$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft File: UK5xbz02ub7q4n8QBo-eNqIzq5E.mft (raw, json) Hash identifier: hPWk7AjRNxQggKFZsbIVW3vniVJlypSqy5qri0NxY6E= Subject key identifier: 7F:80:13:8F:4A:F1:07:7A:06:97:1A:F0:6D:6E:85:A5:BC:4D:F5:9E Authority key identifier: 50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91 Certificate issuer: /CN=A91CB4E9/serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft Manifest number: 25 Signing time: Sat 09 Aug 2025 08:20:36 +0000 Manifest this update: Sat 09 Aug 2025 08:20:36 +0000 Manifest next update: Sat 16 Aug 2025 08:20:36 +0000 Files and hashes: 1: UK5xbz02ub7q4n8QBo-eNqIzq5E.crl (hash: xpHRwY8Xq4FX2tM97fGxFChTBIdnwwfgx7p9N2ybrpY=) 2: 539EAC9440EF11F08CFAFB1CC4F9AE02.roa (hash: WcSNu1HK0gGCU7aORSHhSulUdwLctmKgMDS1dq0RYbQ=) 3: BA23C0E440EF11F099D6761DC4F9AE02.roa (hash: pgsw/lIIAC86SHOBUAFVHyyezuLYZcEiwQh3Fbl1fpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB4E9, serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91 Validity Not Before: Aug 9 08:20:36 2025 GMT Not After : Aug 16 08:20:36 2025 GMT Subject: CN=689704d4-f351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:36:ea:b5:c8:04:ba:2c:90:fa:e6:d4:d8:92: f0:8f:4b:7a:7f:07:bf:62:14:35:52:6e:f7:98:fb: c2:22:af:9f:5a:a9:f1:0a:93:38:49:54:2d:dd:22: ee:1b:54:b1:c0:ff:b9:4d:43:f1:82:94:1d:b3:06: 51:6f:3a:69:06:23:b1:43:fe:8e:84:e7:17:7f:20: 2e:af:d1:ed:29:67:e4:ab:e5:b9:80:cf:9f:3e:fe: 7b:cb:74:5a:f4:6e:c1:74:75:d1:f0:22:72:31:fe: d7:c4:1a:76:9c:00:c6:e3:19:49:3c:ff:77:4a:32: a6:3c:02:bc:c1:60:56:40:8a:80:bf:ac:0f:7d:52: 69:03:62:22:b1:00:e2:0d:de:1f:62:48:8c:ef:ab: ae:2a:ee:f1:da:4d:c2:41:cc:a4:85:20:8e:7f:9a: a3:ab:dd:b0:f3:77:54:31:77:08:92:22:d8:47:3d: e6:4c:8b:81:e5:5f:a0:f0:3d:28:47:dd:0a:4b:1c: 0f:0c:e5:b5:69:66:81:40:1a:8e:e3:28:d6:67:46: 18:2f:0a:96:97:ed:b3:ba:8c:da:91:16:7c:fa:3d: ff:48:90:b7:1a:a0:07:3c:03:7d:36:14:aa:fd:ef: 80:a2:c3:47:98:06:b8:e2:47:17:10:91:61:79:e3: df:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:80:13:8F:4A:F1:07:7A:06:97:1A:F0:6D:6E:85:A5:BC:4D:F5:9E X509v3 Authority Key Identifier: keyid:50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:16:30:42:59:de:58:05:69:bd:09:89:66:f6:c7:20:6a:d1: e3:54:00:ba:da:88:f4:d5:61:d6:97:4a:91:75:24:f3:90:5c: ec:5d:ba:ff:17:e9:22:db:0d:95:53:83:6e:66:26:03:9e:32: a4:61:87:45:11:4b:38:51:b2:48:4a:5d:ee:78:82:8e:4f:fc: 84:a4:d7:16:89:ee:6d:ba:97:4d:02:63:ae:72:f7:49:9d:06: e7:37:9f:9d:97:ff:8a:83:ec:e4:e6:14:c5:db:ce:ce:8c:8a: 07:1c:1f:9b:be:70:e5:0c:e9:27:ef:14:e7:fe:5d:96:bd:f5: d9:9b:2e:c4:1e:ff:06:bd:42:54:b2:d5:35:cc:bf:1d:c4:ea: 3a:90:3c:cc:e5:cc:cf:ef:eb:f5:ec:0a:68:10:8d:2f:b0:89: 9b:dd:f7:e2:86:75:be:1d:88:ff:2c:93:20:95:f7:7b:d8:af: 5c:e1:69:2d:4b:4a:c1:79:a3:f9:05:44:fa:82:35:09:f9:44: 61:9a:f2:32:f5:8b:ce:1b:25:47:f9:3e:04:b3:08:c1:c2:12: 56:20:f3:e4:72:f3:ea:db:41:8e:e7:d6:81:64:b3:f5:96:11: 83:8e:66:a2:e1:cc:b2:83:6f:40:17:8c:bb:b1:fd:36:8f:e2: d0:6e:ba:ad -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjRFOTExMC8GA1UEBRMoNTBBRTcxNkYzRDM2QjlCRUVBRTI3RjEwMDY4RjlFMzZB MjMzQUI5MTAeFw0yNTA4MDkwODIwMzZaFw0yNTA4MTYwODIwMzZaMBgxFjAUBgNV BAMTDTY4OTcwNGQ0LWYzNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXNuq1yAS6LJD65tTYkvCPS3p/B79iFDVSbveY+8Iir59aqfEKkzhJVC3dIu4b VLHA/7lNQ/GClB2zBlFvOmkGI7FD/o6E5xd/IC6v0e0pZ+Sr5bmAz58+/nvLdFr0 bsF0ddHwInIx/tfEGnacAMbjGUk8/3dKMqY8ArzBYFZAioC/rA99UmkDYiKxAOIN 3h9iSIzvq64q7vHaTcJBzKSFII5/mqOr3bDzd1QxdwiSIthHPeZMi4HlX6DwPShH 3QpLHA8M5bVpZoFAGo7jKNZnRhgvCpaX7bO6jNqRFnz6Pf9IkLcaoAc8A302FKr9 74Ciw0eYBrjiRxcQkWF549+NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUf4ATj0rx B3oGlxrwbW6FpbxN9Z4wHwYDVR0jBBgwFoAUUK5xbz02ub7q4n8QBo+eNqIzq5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNEU5L0QzODYxMzQ0NDBF RTExRjA5RTkzMzUxQ0M0RjlBRTAyL1VLNXhiejAydWI3cTRuOFFCby1lTnFJenE1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVUs1eGJ6MDJ1YjdxNG44UUJvLWVOcUl6cTVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NEU5L0QzODYxMzQ0NDBFRTExRjA5RTkzMzUxQ0M0RjlBRTAyL1VLNXhiejAydWI3 cTRuOFFCby1lTnFJenE1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ4WMEJZ3lgFab0JiWb2xyBq0eNUALraiPTVYdaXSpF1JPOQXOxduv8X 6SLbDZVTg25mJgOeMqRhh0URSzhRskhKXe54go5P/ISk1xaJ7m26l00CY65y90md Buc3n52X/4qD7OTmFMXbzs6MigccH5u+cOUM6SfvFOf+XZa99dmbLsQe/wa9QlSy 1TXMvx3E6jqQPMzlzM/v6/XsCmgQjS+wiZvd9+KGdb4diP8skyCV93vYr1zhaS1L SsF5o/kFRPqCNQn5RGGa8jL1i84bJUf5PgSzCMHCElYg8+Ry8+rbQY7n1oFks/WW EYOOZqLhzLKDb0AXjLux/TaP4tBuuq0= -----END CERTIFICATE-----Generated at Sun Aug 10 18:31:10 2025 by rpki-client