$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft File: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft (raw, json) Hash identifier: 8NNzO5eB7m/ov396iMHjDl3y5Y2U+AF8IBvlWcOjmlM= Subject key identifier: F5:8A:E1:5C:E4:4D:AB:2E:E9:D1:30:14:EE:F5:A2:87:53:31:F7:0F Authority key identifier: 52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24 Certificate issuer: /CN=A91774FB/serialNumber=5296BC801402C73909F591E19095F22465414324 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft Manifest number: C8 Signing time: Sat 19 Jul 2025 05:57:18 +0000 Manifest this update: Sat 19 Jul 2025 05:57:17 +0000 Manifest next update: Sat 26 Jul 2025 05:57:17 +0000 Files and hashes: 1: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl (hash: tUGdfMmwxRR/gpIucNkEn3LOKJY3UPXesYozs/oImaI=) 2: 24142938343C11EFA0165876C4F9AE02.roa (hash: n7AIK79a5+aPFKSTz88y32yhIzyT87IgTPflOpV9KLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91774FB, serialNumber=5296BC801402C73909F591E19095F22465414324 Validity Not Before: Jul 19 05:57:17 2025 GMT Not After : Jul 26 05:57:17 2025 GMT Subject: CN=687b33be-2e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:34:0b:3c:cb:31:8e:a9:bf:65:ed:33:08:53: a3:0e:83:a3:26:be:68:b6:c5:58:03:bb:91:c4:78: f9:03:f3:f6:63:e8:b6:82:11:d6:af:b8:15:4d:6a: 23:b0:7b:bb:5d:01:ec:1f:e3:b7:7c:92:39:4c:fb: e1:f4:cf:0a:e8:6c:78:31:20:8b:09:22:c3:09:2a: 94:a5:e1:94:76:9f:8b:ef:76:40:80:06:6f:e3:e6: 4c:fa:df:4d:ca:49:15:b0:59:e5:fd:55:61:91:4f: bc:d3:bd:05:8b:95:8a:91:d7:cb:ed:66:c0:19:87: eb:bb:de:21:30:e1:8c:df:81:37:ea:f2:7f:f0:0f: 77:3a:9d:c8:82:1f:79:55:9f:52:56:80:63:3e:ef: 18:02:fd:d8:c2:3f:e4:29:29:44:12:09:a1:cc:47: 1d:6b:71:bf:71:3a:99:d2:9a:19:47:69:3c:8e:48: 69:0b:bb:48:25:82:31:f6:bc:6f:a0:2a:da:75:88: 80:0b:fa:a5:65:33:a4:8e:ec:f9:53:53:7c:f1:19: c5:1a:a6:63:54:bb:b0:e3:16:84:fa:00:ec:99:0b: de:f6:fa:3c:c6:cc:48:eb:84:05:1a:22:b3:5d:13: 75:a5:07:9b:dc:ed:72:67:f7:96:e1:03:48:03:20: cd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8A:E1:5C:E4:4D:AB:2E:E9:D1:30:14:EE:F5:A2:87:53:31:F7:0F X509v3 Authority Key Identifier: keyid:52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:89:63:53:9c:74:41:b0:98:23:e4:32:34:df:e8:f3:13:ae: c0:b2:a6:90:a9:02:ec:32:af:b1:94:2c:60:42:a4:60:8c:33: 20:05:7f:54:96:20:bf:a2:2f:7b:57:ee:c4:e2:bd:63:88:83: f7:10:97:15:c0:0f:86:2f:3d:6d:1d:f5:9f:83:82:7b:1b:09: 28:8c:cc:3c:89:44:11:0c:cb:26:5a:c4:6c:42:33:a6:ec:3f: 3d:22:d6:ac:5d:cd:72:62:92:d4:99:50:ad:5f:67:b0:56:29: d1:14:d4:84:43:0f:21:19:36:7e:a8:fe:3f:83:88:24:e4:be: 87:7d:da:6a:9e:0b:2f:ff:4a:f7:70:42:b8:4d:b5:b7:7f:eb: 82:76:9e:f3:7f:a9:5b:c6:fe:e5:69:f3:98:80:7f:eb:71:54: ed:ea:00:2e:02:a2:ee:bf:8b:cc:c5:4c:4e:88:7e:df:0b:00: 7c:fa:29:09:4b:28:75:fa:1b:dc:de:13:5c:0e:47:5b:e3:f5: 57:30:aa:37:2d:da:25:ce:f4:c7:c1:c0:b8:f5:cd:36:c3:e5: c6:15:50:1e:69:bb:f1:e7:b0:2a:e3:59:1c:26:01:2e:55:9e: 1a:3e:bc:40:b8:b8:90:12:ab:1f:a4:71:7d:93:ec:eb:28:7f: 56:54:fe:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0RkIxMTAvBgNVBAUTKDUyOTZCQzgwMTQwMkM3MzkwOUY1OTFFMTkwOTVGMjI0 NjU0MTQzMjQwHhcNMjUwNzE5MDU1NzE3WhcNMjUwNzI2MDU1NzE3WjAYMRYwFAYD VQQDEw02ODdiMzNiZS0yZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTQLPMsxjqm/Ze0zCFOjDoOjJr5otsVYA7uRxHj5A/P2Y+i2ghHWr7gVTWoj sHu7XQHsH+O3fJI5TPvh9M8K6Gx4MSCLCSLDCSqUpeGUdp+L73ZAgAZv4+ZM+t9N ykkVsFnl/VVhkU+8070Fi5WKkdfL7WbAGYfru94hMOGM34E36vJ/8A93Op3Igh95 VZ9SVoBjPu8YAv3Ywj/kKSlEEgmhzEcda3G/cTqZ0poZR2k8jkhpC7tIJYIx9rxv oCradYiAC/qlZTOkjuz5U1N88RnFGqZjVLuw4xaE+gDsmQve9vo8xsxI64QFGiKz XRN1pQeb3O1yZ/eW4QNIAyDNiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWK4Vzk Tasu6dEwFO71oodTMfcPMB8GA1UdIwQYMBaAFFKWvIAUAsc5CfWR4ZCV8iRlQUMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzRGQi83ODk3RjgxNjM0 MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9VcGE4Z0JRQ3h6a0o5Wkhoa0pYeUpHVkJR eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VwYThnQlFDeHprSjlaSGhrSlh5SkdWQlF5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzRGQi83ODk3RjgxNjM0MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9VcGE4Z0JRQ3h6 a0o5Wkhoa0pYeUpHVkJReVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXiWNTnHRBsJgj5DI03+jzE67AsqaQqQLsMq+xlCxgQqRgjDMgBX9U liC/oi97V+7E4r1jiIP3EJcVwA+GLz1tHfWfg4J7GwkojMw8iUQRDMsmWsRsQjOm 7D89ItasXc1yYpLUmVCtX2ewVinRFNSEQw8hGTZ+qP4/g4gk5L6Hfdpqngsv/0r3 cEK4TbW3f+uCdp7zf6lbxv7lafOYgH/rcVTt6gAuAqLuv4vMxUxOiH7fCwB8+ikJ Syh1+hvc3hNcDkdb4/VXMKo3LdolzvTHwcC49c02w+XGFVAeabvx57Aq41kcJgEu VZ4aPrxAuLiQEqsfpHF9k+zrKH9WVP7y -----END CERTIFICATE-----Generated at Sun Jul 20 12:08:04 2025 by rpki-client