$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft File: UdUxrvegh8GOMB4OaixjcbJkw-g.mft (raw, json) Hash identifier: Ec/jWAzFc0Jp52tEiKrkPLdPCEnNpt2W9WahZNzPqxI= Subject key identifier: 73:9C:37:30:AC:24:6D:8E:7A:67:C7:B7:62:CA:8C:A1:D7:D3:B6:C5 Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft Manifest number: 01D8 Signing time: Mon 11 Aug 2025 03:07:44 +0000 Manifest this update: Mon 11 Aug 2025 03:07:44 +0000 Manifest next update: Mon 18 Aug 2025 03:07:44 +0000 Files and hashes: 1: UdUxrvegh8GOMB4OaixjcbJkw-g.crl (hash: P/FyAqhMOc+SPXnD8ujBcMPH7SBju3yLd2RyAzPu2o4=) 2: 891E633CB7F111EFA500D67CC4F9AE02.roa (hash: O4FUSN5LS+aElz5VOCMijpDVd7ugBsWS/neaZYIhjDU=) 3: 7D215B2CC3C111EE8F83CE1AC4F9AE02.roa (hash: WiLdUkxZVUsyLYaXHR0WIvWbfxTpV9CYC+KkS9rRgFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 03:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Validity Not Before: Aug 11 03:07:44 2025 GMT Not After : Aug 18 03:07:44 2025 GMT Subject: CN=68995e80-df41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ec:35:ca:20:c6:56:0f:f3:b7:bc:12:e7:27: 49:83:35:be:0b:cd:1c:ff:41:9f:5f:5d:8d:54:84: 99:44:bc:31:4b:76:71:ff:58:1d:c2:2d:99:1e:99: 29:f6:1b:47:7f:76:48:12:72:67:67:92:98:ab:9b: cb:7a:ae:9c:b2:e4:27:f4:b6:fa:b2:0a:a1:b8:12: e3:be:51:45:81:69:84:c6:e2:66:8c:64:7d:6c:92: 2d:3f:99:41:d9:18:89:f9:86:69:9e:63:ba:38:96: 4b:44:05:61:90:f9:fc:71:27:59:f7:f8:b1:ff:ea: b0:02:2f:43:ab:10:05:c9:c8:48:58:d0:51:ce:06: c5:4a:3c:d4:c8:1b:d8:4c:04:b9:59:7c:b0:5f:76: d0:3b:c7:ed:fb:1f:4a:17:41:bc:01:a7:b4:13:d6: 4e:8c:1a:26:62:e7:80:37:9b:30:20:e4:1f:cc:4e: c0:51:50:64:34:58:05:d9:4b:0b:65:f0:3a:5c:14: 6f:86:ce:a8:5a:ff:55:68:7e:b7:cf:e2:f4:f0:26: 35:d6:e4:ed:39:a3:cc:04:72:a4:b0:23:0a:c4:18: 56:25:3d:bf:2e:76:26:df:3a:ed:d5:a8:22:69:32: eb:6a:45:71:d7:5f:31:19:f4:86:82:d9:83:b6:80: 56:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9C:37:30:AC:24:6D:8E:7A:67:C7:B7:62:CA:8C:A1:D7:D3:B6:C5 X509v3 Authority Key Identifier: keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b9:2a:88:48:08:97:7a:12:dc:0e:35:1b:8d:1f:bc:5e:78: f3:05:40:8f:78:6a:85:90:f4:12:36:c4:c4:77:d0:3f:8b:f4: 0d:36:65:14:a6:e6:74:a7:11:0d:65:32:cc:c5:d4:04:f8:ab: 05:da:aa:20:08:65:9a:17:88:2c:e5:ac:f7:2b:b4:12:17:75: 44:13:1e:23:3d:0c:a4:fe:f0:3f:84:a3:06:bb:da:43:d2:23: cd:f4:eb:e4:8f:34:c3:67:8c:05:68:cf:83:62:9d:30:89:5e: 35:bd:dd:8e:45:c5:a8:35:10:6c:d7:ff:8b:d3:b9:c1:06:75: 28:70:c1:49:e1:c1:02:2d:ce:95:d0:e6:31:38:3a:a7:12:15: cc:3c:17:83:66:a4:e4:27:f7:9c:a4:32:0b:4f:67:6b:18:85: 68:00:0c:23:21:38:ba:d6:ee:f4:3b:08:25:37:5e:68:4c:c2: 47:da:d3:36:07:40:3b:a1:57:85:19:80:b2:32:89:69:0c:d4: fb:20:cc:07:a6:35:88:da:a1:0c:02:58:cf:9f:4e:38:82:ac: 19:cc:9d:fb:90:12:c1:24:4f:31:98:7a:7f:b8:94:a8:25:f8: 33:95:03:76:ee:46:d2:23:19:d3:b2:4f:27:8f:f4:da:ae:03: 31:07:71:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZBRkYxMTAvBgNVBAUTKDUxRDUzMUFFRjdBMDg3QzE4RTMwMUUwRTZBMkM2Mzcx QjI2NEMzRTgwHhcNMjUwODExMDMwNzQ0WhcNMjUwODE4MDMwNzQ0WjAYMRYwFAYD VQQDEw02ODk5NWU4MC1kZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArew1yiDGVg/zt7wS5ydJgzW+C80c/0GfX12NVISZRLwxS3Zx/1gdwi2ZHpkp 9htHf3ZIEnJnZ5KYq5vLeq6csuQn9Lb6sgqhuBLjvlFFgWmExuJmjGR9bJItP5lB 2RiJ+YZpnmO6OJZLRAVhkPn8cSdZ9/ix/+qwAi9DqxAFychIWNBRzgbFSjzUyBvY TAS5WXywX3bQO8ft+x9KF0G8Aae0E9ZOjBomYueAN5swIOQfzE7AUVBkNFgF2UsL ZfA6XBRvhs6oWv9VaH63z+L08CY11uTtOaPMBHKksCMKxBhWJT2/LnYm3zrt1agi aTLrakVx118xGfSGgtmDtoBWCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOcNzCs JG2OemfHt2LKjKHX07bFMB8GA1UdIwQYMBaAFFHVMa73oIfBjjAeDmosY3GyZMPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkFGRi9EMDYxMUYwNEND NDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4R09NQjRPYWl4amNiSmt3 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkVXhydmVnaDhHT01CNE9haXhqY2JKa3ctZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkFGRi9EMDYxMUYwNENDNDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4 R09NQjRPYWl4amNiSmt3LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtuSqISAiXehLcDjUbjR+8XnjzBUCPeGqFkPQSNsTEd9A/i/QNNmUU puZ0pxENZTLMxdQE+KsF2qogCGWaF4gs5az3K7QSF3VEEx4jPQyk/vA/hKMGu9pD 0iPN9OvkjzTDZ4wFaM+DYp0wiV41vd2ORcWoNRBs1/+L07nBBnUocMFJ4cECLc6V 0OYxODqnEhXMPBeDZqTkJ/ecpDILT2drGIVoAAwjITi61u70OwglN15oTMJH2tM2 B0A7oVeFGYCyMolpDNT7IMwHpjWI2qEMAljPn044gqwZzJ37kBLBJE8xmHp/uJSo JfgzlQN27kbSIxnTsk8nj/TargMxB3Gb -----END CERTIFICATE-----Generated at Wed Aug 13 00:28:01 2025 by rpki-client