$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft File: UzSpQuM2kLKBJhu645cTXb6kE5c.mft (raw, json) Hash identifier: p25QptYUQdr2d5EvMaAv65VyuAzU2JPIx7upVvAuWek= Subject key identifier: 50:19:0D:1D:7C:1B:AA:60:D6:52:0A:F9:67:1C:A6:7C:D9:F3:5A:DB Authority key identifier: 53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 Certificate issuer: /CN=A91DA022/serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Certificate serial: 0858 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft Manifest number: 0852 Signing time: Sat 02 Aug 2025 21:01:33 +0000 Manifest this update: Sat 02 Aug 2025 21:01:32 +0000 Manifest next update: Sat 09 Aug 2025 21:01:32 +0000 Files and hashes: 1: UzSpQuM2kLKBJhu645cTXb6kE5c.crl (hash: JewHhP9Wxb2YqejGlAQCWUnRWW2P6C+Zaa4vwbMlMik=) 2: DF3136A2CFF011EAB2F1D086C4F9AE02.roa (hash: P441cSLHyLoUjwh77ci4OGTBUeTeIRb4uG1co2Vb+f8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 21:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2136 (0x858) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA022, serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Validity Not Before: Aug 2 21:01:32 2025 GMT Not After : Aug 9 21:01:32 2025 GMT Subject: CN=688e7cac-8f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:20:48:dc:50:cf:24:77:4f:ba:31:aa:41:fc: f5:50:71:4f:8c:f5:08:ad:9c:ec:3a:db:40:23:f6: 92:ef:7b:23:11:4b:0a:6a:d4:02:4b:41:3f:52:db: 61:47:c0:25:9c:de:11:6e:5b:c5:5c:d6:ee:db:fb: a4:12:06:f3:64:ad:dd:9f:0d:73:d8:b3:a8:4f:41: c0:a3:69:c9:c9:14:b5:73:f0:5c:de:0a:ca:01:22: 80:d9:d1:8a:a1:e9:53:01:db:9e:c1:10:35:b4:ee: a7:a2:ae:49:33:10:37:29:54:9e:b3:bc:49:10:a1: 1b:c7:bf:ac:64:bd:ce:90:ed:3b:c9:7e:af:07:4e: e1:45:14:c1:56:9f:d7:1d:2e:a1:8c:73:88:a0:33: 93:44:72:0b:40:32:73:fd:6d:f1:b1:13:b8:25:b0: fd:43:66:42:5c:c7:71:83:34:74:fd:5e:b8:3c:6c: fa:6c:22:19:13:04:1a:bb:68:7c:07:aa:78:8c:e9: aa:4c:80:8f:18:7c:d0:74:1b:46:21:38:e7:e7:b4: e9:b6:11:15:66:a5:e2:50:f7:63:3d:58:e8:79:65: 9e:83:73:4d:0e:52:68:15:26:5a:91:20:49:af:cb: 35:32:d4:7e:2c:2f:42:57:4a:0c:83:59:6c:c9:e2: c3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:19:0D:1D:7C:1B:AA:60:D6:52:0A:F9:67:1C:A6:7C:D9:F3:5A:DB X509v3 Authority Key Identifier: keyid:53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:99:71:c6:63:8c:01:45:a2:fd:10:ae:99:ad:45:f5:d0:0e: a8:39:80:02:94:d4:61:15:1f:2a:62:26:0e:ce:de:fd:a1:ff: 8c:d1:b6:11:e1:f4:a7:dd:e7:f3:c0:ac:8c:6e:05:1c:e2:95: 05:a1:47:35:ad:cd:4f:84:c6:bd:f0:4d:51:03:00:c6:d4:e1: 97:1e:25:4b:58:09:bf:9d:40:cf:1d:20:4a:0f:96:35:71:0f: 01:3e:f8:3f:50:24:97:98:c6:df:1d:bb:14:b6:ec:ff:a8:55: 76:5d:70:94:16:d7:82:f7:b7:2f:e1:fe:4c:78:48:0a:8a:56: d8:21:4d:13:2e:7f:5b:57:78:8d:e1:25:51:7e:54:71:de:0d: 7e:22:2a:ce:db:bf:81:f8:26:72:6f:72:8d:b3:96:cf:25:87: 8e:21:cd:65:12:ad:3e:96:f7:b8:b1:f4:29:2a:6a:d0:49:68: d4:fa:2d:49:9c:7a:68:21:46:dd:67:91:6b:ba:d7:df:37:68: a0:1a:87:bd:7a:5a:80:82:0c:6a:c8:42:da:0b:76:47:82:aa: 27:ea:e7:15:7e:0c:72:58:4f:6f:e3:e3:b7:f7:b8:0a:a8:db: b6:5a:1a:86:13:7c:27:05:dd:8e:02:07:af:43:c1:5f:ea:9c: 9e:63:36:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwMjIxMTAvBgNVBAUTKDUzMzRBOTQyRTMzNjkwQjI4MTI2MUJCQUUzOTcxMzVE QkVBNDEzOTcwHhcNMjUwODAyMjEwMTMyWhcNMjUwODA5MjEwMTMyWjAYMRYwFAYD VQQDEw02ODhlN2NhYy04ZjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCBI3FDPJHdPujGqQfz1UHFPjPUIrZzsOttAI/aS73sjEUsKatQCS0E/Utth R8AlnN4RblvFXNbu2/ukEgbzZK3dnw1z2LOoT0HAo2nJyRS1c/Bc3grKASKA2dGK oelTAduewRA1tO6noq5JMxA3KVSes7xJEKEbx7+sZL3OkO07yX6vB07hRRTBVp/X HS6hjHOIoDOTRHILQDJz/W3xsRO4JbD9Q2ZCXMdxgzR0/V64PGz6bCIZEwQau2h8 B6p4jOmqTICPGHzQdBtGITjn57TpthEVZqXiUPdjPVjoeWWeg3NNDlJoFSZakSBJ r8s1MtR+LC9CV0oMg1lsyeLDiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAZDR18 G6pg1lIK+WccpnzZ81rbMB8GA1UdIwQYMBaAFFM0qULjNpCygSYbuuOXE12+pBOX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTAyMi85RDhEOTQ1OENG RUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtMS0JKaHU2NDVjVFhiNmtF NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6U3BRdU0ya0xLQkpodTY0NWNUWGI2a0U1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTAyMi85RDhEOTQ1OENGRUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtM S0JKaHU2NDVjVFhiNmtFNWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/mXHGY4wBRaL9EK6ZrUX10A6oOYAClNRhFR8qYiYOzt79of+M0bYR 4fSn3efzwKyMbgUc4pUFoUc1rc1PhMa98E1RAwDG1OGXHiVLWAm/nUDPHSBKD5Y1 cQ8BPvg/UCSXmMbfHbsUtuz/qFV2XXCUFteC97cv4f5MeEgKilbYIU0TLn9bV3iN 4SVRflRx3g1+IirO27+B+CZyb3KNs5bPJYeOIc1lEq0+lve4sfQpKmrQSWjU+i1J nHpoIUbdZ5FrutffN2igGoe9elqAggxqyELaC3ZHgqon6ucVfgxyWE9v4+O397gK qNu2WhqGE3wnBd2OAgevQ8Ff6pyeYzaA -----END CERTIFICATE-----Generated at Mon Aug 4 11:13:12 2025 by rpki-client