$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft File: UjNwqBpuUUYYrnypeV_dEQs1Djc.mft (raw, json) Hash identifier: R4rIYYS7y1gFXiTUeANq62D+Sog2odH6lyISZn1kqxo= Subject key identifier: BE:25:38:9E:B7:B2:1A:E9:7F:0F:41:76:DD:70:18:78:BC:65:FF:B3 Authority key identifier: 52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 Certificate issuer: /CN=A91C6CB6/serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Certificate serial: 0CA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft Manifest number: 0C8E Signing time: Fri 18 Jul 2025 18:24:23 +0000 Manifest this update: Fri 18 Jul 2025 18:24:22 +0000 Manifest next update: Fri 25 Jul 2025 18:24:22 +0000 Files and hashes: 1: UjNwqBpuUUYYrnypeV_dEQs1Djc.crl (hash: 05hBApMMn4T+Cp4ZfJkRPjlEnpO+cd2LuGnkuECRNeo=) 2: 04E274DA27CB11EE8FA6F46CC4F9AE02.roa (hash: QC+kAoIXXpY6brDwehpJKK1cCBvEWnBsopkp3/fuZEY=) 3: E683FA78277E11EE9D54C13AC4F9AE02.roa (hash: w0i/ARt9lCVRkjFZbSD4igkj3UoeypjyUlDGFiTsJMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3236 (0xca4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CB6, serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Validity Not Before: Jul 18 18:24:22 2025 GMT Not After : Jul 25 18:24:22 2025 GMT Subject: CN=687a9157-8469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9c:e9:79:8b:73:3a:24:1d:4c:23:69:d3:be: 9b:03:17:95:ef:e8:79:97:38:bb:dc:09:5a:95:7e: 40:4c:63:8a:98:d7:85:26:94:4a:e7:9a:db:10:6d: 1d:77:81:66:aa:c4:b7:6c:b7:e9:3a:29:62:f0:3e: b6:3d:43:e5:a4:bc:70:33:40:6b:a3:3b:3d:32:85: 38:2a:88:2e:84:c0:6f:93:37:9d:08:23:32:c4:50: 66:4c:dd:5a:54:ce:71:90:fa:f2:d0:19:06:7b:f4: 8b:0f:22:83:a8:4a:d6:1e:93:d8:5f:3a:a7:36:ff: 7b:46:ed:db:d7:87:2a:a1:d3:f9:62:c0:41:b3:4c: 6e:c0:1d:19:9a:48:6f:2e:45:f0:6c:bf:2b:85:bf: ef:9d:b8:7f:b4:7a:bb:ff:fe:dd:fe:de:4a:50:9e: 5e:19:5a:05:26:b0:30:b9:20:8f:f1:3f:6f:14:ce: 73:3e:c6:43:cc:dd:67:90:c7:60:37:4e:ee:c3:5a: 08:f5:d8:58:36:da:2a:a6:25:59:b2:db:71:a7:3d: 7b:e5:fb:a6:3f:d6:e8:97:f7:ab:b8:c2:87:48:66: a9:66:64:3e:cc:c3:e4:33:e0:a9:90:09:9e:20:53: a3:bf:15:95:81:e5:29:e7:ad:31:c9:c5:b8:42:8d: 27:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:25:38:9E:B7:B2:1A:E9:7F:0F:41:76:DD:70:18:78:BC:65:FF:B3 X509v3 Authority Key Identifier: keyid:52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a4:21:6f:b4:d9:3f:70:2a:49:a6:42:8a:15:c9:b4:62:fe: 97:f9:e3:1c:2a:7d:21:f7:e1:d1:95:19:25:6f:23:4b:77:c2: 67:ff:93:1b:bf:b5:5e:47:7b:80:c5:3b:60:31:fa:f0:87:f2: de:7c:f8:3a:b7:5b:6a:b5:d8:8e:95:5b:96:cd:d9:78:d9:f0: 8f:b1:9e:89:97:9f:85:25:e8:91:f9:f1:27:e4:c7:40:09:c8: 3b:10:54:7e:d3:fc:c1:02:54:d2:3a:35:73:6c:45:97:03:19: 68:a9:2e:14:1c:4d:37:bf:c0:7c:42:7b:c2:e2:29:18:d4:e4: 74:b9:91:91:76:4c:62:40:46:28:81:2b:17:df:4e:e6:28:e0: aa:66:27:4b:a8:c0:4c:0f:8d:6e:d6:57:7d:09:17:90:10:16: 5a:a0:b1:18:cf:cf:81:dd:0d:c7:a3:89:89:72:04:54:41:f0: 30:ef:f3:b2:e8:65:7f:04:13:99:33:6d:ed:3a:34:cd:59:54: 4b:7e:9f:95:24:64:6d:3f:df:e5:fe:c9:f6:b0:1d:58:08:2e: 0e:c7:21:4b:e5:ed:a5:72:3c:a8:7b:de:18:70:6c:ae:a0:c5: b9:e2:aa:d7:69:30:db:7e:d3:6b:69:fa:de:4d:50:c1:76:26: bd:4b:ca:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQjYxMTAvBgNVBAUTKDUyMzM3MEE4MUE2RTUxNDYxOEFFN0NBOTc5NUZERDEx MEIzNTBFMzcwHhcNMjUwNzE4MTgyNDIyWhcNMjUwNzI1MTgyNDIyWjAYMRYwFAYD VQQDEw02ODdhOTE1Ny04NDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspzpeYtzOiQdTCNp076bAxeV7+h5lzi73AlalX5ATGOKmNeFJpRK55rbEG0d d4FmqsS3bLfpOili8D62PUPlpLxwM0Brozs9MoU4KoguhMBvkzedCCMyxFBmTN1a VM5xkPry0BkGe/SLDyKDqErWHpPYXzqnNv97Ru3b14cqodP5YsBBs0xuwB0Zmkhv LkXwbL8rhb/vnbh/tHq7//7d/t5KUJ5eGVoFJrAwuSCP8T9vFM5zPsZDzN1nkMdg N07uw1oI9dhYNtoqpiVZsttxpz175fumP9bol/eruMKHSGapZmQ+zMPkM+CpkAme IFOjvxWVgeUp560xycW4Qo0nWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4lOJ63 shrpfw9Bdt1wGHi8Zf+zMB8GA1UdIwQYMBaAFFIzcKgablFGGK58qXlf3RELNQ43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNCNi8yQTRGNTc1RUZF MTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVVWVlybnlwZVZfZEVRczFE amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VqTndxQnB1VVVZWXJueXBlVl9kRVFzMURqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNCNi8yQTRGNTc1RUZFMTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVV WVlybnlwZVZfZEVRczFEamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBapCFvtNk/cCpJpkKKFcm0Yv6X+eMcKn0h9+HRlRklbyNLd8Jn/5Mb v7VeR3uAxTtgMfrwh/LefPg6t1tqtdiOlVuWzdl42fCPsZ6Jl5+FJeiR+fEn5MdA Ccg7EFR+0/zBAlTSOjVzbEWXAxloqS4UHE03v8B8QnvC4ikY1OR0uZGRdkxiQEYo gSsX307mKOCqZidLqMBMD41u1ld9CReQEBZaoLEYz8+B3Q3Ho4mJcgRUQfAw7/Oy 6GV/BBOZM23tOjTNWVRLfp+VJGRtP9/l/sn2sB1YCC4OxyFL5e2lcjyoe94YcGyu oMW54qrXaTDbftNrafreTVDBdia9S8oY -----END CERTIFICATE-----Generated at Sun Jul 20 11:26:37 2025 by rpki-client