$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft File: uXgEM1AwWT1tlle8RdvRFLEpHSg.mft (raw, json) Hash identifier: 1w+KKk/GhaQ+mhqnfcEpNEk6psnjSgD9MVahb1bCvdI= Subject key identifier: 3F:D2:12:BC:CE:5F:91:A5:10:B2:BD:D5:33:BE:7E:42:BC:7A:20:8D Authority key identifier: B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28 Certificate issuer: /CN=A91E9310/serialNumber=B97804335030593D6D9657BC45DBD114B1291D28 Certificate serial: 0477 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft Manifest number: 0473 Signing time: Thu 07 Aug 2025 00:38:15 +0000 Manifest this update: Thu 07 Aug 2025 00:38:14 +0000 Manifest next update: Thu 14 Aug 2025 00:38:14 +0000 Files and hashes: 1: uXgEM1AwWT1tlle8RdvRFLEpHSg.crl (hash: 6FPWKedXsVOGtBwD+Ihus/406n/sAAoNc6azvX3d/DI=) 2: E8E2B0AE546511EC8B4A436BC4F9AE02.roa (hash: cL6ZzRiCZvUCUHOXKwXrsJvsEPdauZgSSVWIQ69Rr+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 00:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1143 (0x477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9310, serialNumber=B97804335030593D6D9657BC45DBD114B1291D28 Validity Not Before: Aug 7 00:38:14 2025 GMT Not After : Aug 14 00:38:14 2025 GMT Subject: CN=6893f577-24dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:33:dd:b6:b6:cc:00:0e:6d:e7:65:fd:79:36: 39:3d:06:eb:b4:c9:f8:f1:56:6c:97:a1:a5:04:72: ad:2f:b9:a1:79:b2:bb:af:0d:65:fa:cf:97:01:cd: 4e:da:00:fb:5e:a7:70:15:0f:cd:3d:7b:3c:8f:80: 25:57:d1:38:45:fc:28:00:60:f2:fc:59:09:30:ca: 79:71:a8:89:36:03:2c:3a:04:1c:81:1d:58:51:90: 12:31:55:b8:98:3f:fb:d9:05:1d:36:23:db:c3:b5: 0e:75:9d:7b:6f:cb:ee:f5:6e:3d:3e:4c:73:a5:7d: 13:fd:97:c6:9c:f9:d6:5b:9e:04:9b:46:46:38:32: ac:69:2b:02:29:bc:be:df:bd:b1:f5:64:58:df:58: 03:7a:92:16:18:a7:cd:3c:02:a0:f1:f2:3f:cf:a1: 84:58:3a:45:3c:1f:86:28:e1:b0:35:db:4e:95:84: 2c:52:b8:7d:81:8d:56:9a:59:3b:29:9c:c7:4e:f7: d9:9f:ef:56:f8:0f:3e:0a:e6:88:ed:08:b3:c5:5f: 06:05:ed:b4:c0:ad:56:12:04:40:9d:9c:17:91:dc: 04:ef:4f:87:a3:5f:6f:88:ae:88:a0:c0:98:5c:8f: f8:70:7e:cb:e6:45:5c:82:cb:4e:65:b1:c9:d9:5a: 54:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D2:12:BC:CE:5F:91:A5:10:B2:BD:D5:33:BE:7E:42:BC:7A:20:8D X509v3 Authority Key Identifier: keyid:B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:19:30:21:ef:5a:8f:1a:25:d1:8e:2e:a2:9e:e7:15:80:18: 0b:13:10:79:21:94:9c:a7:60:ed:d2:ae:b3:ea:ec:ad:8b:de: e4:62:45:1f:02:be:50:07:f0:02:b2:8a:2e:56:04:1f:a6:24: af:d6:1c:4a:76:2d:bf:2f:24:4a:ca:57:a6:35:42:57:c6:cf: bb:5d:82:f2:24:3c:a0:bd:2f:c7:5b:aa:2f:5c:69:0e:3f:9f: 25:fe:e1:cd:1b:33:ea:93:a7:b6:63:06:25:e7:e5:b1:8b:12: 09:c6:51:11:86:f0:bd:93:94:3d:af:66:f1:9b:70:9f:57:17: 85:e2:af:5d:b4:11:82:cc:96:58:46:64:2b:b3:8e:b4:1d:2e: 5f:44:4a:74:e9:eb:ca:10:02:bb:91:16:4f:29:62:27:c3:83: cc:a6:81:79:d8:52:8f:4d:cb:5c:f6:83:d2:ab:e2:a9:ab:c1: 5c:66:af:3c:70:43:4a:02:7d:5e:64:24:47:ec:56:3b:22:cc: ad:bc:3c:f4:e5:cf:90:57:56:af:18:77:3e:9a:78:7c:51:79: 95:60:df:9b:08:3e:13:58:46:de:f1:1a:1c:95:ce:d7:c4:18: 49:f3:98:4a:f8:ec:0b:2e:bc:53:89:5b:ac:7c:64:4a:fa:4c: 93:a0:15:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkzMTAxMTAvBgNVBAUTKEI5NzgwNDMzNTAzMDU5M0Q2RDk2NTdCQzQ1REJEMTE0 QjEyOTFEMjgwHhcNMjUwODA3MDAzODE0WhcNMjUwODE0MDAzODE0WjAYMRYwFAYD VQQDEw02ODkzZjU3Ny0yNGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTPdtrbMAA5t52X9eTY5PQbrtMn48VZsl6GlBHKtL7mhebK7rw1l+s+XAc1O 2gD7XqdwFQ/NPXs8j4AlV9E4RfwoAGDy/FkJMMp5caiJNgMsOgQcgR1YUZASMVW4 mD/72QUdNiPbw7UOdZ17b8vu9W49PkxzpX0T/ZfGnPnWW54Em0ZGODKsaSsCKby+ 372x9WRY31gDepIWGKfNPAKg8fI/z6GEWDpFPB+GKOGwNdtOlYQsUrh9gY1Wmlk7 KZzHTvfZn+9W+A8+CuaI7QizxV8GBe20wK1WEgRAnZwXkdwE70+Ho19viK6IoMCY XI/4cH7L5kVcgstOZbHJ2VpUWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/SErzO X5GlELK91TO+fkK8eiCNMB8GA1UdIwQYMBaAFLl4BDNQMFk9bZZXvEXb0RSxKR0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTMxMC9EMUIxRDM0NDU0 NjMxMUVDQThGQTQ5NkFDNEY5QUUwMi91WGdFTTFBd1dUMXRsbGU4UmR2UkZMRXBI U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYZ0VNMUF3V1QxdGxsZThSZHZSRkxFcEhTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTMxMC9EMUIxRDM0NDU0NjMxMUVDQThGQTQ5NkFDNEY5QUUwMi91WGdFTTFBd1dU MXRsbGU4UmR2UkZMRXBIU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRGTAh71qPGiXRji6inucVgBgLExB5IZScp2Dt0q6z6uyti97kYkUf Ar5QB/ACsoouVgQfpiSv1hxKdi2/LyRKylemNUJXxs+7XYLyJDygvS/HW6ovXGkO P58l/uHNGzPqk6e2YwYl5+WxixIJxlERhvC9k5Q9r2bxm3CfVxeF4q9dtBGCzJZY RmQrs460HS5fREp06evKEAK7kRZPKWInw4PMpoF52FKPTctc9oPSq+Kpq8FcZq88 cENKAn1eZCRH7FY7IsytvDz05c+QV1avGHc+mnh8UXmVYN+bCD4TWEbe8Roclc7X xBhJ85hK+OwLLrxTiVusfGRK+kyToBVd -----END CERTIFICATE-----Generated at Fri Aug 8 20:48:14 2025 by rpki-client