$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft File: UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft (raw, json) Hash identifier: wGub8vToBxv+YNl9ysstzUhRFiQNP6KqivZaU7Yg8u8= Subject key identifier: F9:23:E0:85:4F:DD:D0:C3:E5:76:D2:EA:A9:2F:ED:50:8F:BB:ED:B3 Authority key identifier: 52:F3:E7:FB:5E:D8:53:37:F7:E1:9E:10:73:3D:49:0C:2B:1C:0B:64 Certificate issuer: /CN=A91A3277/serialNumber=52F3E7FB5ED85337F7E19E10733D490C2B1C0B64 Certificate serial: 034C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UvPn-17YUzf34Z4Qcz1JDCscC2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft Manifest number: 0347 Signing time: Mon 21 Jul 2025 01:18:51 +0000 Manifest this update: Mon 21 Jul 2025 01:18:51 +0000 Manifest next update: Mon 28 Jul 2025 01:18:50 +0000 Files and hashes: 1: UvPn-17YUzf34Z4Qcz1JDCscC2Q.crl (hash: IaNU9eptaGqu7I6Yy4k2BKUI2K3SRLWPGyySgQg7vEc=) 2: F52D264EC6C211EC87251528C4F9AE02.roa (hash: o082/qE7KnRTR5fE6jGL87EK8Un5n2KKqzOv1p2PmKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.crl rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UvPn-17YUzf34Z4Qcz1JDCscC2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 844 (0x34c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3277, serialNumber=52F3E7FB5ED85337F7E19E10733D490C2B1C0B64 Validity Not Before: Jul 21 01:18:51 2025 GMT Not After : Jul 28 01:18:50 2025 GMT Subject: CN=687d957b-1cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4e:e3:59:ad:39:b3:31:1a:3d:25:87:36:2d: 8b:bc:e0:2b:43:e7:07:0e:67:45:9b:e2:d4:09:40: 70:da:95:6d:66:e8:95:61:c4:33:60:41:7a:d5:57: b4:a0:14:be:e0:79:c4:41:ca:2f:4f:48:46:8e:4b: d8:f4:db:90:60:93:aa:60:31:f0:bf:f2:5e:e3:82: ce:5a:da:46:f5:fb:f3:f9:85:20:b9:64:bd:1f:03: 3f:dc:7e:cb:92:3c:b9:3b:91:9a:44:15:21:d7:c0: c9:7d:97:10:96:b0:d9:8a:b9:8a:2b:00:14:e8:05: f0:9e:06:a3:6d:a3:67:76:70:5b:ae:41:31:84:6f: 68:f2:f1:a0:6c:88:39:58:27:56:2c:2f:11:f0:0b: 42:57:2f:01:46:3b:67:f8:0d:34:d3:04:11:7c:57: ca:87:57:9a:07:cf:3d:71:ce:13:f6:33:3f:d0:c4: 02:9f:ee:d6:8f:6a:f6:32:48:3b:a2:df:77:c3:0d: f9:25:64:86:ea:ed:7c:06:74:52:82:fd:35:90:c1: b0:2b:5d:6c:65:41:6c:d5:d9:f6:e2:75:8e:cf:1f: 0a:75:ec:c8:26:23:eb:70:23:97:37:bd:ef:8c:ab: 10:b4:2f:ef:29:4f:0f:f7:38:8a:a9:3e:00:46:3a: cf:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:23:E0:85:4F:DD:D0:C3:E5:76:D2:EA:A9:2F:ED:50:8F:BB:ED:B3 X509v3 Authority Key Identifier: keyid:52:F3:E7:FB:5E:D8:53:37:F7:E1:9E:10:73:3D:49:0C:2B:1C:0B:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UvPn-17YUzf34Z4Qcz1JDCscC2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:64:f8:1d:ca:cc:2c:49:f2:db:7c:10:b9:9b:77:cb:d3:aa: 18:78:36:39:37:0c:4e:87:44:b2:28:1d:cb:74:f9:9d:cc:0a: 9a:97:02:4a:af:86:43:61:fd:d6:87:53:e6:99:ed:ad:95:c7: fb:16:9c:31:d3:e2:fc:d9:6c:35:ef:5b:2c:7f:ca:2f:d9:78: d7:4d:36:5c:a9:60:80:9b:df:ca:27:5d:0c:b4:5f:2f:b0:5f: 2e:f8:dd:cd:54:c2:05:d0:34:41:f7:b3:0a:32:a2:4c:e1:0b: 20:ce:ce:cc:03:fd:e2:1c:e1:e2:42:38:00:ca:28:a1:2f:4a: 45:a8:31:e9:e5:76:77:d5:d7:dd:a3:62:48:62:42:4b:b8:78: 75:69:0c:61:07:23:0c:d5:a4:8c:5c:2a:fa:09:07:2e:2c:29: b1:4d:80:29:dd:6e:f6:5f:63:59:57:f9:58:ba:26:e8:78:70: 28:ac:74:4e:5d:d6:38:f6:54:10:7e:82:01:8e:b8:18:31:a6: 60:5a:e0:d9:e7:a8:13:5a:12:3e:57:1c:49:89:39:0d:16:79: a0:a9:9a:85:4a:da:48:a8:f8:d0:89:70:28:9e:61:8d:b3:2d: 15:ba:76:7b:cd:46:99:05:c9:c8:82:17:16:0d:e6:13:76:e5: 49:f6:f3:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMyNzcxMTAvBgNVBAUTKDUyRjNFN0ZCNUVEODUzMzdGN0UxOUUxMDczM0Q0OTBD MkIxQzBCNjQwHhcNMjUwNzIxMDExODUxWhcNMjUwNzI4MDExODUwWjAYMRYwFAYD VQQDEw02ODdkOTU3Yi0xY2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsE7jWa05szEaPSWHNi2LvOArQ+cHDmdFm+LUCUBw2pVtZuiVYcQzYEF61Ve0 oBS+4HnEQcovT0hGjkvY9NuQYJOqYDHwv/Je44LOWtpG9fvz+YUguWS9HwM/3H7L kjy5O5GaRBUh18DJfZcQlrDZirmKKwAU6AXwngajbaNndnBbrkExhG9o8vGgbIg5 WCdWLC8R8AtCVy8BRjtn+A000wQRfFfKh1eaB889cc4T9jM/0MQCn+7Wj2r2Mkg7 ot93ww35JWSG6u18BnRSgv01kMGwK11sZUFs1dn24nWOzx8KdezIJiPrcCOXN73v jKsQtC/vKU8P9ziKqT4ARjrPQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkj4IVP 3dDD5XbS6qkv7VCPu+2zMB8GA1UdIwQYMBaAFFLz5/te2FM39+GeEHM9SQwrHAtk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzI3Ny9DMUIwMjI5NkM2 QzAxMUVDQTg1NEQ2MjdDNEY5QUUwMi9VdlBuLTE3WVV6ZjM0WjRRY3oxSkRDc2ND MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V2UG4tMTdZVXpmMzRaNFFjejFKRENzY0MyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzI3Ny9DMUIwMjI5NkM2QzAxMUVDQTg1NEQ2MjdDNEY5QUUwMi9VdlBuLTE3WVV6 ZjM0WjRRY3oxSkRDc2NDMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARZPgdyswsSfLbfBC5m3fL06oYeDY5NwxOh0SyKB3LdPmdzAqalwJK r4ZDYf3Wh1Pmme2tlcf7Fpwx0+L82Ww171ssf8ov2XjXTTZcqWCAm9/KJ10MtF8v sF8u+N3NVMIF0DRB97MKMqJM4Qsgzs7MA/3iHOHiQjgAyiihL0pFqDHp5XZ31dfd o2JIYkJLuHh1aQxhByMM1aSMXCr6CQcuLCmxTYAp3W72X2NZV/lYuiboeHAorHRO XdY49lQQfoIBjrgYMaZgWuDZ56gTWhI+VxxJiTkNFnmgqZqFStpIqPjQiXAonmGN sy0VunZ7zUaZBcnIghcWDeYTduVJ9vNP -----END CERTIFICATE-----Generated at Mon Jul 21 08:06:06 2025 by rpki-client