$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft File: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft (raw, json) Hash identifier: PLXXdhNTsPdKU4y3g3ti+h0vHu82WfiiTIsU3PxSrb8= Subject key identifier: A3:23:56:DC:B7:15:0A:E9:A9:F3:5F:3E:17:D5:66:E1:04:A5:C6:89 Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF Certificate issuer: /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Certificate serial: 18B7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft Manifest number: 18B1 Signing time: Tue 12 Aug 2025 15:52:32 +0000 Manifest this update: Tue 12 Aug 2025 15:52:31 +0000 Manifest next update: Tue 19 Aug 2025 15:52:31 +0000 Files and hashes: 1: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl (hash: yyzPgxMCzO3XhZzVyzlU6ltLA0qc8fc8eT0R+rnAL+8=) 2: AE21A9C6818911EA81577016C4F9AE02.roa (hash: 7SxWILLdTrzJpYEt8Y/6XTCMP3sdZqZUyA4GDfqu88g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 15:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6327 (0x18b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Validity Not Before: Aug 12 15:52:31 2025 GMT Not After : Aug 19 15:52:31 2025 GMT Subject: CN=689b633f-4f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2a:74:03:ab:91:1b:1c:93:8b:11:6f:06:47: 5d:e2:3b:23:20:40:8c:d1:4e:8f:d8:9f:ef:db:3a: 01:9d:12:8a:75:77:35:c2:8b:3f:e3:80:65:8b:c7: 59:2a:93:1f:6b:70:27:67:37:d2:0e:8b:17:28:df: 27:55:c1:b0:68:0b:0a:93:e6:0f:8a:0a:9b:13:a4: e2:d5:07:14:2f:61:14:34:83:93:42:f5:bd:16:ef: 34:75:b1:75:f3:7e:c2:91:89:34:7f:83:95:04:a0: e4:a3:da:49:63:4d:0e:e3:f9:6a:55:c6:5a:8d:16: 06:11:47:d1:04:7c:60:5d:fd:37:41:ed:7f:e1:f6: 07:61:14:96:76:aa:b5:0c:2e:4e:d7:f4:3f:ec:3a: e8:a8:1b:84:8a:db:4e:64:75:7c:62:37:01:c4:87: ea:be:3f:72:2c:d4:5d:57:59:e2:ab:cb:69:53:70: 8f:40:e6:c3:f3:00:a0:cf:01:7e:27:a5:4d:9e:27: 46:92:59:ac:ee:c9:23:3f:32:d0:cb:6c:b6:a8:4f: b8:4a:dc:af:9b:eb:fd:9c:1c:98:20:f1:d3:9e:c1: 64:8f:7e:d4:b6:a5:22:df:47:55:ba:c6:61:7f:d5: 28:4a:aa:8f:b2:6e:8e:8e:dd:c9:61:45:6f:8b:34: 62:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:23:56:DC:B7:15:0A:E9:A9:F3:5F:3E:17:D5:66:E1:04:A5:C6:89 X509v3 Authority Key Identifier: keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:bc:34:37:19:7b:51:09:23:c8:cb:1e:c1:88:15:4e:ec:ac: 1a:c3:7e:c8:00:38:db:d2:f1:3d:b8:58:85:68:70:c1:a6:d3: 52:dd:c5:bf:c7:12:ff:78:ab:6a:2a:06:7c:3b:63:54:50:1d: f5:89:1e:2a:17:79:1d:0f:aa:ee:e1:d5:23:54:2a:a8:2c:13: 28:67:9c:d1:c5:2a:ad:dc:66:24:d2:e0:c1:a9:c2:dd:1e:2d: d0:29:c8:55:19:3d:a9:63:8b:04:64:9f:3a:2f:11:93:5f:7c: 48:44:af:cd:82:55:b0:78:db:91:b8:d4:d1:10:9f:1e:93:85: ac:e1:c8:37:ce:eb:91:95:55:a0:1c:c7:0c:01:61:d4:ba:3b: 54:1d:db:0f:fd:f6:2c:b7:62:d6:f7:51:42:65:51:d3:4e:ef: 27:1e:85:4a:eb:18:31:5c:40:f3:20:4f:23:5b:80:7e:41:1a: ea:b1:c6:d9:2d:73:0f:ca:c2:1e:50:70:71:1a:c4:a1:26:a9: ab:b1:a2:65:6a:27:1f:9c:a3:76:02:7f:2d:c1:d5:d8:73:0c: 56:93:86:4b:f8:4e:9d:57:d9:e5:37:df:4a:90:ff:87:82:8e: e6:8d:42:95:3f:06:9a:20:d6:66:44:2c:75:c3:12:bd:da:27: 0a:35:18:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKEQxNDc5RUY2MDM0MUUzOUVDQTE3MkU0Mzc2NDQzQTQ3 MTk3NUNCRUYwHhcNMjUwODEyMTU1MjMxWhcNMjUwODE5MTU1MjMxWjAYMRYwFAYD VQQDEw02ODliNjMzZi00ZjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyp0A6uRGxyTixFvBkdd4jsjIECM0U6P2J/v2zoBnRKKdXc1wos/44Bli8dZ KpMfa3AnZzfSDosXKN8nVcGwaAsKk+YPigqbE6Ti1QcUL2EUNIOTQvW9Fu80dbF1 837CkYk0f4OVBKDko9pJY00O4/lqVcZajRYGEUfRBHxgXf03Qe1/4fYHYRSWdqq1 DC5O1/Q/7DroqBuEittOZHV8YjcBxIfqvj9yLNRdV1niq8tpU3CPQObD8wCgzwF+ J6VNnidGklms7skjPzLQy2y2qE+4Styvm+v9nByYIPHTnsFkj37UtqUi30dVusZh f9UoSqqPsm6Ojt3JYUVvizRiXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMjVty3 FQrpqfNfPhfVZuEEpcaJMB8GA1UdIwQYMBaAFNFHnvYDQeOeyhcuQ3ZEOkcZdcvv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS80ODJCQTE3MjlE MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1N0tGeTVEZGtRNlJ4bDF5 LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBVZWU5Z05CNDU3S0Z5NURka1E2UnhsMXktOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS80ODJCQTE3MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1 N0tGeTVEZGtRNlJ4bDF5LTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVvDQ3GXtRCSPIyx7BiBVO7Kwaw37IADjb0vE9uFiFaHDBptNS3cW/ xxL/eKtqKgZ8O2NUUB31iR4qF3kdD6ru4dUjVCqoLBMoZ5zRxSqt3GYk0uDBqcLd Hi3QKchVGT2pY4sEZJ86LxGTX3xIRK/NglWweNuRuNTREJ8ek4Ws4cg3zuuRlVWg HMcMAWHUujtUHdsP/fYst2LW91FCZVHTTu8nHoVK6xgxXEDzIE8jW4B+QRrqscbZ LXMPysIeUHBxGsShJqmrsaJlaicfnKN2An8twdXYcwxWk4ZL+E6dV9nlN99KkP+H go7mjUKVPwaaINZmRCx1wxK92icKNRgI -----END CERTIFICATE-----Generated at Wed Aug 13 19:07:16 2025 by rpki-client