$ rpki-client -vvf rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft File: UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft (raw, json) Hash identifier: MsDhFEcm6LOz0GYm6hdzWwWJE+G2nCjy+R6oQXrwpM8= Subject key identifier: B3:12:20:76:37:AB:C6:84:62:37:2E:E7:2A:A3:8B:79:1C:6C:C6:D6 Authority key identifier: 52:B2:19:95:42:9C:44:F8:A7:F4:EC:99:E5:30:40:87:0D:6D:38:5B Certificate issuer: /CN=A91A459D/serialNumber=52B21995429C44F8A7F4EC99E53040870D6D385B Certificate serial: 09F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft Manifest number: 09EB Signing time: Fri 18 Jul 2025 20:07:07 +0000 Manifest this update: Fri 18 Jul 2025 20:07:07 +0000 Manifest next update: Fri 25 Jul 2025 20:07:07 +0000 Files and hashes: 1: UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl (hash: hVvbGmnI50rI0x7bLjKc37HGtb7VC1cLP2r+sa1moTI=) 2: 21028CF67EF811EAAD47CD30C4F9AE02.roa (hash: +gB8ZHO5MMKVGP2yT3GNNhFPo53EwfTpImIrJ+ySljI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2546 (0x9f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A459D, serialNumber=52B21995429C44F8A7F4EC99E53040870D6D385B Validity Not Before: Jul 18 20:07:07 2025 GMT Not After : Jul 25 20:07:07 2025 GMT Subject: CN=687aa96b-e5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d3:f7:47:57:e5:ee:68:b1:51:85:4f:d8:46: 59:f1:c3:30:42:02:66:36:46:21:b9:0e:2c:9a:6d: c1:49:f8:54:6e:ca:6b:13:0f:2f:54:8f:b7:25:7d: 10:90:ec:f0:3d:da:bf:c2:24:a3:78:9b:f6:f1:d8: 25:53:f5:93:9e:04:1d:02:06:c3:ae:0b:4b:19:19: 60:96:85:4c:a5:37:3e:7e:19:cb:01:46:68:44:a9: eb:0c:de:2d:85:13:07:3a:be:28:61:6c:a5:55:10: 09:96:2b:36:2a:e9:fa:58:60:3a:28:cb:75:01:f4: 2f:ad:c9:a7:43:d5:64:19:89:fe:8f:89:14:7f:7e: 39:8a:c0:2f:11:f9:72:4a:44:4d:98:9b:59:63:e5: b1:a2:35:a9:7f:ff:35:d2:be:0c:92:43:4e:f9:77: aa:0d:93:27:55:5b:86:0e:ef:93:30:b6:54:cd:23: 03:d1:70:43:97:22:58:0e:ce:65:d5:f9:8e:20:50: 21:50:f9:5c:86:76:3d:da:b5:c3:07:37:8e:ec:13: f1:46:c2:3c:9f:af:77:96:fc:e4:0c:d4:99:e7:90: 21:f9:f7:2a:9d:45:5a:a5:e1:6b:e8:eb:05:72:aa: d1:87:2c:f0:2b:dc:51:37:c0:1b:f5:af:0c:b0:6e: 29:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:12:20:76:37:AB:C6:84:62:37:2E:E7:2A:A3:8B:79:1C:6C:C6:D6 X509v3 Authority Key Identifier: keyid:52:B2:19:95:42:9C:44:F8:A7:F4:EC:99:E5:30:40:87:0D:6D:38:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:4e:38:74:3d:ad:cb:ce:24:4c:82:c1:57:83:17:b2:51:df: 2c:fc:10:b2:ce:e7:62:c0:a4:a5:ae:36:66:6e:02:0f:aa:b2: fe:27:99:e3:1b:65:52:58:05:f4:5a:a4:e8:a6:b0:6d:a1:c9: 74:11:1b:fe:3a:07:d7:ab:48:7a:1c:73:22:0f:a4:63:ec:1a: 27:d6:56:a2:92:9a:e6:3f:54:24:58:9a:f5:26:7f:38:3c:8c: 0e:ec:bc:fa:d3:e9:b1:c8:e6:78:ca:77:01:bf:c9:9a:4a:37: 2b:50:d8:6d:e7:7e:f9:40:c9:6a:ff:be:5d:47:49:8c:bb:a9: 5f:f4:17:66:4f:2b:17:40:f5:50:1a:c5:4f:7b:20:74:05:a6: 8a:ae:10:84:81:d6:72:bd:a9:f5:a1:69:84:50:f1:99:57:21: 4b:1e:72:30:a8:6d:1e:03:5e:07:28:b8:bf:58:fe:21:09:ab: c9:25:94:b2:c1:c3:5f:fc:ab:7a:00:5b:39:18:c6:fe:47:db: 71:4c:3e:d6:94:d2:57:7d:59:18:ab:d6:f9:0b:5b:00:99:fa: 7a:a1:e2:4e:07:18:3f:92:cb:c9:86:82:dd:dd:8e:b2:27:bf: 07:83:0f:9e:02:d9:0d:99:2b:5f:26:ae:a2:7e:3d:3a:ec:20: 11:04:b8:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1OUQxMTAvBgNVBAUTKDUyQjIxOTk1NDI5QzQ0RjhBN0Y0RUM5OUU1MzA0MDg3 MEQ2RDM4NUIwHhcNMjUwNzE4MjAwNzA3WhcNMjUwNzI1MjAwNzA3WjAYMRYwFAYD VQQDEw02ODdhYTk2Yi1lNWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndP3R1fl7mixUYVP2EZZ8cMwQgJmNkYhuQ4smm3BSfhUbsprEw8vVI+3JX0Q kOzwPdq/wiSjeJv28dglU/WTngQdAgbDrgtLGRlgloVMpTc+fhnLAUZoRKnrDN4t hRMHOr4oYWylVRAJlis2Kun6WGA6KMt1AfQvrcmnQ9VkGYn+j4kUf345isAvEfly SkRNmJtZY+WxojWpf/810r4MkkNO+XeqDZMnVVuGDu+TMLZUzSMD0XBDlyJYDs5l 1fmOIFAhUPlchnY92rXDBzeO7BPxRsI8n693lvzkDNSZ55Ah+fcqnUVapeFr6OsF cqrRhyzwK9xRN8Ab9a8MsG4pgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMSIHY3 q8aEYjcu5yqji3kcbMbWMB8GA1UdIwQYMBaAFFKyGZVCnET4p/TsmeUwQIcNbThb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU5RC81RkFCOTcyRTdF RjYxMUVBQTk3OUEzMkRDNEY5QUUwMi9VcklabFVLY1JQaW45T3laNVRCQWh3MXRP RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VySVpsVUtjUlBpbjlPeVo1VEJBaHcxdE9Gcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDU5RC81RkFCOTcyRTdFRjYxMUVBQTk3OUEzMkRDNEY5QUUwMi9VcklabFVLY1JQ aW45T3laNVRCQWh3MXRPRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZTjh0Pa3LziRMgsFXgxeyUd8s/BCyzudiwKSlrjZmbgIPqrL+J5nj G2VSWAX0WqToprBtocl0ERv+OgfXq0h6HHMiD6Rj7Bon1laikprmP1QkWJr1Jn84 PIwO7Lz60+mxyOZ4yncBv8maSjcrUNht5375QMlq/75dR0mMu6lf9BdmTysXQPVQ GsVPeyB0BaaKrhCEgdZyvan1oWmEUPGZVyFLHnIwqG0eA14HKLi/WP4hCavJJZSy wcNf/Kt6AFs5GMb+R9txTD7WlNJXfVkYq9b5C1sAmfp6oeJOBxg/ksvJhoLd3Y6y J78Hgw+eAtkNmStfJq6ifj067CARBLhY -----END CERTIFICATE-----Generated at Sun Jul 20 03:13:33 2025 by rpki-client