$ rpki-client -vvf rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft File: _uphQ5owmLhcyxg7WkGqEq9Fyh4.mft (raw, json) Hash identifier: sKxNSChPre6P5p6u2Knl3djlwww1I8pOaD0Obq240Fw= Subject key identifier: 36:44:7E:B0:BC:42:92:AA:89:06:CF:19:98:B4:E0:47:09:B4:1F:CC Authority key identifier: FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E Certificate issuer: /CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E Certificate serial: 07E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft Manifest number: 07D5 Signing time: Fri 18 Jul 2025 21:23:44 +0000 Manifest this update: Fri 18 Jul 2025 21:23:43 +0000 Manifest next update: Fri 25 Jul 2025 21:23:43 +0000 Files and hashes: 1: _uphQ5owmLhcyxg7WkGqEq9Fyh4.crl (hash: 1Zvr4EhPR3+WfjoXzO+i/RII19ftW4CHXWtbeCnOWCM=) 2: 12C3076850E111F09D297C74C4F9AE02.roa (hash: ZUF20y6+jkSbAkxDsa20v45IvcAwVMI0vsh92LZHtlw=) 3: 2B219CDC1FE811EF96F54D5AC4F9AE02.roa (hash: fDAAeuUsFkH2gLuCgx3HyrIav6vNpT1MtuuD0Bs5YUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A19C8, serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E Validity Not Before: Jul 18 21:23:43 2025 GMT Not After : Jul 25 21:23:43 2025 GMT Subject: CN=687abb60-0fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b3:89:86:ae:3b:57:56:e0:1b:35:79:0c:37: cf:56:31:46:47:2b:29:6c:53:ce:ca:2d:41:92:92: 46:26:0b:41:77:91:21:d2:78:36:6b:90:f3:ef:7a: 55:93:01:d0:f3:e9:82:a8:4a:cd:34:fb:23:44:28: ad:0b:5d:50:e3:cd:65:79:4e:d6:6a:56:94:65:5e: 53:3c:11:7d:6e:3c:3f:d7:9d:1d:cd:ae:4e:33:1b: fe:27:36:c7:f7:fa:29:01:e5:c7:c0:f2:e1:f9:85: a8:31:ca:1e:35:8d:f7:48:da:d5:bd:35:3f:ef:1b: fa:2c:30:21:13:ad:bf:c4:f0:82:ef:e5:70:ab:27: 0c:a7:62:c9:4f:58:4c:3d:54:0e:77:f3:1b:f1:a3: 2c:9c:34:6f:7a:5d:aa:e0:23:3c:34:ad:85:29:66: b1:e1:6d:b9:e1:6b:c8:22:b3:e9:de:6c:92:1e:0c: b4:86:4d:b6:82:37:8f:57:b4:07:c7:4b:7b:27:2c: 6d:50:76:e4:5f:54:8a:09:59:f2:af:9c:1a:78:37: d3:c0:2d:3f:4b:e4:d8:82:ab:c7:b4:7b:93:bf:b2: 51:62:6a:a4:8e:fb:06:b3:82:c0:e4:ea:01:0f:90: 7c:75:f5:1b:2c:67:66:82:4f:aa:53:32:a0:a0:ff: 2c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:44:7E:B0:BC:42:92:AA:89:06:CF:19:98:B4:E0:47:09:B4:1F:CC X509v3 Authority Key Identifier: keyid:FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b7:89:30:34:03:50:7d:49:82:11:7d:8c:fd:d9:87:08:71: 6f:b1:68:c4:a2:f5:a6:cc:7c:83:77:24:6c:23:2a:ce:d5:77: 74:bc:f3:bb:40:2f:ca:50:77:43:a5:cb:79:32:7a:3c:2f:67: db:f1:29:a2:86:9e:ea:f0:95:ae:a9:e0:da:7e:11:40:18:b9: 6c:af:45:7a:c9:09:f0:39:1d:93:ab:b1:5e:75:a9:92:b1:92: dd:e4:a7:00:86:9c:b7:e5:28:ba:c7:2f:21:68:b6:a4:9d:02: 21:1e:c1:6e:bb:bf:5d:54:f3:63:aa:c9:18:29:7c:07:a2:89: e1:b0:9d:53:1a:b5:3d:0e:48:1e:dc:be:dd:17:25:4a:46:0a: 62:4a:63:79:e0:3d:1a:2e:dd:96:97:1b:80:92:43:a6:35:62: 0b:17:66:d8:d6:e7:f4:d0:11:4d:7a:51:13:85:0e:77:04:14: ff:75:a0:4b:30:d2:78:23:ca:b7:14:7b:90:ee:6d:81:f2:44: 13:73:75:e1:c6:5b:d6:7a:54:49:18:70:d0:6b:b3:4f:ac:db: d4:69:ac:2f:2c:09:0a:4a:97:04:be:be:74:e1:be:f1:f9:63: 06:3d:a8:1f:e6:2d:62:f7:08:ae:e3:d8:9e:03:db:3d:94:0c: 29:2e:59:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5QzgxMTAvBgNVBAUTKEZFRUE2MTQzOUEzMDk4Qjg1Q0NCMTgzQjVBNDFBQTEy QUY0NUNBMUUwHhcNMjUwNzE4MjEyMzQzWhcNMjUwNzI1MjEyMzQzWjAYMRYwFAYD VQQDEw02ODdhYmI2MC0wZmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7OJhq47V1bgGzV5DDfPVjFGRyspbFPOyi1BkpJGJgtBd5Eh0ng2a5Dz73pV kwHQ8+mCqErNNPsjRCitC11Q481leU7WalaUZV5TPBF9bjw/150dza5OMxv+JzbH 9/opAeXHwPLh+YWoMcoeNY33SNrVvTU/7xv6LDAhE62/xPCC7+VwqycMp2LJT1hM PVQOd/Mb8aMsnDRvel2q4CM8NK2FKWax4W254WvIIrPp3mySHgy0hk22gjePV7QH x0t7JyxtUHbkX1SKCVnyr5waeDfTwC0/S+TYgqvHtHuTv7JRYmqkjvsGs4LA5OoB D5B8dfUbLGdmgk+qUzKgoP8sRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZEfrC8 QpKqiQbPGZi04EcJtB/MMB8GA1UdIwQYMBaAFP7qYUOaMJi4XMsYO1pBqhKvRcoe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTlDOC9GNUE1RUVBQTAx NDExMUVCQTMzRjhFMTFDNEY5QUUwMi9fdXBoUTVvd21MaGN5eGc3V2tHcUVxOUZ5 aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191cGhRNW93bUxoY3l4ZzdXa0dxRXE5RnloNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTlDOC9GNUE1RUVBQTAxNDExMUVCQTMzRjhFMTFDNEY5QUUwMi9fdXBoUTVvd21M aGN5eGc3V2tHcUVxOUZ5aDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbt4kwNANQfUmCEX2M/dmHCHFvsWjEovWmzHyDdyRsIyrO1Xd0vPO7 QC/KUHdDpct5Mno8L2fb8Smihp7q8JWuqeDafhFAGLlsr0V6yQnwOR2Tq7FedamS sZLd5KcAhpy35Si6xy8haLaknQIhHsFuu79dVPNjqskYKXwHoonhsJ1TGrU9Dkge 3L7dFyVKRgpiSmN54D0aLt2WlxuAkkOmNWILF2bY1uf00BFNelEThQ53BBT/daBL MNJ4I8q3FHuQ7m2B8kQTc3XhxlvWelRJGHDQa7NPrNvUaawvLAkKSpcEvr504b7x +WMGPagf5i1i9wiu49ieA9s9lAwpLlkl -----END CERTIFICATE-----Generated at Sun Jul 20 16:29:21 2025 by rpki-client