$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft File: uesVSGZ3c32yc5_WVGKu55BhaMI.mft (raw, json) Hash identifier: fX35l/YoYi63AOx1bdWAFWAudue5uazVWoj9tDomy/Q= Subject key identifier: 4D:07:29:20:A7:19:5B:67:89:FE:32:7C:2F:33:88:1D:CC:44:4D:DA Authority key identifier: B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2 Certificate issuer: /CN=A91DA649/serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2 Certificate serial: 0C3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft Manifest number: 0C35 Signing time: Sun 10 Aug 2025 18:37:55 +0000 Manifest this update: Sun 10 Aug 2025 18:37:55 +0000 Manifest next update: Sun 17 Aug 2025 18:37:55 +0000 Files and hashes: 1: uesVSGZ3c32yc5_WVGKu55BhaMI.crl (hash: tqGTTJET2BPluu06csK5g47gfXdVRlUyiBali4kKoG4=) 2: C4391160305611EABE7DF272C4F9AE02.roa (hash: 3CS63lxTVcr1lDEM5PMs5CO7XzdKCmryVXHiyIzoBgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3133 (0xc3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA649, serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2 Validity Not Before: Aug 10 18:37:55 2025 GMT Not After : Aug 17 18:37:55 2025 GMT Subject: CN=6898e703-e330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:82:cc:81:96:50:e4:52:75:16:3f:39:a3:7c: 61:6f:7a:c6:c8:09:cc:47:e8:85:50:60:20:70:f7: 19:41:81:f5:8b:b4:ee:f6:bf:ba:4e:e1:f7:8f:3b: 9a:62:fe:a6:99:41:02:1e:80:d5:6e:f9:b2:1e:99: 50:e3:4c:ea:6d:c0:9b:d6:54:6c:bc:32:7b:d7:01: 73:d1:27:2f:29:46:d8:80:b8:2b:dc:8d:c3:e6:6e: e5:7b:35:8a:99:3e:e3:47:b2:21:00:f0:29:a3:41: 29:2c:56:71:ab:c0:3d:fc:19:97:f3:d6:87:a2:1d: 7a:58:2d:d9:d1:a1:42:43:bc:52:06:f7:2d:5e:8e: 5d:9e:72:5a:99:c0:4d:f7:77:9c:67:a6:fc:a5:08: ce:fe:2f:89:83:b5:cb:a8:a6:74:e0:fe:09:41:23: d9:6f:b2:d3:d7:f4:f2:53:2c:25:22:f7:32:dc:8e: cf:d9:f6:10:37:c2:e9:f5:dc:52:8d:11:03:00:78: 2c:1c:56:54:57:d8:59:b8:09:55:a4:ab:7b:7b:76: 40:55:e0:20:31:ea:33:23:f2:70:cf:d9:e0:43:65: e4:da:50:d8:8b:a8:b7:b1:43:45:f7:c3:52:3d:fa: c2:7a:09:dc:51:66:59:9a:79:a4:04:eb:27:72:e9: 54:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:07:29:20:A7:19:5B:67:89:FE:32:7C:2F:33:88:1D:CC:44:4D:DA X509v3 Authority Key Identifier: keyid:B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:84:c6:a0:17:4a:33:91:85:74:69:2e:9e:f1:2a:01:68:d3: 29:39:6c:4d:c8:f2:6b:2c:95:f2:4c:81:f0:c2:08:5f:54:a6: 26:54:d1:dd:59:3f:6a:c7:93:9f:8b:9d:cb:33:55:e7:d4:a5: d7:c1:16:d8:16:6f:ed:6e:e8:2a:84:ae:34:b0:8a:a9:19:c2: 82:0c:f6:49:a2:7c:d8:00:f7:a3:e6:54:e9:3c:f3:b2:3f:85: e5:3c:7b:2a:69:68:dc:99:b9:eb:5a:0a:fd:20:e6:c6:24:70: 17:5b:9b:c1:e4:d0:9d:0d:23:0d:35:d0:ea:77:ec:b4:fa:a0: f4:99:81:91:18:5c:ce:3a:2b:ad:de:e2:14:5c:df:35:9d:ce: 17:d6:ed:e4:fc:b7:28:d0:d1:9a:f0:7d:03:ac:d5:5c:a2:0c: d6:c7:04:90:92:fd:45:71:71:47:da:45:58:b1:9b:93:bf:e7: 55:c2:bf:cb:77:5b:a3:79:2e:5c:dc:01:77:f8:77:86:62:7a: 0a:9b:f1:3f:03:c9:46:ed:64:d5:6a:3d:fd:c2:f8:ad:34:11: 8a:ff:ea:e4:f6:d9:58:7c:86:9a:d2:c6:12:e3:ed:74:39:86: 5e:de:05:96:91:17:d8:c8:20:3a:cd:68:0d:0a:1e:41:fe:e4: a2:9d:6e:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE2NDkxMTAvBgNVBAUTKEI5RUIxNTQ4NjY3NzczN0RCMjczOUZENjU0NjJBRUU3 OTA2MTY4QzIwHhcNMjUwODEwMTgzNzU1WhcNMjUwODE3MTgzNzU1WjAYMRYwFAYD VQQDEw02ODk4ZTcwMy1lMzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4LMgZZQ5FJ1Fj85o3xhb3rGyAnMR+iFUGAgcPcZQYH1i7Tu9r+6TuH3jzua Yv6mmUECHoDVbvmyHplQ40zqbcCb1lRsvDJ71wFz0ScvKUbYgLgr3I3D5m7lezWK mT7jR7IhAPApo0EpLFZxq8A9/BmX89aHoh16WC3Z0aFCQ7xSBvctXo5dnnJamcBN 93ecZ6b8pQjO/i+Jg7XLqKZ04P4JQSPZb7LT1/TyUywlIvcy3I7P2fYQN8Lp9dxS jREDAHgsHFZUV9hZuAlVpKt7e3ZAVeAgMeozI/Jwz9ngQ2Xk2lDYi6i3sUNF98NS PfrCegncUWZZmnmkBOsnculU+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0HKSCn GVtnif4yfC8ziB3MRE3aMB8GA1UdIwQYMBaAFLnrFUhmd3N9snOf1lRirueQYWjC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTY0OS81RDk3Nzc0QzBG NTExMUVBOEM0QTVDMEFDNEY5QUUwMi91ZXNWU0daM2MzMnljNV9XVkdLdTU1Qmhh TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vlc1ZTR1ozYzMyeWM1X1dWR0t1NTVCaGFNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTY0OS81RDk3Nzc0QzBGNTExMUVBOEM0QTVDMEFDNEY5QUUwMi91ZXNWU0daM2Mz MnljNV9XVkdLdTU1QmhhTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmhMagF0ozkYV0aS6e8SoBaNMpOWxNyPJrLJXyTIHwwghfVKYmVNHd WT9qx5Ofi53LM1Xn1KXXwRbYFm/tbugqhK40sIqpGcKCDPZJonzYAPej5lTpPPOy P4XlPHsqaWjcmbnrWgr9IObGJHAXW5vB5NCdDSMNNdDqd+y0+qD0mYGRGFzOOiut 3uIUXN81nc4X1u3k/Lco0NGa8H0DrNVcogzWxwSQkv1FcXFH2kVYsZuTv+dVwr/L d1ujeS5c3AF3+HeGYnoKm/E/A8lG7WTVaj39wvitNBGK/+rk9tlYfIaa0sYS4+10 OYZe3gWWkRfYyCA6zWgNCh5B/uSinW4C -----END CERTIFICATE-----Generated at Sun Aug 10 21:02:02 2025 by rpki-client