$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft File: uV2VSq65WdNCfBB2qfV98hw4v8w.mft (raw, json) Hash identifier: VRHcNGp2xtdYS6j04YlDPvrh15W3ZzVher0qHkbl2KI= Subject key identifier: CF:86:5E:ED:F2:C3:93:68:76:C7:15:DB:B7:1E:36:85:73:FE:2B:6D Authority key identifier: B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC Certificate issuer: /CN=A91FBD28/serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC Certificate serial: 26C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft Manifest number: 26A1 Signing time: Sat 14 Jun 2025 15:39:49 +0000 Manifest this update: Sat 14 Jun 2025 15:39:49 +0000 Manifest next update: Sat 21 Jun 2025 15:39:49 +0000 Files and hashes: 1: uV2VSq65WdNCfBB2qfV98hw4v8w.crl (hash: 0TnUuTjlJfKJAWeN5YjpanUSTms6gCPDusDOmQF3GOw=) 2: 94688318A57B11EA964E0C3DC4F9AE02.roa (hash: qb9PKTbJFEWjVkrorFJajJwU9G8YZ7gNAVQpMrR1dv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9920 (0x26c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD28, serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC Validity Not Before: Jun 14 15:39:49 2025 GMT Not After : Jun 21 15:39:49 2025 GMT Subject: CN=684d97c5-feff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c0:4f:d5:2b:9a:ef:a5:46:84:a1:45:d5:7a: 28:29:7c:57:60:72:80:7c:e6:d9:76:2f:2c:8e:02: fc:5e:d3:a7:74:82:e5:ee:c3:33:9d:63:1f:7d:2b: 99:b2:44:f6:b0:f8:ce:c0:94:59:e4:d8:86:10:0a: f0:7f:c7:00:6d:9f:f6:45:8a:fe:56:20:09:42:b0: 88:4e:1e:1d:cb:52:c5:89:a8:e3:84:fc:53:95:2e: 5b:37:ec:71:25:67:cd:bb:98:43:8d:26:09:20:85: 73:4e:a3:d3:b4:bc:d0:28:3b:da:ae:4b:7a:5a:af: f6:3d:d9:fe:bc:88:a6:98:94:ca:9b:36:96:84:c5: cb:a3:f6:0f:11:8b:30:0d:9d:65:1f:61:b6:2b:1d: ae:3d:22:9d:e4:8c:7e:84:d6:5c:82:02:cf:bd:12: 38:f2:88:8b:8d:36:42:d9:89:1b:b0:18:ff:e6:f4: 50:18:af:37:5a:95:68:69:38:d0:36:20:ba:9d:e6: 91:c0:66:2a:56:09:95:f8:4f:ef:2a:e6:7a:4b:d3: 5b:b6:ca:61:21:34:e5:29:85:14:ed:3b:de:e7:dd: 02:db:7d:64:a7:c6:ed:cc:c0:94:9a:3b:8e:46:9a: e2:db:4b:79:8b:dd:72:cf:09:a0:3a:d0:2b:ca:27: 3a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:86:5E:ED:F2:C3:93:68:76:C7:15:DB:B7:1E:36:85:73:FE:2B:6D X509v3 Authority Key Identifier: keyid:B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7a:37:4f:4f:3e:5d:fe:3e:3e:79:8b:79:61:ea:e2:99:a8: 35:1d:f6:54:d7:ad:b2:e0:40:87:25:36:c2:58:7b:a4:e8:67: 57:3e:f9:4f:2f:3e:f4:28:cd:44:05:b5:2e:04:c8:3d:08:0d: 32:51:dd:85:5b:69:f0:4d:7b:85:bc:15:03:5d:39:db:6f:de: 16:73:dc:98:c0:00:49:e6:4c:65:3e:16:6c:95:3e:c1:7a:9e: ae:56:1c:3d:4e:72:ff:b4:8b:8f:ea:23:d0:2a:5c:02:ba:b8: 0e:e2:e7:3a:76:94:8f:61:54:4f:f1:d0:3e:39:a1:63:de:0c: 35:61:cf:c8:7e:d8:92:0a:dc:a5:95:50:80:16:fa:06:74:4e: 14:33:fa:87:97:34:91:0d:0a:ae:c6:5d:a0:a7:0b:9b:95:8d: 9c:05:a9:d6:95:87:ce:93:ef:c3:28:a4:34:18:77:26:f5:91: f2:0e:01:a1:ee:77:ab:34:7c:e1:aa:82:09:ff:44:64:4e:cb: 11:00:c1:d1:e5:23:f3:cf:4b:7c:0d:90:24:43:bf:a6:71:d8: 1c:b6:b2:41:d1:c2:4c:78:8b:47:78:5a:78:7b:cd:13:d5:3b: f6:7e:55:1b:04:27:e4:e0:33:dc:54:58:01:16:23:80:25:3b: 4f:fd:c0:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEMjgxMTAvBgNVBAUTKEI5NUQ5NTRBQUVCOTU5RDM0MjdDMTA3NkE5RjU3REYy MUMzOEJGQ0MwHhcNMjUwNjE0MTUzOTQ5WhcNMjUwNjIxMTUzOTQ5WjAYMRYwFAYD VQQDEw02ODRkOTdjNS1mZWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsBP1Sua76VGhKFF1XooKXxXYHKAfObZdi8sjgL8XtOndILl7sMznWMffSuZ skT2sPjOwJRZ5NiGEArwf8cAbZ/2RYr+ViAJQrCITh4dy1LFiajjhPxTlS5bN+xx JWfNu5hDjSYJIIVzTqPTtLzQKDvarkt6Wq/2Pdn+vIimmJTKmzaWhMXLo/YPEYsw DZ1lH2G2Kx2uPSKd5Ix+hNZcggLPvRI48oiLjTZC2YkbsBj/5vRQGK83WpVoaTjQ NiC6neaRwGYqVgmV+E/vKuZ6S9NbtsphITTlKYUU7Tve590C231kp8btzMCUmjuO Rpri20t5i91yzwmgOtAryic6+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+GXu3y w5NodscV27ceNoVz/ittMB8GA1UdIwQYMBaAFLldlUquuVnTQnwQdqn1ffIcOL/M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQyOC9FNkNFRDcyMkUx QjAxMUU0OEMyRERFMTZDNEY5QUUwMi91VjJWU3E2NVdkTkNmQkIycWZWOThodzR2 OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VWMlZTcTY1V2ROQ2ZCQjJxZlY5OGh3NHY4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQyOC9FNkNFRDcyMkUxQjAxMUU0OEMyRERFMTZDNEY5QUUwMi91VjJWU3E2NVdk TkNmQkIycWZWOThodzR2OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9ejdPTz5d/j4+eYt5Yerimag1HfZU162y4ECHJTbCWHuk6GdXPvlP Lz70KM1EBbUuBMg9CA0yUd2FW2nwTXuFvBUDXTnbb94Wc9yYwABJ5kxlPhZslT7B ep6uVhw9TnL/tIuP6iPQKlwCurgO4uc6dpSPYVRP8dA+OaFj3gw1Yc/IftiSCtyl lVCAFvoGdE4UM/qHlzSRDQquxl2gpwublY2cBanWlYfOk+/DKKQ0GHcm9ZHyDgGh 7nerNHzhqoIJ/0RkTssRAMHR5SPzz0t8DZAkQ7+mcdgctrJB0cJMeItHeFp4e80T 1Tv2flUbBCfk4DPcVFgBFiOAJTtP/cDt -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:57 2025 by rpki-client