$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft File: UoKkZCr301eZKRu6RH6hQlGk1fw.mft (raw, json) Hash identifier: JdDzdnDi+3qK7URbEB/d67htkKvato/zAg0rU/UR3TA= Subject key identifier: C2:0F:72:DD:3C:B4:63:78:29:7F:83:EB:AD:7B:0F:38:61:17:D0:78 Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Certificate serial: 0865 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft Manifest number: 1FC8 Signing time: Sun 20 Jul 2025 16:36:18 +0000 Manifest this update: Sun 20 Jul 2025 16:36:18 +0000 Manifest next update: Sun 27 Jul 2025 16:36:18 +0000 Files and hashes: 1: UoKkZCr301eZKRu6RH6hQlGk1fw.crl (hash: fZ3fr196oZBEcQ/sOFtQ7QGULw2UG1/Ec1UTzeEXJLo=) 2: 654665EA197611F09D2B1C76C4F9AE02.roa (hash: hgO4m8NBFvCWTk/xZ7lTPgH3uo1aBC3KP8OdcPsjkbo=) 3: B5E806CC8BC711EE899A5284C4F9AE02.roa (hash: XzzXA6m5Sfbs0sLhTPVckgYHL3ZiipFrwRLSzgKZ33U=) 4: 172C2B96197711F0A993397AC4F9AE02.roa (hash: 8Qo70bxIag9X+h+p9rkvEiGVmiiK66r021Qwo1g6tkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2149 (0x865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9, serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Validity Not Before: Jul 20 16:36:18 2025 GMT Not After : Jul 27 16:36:18 2025 GMT Subject: CN=687d1b02-862e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:99:25:af:68:1e:60:75:cd:46:ab:29:1e:e9: f8:f7:74:6b:ff:2f:5b:82:95:dd:f5:55:df:64:8b: 1b:76:eb:06:82:f9:04:de:5b:6f:00:b0:c1:a0:da: 06:27:fa:73:92:40:da:7a:7e:a0:a2:44:d2:02:87: 10:45:ff:35:a1:5d:4a:43:b4:66:80:a6:20:67:4a: e2:cd:02:28:5a:e0:4d:60:4e:c2:9c:68:3a:fe:fd: 84:5e:0d:de:b0:8f:67:0d:9b:85:3a:b4:ef:d0:94: 4e:17:5f:8e:b6:1e:a5:c5:b2:44:0a:1b:74:6b:7c: 8c:1e:5c:46:60:86:20:3b:df:e2:99:eb:d3:ee:27: 6d:a8:ee:57:98:d7:4b:ca:83:a5:ad:96:e8:21:24: 27:e2:66:88:86:77:b8:09:54:e7:a9:d9:c0:10:86: 38:ca:9e:ca:6f:d9:dd:50:d0:20:36:a0:4c:16:02: e4:da:a3:51:e7:97:22:09:d1:57:16:05:18:62:5c: 22:f4:3f:41:40:13:09:a9:2d:56:2a:85:90:6a:3d: df:53:40:42:ee:dc:a9:24:e6:1c:6b:70:62:13:a4: 9e:b4:ad:bb:e9:a7:57:7a:1d:3a:a0:c4:93:31:45: db:63:de:5f:f3:9e:30:b0:36:e8:33:11:38:09:43: e8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0F:72:DD:3C:B4:63:78:29:7F:83:EB:AD:7B:0F:38:61:17:D0:78 X509v3 Authority Key Identifier: keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:8b:41:a4:5b:7e:51:6f:e5:16:76:8a:29:ab:f1:6f:b8:0a: 28:d6:67:fa:23:86:29:b2:c3:18:b4:69:56:72:57:c5:e5:5f: 74:3a:14:23:4b:1b:7d:ed:dc:71:4e:ad:7f:d0:b3:38:ce:81: 4c:a5:d5:bd:c8:2f:a2:6e:37:20:03:1c:79:8f:5a:64:b0:6d: 15:8d:23:0f:17:c4:f2:60:86:06:39:55:fb:ed:34:77:ee:85: 06:1b:0c:34:ae:67:c8:e2:58:1d:15:a5:ec:0a:31:11:af:e3: 72:eb:30:39:06:25:b4:88:6e:a8:b4:f1:76:fb:1c:4c:15:2c: eb:06:d9:06:2b:27:85:e7:4a:0e:b8:74:94:82:2c:48:de:34: fa:09:d2:31:af:e0:98:4a:e0:d5:9a:e4:41:65:95:94:2b:26: 72:b0:9d:d0:21:d9:8c:1f:e5:a3:8d:8f:ab:46:11:f1:dd:90: 26:75:a3:7f:d1:4b:76:6d:d1:52:d4:de:9b:d1:95:d7:69:f3: 24:ba:18:14:81:f9:37:10:ae:f1:87:db:b4:9f:02:07:0a:53: 61:e6:59:e6:58:66:d6:10:cb:7e:fd:90:02:a1:0c:be:1d:17: 54:12:91:21:ea:8f:13:87:f0:0c:93:9c:5b:45:9b:99:98:dd: a3:aa:18:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDUyODJBNDY0MkFGN0QzNTc5OTI5MUJCQTQ0N0VBMTQy NTFBNEQ1RkMwHhcNMjUwNzIwMTYzNjE4WhcNMjUwNzI3MTYzNjE4WjAYMRYwFAYD VQQDEw02ODdkMWIwMi04NjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZklr2geYHXNRqspHun493Rr/y9bgpXd9VXfZIsbdusGgvkE3ltvALDBoNoG J/pzkkDaen6gokTSAocQRf81oV1KQ7RmgKYgZ0rizQIoWuBNYE7CnGg6/v2EXg3e sI9nDZuFOrTv0JROF1+Oth6lxbJECht0a3yMHlxGYIYgO9/imevT7idtqO5XmNdL yoOlrZboISQn4maIhne4CVTnqdnAEIY4yp7Kb9ndUNAgNqBMFgLk2qNR55ciCdFX FgUYYlwi9D9BQBMJqS1WKoWQaj3fU0BC7typJOYca3BiE6SetK276adXeh06oMST MUXbY95f854wsDboMxE4CUPocQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIPct08 tGN4KX+D6617DzhhF9B4MB8GA1UdIwQYMBaAFFKCpGQq99NXmSkbukR+oUJRpNX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAxZVpLUnU2Ukg2aFFsR2sx ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvS2taQ3IzMDFlWktSdTZSSDZoUWxHazFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODJEOS8wRURBNkQ1RUNEREExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAx ZVpLUnU2Ukg2aFFsR2sxZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/i0GkW35Rb+UWdoopq/FvuAoo1mf6I4YpssMYtGlWclfF5V90OhQj Sxt97dxxTq1/0LM4zoFMpdW9yC+ibjcgAxx5j1pksG0VjSMPF8TyYIYGOVX77TR3 7oUGGww0rmfI4lgdFaXsCjERr+Ny6zA5BiW0iG6otPF2+xxMFSzrBtkGKyeF50oO uHSUgixI3jT6CdIxr+CYSuDVmuRBZZWUKyZysJ3QIdmMH+WjjY+rRhHx3ZAmdaN/ 0Ut2bdFS1N6b0ZXXafMkuhgUgfk3EK7xh9u0nwIHClNh5lnmWGbWEMt+/ZACoQy+ HRdUEpEh6o8Th/AMk5xbRZuZmN2jqhgo -----END CERTIFICATE-----Generated at Tue Jul 22 05:13:11 2025 by rpki-client