$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft File: uOVJaYlT9l5x-4S20zjAisF4Glo.mft (raw, json) Hash identifier: UNOTa5Kn2D6lWi/C9Q9Gu0ZhwtlckLBHjH1PpBrTb1s= Subject key identifier: 09:20:5C:87:24:FC:0B:AE:53:56:D7:B0:F7:8D:BD:04:E9:89:CA:79 Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A Certificate issuer: /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Certificate serial: 09AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft Manifest number: 0998 Signing time: Tue 22 Jul 2025 20:21:11 +0000 Manifest this update: Tue 22 Jul 2025 20:21:11 +0000 Manifest next update: Tue 29 Jul 2025 20:21:11 +0000 Files and hashes: 1: uOVJaYlT9l5x-4S20zjAisF4Glo.crl (hash: mUB5p+tZ93rZmBhcN7WWdb7LCNCTZBcetZNXvSGmVO4=) 2: 4B31BDC4B76911ED8A503224C4F9AE02.roa (hash: l0BRfiLqHQsOV1ADKIbKK5vOrt/xeo6mhndQAShwIN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 20:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2479 (0x9af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5C70, serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Validity Not Before: Jul 22 20:21:11 2025 GMT Not After : Jul 29 20:21:11 2025 GMT Subject: CN=687ff2b7-58f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:04:83:52:e7:4c:d2:78:c5:a8:d9:09:91:e7: 4e:39:d5:03:b9:94:24:23:36:83:3c:c5:7e:f6:81: 8f:4c:98:40:4a:85:6b:ca:9d:6a:55:aa:d3:35:86: 54:9d:b1:c6:9a:46:6f:c8:a6:a9:db:36:4f:0d:5b: 28:ec:bc:13:05:8e:5d:6b:15:ae:0c:8f:50:e1:1c: 83:3c:4c:bd:9b:42:92:0a:33:1d:82:dc:ec:20:b4: 68:57:13:f0:9b:e1:35:3e:24:56:52:98:c1:98:30: b6:3a:48:39:68:da:48:0b:84:2b:44:6b:b2:8a:9c: ad:5f:46:64:10:aa:bb:fb:33:95:73:e1:c6:50:0c: 19:a0:4b:3d:a4:6f:04:7b:1c:15:7b:fc:17:fe:55: fb:43:66:a9:42:19:96:e4:14:38:3b:d4:e7:59:9f: f0:51:63:12:5e:5d:3c:00:1a:43:fa:e2:88:8e:fb: ef:f7:76:dd:34:ff:3a:2e:27:5d:13:9d:bd:d8:f5: 0d:1f:2e:ba:18:86:97:2c:f7:71:27:3c:20:22:f2: 37:27:2c:f4:4d:4f:23:09:e1:46:da:f4:4d:b4:3d: a0:56:e0:72:0c:0d:7f:d9:16:e0:fd:ac:ff:c3:b5: 7f:2a:00:93:94:bf:70:2c:35:89:c2:4a:e6:ca:3f: fe:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:20:5C:87:24:FC:0B:AE:53:56:D7:B0:F7:8D:BD:04:E9:89:CA:79 X509v3 Authority Key Identifier: keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:8d:d6:57:3e:33:71:db:90:dc:df:7a:98:b3:83:d7:a7:a2: ed:8e:ad:57:76:86:83:11:06:84:27:0f:8e:5c:59:da:3b:59: 87:88:71:e6:ea:40:ea:7b:78:b5:9c:a6:25:22:fd:0c:5a:e8: b2:3e:52:9f:3d:b7:4d:6a:bd:ea:29:d3:43:cd:d6:b6:f8:b0: b1:a2:0f:59:1a:db:05:31:d5:c0:28:73:84:02:f8:e8:ea:e7: 76:92:09:7f:c0:40:a3:d1:c3:3c:fb:ef:3a:24:02:cd:a3:eb: ba:24:56:f7:75:f7:29:62:ad:75:06:d0:c3:66:3f:9d:60:19: cd:a9:74:d8:cd:b3:ef:43:f1:d5:09:e6:7b:d8:bb:7e:d7:f9: 92:74:19:14:2f:95:4a:7b:b3:4f:62:08:e0:f6:bb:bd:32:8e: 2a:43:4e:00:ad:6e:fa:74:41:ed:a8:6e:9c:61:72:3f:32:6c: 45:4b:d9:15:1d:b3:59:2f:8c:7e:89:d6:a1:f2:d3:c0:74:c2: 41:69:8c:d9:8f:77:df:c2:ee:e5:43:a8:c1:52:68:52:dc:14: a6:e3:da:2b:f3:51:1d:7d:6e:06:40:4b:f5:48:7d:74:a8:34: 61:f9:b8:ea:10:c8:04:87:6c:f5:cd:9f:e8:c3:72:8b:3f:12: 9f:01:47:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDNzAxMTAvBgNVBAUTKEI4RTU0OTY5ODk1M0Y2NUU3MUZCODRCNkQzMzhDMDhB QzE3ODFBNUEwHhcNMjUwNzIyMjAyMTExWhcNMjUwNzI5MjAyMTExWjAYMRYwFAYD VQQDEw02ODdmZjJiNy01OGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowSDUudM0njFqNkJkedOOdUDuZQkIzaDPMV+9oGPTJhASoVryp1qVarTNYZU nbHGmkZvyKap2zZPDVso7LwTBY5daxWuDI9Q4RyDPEy9m0KSCjMdgtzsILRoVxPw m+E1PiRWUpjBmDC2Okg5aNpIC4QrRGuyipytX0ZkEKq7+zOVc+HGUAwZoEs9pG8E exwVe/wX/lX7Q2apQhmW5BQ4O9TnWZ/wUWMSXl08ABpD+uKIjvvv93bdNP86Lidd E5292PUNHy66GIaXLPdxJzwgIvI3Jyz0TU8jCeFG2vRNtD2gVuByDA1/2Rbg/az/ w7V/KgCTlL9wLDWJwkrmyj/+rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkgXIck /AuuU1bXsPeNvQTpicp5MB8GA1UdIwQYMBaAFLjlSWmJU/ZecfuEttM4wIrBeBpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUM3MC8yM0EwQUMwNjkx MDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDlsNXgtNFMyMHpqQWlzRjRH bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPVkphWWxUOWw1eC00UzIwempBaXNGNEdsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUM3MC8yM0EwQUMwNjkxMDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDls NXgtNFMyMHpqQWlzRjRHbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtjdZXPjNx25Dc33qYs4PXp6Ltjq1XdoaDEQaEJw+OXFnaO1mHiHHm 6kDqe3i1nKYlIv0MWuiyPlKfPbdNar3qKdNDzda2+LCxog9ZGtsFMdXAKHOEAvjo 6ud2kgl/wECj0cM8++86JALNo+u6JFb3dfcpYq11BtDDZj+dYBnNqXTYzbPvQ/HV CeZ72Lt+1/mSdBkUL5VKe7NPYgjg9ru9Mo4qQ04ArW76dEHtqG6cYXI/MmxFS9kV HbNZL4x+idah8tPAdMJBaYzZj3ffwu7lQ6jBUmhS3BSm49or81EdfW4GQEv1SH10 qDRh+bjqEMgEh2z1zZ/ow3KLPxKfAUcC -----END CERTIFICATE-----Generated at Wed Jul 23 05:38:22 2025 by rpki-client