$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft File: UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft (raw, json) Hash identifier: uJISaLhIMo1Xj0tDoP8bsNncdCMuo3qqcTw8i8IpX4U= Subject key identifier: C2:E0:19:29:43:F5:87:D6:33:75:2B:C3:F2:F7:08:7A:50:C3:AE:8E Authority key identifier: 50:08:BE:04:1F:99:97:B2:59:D2:58:44:83:A5:3A:0D:FF:0B:17:8C Certificate issuer: /CN=A91A3D65/serialNumber=5008BE041F9997B259D2584483A53A0DFF0B178C Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft Manifest number: 01EA Signing time: Mon 21 Jul 2025 02:42:12 +0000 Manifest this update: Mon 21 Jul 2025 02:42:11 +0000 Manifest next update: Mon 28 Jul 2025 02:42:11 +0000 Files and hashes: 1: UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl (hash: mFL3VOSMOgEN2LyOG4fzw9qZ2y1r0QJxlD5FnNyw8IU=) 2: 57DD65D0D1FB11EDA0A31C2FC4F9AE02.roa (hash: FNFbf5sb9V0I6f51NgIRl7bd8+WZE2kCB/02TRMhw6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:42:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3D65, serialNumber=5008BE041F9997B259D2584483A53A0DFF0B178C Validity Not Before: Jul 21 02:42:11 2025 GMT Not After : Jul 28 02:42:11 2025 GMT Subject: CN=687da904-25a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:00:3c:8c:e9:23:78:7c:ee:4a:3e:a7:d9:8c: 9f:41:a8:d8:91:0d:d3:1a:ae:90:f3:01:61:dc:2e: ed:11:8e:10:1f:0f:06:1a:7f:31:56:6b:bc:12:8c: 78:eb:f0:14:4f:21:bb:01:cc:27:8d:ee:f6:b7:6a: 95:3d:ae:f4:46:29:cd:1e:b0:6b:b4:60:35:e4:cf: 45:7a:89:b6:21:d7:7c:ee:8a:46:03:ab:f5:e6:66: ad:95:10:8f:7d:6a:65:a7:dd:69:2d:39:c3:bc:54: e7:a3:96:fa:39:6c:03:a9:b4:6d:37:a5:79:4e:20: 1a:a0:2a:0e:26:0c:51:74:3c:2c:bd:b3:fb:02:c7: 90:75:8b:42:7f:d5:61:a7:c6:99:25:a8:d4:06:b9: ad:b7:26:70:41:47:7a:9e:dd:39:e2:24:5a:bd:28: 1c:e4:e3:d6:e8:26:40:f8:df:72:02:b4:49:74:ad: 4d:87:c5:b4:5e:5c:a1:00:98:c7:26:4b:2a:28:00: 9e:26:33:87:b8:d8:a7:68:43:e4:70:05:a5:6b:0f: 4c:02:23:23:98:72:4e:de:82:5c:a2:36:6b:0d:b2: 2f:c9:67:a5:dd:2c:eb:b0:56:12:22:f7:34:16:38: 33:a5:11:36:88:40:ce:f0:16:88:5d:3c:74:85:f4: be:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E0:19:29:43:F5:87:D6:33:75:2B:C3:F2:F7:08:7A:50:C3:AE:8E X509v3 Authority Key Identifier: keyid:50:08:BE:04:1F:99:97:B2:59:D2:58:44:83:A5:3A:0D:FF:0B:17:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:bb:cb:13:bc:a6:8a:62:56:3b:21:7c:3f:df:6c:8f:e7:49: 6a:5e:5d:23:4b:fa:98:57:3a:49:b4:45:5b:da:13:ce:9b:c1: 82:73:67:26:e3:8b:34:52:bb:44:11:fe:04:41:92:c1:16:86: 88:cc:40:50:f0:d0:1e:59:83:01:fc:be:4a:70:a4:51:37:7d: 94:7b:c2:77:92:1d:f3:34:70:79:3e:5a:fb:10:85:3e:cf:59: 7f:1f:5a:78:89:45:99:39:06:ed:6c:4f:25:5b:68:1e:6b:9a: bf:b9:5e:08:b7:04:93:d5:e8:af:35:2f:58:ea:b5:39:8d:41: f0:3d:45:11:1d:7b:68:9d:bb:5d:74:01:d3:07:29:a2:69:12: 73:01:fb:f6:4c:c5:2a:6c:db:20:00:2e:38:ae:78:7c:9b:b2: 72:0e:bf:ad:4d:f8:33:a1:8d:41:1d:2c:50:bb:d6:a3:d1:7b: a0:b6:31:b3:dc:86:03:f1:a9:1f:08:4d:f9:79:c3:b2:5c:ec: 48:92:10:00:be:b2:1f:f2:bf:5f:ca:16:c1:ca:08:63:3a:78: 51:05:ec:3a:2d:19:2a:ea:8e:f4:ea:25:a9:65:8d:60:1d:f4: f6:17:fa:00:4d:82:a1:f4:bf:4b:cc:ec:5a:c7:29:9f:80:a7: f3:5d:0d:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNENjUxMTAvBgNVBAUTKDUwMDhCRTA0MUY5OTk3QjI1OUQyNTg0NDgzQTUzQTBE RkYwQjE3OEMwHhcNMjUwNzIxMDI0MjExWhcNMjUwNzI4MDI0MjExWjAYMRYwFAYD VQQDEw02ODdkYTkwNC0yNWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAA8jOkjeHzuSj6n2YyfQajYkQ3TGq6Q8wFh3C7tEY4QHw8GGn8xVmu8Eox4 6/AUTyG7Acwnje72t2qVPa70RinNHrBrtGA15M9Feom2Idd87opGA6v15matlRCP fWplp91pLTnDvFTno5b6OWwDqbRtN6V5TiAaoCoOJgxRdDwsvbP7AseQdYtCf9Vh p8aZJajUBrmttyZwQUd6nt054iRavSgc5OPW6CZA+N9yArRJdK1Nh8W0XlyhAJjH JksqKACeJjOHuNinaEPkcAWlaw9MAiMjmHJO3oJcojZrDbIvyWel3SzrsFYSIvc0 FjgzpRE2iEDO8BaIXTx0hfS+1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLgGSlD 9YfWM3Urw/L3CHpQw66OMB8GA1UdIwQYMBaAFFAIvgQfmZeyWdJYRIOlOg3/CxeM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0Q2NS9FQTFFNjJENjdD NzUxMUVEOEJFNjVCMzhDNEY5QUUwMi9VQWktQkItWmw3SlowbGhFZzZVNkRmOExG NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VBaS1CQi1abDdKWjBsaEVnNlU2RGY4TEY0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0Q2NS9FQTFFNjJENjdDNzUxMUVEOEJFNjVCMzhDNEY5QUUwMi9VQWktQkItWmw3 SlowbGhFZzZVNkRmOExGNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmu8sTvKaKYlY7IXw/32yP50lqXl0jS/qYVzpJtEVb2hPOm8GCc2cm 44s0UrtEEf4EQZLBFoaIzEBQ8NAeWYMB/L5KcKRRN32Ue8J3kh3zNHB5Plr7EIU+ z1l/H1p4iUWZOQbtbE8lW2gea5q/uV4ItwST1eivNS9Y6rU5jUHwPUURHXtonbtd dAHTBymiaRJzAfv2TMUqbNsgAC44rnh8m7JyDr+tTfgzoY1BHSxQu9aj0XugtjGz 3IYD8akfCE35ecOyXOxIkhAAvrIf8r9fyhbByghjOnhRBew6LRkq6o706iWpZY1g HfT2F/oATYKh9L9LzOxaxymfgKfzXQ35 -----END CERTIFICATE-----Generated at Mon Jul 21 13:46:12 2025 by rpki-client