$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft File: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json) Hash identifier: qTlYb2wdi+eBBp4D3QmqmsDIbQ/MaiQya96H/xEKrqw= Subject key identifier: 3F:2F:FC:D6:89:C5:B8:C7:60:49:2F:E8:51:78:94:89:A3:F4:1E:FB Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B Certificate issuer: /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B Certificate serial: 0379 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft Manifest number: 036A Signing time: Sat 19 Jul 2025 01:21:53 +0000 Manifest this update: Sat 19 Jul 2025 01:21:53 +0000 Manifest next update: Sat 26 Jul 2025 01:21:53 +0000 Files and hashes: 1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: 9+pOYKWlJm40e90bw3zWPoVS5vZxJ8Lt7zJux/Lfbaw=) 2: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: F6jPBh9YlNU7RVZYywXLeNlWgnFuc8x8f5OICDCdyXk=) 3: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: 2CbWH78pD8qfhUqfDIT0bY8YAkS+SCmh9qliGFNOvyU=) 4: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: vsntEPAhq1q52SAuxi87DOT8T6ZFM5p3hlzlxYIzgx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 889 (0x379) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B Validity Not Before: Jul 19 01:21:53 2025 GMT Not After : Jul 26 01:21:53 2025 GMT Subject: CN=687af331-4050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6a:09:e9:49:8a:2e:31:22:5d:c1:1a:a7:09: fd:c4:24:56:98:ee:80:26:77:2d:f5:ff:ee:7a:39: 34:f7:ac:90:79:90:b5:f0:40:a1:d6:09:71:89:1d: c5:25:85:6f:1c:52:d7:d3:c5:49:e9:90:26:1f:61: 30:83:d0:72:68:fc:24:49:10:4a:27:79:17:6a:f4: d5:19:46:d3:c6:d7:b6:a2:36:0e:08:12:97:db:b4: f8:2e:38:ea:c6:4c:fd:1b:07:20:60:1a:8a:7c:d3: 3b:e1:9f:47:45:d0:51:a5:ac:86:3a:5f:eb:44:6e: 6c:b3:36:6b:58:2c:30:59:8f:01:59:3e:a1:3c:2c: 38:35:67:3e:e2:a9:ff:94:6b:3a:94:0f:0b:3a:15: 74:5d:b1:01:1b:b4:d2:22:f7:64:04:1b:f5:31:eb: c8:62:c2:b1:d8:e0:88:09:e7:4c:bd:60:b4:00:2e: d9:49:10:01:02:de:00:cc:29:b3:a0:4b:d1:ba:3b: f1:ce:8d:13:fe:88:7f:d3:eb:b9:66:29:18:93:45: dc:6a:60:83:bc:e7:0f:b0:99:ff:16:4d:5d:d4:80: a7:23:8a:12:5e:c7:cc:de:60:3d:a7:82:9e:65:17: 62:20:36:6c:99:e9:f5:07:97:18:ab:4f:8f:de:3d: 0d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2F:FC:D6:89:C5:B8:C7:60:49:2F:E8:51:78:94:89:A3:F4:1E:FB X509v3 Authority Key Identifier: keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:dd:37:2f:b2:58:b1:43:2f:7c:b8:c4:21:47:9d:cc:21:d2: 2f:a3:0b:62:98:c5:91:84:ae:22:d2:d0:ef:fc:8f:11:80:5a: d3:e4:48:b9:6c:d5:a9:96:5a:f8:b4:48:97:b2:5b:05:da:b6: 11:7e:b0:ed:3e:77:0a:17:80:fd:b6:94:9e:27:c5:5d:5e:a3: 11:db:b6:0b:26:3b:a8:76:22:af:a8:b0:37:bd:55:0f:45:b5: 75:bd:bc:6b:87:6f:f9:e9:8a:b9:5d:73:31:0f:3f:bc:22:2e: 05:b9:22:67:f5:74:6a:38:d0:17:22:4e:44:94:9e:49:b8:ba: da:f9:ee:67:05:5b:d3:9f:c1:b1:27:87:27:ea:a7:c8:91:8a: 0b:02:65:d2:0a:c6:9e:57:f2:dc:1c:cf:89:0c:79:22:35:7c: d4:72:e2:c7:b2:80:87:8b:fc:5d:d1:da:aa:96:79:22:4d:19: 77:07:88:a0:74:59:d1:67:c2:cb:0e:07:7e:d2:8d:3f:b6:20: 0a:27:12:f6:56:01:62:a5:98:cc:77:81:a2:89:26:6f:14:d2: 1c:ee:5c:00:2d:82:fa:78:3e:80:d2:36:02:ca:ca:bf:c4:dd: 41:24:40:78:9c:7e:2e:41:f0:2d:88:3c:05:28:c7:d7:44:fc: c0:c0:ae:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREQzcxMTAvBgNVBAUTKEI4ODkxMTE3ODA2OEQ1NzVERkRERjg0OTQwQ0FCRUFG NDUxQzhDMkIwHhcNMjUwNzE5MDEyMTUzWhcNMjUwNzI2MDEyMTUzWjAYMRYwFAYD VQQDEw02ODdhZjMzMS00MDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmoJ6UmKLjEiXcEapwn9xCRWmO6AJnct9f/uejk096yQeZC18ECh1glxiR3F JYVvHFLX08VJ6ZAmH2Ewg9ByaPwkSRBKJ3kXavTVGUbTxte2ojYOCBKX27T4Ljjq xkz9GwcgYBqKfNM74Z9HRdBRpayGOl/rRG5sszZrWCwwWY8BWT6hPCw4NWc+4qn/ lGs6lA8LOhV0XbEBG7TSIvdkBBv1MevIYsKx2OCICedMvWC0AC7ZSRABAt4AzCmz oEvRujvxzo0T/oh/0+u5ZikYk0XcamCDvOcPsJn/Fk1d1ICnI4oSXsfM3mA9p4Ke ZRdiIDZsmen1B5cYq0+P3j0NKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8v/NaJ xbjHYEkv6FF4lImj9B77MB8GA1UdIwQYMBaAFLiJEReAaNV13934SUDKvq9FHIwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNERDNy9GM0YxMDIwRUJC MTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFYWGYzZmhKUU1xLXIwVWNq Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VJa1JGNEJvMVhYZjNmaEpRTXEtcjBVY2pDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NERDNy9GM0YxMDIwRUJCMTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFY WGYzZmhKUU1xLXIwVWNqQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB73TcvslixQy98uMQhR53MIdIvowtimMWRhK4i0tDv/I8RgFrT5Ei5 bNWpllr4tEiXslsF2rYRfrDtPncKF4D9tpSeJ8VdXqMR27YLJjuodiKvqLA3vVUP RbV1vbxrh2/56Yq5XXMxDz+8Ii4FuSJn9XRqONAXIk5ElJ5JuLra+e5nBVvTn8Gx J4cn6qfIkYoLAmXSCsaeV/LcHM+JDHkiNXzUcuLHsoCHi/xd0dqqlnkiTRl3B4ig dFnRZ8LLDgd+0o0/tiAKJxL2VgFipZjMd4GiiSZvFNIc7lwALYL6eD6A0jYCysq/ xN1BJEB4nH4uQfAtiDwFKMfXRPzAwK7B -----END CERTIFICATE-----Generated at Sun Jul 20 16:32:37 2025 by rpki-client