$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft File: -uIUFNET23jVT-q6G2BvhUokC9E.mft (raw, json) Hash identifier: ecrgm6TE0YtslO5vgL8fx4tLxpUIpRgK70UxPG631Fo= Subject key identifier: 81:C5:01:F1:82:CD:CF:0F:6A:D7:E0:78:1E:A6:15:D4:F2:93:2F:3A Authority key identifier: FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1 Certificate issuer: /CN=A91BDA2A/serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1 Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft Manifest number: 019B Signing time: Mon 21 Jul 2025 03:27:08 +0000 Manifest this update: Mon 21 Jul 2025 03:27:08 +0000 Manifest next update: Mon 28 Jul 2025 03:27:08 +0000 Files and hashes: 1: -uIUFNET23jVT-q6G2BvhUokC9E.crl (hash: 9UV1o0Wn+sD0Leb9XaY5JeuaZRA81KRavQ8l+0Xtjqs=) 2: 05C6C85CF3C211ED8B9B1450C4F9AE02.roa (hash: RiSzecgrf2L+I7okqYMacDikMwDpRb3b5jlgRjgQGAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA2A, serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1 Validity Not Before: Jul 21 03:27:08 2025 GMT Not After : Jul 28 03:27:08 2025 GMT Subject: CN=687db38c-2984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f2:12:45:df:20:f6:ea:50:dd:66:65:88:61: 22:af:60:49:30:d8:f2:e9:a1:af:cc:af:6c:3f:07: 62:30:d4:e2:ec:1b:4e:d5:d4:36:e7:5d:0d:6f:2f: fc:7f:f6:7a:94:00:29:be:8c:b6:a0:6b:35:ae:9c: 3b:d8:66:f9:47:6a:26:67:6d:b1:09:74:c1:22:c3: d4:8c:31:e2:85:c1:5a:e7:8a:ff:f5:03:c6:0d:41: f8:2f:c4:e2:ba:20:48:39:c2:c4:32:c6:45:5f:74: 1b:a1:4a:29:0d:c0:b4:b5:69:9f:49:ea:3c:7b:be: 75:75:8f:ff:6c:a1:94:3f:47:8e:ff:e0:e8:f9:fb: b1:f3:96:f1:ca:a4:6b:8c:01:fc:06:14:cc:9a:10: 16:60:52:10:59:5b:bb:1a:96:a8:87:8d:cd:ee:fe: 0d:69:df:3b:06:5b:1a:a4:a4:e7:1b:c4:65:8e:c6: 7b:20:06:05:94:59:4b:f6:1a:6c:f2:03:6e:35:19: 15:9c:79:63:b0:48:93:8e:8d:48:04:8c:b2:d8:fb: c3:38:eb:73:8d:87:5a:1a:f1:33:74:6b:9d:88:ec: b9:e9:12:75:61:ce:5f:d8:5a:17:ca:b6:9c:4a:7d: c5:13:4f:d6:ef:3c:f8:e6:0a:50:ad:6d:4a:0b:fb: 87:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C5:01:F1:82:CD:CF:0F:6A:D7:E0:78:1E:A6:15:D4:F2:93:2F:3A X509v3 Authority Key Identifier: keyid:FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:6d:70:5e:c8:90:71:57:9a:70:88:8d:c0:64:16:48:d2:e1: c0:de:7e:6f:57:d0:56:e4:bd:4c:99:80:1e:da:75:d3:86:32: 0d:6d:f9:23:2b:3c:79:1b:77:00:30:16:63:48:2e:9d:b9:3d: a8:72:e5:b0:f2:11:dc:0a:6c:c1:af:d7:f9:cb:0d:f5:bf:20: 01:3c:52:47:ce:f8:eb:64:20:ce:18:4b:b8:d0:97:0a:8a:e8: ff:cf:e9:76:b0:7d:0a:31:b0:56:01:b8:ff:14:f7:17:d7:fd: b6:0b:f3:83:df:a4:37:6c:b9:b9:8c:ac:82:bc:6e:68:a9:58: 6f:1b:e3:90:a8:c4:b7:80:2d:26:90:6d:f3:c1:11:0e:2f:63: bf:12:a8:97:f3:6f:f8:d7:91:d4:b0:25:a2:2b:46:b6:6e:88: 4a:53:b6:da:83:13:43:f1:e8:ea:a0:0f:06:5f:e6:8b:8a:b3: 26:18:e6:ee:5c:c0:d8:58:e0:9c:9c:ab:c2:f8:1c:49:b8:8a: 72:bf:7a:73:ee:88:11:df:7b:9d:a7:3c:18:03:31:c1:71:fe: 22:fe:22:9b:59:e8:b2:2d:37:38:58:bb:dd:1c:96:fb:6a:57: 99:9f:a5:3f:c4:9d:e2:53:f2:f9:34:48:1d:b7:80:13:45:f8: 75:e2:9a:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMkExMTAvBgNVBAUTKEZBRTIxNDE0RDExM0RCNzhENTRGRUFCQTFCNjA2Rjg1 NEEyNDBCRDEwHhcNMjUwNzIxMDMyNzA4WhcNMjUwNzI4MDMyNzA4WjAYMRYwFAYD VQQDEw02ODdkYjM4Yy0yOTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PISRd8g9upQ3WZliGEir2BJMNjy6aGvzK9sPwdiMNTi7BtO1dQ2510Nby/8 f/Z6lAApvoy2oGs1rpw72Gb5R2omZ22xCXTBIsPUjDHihcFa54r/9QPGDUH4L8Ti uiBIOcLEMsZFX3QboUopDcC0tWmfSeo8e751dY//bKGUP0eO/+Do+fux85bxyqRr jAH8BhTMmhAWYFIQWVu7Gpaoh43N7v4Nad87BlsapKTnG8RljsZ7IAYFlFlL9hps 8gNuNRkVnHljsEiTjo1IBIyy2PvDOOtzjYdaGvEzdGudiOy56RJ1Yc5f2FoXyrac Sn3FE0/W7zz45gpQrW1KC/uH0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHFAfGC zc8PatfgeB6mFdTyky86MB8GA1UdIwQYMBaAFPriFBTRE9t41U/quhtgb4VKJAvR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEyQS8xNDc3MTFCMkYz QkUxMUVEOUE5QUM2NEZDNEY5QUUwMi8tdUlVRk5FVDIzalZULXE2RzJCdmhVb2tD OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11SVVGTkVUMjNqVlQtcTZHMkJ2aFVva0M5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REEyQS8xNDc3MTFCMkYzQkUxMUVEOUE5QUM2NEZDNEY5QUUwMi8tdUlVRk5FVDIz alZULXE2RzJCdmhVb2tDOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3bXBeyJBxV5pwiI3AZBZI0uHA3n5vV9BW5L1MmYAe2nXThjINbfkj Kzx5G3cAMBZjSC6duT2ocuWw8hHcCmzBr9f5yw31vyABPFJHzvjrZCDOGEu40JcK iuj/z+l2sH0KMbBWAbj/FPcX1/22C/OD36Q3bLm5jKyCvG5oqVhvG+OQqMS3gC0m kG3zwREOL2O/EqiX82/415HUsCWiK0a2bohKU7bagxND8ejqoA8GX+aLirMmGObu XMDYWOCcnKvC+BxJuIpyv3pz7ogR33udpzwYAzHBcf4i/iKbWeiyLTc4WLvdHJb7 aleZn6U/xJ3iU/L5NEgdt4ATRfh14pq8 -----END CERTIFICATE-----Generated at Mon Jul 21 06:54:24 2025 by rpki-client