$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft File: uOpx0E7INugYCHPJ6dQM0uNVNwE.mft (raw, json) Hash identifier: Wfid9SsP2HjtuSsbJ0XvnxdEUIh55GRL0YQ+l6uTSg4= Subject key identifier: 71:79:CB:6C:A2:78:BC:7E:2C:35:B7:C1:B6:B8:07:30:AE:FB:E9:99 Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 Certificate issuer: /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft Manifest number: 020A Signing time: Thu 07 Aug 2025 02:44:58 +0000 Manifest this update: Thu 07 Aug 2025 02:44:58 +0000 Manifest next update: Thu 14 Aug 2025 02:44:58 +0000 Files and hashes: 1: uOpx0E7INugYCHPJ6dQM0uNVNwE.crl (hash: ZgbS+1qwwoQ4YsBdZhymmaEP6qsGCxwLg+4NXe32hiU=) 2: CC74271E8A8711ED98572D26C4F9AE02.roa (hash: rGioCcK4Zr+knzNA5J2qJp6M9oaPBmCCilGkVDkio+Y=) 3: 4D54B546616411F0B65D5F70C4F9AE02.roa (hash: CJJ1swHPV2FS2o94pZ274vtIWz1N4ntGwGv8bt1RfcY=) 4: C9E35E848A8711ED98572D26C4F9AE02.roa (hash: eHox8CScwy17I91npttE3xAPIO9P1S6yAPyglPvKM8k=) 5: 82B99B1C6B9F11F09CD3A334C4F9AE02.roa (hash: MOy3nx724ovxMfijazGrKwrHh5j4BrBp6Yxw1lx+7NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCF10, serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Validity Not Before: Aug 7 02:44:58 2025 GMT Not After : Aug 14 02:44:58 2025 GMT Subject: CN=6894132a-d0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b1:d6:26:96:c1:3b:61:ef:62:1c:d1:0c:6f: e7:71:d8:9b:b3:8a:f3:89:d4:fe:af:bc:81:fd:b4: 68:d3:67:84:13:86:25:dd:3b:99:d5:96:96:ed:4e: ed:ce:d6:31:1b:fd:3e:57:49:45:fd:09:81:03:5c: 99:bf:88:17:e1:25:ab:29:b1:0f:ed:31:99:bc:2e: ed:0a:11:29:c8:5d:5e:80:43:a2:88:f7:bf:47:ef: 0a:d5:82:e4:3e:d6:73:fe:99:a0:68:07:75:e7:98: c1:3e:f8:2f:8d:26:72:77:a0:0a:1d:c4:d5:c3:c4: 04:51:fb:e1:c6:62:4c:ea:cf:79:4b:15:37:8f:eb: a9:e8:00:48:ec:83:e9:ee:ed:b0:b7:00:55:0a:58: 40:bb:97:0c:22:0c:09:22:ce:59:b2:a5:ad:46:74: 19:35:26:32:8d:f6:12:5f:a5:fd:44:9b:64:0d:05: 0f:75:f1:e1:b5:c0:9e:e5:9c:0b:02:42:c5:9a:4d: bc:cb:44:d9:c8:4f:e0:56:89:0c:64:78:b3:e5:cb: b1:9c:e1:10:70:32:ae:e6:3b:93:9f:c5:37:ad:3d: 7a:c6:9a:9d:50:43:39:c7:1d:7b:29:fc:cc:43:fd: 99:a4:62:c6:13:2c:78:be:81:bf:4e:27:d0:26:f5: 9e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:79:CB:6C:A2:78:BC:7E:2C:35:B7:C1:B6:B8:07:30:AE:FB:E9:99 X509v3 Authority Key Identifier: keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3c:e8:1b:ee:3c:99:56:73:12:90:35:11:df:23:fa:da:99: f8:e9:a9:3e:00:a4:0d:1b:69:49:fe:a0:7b:c7:06:77:47:94: d5:0c:69:b1:a8:cb:d7:59:f3:bc:33:c2:55:b2:c3:4a:2b:51: 48:29:3c:67:f3:e3:84:8c:5d:ae:d3:b7:37:16:45:0b:21:cd: a3:35:25:0d:e4:f2:86:7f:e5:e8:4c:0b:9a:fd:f2:a3:b6:ad: a6:94:89:5a:b0:79:c9:40:8f:80:1c:eb:e6:05:23:5b:81:11: fc:4e:50:db:9f:02:f2:9b:a2:36:85:b4:76:7d:a7:a4:06:25: 0f:a6:c3:f1:a2:01:3f:3b:cb:24:3f:01:5a:ff:a0:98:73:48: 45:78:d5:ae:33:32:59:7c:38:05:77:64:0e:9d:aa:a7:be:c5: b2:60:19:58:51:ca:5e:00:74:62:e4:83:8c:d1:72:d3:fa:62: d0:a2:26:87:19:a8:e3:ef:87:17:30:8a:5b:30:62:85:72:ee: af:90:9b:03:29:bf:c8:92:a1:dc:64:57:d9:12:93:0e:3d:23: 93:e9:db:2a:70:57:7f:86:84:18:b1:f7:ef:ea:4e:13:fc:da: 6a:c8:c6:f9:4e:07:0b:7e:1a:97:23:ed:c8:7d:b6:01:31:7e: d4:08:3c:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NGMTAxMTAvBgNVBAUTKEI4RUE3MUQwNEVDODM2RTgxODA4NzNDOUU5RDQwQ0Qy RTM1NTM3MDEwHhcNMjUwODA3MDI0NDU4WhcNMjUwODE0MDI0NDU4WjAYMRYwFAYD VQQDEw02ODk0MTMyYS1kMGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7HWJpbBO2HvYhzRDG/ncdibs4rzidT+r7yB/bRo02eEE4Yl3TuZ1ZaW7U7t ztYxG/0+V0lF/QmBA1yZv4gX4SWrKbEP7TGZvC7tChEpyF1egEOiiPe/R+8K1YLk PtZz/pmgaAd155jBPvgvjSZyd6AKHcTVw8QEUfvhxmJM6s95SxU3j+up6ABI7IPp 7u2wtwBVClhAu5cMIgwJIs5ZsqWtRnQZNSYyjfYSX6X9RJtkDQUPdfHhtcCe5ZwL AkLFmk28y0TZyE/gVokMZHiz5cuxnOEQcDKu5juTn8U3rT16xpqdUEM5xx17KfzM Q/2ZpGLGEyx4voG/TifQJvWewQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHF5y2yi eLx+LDW3wba4BzCu++mZMB8GA1UdIwQYMBaAFLjqcdBOyDboGAhzyenUDNLjVTcB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0YxMC9FQzY3MzMzRTYw OTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51Z1lDSFBKNmRRTTB1TlZO d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPcHgwRTdJTnVnWUNIUEo2ZFFNMHVOVk53RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0YxMC9FQzY3MzMzRTYwOTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51 Z1lDSFBKNmRRTTB1TlZOd0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMPOgb7jyZVnMSkDUR3yP62pn46ak+AKQNG2lJ/qB7xwZ3R5TVDGmx qMvXWfO8M8JVssNKK1FIKTxn8+OEjF2u07c3FkULIc2jNSUN5PKGf+XoTAua/fKj tq2mlIlasHnJQI+AHOvmBSNbgRH8TlDbnwLym6I2hbR2faekBiUPpsPxogE/O8sk PwFa/6CYc0hFeNWuMzJZfDgFd2QOnaqnvsWyYBlYUcpeAHRi5IOM0XLT+mLQoiaH Gajj74cXMIpbMGKFcu6vkJsDKb/IkqHcZFfZEpMOPSOT6dsqcFd/hoQYsffv6k4T /NpqyMb5TgcLfhqXI+3IfbYBMX7UCDxt -----END CERTIFICATE-----Generated at Sat Aug 9 01:15:17 2025 by rpki-client