$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft File: UgGonTDEgplFBBjJVrh3JJcG6Vc.mft (raw, json) Hash identifier: 0fyWWzBggKUy0e9jl+Q+LkQcm+TYulxji8pDnT7oTp8= Subject key identifier: 30:4A:02:B8:D0:BE:1C:14:29:DC:AC:13:9D:F4:A9:DE:87:50:FA:E1 Authority key identifier: 52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57 Certificate issuer: /CN=A91E7E94/serialNumber=5201A89D30C48299450418C956B877249706E957 Certificate serial: 0554 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft Manifest number: 0550 Signing time: Fri 08 Aug 2025 23:51:19 +0000 Manifest this update: Fri 08 Aug 2025 23:51:19 +0000 Manifest next update: Fri 15 Aug 2025 23:51:19 +0000 Files and hashes: 1: UgGonTDEgplFBBjJVrh3JJcG6Vc.crl (hash: FsoXxjvy8uUWSHLb9WOCGoYXwi5M0N2UK4o06nE442w=) 2: FAF4A0E0FB3211EB967B1759C4F9AE02.roa (hash: 8p1P4mNUhhk/yC7+ElhDZdRf1VN2ly1Yqll2ITw0L78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1364 (0x554) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E94, serialNumber=5201A89D30C48299450418C956B877249706E957 Validity Not Before: Aug 8 23:51:19 2025 GMT Not After : Aug 15 23:51:19 2025 GMT Subject: CN=68968d77-5f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:16:8b:a1:c8:51:a1:9f:d4:f3:23:db:39:e0: 3c:0f:ad:b4:19:7a:2d:e7:d9:29:0d:9d:5a:e2:aa: 06:50:f1:a4:57:fa:73:e4:ac:0c:19:2a:dd:f1:ce: 44:1e:3b:96:86:cd:d5:e2:d6:4d:fa:c7:27:96:6c: 52:e5:bf:4e:2d:3e:a3:de:cd:40:00:65:dc:11:fe: f4:25:03:73:0f:c0:41:8e:7b:5b:3c:fb:12:74:08: 09:66:49:02:04:6c:37:73:53:5e:46:bb:cb:84:0d: cf:32:b0:8d:0a:d9:01:54:60:df:88:c4:0c:86:1e: 82:8f:d0:83:0e:cd:41:91:6b:36:3b:de:d1:20:89: 6a:1b:1a:73:62:2e:9a:cb:74:91:a0:52:23:f3:77: 70:7d:05:9e:07:ef:78:a9:9f:8c:3b:c2:52:63:32: 0d:3e:df:58:57:2b:24:09:dd:8f:5a:9d:d3:a3:81: 37:f5:e7:52:0d:f4:c6:3f:a0:fc:8d:68:85:e9:1f: c2:71:71:e1:3e:9c:48:20:71:97:f1:20:cc:1b:85: 73:39:2d:a1:26:aa:ab:9e:58:ae:c4:7a:28:c0:aa: 0f:fd:ed:de:2f:17:c0:10:08:90:32:a4:08:44:20: e0:fb:58:c0:da:f1:c8:16:fb:dd:c0:21:19:11:43: 90:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4A:02:B8:D0:BE:1C:14:29:DC:AC:13:9D:F4:A9:DE:87:50:FA:E1 X509v3 Authority Key Identifier: keyid:52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:56:e1:40:f2:20:2d:0a:da:0a:3d:88:02:d6:55:93:71:c6: 89:c8:d8:3a:73:15:72:cf:c9:5c:b8:09:2f:2c:bb:36:63:a5: 0a:17:77:14:c4:0f:e1:5c:1f:0d:da:00:e6:ff:71:83:13:d6: e3:db:f2:2f:c5:67:2e:fd:0f:d6:92:f6:46:48:22:af:eb:1f: 86:97:ad:6a:c5:4e:7a:53:b6:1a:ce:cd:d7:44:fe:35:b3:77: a2:82:15:d2:9d:5b:8e:ac:10:78:74:a6:f9:10:d7:40:80:63: 9e:40:0f:24:43:78:b2:7d:0b:ea:cf:ae:22:fa:d0:ab:09:22: 25:9d:74:b2:7e:6a:5c:08:6a:2e:ce:0f:bc:9b:51:f9:0f:87: a7:43:7f:90:9b:25:f4:fc:9f:39:a8:97:3c:dd:58:6f:1f:66: b3:6e:e9:e8:8c:e7:36:6f:a7:69:2e:03:15:9e:47:05:7c:73: 4d:4e:a1:03:f4:61:7d:bb:8e:a7:1d:9e:f7:0d:98:68:c0:df: 9b:85:31:6e:3e:f9:1d:b4:86:69:45:69:da:cb:73:22:d1:23: 08:2c:9a:22:6e:12:e3:5c:88:4f:e4:ee:cf:5f:39:8f:6d:0c: 36:89:bd:55:db:3e:2c:b2:f2:62:7e:e6:31:85:80:b5:6d:7e: 2d:16:3e:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFOTQxMTAvBgNVBAUTKDUyMDFBODlEMzBDNDgyOTk0NTA0MThDOTU2Qjg3NzI0 OTcwNkU5NTcwHhcNMjUwODA4MjM1MTE5WhcNMjUwODE1MjM1MTE5WjAYMRYwFAYD VQQDEw02ODk2OGQ3Ny01ZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RaLochRoZ/U8yPbOeA8D620GXot59kpDZ1a4qoGUPGkV/pz5KwMGSrd8c5E HjuWhs3V4tZN+scnlmxS5b9OLT6j3s1AAGXcEf70JQNzD8BBjntbPPsSdAgJZkkC BGw3c1NeRrvLhA3PMrCNCtkBVGDfiMQMhh6Cj9CDDs1BkWs2O97RIIlqGxpzYi6a y3SRoFIj83dwfQWeB+94qZ+MO8JSYzINPt9YVyskCd2PWp3To4E39edSDfTGP6D8 jWiF6R/CcXHhPpxIIHGX8SDMG4VzOS2hJqqrnliuxHoowKoP/e3eLxfAEAiQMqQI RCDg+1jA2vHIFvvdwCEZEUOQ4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBKArjQ vhwUKdysE530qd6HUPrhMB8GA1UdIwQYMBaAFFIBqJ0wxIKZRQQYyVa4dySXBulX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U5NC9BMkE3MEM1QUZC MkYxMUVCQTg0MDlFNTRDNEY5QUUwMi9VZ0dvblRERWdwbEZCQmpKVnJoM0pKY0c2 VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VnR29uVERFZ3BsRkJCakpWcmgzSkpjRzZWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0U5NC9BMkE3MEM1QUZCMkYxMUVCQTg0MDlFNTRDNEY5QUUwMi9VZ0dvblRERWdw bEZCQmpKVnJoM0pKY0c2VmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMVuFA8iAtCtoKPYgC1lWTccaJyNg6cxVyz8lcuAkvLLs2Y6UKF3cU xA/hXB8N2gDm/3GDE9bj2/IvxWcu/Q/WkvZGSCKv6x+Gl61qxU56U7Yazs3XRP41 s3eighXSnVuOrBB4dKb5ENdAgGOeQA8kQ3iyfQvqz64i+tCrCSIlnXSyfmpcCGou zg+8m1H5D4enQ3+QmyX0/J85qJc83VhvH2azbunojOc2b6dpLgMVnkcFfHNNTqED 9GF9u46nHZ73DZhowN+bhTFuPvkdtIZpRWnay3Mi0SMILJoibhLjXIhP5O7PXzmP bQw2ib1V2z4ssvJifuYxhYC1bX4tFj6y -----END CERTIFICATE-----Generated at Sat Aug 9 14:19:05 2025 by rpki-client