$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft File: UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft (raw, json) Hash identifier: mbMhx36mmAHNxjbT/2Rph0jcrY1GkZPDSLhkuP3V7nE= Subject key identifier: D8:1B:80:DC:7F:68:64:BB:AF:B0:B8:A2:31:38:AA:8F:01:CC:7B:D4 Authority key identifier: 50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5 Certificate issuer: /CN=A91F65FA/serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5 Certificate serial: 02B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft Manifest number: 02AF Signing time: Sat 09 Aug 2025 02:01:36 +0000 Manifest this update: Sat 09 Aug 2025 02:01:36 +0000 Manifest next update: Sat 16 Aug 2025 02:01:36 +0000 Files and hashes: 1: UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl (hash: CFfynexLJG4Tj7S9BTDQlpSPOyKHAByWxEzjkMyJEiU=) 2: 84365644062E11EDA95B3143C4F9AE02.roa (hash: zA/5PEhgjN/BvDw/xl3w8dV/RMsq+gylEcRkytviDsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 691 (0x2b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65FA, serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5 Validity Not Before: Aug 9 02:01:36 2025 GMT Not After : Aug 16 02:01:36 2025 GMT Subject: CN=6896ac00-4680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a1:7f:3c:80:50:4a:0a:5e:bf:57:52:13:e0: 57:7b:d4:c7:20:ce:13:85:f6:3a:6d:f0:05:4a:99: 37:a3:0c:37:90:b6:14:94:bc:c9:b2:4a:81:dd:d8: 8a:c0:08:df:34:01:fe:b2:a8:80:ec:e6:d0:0b:4b: 94:d7:73:cb:c1:88:31:80:24:ab:07:4c:14:a6:35: 81:b8:36:0b:9c:b0:58:d1:8f:ef:e7:c6:11:e3:76: d7:42:00:4c:a6:ca:2d:9d:76:20:08:f1:7f:a8:85: ac:ce:b0:11:52:5d:9b:47:ee:f2:2e:60:40:73:8b: e1:ca:80:dd:39:e7:43:c3:33:89:d1:04:f3:84:2a: 5d:0f:08:a5:df:a2:d1:61:9f:06:4c:64:45:48:cc: bf:f7:e4:85:81:db:7b:8a:94:c2:0e:c3:b1:83:a3: c2:b9:6c:93:3e:61:61:bb:1c:6b:2a:9b:ef:c1:7a: f1:58:cf:50:97:5d:63:d9:29:48:6a:37:97:d3:ea: 0e:8c:2a:c1:68:11:5e:67:6b:67:00:a5:5e:47:27: 53:14:62:11:d2:68:5f:7a:4e:27:2c:61:41:32:63: 28:4d:6c:b0:48:2a:1e:2e:a2:e5:31:1e:79:d7:48: 78:8d:be:f8:2c:ee:0c:61:75:01:0b:a1:5a:2a:f2: c8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1B:80:DC:7F:68:64:BB:AF:B0:B8:A2:31:38:AA:8F:01:CC:7B:D4 X509v3 Authority Key Identifier: keyid:50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:5b:6c:25:cd:17:99:b7:54:59:8f:70:d7:8f:b9:97:4d:90: e9:7e:4d:5f:65:dd:9e:a1:31:af:45:5c:54:95:e5:34:60:69: c2:9f:83:11:e9:b9:f9:83:5a:77:b7:f5:00:88:e7:0b:5c:a3: f2:f0:ab:f0:3f:7b:e7:0f:bd:70:b7:7c:b7:a0:18:75:51:7a: 70:ad:bc:54:18:b2:bc:71:8d:be:66:fa:ca:18:99:7f:09:b6: 1c:01:2e:9f:2e:40:51:48:32:12:94:2d:c1:47:c1:75:2f:da: 4a:60:4c:55:60:66:af:0c:df:9f:c1:3e:18:61:99:1b:90:56: 89:3a:84:a9:15:dc:39:7b:51:51:04:2a:4f:1d:2a:db:d0:f5: 5a:00:e2:ec:6c:e8:01:00:8f:a0:26:b0:63:1e:83:6d:dd:a8: 97:a4:76:01:ee:b0:a4:fc:9c:31:13:fb:1c:8f:51:f6:c7:08: c9:e3:df:f0:1b:42:ad:0a:fd:31:bf:37:c0:e6:12:d2:e5:26: f2:6c:dc:ca:8c:14:a5:28:68:e9:92:c5:76:62:be:d8:3b:ed: 5a:e6:57:3b:06:6c:aa:4b:08:e6:46:19:88:a4:e4:4f:80:08: c9:b3:98:2d:6c:33:53:33:45:c5:22:93:07:36:d2:ba:ab:6c: bc:7c:6b:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1RkExMTAvBgNVBAUTKDUwM0I5MjQxNDY0REY5N0QyQTAwOTk5NjNFNjMzRTEw ODdFRkREQzUwHhcNMjUwODA5MDIwMTM2WhcNMjUwODE2MDIwMTM2WjAYMRYwFAYD VQQDEw02ODk2YWMwMC00NjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqF/PIBQSgpev1dSE+BXe9THIM4ThfY6bfAFSpk3oww3kLYUlLzJskqB3diK wAjfNAH+sqiA7ObQC0uU13PLwYgxgCSrB0wUpjWBuDYLnLBY0Y/v58YR43bXQgBM psotnXYgCPF/qIWszrARUl2bR+7yLmBAc4vhyoDdOedDwzOJ0QTzhCpdDwil36LR YZ8GTGRFSMy/9+SFgdt7ipTCDsOxg6PCuWyTPmFhuxxrKpvvwXrxWM9Ql11j2SlI ajeX0+oOjCrBaBFeZ2tnAKVeRydTFGIR0mhfek4nLGFBMmMoTWywSCoeLqLlMR55 10h4jb74LO4MYXUBC6FaKvLIDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgbgNx/ aGS7r7C4ojE4qo8BzHvUMB8GA1UdIwQYMBaAFFA7kkFGTfl9KgCZlj5jPhCH793F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVGQS85QTcwMjYyMjA2 MkIxMUVEQUExRUVDM0RDNEY5QUUwMi9VRHVTUVVaTi1YMHFBSm1XUG1NLUVJZnYz Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VEdVNRVVpOLVgwcUFKbVdQbU0tRUlmdjNjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVGQS85QTcwMjYyMjA2MkIxMUVEQUExRUVDM0RDNEY5QUUwMi9VRHVTUVVaTi1Y MHFBSm1XUG1NLUVJZnYzY1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAW2wlzReZt1RZj3DXj7mXTZDpfk1fZd2eoTGvRVxUleU0YGnCn4MR 6bn5g1p3t/UAiOcLXKPy8KvwP3vnD71wt3y3oBh1UXpwrbxUGLK8cY2+ZvrKGJl/ CbYcAS6fLkBRSDISlC3BR8F1L9pKYExVYGavDN+fwT4YYZkbkFaJOoSpFdw5e1FR BCpPHSrb0PVaAOLsbOgBAI+gJrBjHoNt3aiXpHYB7rCk/JwxE/scj1H2xwjJ49/w G0KtCv0xvzfA5hLS5SbybNzKjBSlKGjpksV2Yr7YO+1a5lc7BmyqSwjmRhmIpORP gAjJs5gtbDNTM0XFIpMHNtK6q2y8fGt1 -----END CERTIFICATE-----Generated at Sun Aug 10 13:52:16 2025 by rpki-client