdZ3XnNHiY7qQPenG9ShUU5UF44+o7gCm0nm1K8mGTd53/ftCFy/ZD/BvTEvrUzh LVy9NZwMO5oXKlVSBUmGZs73T6XjYgtP/wkZ6u5sfKPh0lJuuI/pktuHHQZi933K brBKP6XdAjLEDguXOe95LknctE1UERb3 -----END CERTIFICATE-----Generated at Sat Aug 9 01:01:36 2025 by rpki-client