$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft File: UCfzGS691UlQo5w9EwlKcfHTMmY.mft (raw, json) Hash identifier: MPOEAWtui+QY4G4OXpFK2R07RUv/JCwBqNv7dJhRSlw= Subject key identifier: E0:8A:7D:E6:D0:6F:EA:97:E0:C4:BA:62:6D:7D:BF:17:7A:94:B5:FB Authority key identifier: 50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 Certificate issuer: /CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Certificate serial: 0B20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft Manifest number: 0B01 Signing time: Fri 18 Jul 2025 19:36:36 +0000 Manifest this update: Fri 18 Jul 2025 19:36:35 +0000 Manifest next update: Fri 25 Jul 2025 19:36:35 +0000 Files and hashes: 1: UCfzGS691UlQo5w9EwlKcfHTMmY.crl (hash: 8b5e4uKAq058J8R0pv51cDpVps9nU+GRdbJ4h2CXbKs=) 2: F3F7D2B0CE9711ECA2477C19C4F9AE02.roa (hash: YSanlXPMFGlUc59onSU43QiRooXV0uHeNRhQl6sQvzs=) 3: CDD62642854E11EBA2CFDC87C4F9AE02.roa (hash: EMIkCzah8q7OcQkgGcb8CJSovHyJ1MV1+D6g6V84DdU=) 4: CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa (hash: neskcJ2ryIraX5yGhHnDKoHimVr5nfZfeUgF/8p7xpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2848 (0xb20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3078, serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Validity Not Before: Jul 18 19:36:35 2025 GMT Not After : Jul 25 19:36:35 2025 GMT Subject: CN=687aa244-603a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e0:02:1c:c0:9c:65:ae:fa:53:32:3b:a8:33: 3e:54:53:84:50:e3:c8:51:e3:92:db:63:89:ef:7d: 4a:07:20:07:3e:46:21:83:e7:dd:1b:ee:b3:cf:3f: af:0f:fc:89:b1:b9:06:a0:34:aa:de:1d:69:8d:81: a6:2b:d0:d3:f1:b2:bc:95:63:b5:2b:b8:43:8c:4a: ef:19:b2:c7:6d:a6:ca:27:bc:ab:f8:ae:43:fe:b3: 8c:ee:72:1c:fc:c5:61:de:21:94:2c:3b:a9:bc:d3: f8:c2:b8:61:f7:9c:91:71:87:99:b7:f3:d2:86:d5: 54:e3:e1:70:46:c6:91:f2:99:e2:c7:e5:b4:c8:e9: da:05:a4:cc:f2:d0:66:53:11:5d:0c:a0:be:e8:d9: 49:b2:92:10:62:89:ab:5e:0d:5d:0c:6b:7b:83:0a: 0b:57:0a:3a:37:72:ad:d6:3f:4e:6a:48:59:5d:8e: cb:31:b0:ef:c0:92:27:bb:21:4c:42:09:ce:54:c9: 35:c9:a3:e4:b3:10:7c:30:15:ce:07:b7:74:b5:b7: e8:32:38:ff:c7:5a:0e:e0:1f:aa:e6:b2:3d:61:9a: 03:55:e0:b9:9a:e3:8d:a3:53:42:5e:99:82:3d:5c: 09:71:85:ea:13:2d:60:cc:19:ed:9e:af:49:1d:12: 33:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8A:7D:E6:D0:6F:EA:97:E0:C4:BA:62:6D:7D:BF:17:7A:94:B5:FB X509v3 Authority Key Identifier: keyid:50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:78:a2:ae:82:df:d3:80:77:d7:71:da:83:3f:31:70:0b:5b: bc:59:6a:4f:71:a1:e7:0e:c1:38:f3:90:de:f1:ef:5e:d0:37: 8c:65:76:56:bb:87:a3:7e:ae:a4:56:66:07:f9:11:ea:58:a0: 28:d0:33:33:78:86:3c:54:78:3f:27:64:55:4e:b7:d1:0e:1a: 10:31:9b:66:9e:59:90:3e:45:cb:44:d1:2e:17:10:43:2d:a7: 5f:06:b0:66:73:7d:20:cc:82:ba:55:5e:ba:cf:fe:d4:f2:e7: 6b:ca:fe:ed:82:e6:87:e1:94:a1:c7:2a:4f:68:8f:95:71:17: 86:0c:8e:d5:45:5f:f1:e7:43:47:ac:3b:81:5e:9a:67:1e:6f: 57:87:47:bd:10:fc:20:6a:6b:bf:7f:da:77:87:6b:f9:29:7d: 95:3a:65:72:c1:eb:c5:8b:3a:20:42:1e:f1:5e:06:ec:a9:e9: e6:7b:69:a1:72:c8:07:27:09:88:11:d7:6f:72:60:d5:92:1c: 93:51:02:e3:d0:f8:06:8c:25:37:7c:2b:b0:29:4c:6e:36:ee: a5:d0:8e:9e:08:89:73:db:2d:ff:68:14:b2:bc:df:55:9d:84: 72:e5:85:f0:73:15:86:3b:a1:db:ac:c5:5d:05:49:0a:ea:11: 1a:d1:e6:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwNzgxMTAvBgNVBAUTKDUwMjdGMzE5MkVCREQ1NDk1MEEzOUMzRDEzMDk0QTcx RjFEMzMyNjYwHhcNMjUwNzE4MTkzNjM1WhcNMjUwNzI1MTkzNjM1WjAYMRYwFAYD VQQDEw02ODdhYTI0NC02MDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+ACHMCcZa76UzI7qDM+VFOEUOPIUeOS22OJ731KByAHPkYhg+fdG+6zzz+v D/yJsbkGoDSq3h1pjYGmK9DT8bK8lWO1K7hDjErvGbLHbabKJ7yr+K5D/rOM7nIc /MVh3iGULDupvNP4wrhh95yRcYeZt/PShtVU4+FwRsaR8pnix+W0yOnaBaTM8tBm UxFdDKC+6NlJspIQYomrXg1dDGt7gwoLVwo6N3Kt1j9OakhZXY7LMbDvwJInuyFM QgnOVMk1yaPksxB8MBXOB7d0tbfoMjj/x1oO4B+q5rI9YZoDVeC5muONo1NCXpmC PVwJcYXqEy1gzBntnq9JHRIziwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCKfebQ b+qX4MS6Ym19vxd6lLX7MB8GA1UdIwQYMBaAFFAn8xkuvdVJUKOcPRMJSnHx0zJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA3OC84NjMwQjFDODRD OEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFVbFFvNXc5RXdsS2NmSFRN bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VDZnpHUzY5MVVsUW81dzlFd2xLY2ZIVE1tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA3OC84NjMwQjFDODRDOEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFV bFFvNXc5RXdsS2NmSFRNbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2eKKugt/TgHfXcdqDPzFwC1u8WWpPcaHnDsE485De8e9e0DeMZXZW u4ejfq6kVmYH+RHqWKAo0DMzeIY8VHg/J2RVTrfRDhoQMZtmnlmQPkXLRNEuFxBD LadfBrBmc30gzIK6VV66z/7U8udryv7tguaH4ZShxypPaI+VcReGDI7VRV/x50NH rDuBXppnHm9Xh0e9EPwgamu/f9p3h2v5KX2VOmVywevFizogQh7xXgbsqenme2mh csgHJwmIEddvcmDVkhyTUQLj0PgGjCU3fCuwKUxuNu6l0I6eCIlz2y3/aBSyvN9V nYRy5YXwcxWGO6HbrMVdBUkK6hEa0ebM -----END CERTIFICATE-----Generated at Sun Jul 20 16:30:32 2025 by rpki-client