$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft File: -uIUFNET23jVT-q6G2BvhUokC9E.mft (raw, json) Hash identifier: iDohI8TZEI/fiXX4QQBczW6Cl3GbNjD+WmEZ1CEi/r8= Subject key identifier: 7E:6F:68:65:3D:15:4C:3A:FF:F1:A0:5F:79:51:7D:E9:78:89:51:B1 Authority key identifier: FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1 Certificate issuer: /CN=A91BDA2A/serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft Manifest number: 01A4 Signing time: Thu 07 Aug 2025 03:45:39 +0000 Manifest this update: Thu 07 Aug 2025 03:45:38 +0000 Manifest next update: Thu 14 Aug 2025 03:45:38 +0000 Files and hashes: 1: -uIUFNET23jVT-q6G2BvhUokC9E.crl (hash: sARWYx50lBvFqfVVlfAlZL3RfZXaMSiEDYJoypiSb3w=) 2: 05C6C85CF3C211ED8B9B1450C4F9AE02.roa (hash: RiSzecgrf2L+I7okqYMacDikMwDpRb3b5jlgRjgQGAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA2A, serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1 Validity Not Before: Aug 7 03:45:38 2025 GMT Not After : Aug 14 03:45:38 2025 GMT Subject: CN=68942163-b801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:63:9d:f4:78:78:48:f7:6a:45:71:51:e0:08: 9e:99:35:6e:22:f6:ee:bf:1f:40:85:8d:e9:c2:e5: 90:7d:1b:48:44:c9:47:83:95:10:77:d9:9d:c7:20: be:72:49:6e:ee:4d:e1:c3:93:ef:e0:af:50:fd:9c: 1f:f4:17:ef:bd:32:df:95:66:08:4a:6d:45:80:53: a5:a4:65:71:fc:68:0a:26:6c:b5:c4:7d:64:02:8f: 86:7b:9b:e6:6b:de:ae:b3:ba:1d:c8:e6:cb:c8:19: f6:a6:9f:cb:2e:40:ea:4b:af:9c:72:b9:54:96:37: 00:35:60:15:16:4f:2b:5c:35:5a:83:ff:5d:e5:df: fb:96:84:8a:e8:40:19:ca:2b:c0:37:d5:fc:3d:cc: 66:3c:bf:e4:8b:33:b3:39:01:89:e7:e8:61:af:28: 32:5f:3c:c6:88:75:95:dc:dd:4a:4c:bf:1a:53:a9: ea:51:2a:f3:a7:a8:4c:2d:80:c0:3b:33:f2:53:f1: 26:bb:4f:1d:94:dd:85:79:60:0c:8a:b3:b4:58:9f: 42:e8:a0:44:0a:9b:b1:e5:a6:9e:9a:9f:ba:d4:3a: 78:39:62:33:65:5f:c4:b4:ef:4a:f4:f4:00:f1:6e: 46:50:25:08:c2:e1:ca:fc:9a:6a:b7:a1:02:fb:98: 7e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6F:68:65:3D:15:4C:3A:FF:F1:A0:5F:79:51:7D:E9:78:89:51:B1 X509v3 Authority Key Identifier: keyid:FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:20:94:73:b5:83:e4:40:a8:25:9f:5b:4b:03:3c:d2:68:a5: bb:34:0e:78:35:97:34:a6:24:64:a1:d3:ba:4b:2c:9c:41:d0: 14:08:26:8d:9d:7a:42:6b:3c:73:f8:98:fa:2f:4b:da:48:10: be:1d:da:74:41:a3:50:d5:22:c5:b8:26:2b:b0:d7:e2:b7:7d: ad:35:59:08:40:68:b4:c8:42:ad:99:aa:50:a0:d9:a3:66:11: 26:17:0f:63:44:03:e1:b7:c6:4e:d2:36:f6:1b:0b:4a:0c:47: b8:37:96:d2:dd:5f:f4:4e:4b:a1:fb:15:7b:c9:89:87:cf:1c: 55:4c:8f:93:69:bd:d2:d0:b4:1e:96:bf:6e:9b:55:59:cb:65: fd:b4:d7:44:96:27:aa:41:71:22:09:9a:1b:9b:0d:d2:d2:fc: b9:11:26:c5:9d:e1:61:2b:44:55:88:a6:3a:d1:65:4c:a7:26: 70:35:c3:62:d5:b7:05:7d:65:db:06:d0:e7:25:a2:44:d8:a2: ec:01:bc:98:33:1d:a4:1f:c3:e5:df:a6:66:5b:7a:c3:22:f5: 2b:0d:18:cc:c3:f5:02:43:f3:ff:fe:66:a9:da:e6:21:f7:4e: 1a:ef:48:54:5a:f0:d9:50:27:97:b4:c2:7e:b8:aa:d8:65:3f: 13:88:48:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMkExMTAvBgNVBAUTKEZBRTIxNDE0RDExM0RCNzhENTRGRUFCQTFCNjA2Rjg1 NEEyNDBCRDEwHhcNMjUwODA3MDM0NTM4WhcNMjUwODE0MDM0NTM4WjAYMRYwFAYD VQQDEw02ODk0MjE2My1iODAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WOd9Hh4SPdqRXFR4AiemTVuIvbuvx9AhY3pwuWQfRtIRMlHg5UQd9mdxyC+ cklu7k3hw5Pv4K9Q/Zwf9BfvvTLflWYISm1FgFOlpGVx/GgKJmy1xH1kAo+Ge5vm a96us7odyObLyBn2pp/LLkDqS6+ccrlUljcANWAVFk8rXDVag/9d5d/7loSK6EAZ yivAN9X8PcxmPL/kizOzOQGJ5+hhrygyXzzGiHWV3N1KTL8aU6nqUSrzp6hMLYDA OzPyU/Emu08dlN2FeWAMirO0WJ9C6KBECpux5aaemp+61Dp4OWIzZV/EtO9K9PQA 8W5GUCUIwuHK/Jpqt6EC+5h+hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5vaGU9 FUw6//GgX3lRfel4iVGxMB8GA1UdIwQYMBaAFPriFBTRE9t41U/quhtgb4VKJAvR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEyQS8xNDc3MTFCMkYz QkUxMUVEOUE5QUM2NEZDNEY5QUUwMi8tdUlVRk5FVDIzalZULXE2RzJCdmhVb2tD OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11SVVGTkVUMjNqVlQtcTZHMkJ2aFVva0M5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REEyQS8xNDc3MTFCMkYzQkUxMUVEOUE5QUM2NEZDNEY5QUUwMi8tdUlVRk5FVDIz alZULXE2RzJCdmhVb2tDOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvIJRztYPkQKgln1tLAzzSaKW7NA54NZc0piRkodO6SyycQdAUCCaN nXpCazxz+Jj6L0vaSBC+Hdp0QaNQ1SLFuCYrsNfit32tNVkIQGi0yEKtmapQoNmj ZhEmFw9jRAPht8ZO0jb2GwtKDEe4N5bS3V/0Tkuh+xV7yYmHzxxVTI+Tab3S0LQe lr9um1VZy2X9tNdElieqQXEiCZobmw3S0vy5ESbFneFhK0RViKY60WVMpyZwNcNi 1bcFfWXbBtDnJaJE2KLsAbyYMx2kH8Pl36ZmW3rDIvUrDRjMw/UCQ/P//map2uYh 904a70hUWvDZUCeXtMJ+uKrYZT8TiEgk -----END CERTIFICATE-----Generated at Sat Aug 9 01:09:52 2025 by rpki-client