$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft File: uOVJaYlT9l5x-4S20zjAisF4Glo.mft (raw, json) Hash identifier: w0QnVyOQuSLhGwFUWHVMNrjZvkMuWpu7xtPLL0rwfaM= Subject key identifier: B3:7E:66:60:6B:CC:A9:FD:C9:9B:72:34:60:2E:7B:34:4B:B2:D0:EE Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A Certificate issuer: /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Certificate serial: 09BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft Manifest number: 09A3 Signing time: Tue 12 Aug 2025 20:21:21 +0000 Manifest this update: Tue 12 Aug 2025 20:21:20 +0000 Manifest next update: Tue 19 Aug 2025 20:21:20 +0000 Files and hashes: 1: uOVJaYlT9l5x-4S20zjAisF4Glo.crl (hash: QH3qo/8awVZJAhxap2IqDpInHCoLWc606RDw6CLgycU=) 2: 4B31BDC4B76911ED8A503224C4F9AE02.roa (hash: l0BRfiLqHQsOV1ADKIbKK5vOrt/xeo6mhndQAShwIN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 20:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2490 (0x9ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5C70, serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Validity Not Before: Aug 12 20:21:20 2025 GMT Not After : Aug 19 20:21:20 2025 GMT Subject: CN=689ba241-d865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0e:81:71:ce:92:a1:e4:61:ad:c8:20:e2:e0: 93:aa:39:58:64:af:bd:49:11:da:ad:78:b5:cf:00: 77:21:8f:7a:f2:76:a8:c9:09:27:1d:ce:e8:3e:9c: d2:0f:0b:8f:b5:9b:87:1e:36:e0:50:0a:d7:46:66: b1:ae:99:a9:45:92:7c:f3:33:6f:d6:5e:b3:2f:37: 04:9e:c8:33:2e:e2:e2:3a:0e:a2:32:99:bc:65:0c: 0c:dd:fd:f6:db:25:9a:74:7c:57:2a:5e:90:da:eb: a0:89:0f:29:bf:4f:c5:c6:0e:3c:21:f2:3e:72:c8: 9e:f3:35:23:72:c7:a8:33:5b:41:20:fb:fa:5e:ee: e8:13:1f:43:10:ed:8e:c2:4f:41:65:a5:86:f4:c9: a4:d8:49:72:20:cb:7a:c0:97:bd:c8:5c:88:f8:69: c5:ed:42:03:6b:b8:32:07:b7:03:1d:2a:04:bb:98: 82:5c:d3:68:c7:42:b6:d9:a1:31:cf:dd:29:80:87: a8:dc:63:58:89:fe:cf:2a:0a:e3:bd:2d:d5:cc:62: 16:b9:e3:5f:04:7c:fc:e1:22:ae:dc:e2:52:e1:49: 34:b7:5b:8f:cb:81:67:8f:17:0c:8c:bb:e1:3a:ae: ee:13:51:b4:cf:5f:5f:4c:98:28:26:30:69:ae:bd: d9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7E:66:60:6B:CC:A9:FD:C9:9B:72:34:60:2E:7B:34:4B:B2:D0:EE X509v3 Authority Key Identifier: keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:f9:15:58:19:fd:fd:d6:f1:dc:ba:e3:f6:e6:2b:ad:81:7c: 63:9b:a8:9b:7e:3d:59:37:d5:30:31:d7:e7:f4:12:f6:ae:52: 6c:1b:bf:4a:18:9b:8d:80:f2:17:b9:ce:6e:7c:44:0b:47:06: 46:aa:53:5d:51:33:34:7d:36:a7:f1:e1:36:4f:77:c2:49:83: d7:aa:6f:4e:56:df:18:94:f7:61:49:24:be:7b:85:26:37:03: c6:57:8d:14:90:19:7d:8f:f4:c7:1b:36:cd:93:b3:72:7c:6a: 4a:a7:95:6f:0a:01:71:b8:f8:6e:3c:f8:7c:a2:18:b6:92:ac: c0:4f:3f:e9:eb:26:35:94:07:10:f9:1e:ea:e0:8d:2f:fc:7e: 35:68:f5:99:d7:e4:72:fc:76:8f:d1:97:51:c8:b9:92:8c:7d: 24:ad:0c:2e:50:dc:00:db:d0:b3:41:c0:b2:aa:5b:9d:fe:b6: b9:0c:dc:c9:f0:a3:21:32:ca:7e:39:ca:f0:fa:a6:2b:f9:46: 50:59:11:f2:32:0b:15:82:0c:94:03:1c:54:bf:e7:b4:da:23: 15:f4:04:11:f3:52:ec:7c:84:0f:b3:83:77:51:47:ac:bb:18: fb:59:26:c1:70:94:f0:a5:d7:fb:43:1f:37:3b:f2:9e:de:a5: ce:21:d2:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDNzAxMTAvBgNVBAUTKEI4RTU0OTY5ODk1M0Y2NUU3MUZCODRCNkQzMzhDMDhB QzE3ODFBNUEwHhcNMjUwODEyMjAyMTIwWhcNMjUwODE5MjAyMTIwWjAYMRYwFAYD VQQDEw02ODliYTI0MS1kODY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ6Bcc6SoeRhrcgg4uCTqjlYZK+9SRHarXi1zwB3IY968naoyQknHc7oPpzS DwuPtZuHHjbgUArXRmaxrpmpRZJ88zNv1l6zLzcEnsgzLuLiOg6iMpm8ZQwM3f32 2yWadHxXKl6Q2uugiQ8pv0/Fxg48IfI+csie8zUjcseoM1tBIPv6Xu7oEx9DEO2O wk9BZaWG9Mmk2ElyIMt6wJe9yFyI+GnF7UIDa7gyB7cDHSoEu5iCXNNox0K22aEx z90pgIeo3GNYif7PKgrjvS3VzGIWueNfBHz84SKu3OJS4Uk0t1uPy4FnjxcMjLvh Oq7uE1G0z19fTJgoJjBprr3ZrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLN+ZmBr zKn9yZtyNGAuezRLstDuMB8GA1UdIwQYMBaAFLjlSWmJU/ZecfuEttM4wIrBeBpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUM3MC8yM0EwQUMwNjkx MDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDlsNXgtNFMyMHpqQWlzRjRH bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPVkphWWxUOWw1eC00UzIwempBaXNGNEdsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUM3MC8yM0EwQUMwNjkxMDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDls NXgtNFMyMHpqQWlzRjRHbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS+RVYGf391vHcuuP25iutgXxjm6ibfj1ZN9UwMdfn9BL2rlJsG79K GJuNgPIXuc5ufEQLRwZGqlNdUTM0fTan8eE2T3fCSYPXqm9OVt8YlPdhSSS+e4Um NwPGV40UkBl9j/THGzbNk7NyfGpKp5VvCgFxuPhuPPh8ohi2kqzATz/p6yY1lAcQ +R7q4I0v/H41aPWZ1+Ry/HaP0ZdRyLmSjH0krQwuUNwA29CzQcCyqlud/ra5DNzJ 8KMhMsp+Ocrw+qYr+UZQWRHyMgsVggyUAxxUv+e02iMV9AQR81LsfIQPs4N3UUes uxj7WSbBcJTwpdf7Qx83O/Ke3qXOIdL2 -----END CERTIFICATE-----Generated at Wed Aug 13 04:28:11 2025 by rpki-client