$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft File: UgupTND7nnwUDfvAzFi5PPVMIvM.mft (raw, json) Hash identifier: qjcI8Z1BEqXjj9mNXpyT+fp8j5q03GFFsBbla/YJ67c= Subject key identifier: F0:6E:38:51:97:D7:ED:B7:D4:8D:E7:CB:A4:FE:1A:55:1D:B0:CA:13 Authority key identifier: 52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3 Certificate issuer: /CN=A91F8981/serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft Manifest number: AB Signing time: Thu 07 Aug 2025 06:41:59 +0000 Manifest this update: Thu 07 Aug 2025 06:41:59 +0000 Manifest next update: Thu 14 Aug 2025 06:41:59 +0000 Files and hashes: 1: UgupTND7nnwUDfvAzFi5PPVMIvM.crl (hash: hM5KhEGNioDZswewa4rx66HNGj8fhpNNSuFWaMqVjyU=) 2: D79D112E6C7F11EF92105459C4F9AE02.roa (hash: HfxBV0ZJ9ixuR1eesZIIiZUZrrfXBYTU4Z7Ry5c0lbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8981, serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3 Validity Not Before: Aug 7 06:41:59 2025 GMT Not After : Aug 14 06:41:59 2025 GMT Subject: CN=68944ab7-f93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:df:2a:37:8e:32:d5:d0:68:22:fd:21:63:ba: 23:e3:2c:19:90:a3:a5:1b:d0:79:d8:52:d7:73:a4: a8:cc:1a:11:4e:07:26:e1:a8:72:e1:58:6b:35:41: c3:1c:3c:f3:ed:01:cb:e6:c3:0b:18:1e:89:10:0e: 73:b4:bf:6e:f5:d4:b5:d0:67:2f:23:e4:12:60:c2: b2:cf:4f:2e:c3:d0:ca:59:cd:fc:05:4e:ef:c0:8c: fb:41:2d:77:9c:30:6d:9b:e1:09:90:21:e5:7c:61: 22:9f:e7:9f:a4:2d:88:ac:86:2f:d0:cd:97:eb:6f: 54:85:fa:49:93:f9:b0:d6:12:a5:95:88:63:4d:a3: 30:a4:67:14:14:3a:6f:a0:5c:c9:f9:fa:8f:4d:2a: f8:99:f0:11:ed:2d:9f:16:3e:2b:7d:c6:ad:28:93: f7:54:7d:8c:05:fb:1a:9a:48:c8:65:66:2e:f3:39: 81:26:2d:3c:95:66:79:31:63:8d:c0:b5:ea:bc:8f: 9b:0e:af:17:f4:36:f8:10:d6:81:b9:b9:b4:4f:e1: 87:2e:78:96:1a:79:f2:40:05:6a:7c:18:5b:3b:d2: 16:8b:1b:69:db:2b:47:b0:67:e4:77:c0:15:5c:1f: a6:39:25:65:d8:89:90:45:0f:50:e8:6d:ff:fc:a2: dc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6E:38:51:97:D7:ED:B7:D4:8D:E7:CB:A4:FE:1A:55:1D:B0:CA:13 X509v3 Authority Key Identifier: keyid:52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:fb:79:d3:d2:10:3c:a3:29:96:03:0c:71:e7:b9:a1:4a:4d: 8e:ee:9d:2d:9b:7b:37:37:26:a3:45:71:98:05:7b:72:b8:c9: 9a:f3:64:a7:15:8a:e3:e2:80:61:7f:18:f5:e3:52:e1:43:39: ed:9c:32:29:3e:bf:ea:c5:dd:f8:f2:b2:1e:8b:4e:12:c5:40: cb:99:04:fd:cd:75:05:06:0c:20:1b:19:56:4b:65:93:0b:08: 3d:39:f2:1a:98:06:29:8b:86:04:2a:14:ee:bd:17:f8:7c:38: 0d:c4:f6:3b:03:dc:61:43:9b:d6:a7:a6:40:2a:f4:8e:04:15: 65:fe:ba:01:c6:51:f7:24:e0:50:14:77:e9:d0:fd:5d:c2:ef: a8:1a:51:0a:ba:26:e5:a1:5e:7a:4e:2c:87:32:b0:5c:65:02: bb:56:1f:5b:05:81:35:2f:a3:b9:99:0a:04:4a:42:90:f6:a6: 2a:0d:5c:63:45:b7:20:d1:f8:f0:a6:66:f0:1b:5d:38:d6:81: ea:66:2d:f4:ee:f3:ed:d8:50:c1:b7:af:89:f1:fc:73:ef:4a: 13:48:e9:a2:6f:99:88:d7:ea:a7:4a:ff:41:b0:76:47:6b:6a: 8b:97:e0:f2:18:62:a0:2d:36:31:6d:31:ae:5d:eb:5d:cc:2c: ca:16:8b:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5ODExMTAvBgNVBAUTKDUyMEJBOTRDRDBGQjlFN0MxNDBERkJDMENDNThCOTND RjU0QzIyRjMwHhcNMjUwODA3MDY0MTU5WhcNMjUwODE0MDY0MTU5WjAYMRYwFAYD VQQDEw02ODk0NGFiNy1mOTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz98qN44y1dBoIv0hY7oj4ywZkKOlG9B52FLXc6SozBoRTgcm4ahy4VhrNUHD HDzz7QHL5sMLGB6JEA5ztL9u9dS10GcvI+QSYMKyz08uw9DKWc38BU7vwIz7QS13 nDBtm+EJkCHlfGEin+efpC2IrIYv0M2X629UhfpJk/mw1hKllYhjTaMwpGcUFDpv oFzJ+fqPTSr4mfAR7S2fFj4rfcatKJP3VH2MBfsamkjIZWYu8zmBJi08lWZ5MWON wLXqvI+bDq8X9Db4ENaBubm0T+GHLniWGnnyQAVqfBhbO9IWixtp2ytHsGfkd8AV XB+mOSVl2ImQRQ9Q6G3//KLcrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBuOFGX 1+231I3ny6T+GlUdsMoTMB8GA1UdIwQYMBaAFFILqUzQ+558FA37wMxYuTz1TCLz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk4MS8xQ0Y2Q0Q3NDZD N0YxMUVGOTE0RDdENTdDNEY5QUUwMi9VZ3VwVE5EN25ud1VEZnZBekZpNVBQVk1J dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VndXBUTkQ3bm53VURmdkF6Rmk1UFBWTUl2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk4MS8xQ0Y2Q0Q3NDZDN0YxMUVGOTE0RDdENTdDNEY5QUUwMi9VZ3VwVE5EN25u d1VEZnZBekZpNVBQVk1Jdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd+3nT0hA8oymWAwxx57mhSk2O7p0tm3s3NyajRXGYBXtyuMma82Sn FYrj4oBhfxj141LhQzntnDIpPr/qxd348rIei04SxUDLmQT9zXUFBgwgGxlWS2WT Cwg9OfIamAYpi4YEKhTuvRf4fDgNxPY7A9xhQ5vWp6ZAKvSOBBVl/roBxlH3JOBQ FHfp0P1dwu+oGlEKuibloV56TiyHMrBcZQK7Vh9bBYE1L6O5mQoESkKQ9qYqDVxj Rbcg0fjwpmbwG1041oHqZi307vPt2FDBt6+J8fxz70oTSOmib5mI1+qnSv9BsHZH a2qLl+DyGGKgLTYxbTGuXetdzCzKFotV -----END CERTIFICATE-----Generated at Fri Aug 8 12:53:47 2025 by rpki-client