$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft File: aUugcLYm4WhY1mDyEg50tvw_cuw.mft (raw, json) Hash identifier: 2G9F8xjXNJoYSPVcmG5d9eW+ap/Dz10xHqFPmjSivzY= Subject key identifier: 20:6A:AA:D9:34:54:39:36:E3:7F:11:36:9A:F7:FF:82:56:E1:A2:90 Authority key identifier: 69:4B:A0:70:B6:26:E1:68:58:D6:60:F2:12:0E:74:B6:FC:3F:72:EC Certificate issuer: /CN=A91C7426/serialNumber=694BA070B626E16858D660F2120E74B6FC3F72EC Certificate serial: 34A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft Manifest number: 34A8 Signing time: Sun 10 Aug 2025 15:04:29 +0000 Manifest this update: Sun 10 Aug 2025 15:04:28 +0000 Manifest next update: Sun 17 Aug 2025 15:04:28 +0000 Files and hashes: 1: aUugcLYm4WhY1mDyEg50tvw_cuw.crl (hash: AXTuYeaUlTlbzzPvskxjJYJmMIflBOmYqTXLE+q0w0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.crl rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13480 (0x34a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7426, serialNumber=694BA070B626E16858D660F2120E74B6FC3F72EC Validity Not Before: Aug 10 15:04:28 2025 GMT Not After : Aug 17 15:04:28 2025 GMT Subject: CN=6898b4fd-6b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cf:09:7c:c0:86:c8:17:a3:0a:df:9f:d7:ae: 26:22:ba:60:24:68:d8:bf:54:16:ce:a0:d0:66:e9: db:a9:4a:ce:44:4d:ca:35:e3:e4:44:3e:df:07:0c: d7:86:43:d9:c3:ad:c8:94:c5:5e:44:a0:8c:b4:ba: 9d:94:57:a7:1e:d4:80:70:2c:4b:21:d1:d6:c7:cc: 28:1c:ae:bd:93:e1:a4:7c:7b:ea:00:42:ff:64:46: 20:02:e9:ca:d8:0b:94:89:b9:cb:b4:40:e3:9b:1f: 2d:ef:b4:db:24:05:2a:b9:f4:0e:c7:f6:3d:cb:fc: 19:c5:be:a2:83:56:26:a4:37:c5:bd:6e:53:c8:20: 1a:00:f6:c6:5c:1c:f2:4f:35:65:1b:cb:cf:ee:88: 28:93:72:aa:91:74:73:52:16:37:24:5a:b2:c6:2e: 94:77:55:b1:82:b5:3b:7a:a7:e6:21:04:0a:a8:2c: ac:44:dc:75:fd:17:2f:d3:40:2c:e7:c9:b9:93:4a: 17:7f:a9:fb:62:82:05:af:68:bc:0e:2a:89:56:6a: 91:57:10:32:70:0f:f4:b7:d6:fc:6c:98:83:0a:6b: 42:40:93:47:96:2d:d2:97:6e:c3:b6:d2:2f:f2:e4: 1b:82:af:fd:80:25:83:de:ff:69:4a:78:75:02:ad: c4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6A:AA:D9:34:54:39:36:E3:7F:11:36:9A:F7:FF:82:56:E1:A2:90 X509v3 Authority Key Identifier: keyid:69:4B:A0:70:B6:26:E1:68:58:D6:60:F2:12:0E:74:B6:FC:3F:72:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:3b:c5:d1:21:f3:e8:e6:00:4e:63:07:84:bc:8b:b5:fb:c2: 1a:63:c3:93:01:17:4c:50:f9:43:aa:91:b9:49:20:b1:a0:1f: 19:28:ba:b1:f3:2a:0b:38:dd:11:23:9b:06:07:3f:a2:8c:0e: 1c:84:6b:d1:e3:1d:be:f5:4f:ae:39:a7:26:ce:1e:15:09:b5: ef:11:ad:a7:11:c4:fe:32:ee:93:de:89:c7:19:21:13:cc:d8: 92:06:3b:92:a0:20:60:f9:a5:3c:f7:81:c7:50:80:fc:bf:24: b8:5b:c4:bf:b6:65:99:51:14:26:54:08:fd:ea:de:02:eb:4d: 80:17:bb:40:06:61:c5:9e:3e:7e:8f:92:ce:dc:b0:27:67:05: 7b:6e:2a:a6:af:b8:12:de:f6:58:42:27:ee:6b:bb:17:be:32: 38:76:de:9f:bf:60:cd:89:f9:e1:b0:f5:7a:8f:91:94:f7:ec: 91:f9:d2:18:f4:24:9a:31:64:64:a9:64:5b:e7:d3:ea:66:ba: dc:2c:62:94:b0:ff:1e:69:d4:f4:df:66:d7:68:a2:89:a8:e1: e5:d5:fe:50:1a:ab:e5:e3:fd:95:95:de:f7:e2:a0:87:37:62: 01:6f:98:ff:b1:26:f6:ae:52:b1:9d:64:cb:1c:1c:29:f7:86: 8b:53:be:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0MjYxMTAvBgNVBAUTKDY5NEJBMDcwQjYyNkUxNjg1OEQ2NjBGMjEyMEU3NEI2 RkMzRjcyRUMwHhcNMjUwODEwMTUwNDI4WhcNMjUwODE3MTUwNDI4WjAYMRYwFAYD VQQDEw02ODk4YjRmZC02YjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAys8JfMCGyBejCt+f164mIrpgJGjYv1QWzqDQZunbqUrORE3KNePkRD7fBwzX hkPZw63IlMVeRKCMtLqdlFenHtSAcCxLIdHWx8woHK69k+GkfHvqAEL/ZEYgAunK 2AuUibnLtEDjmx8t77TbJAUqufQOx/Y9y/wZxb6ig1YmpDfFvW5TyCAaAPbGXBzy TzVlG8vP7ogok3KqkXRzUhY3JFqyxi6Ud1WxgrU7eqfmIQQKqCysRNx1/Rcv00As 58m5k0oXf6n7YoIFr2i8DiqJVmqRVxAycA/0t9b8bJiDCmtCQJNHli3Sl27DttIv 8uQbgq/9gCWD3v9pSnh1Aq3EVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBqqtk0 VDk2438RNpr3/4JW4aKQMB8GA1UdIwQYMBaAFGlLoHC2JuFoWNZg8hIOdLb8P3Ls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzQyNi8yMTI4Nzk2QzFE QTIxMUUyOEY1MUQyOTQwOEIwMkNEMi9hVXVnY0xZbTRXaFkxbUR5RWc1MHR2d19j dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FVdWdjTFltNFdoWTFtRHlFZzUwdHZ3X2N1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzQyNi8yMTI4Nzk2QzFEQTIxMUUyOEY1MUQyOTQwOEIwMkNEMi9hVXVnY0xZbTRX aFkxbUR5RWc1MHR2d19jdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAO8XRIfPo5gBOYweEvIu1+8IaY8OTARdMUPlDqpG5SSCxoB8ZKLqx 8yoLON0RI5sGBz+ijA4chGvR4x2+9U+uOacmzh4VCbXvEa2nEcT+Mu6T3onHGSET zNiSBjuSoCBg+aU894HHUID8vyS4W8S/tmWZURQmVAj96t4C602AF7tABmHFnj5+ j5LO3LAnZwV7biqmr7gS3vZYQifua7sXvjI4dt6fv2DNifnhsPV6j5GU9+yR+dIY 9CSaMWRkqWRb59PqZrrcLGKUsP8eadT032bXaKKJqOHl1f5QGqvl4/2Vld734qCH N2IBb5j/sSb2rlKxnWTLHBwp94aLU76f -----END CERTIFICATE-----Generated at Mon Aug 11 12:53:45 2025 by rpki-client