$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft File: UzSpQuM2kLKBJhu645cTXb6kE5c.mft (raw, json) Hash identifier: GQ6c3z1TNg/p3UwgURTLyScXaK9ivDe2AisnZXeELI8= Subject key identifier: C4:55:DD:62:05:6E:FF:06:25:12:32:4C:F8:F1:06:E2:EF:E9:05:21 Authority key identifier: 53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 Certificate issuer: /CN=A91DA022/serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Certificate serial: 0850 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft Manifest number: 084A Signing time: Fri 18 Jul 2025 20:57:56 +0000 Manifest this update: Fri 18 Jul 2025 20:57:56 +0000 Manifest next update: Fri 25 Jul 2025 20:57:56 +0000 Files and hashes: 1: UzSpQuM2kLKBJhu645cTXb6kE5c.crl (hash: dt+joUMsZo23OZHjOj+KI45Z4ErOlJnjO0mOIZ3pnsM=) 2: DF3136A2CFF011EAB2F1D086C4F9AE02.roa (hash: P441cSLHyLoUjwh77ci4OGTBUeTeIRb4uG1co2Vb+f8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA022, serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Validity Not Before: Jul 18 20:57:56 2025 GMT Not After : Jul 25 20:57:56 2025 GMT Subject: CN=687ab554-5305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:35:c5:13:b1:23:11:4e:8c:ec:74:09:72:ea: ef:d2:24:78:da:c7:69:73:93:d9:64:30:a8:6a:93: 62:88:a8:25:91:3e:84:fc:23:8e:26:f5:4c:ac:54: 37:86:47:5b:fb:4c:08:8f:77:05:47:54:21:9d:90: e8:19:c1:50:23:50:7e:dd:f2:9e:0c:35:23:9c:a3: 8e:9c:11:9f:59:84:b2:90:c7:0f:93:2c:ab:05:92: eb:65:42:a6:29:6e:6d:10:1a:0e:c1:67:e4:88:5b: 9a:44:73:41:a4:4f:2d:96:88:33:7c:83:dd:b5:54: 02:44:63:27:94:af:bc:23:66:02:e9:4a:30:0d:69: f1:b2:5d:3b:2b:8a:29:2f:18:b7:df:7d:da:4e:bc: 6e:8e:c8:37:61:63:59:95:25:4b:f3:5d:48:99:c3: 1d:75:24:b6:61:ad:fb:5c:56:f2:b5:0d:92:9f:ad: 5a:3a:d4:57:8a:98:57:82:09:4d:64:75:b5:aa:22: d0:c5:11:0f:e1:da:1a:0b:8a:1c:b8:f7:20:c3:95: d9:50:d4:e3:f3:38:80:15:c3:e5:73:23:72:42:ec: bf:9e:47:d6:61:42:f8:1a:f3:c6:ca:fe:22:c6:6a: e3:29:cf:95:5f:0d:71:5b:26:0c:92:0c:79:b8:ff: 05:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:55:DD:62:05:6E:FF:06:25:12:32:4C:F8:F1:06:E2:EF:E9:05:21 X509v3 Authority Key Identifier: keyid:53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:30:7a:b1:76:73:7d:3c:05:86:fe:f0:a7:c9:b2:52:fd:2a: bb:0e:a3:dd:f5:0f:76:99:f5:6a:ad:a9:98:4a:30:84:7e:79: 35:a4:aa:91:3c:82:4d:e9:aa:61:26:0a:04:b7:47:55:97:65: e8:bc:a8:68:91:95:2a:2f:3c:ed:b4:15:4b:8b:da:cb:15:68: 6c:4a:a8:a2:1e:16:5d:15:8d:38:33:1a:fd:78:1a:06:20:48: 4e:b7:6f:0f:84:b3:2b:eb:b2:df:03:88:d8:5c:cd:1e:10:da: 82:e8:25:f5:81:43:01:90:ef:21:d4:4f:82:11:58:2b:45:09: 83:37:0d:34:c4:8a:af:56:44:bd:24:f2:a1:ff:c8:5d:58:8c: 2b:71:1c:cf:6a:f2:6c:fc:8d:a0:06:e0:d1:e0:18:51:a6:f4: f1:13:73:ad:ba:93:07:68:05:2d:0e:b4:4a:a2:02:5a:52:7f: 2f:12:29:ed:25:72:e1:6a:16:f2:9c:a3:8c:e8:3e:43:14:15: 19:13:aa:04:4e:4f:82:8d:71:94:52:e1:e0:8d:20:9d:79:ad: b8:da:c4:55:ed:85:a1:89:bb:d8:2b:22:7b:34:24:15:73:fb: 63:56:cd:cb:b2:5e:76:da:27:76:91:44:bf:ed:0f:fc:c4:b3: eb:54:6f:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwMjIxMTAvBgNVBAUTKDUzMzRBOTQyRTMzNjkwQjI4MTI2MUJCQUUzOTcxMzVE QkVBNDEzOTcwHhcNMjUwNzE4MjA1NzU2WhcNMjUwNzI1MjA1NzU2WjAYMRYwFAYD VQQDEw02ODdhYjU1NC01MzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzXFE7EjEU6M7HQJcurv0iR42sdpc5PZZDCoapNiiKglkT6E/COOJvVMrFQ3 hkdb+0wIj3cFR1QhnZDoGcFQI1B+3fKeDDUjnKOOnBGfWYSykMcPkyyrBZLrZUKm KW5tEBoOwWfkiFuaRHNBpE8tlogzfIPdtVQCRGMnlK+8I2YC6UowDWnxsl07K4op Lxi3333aTrxujsg3YWNZlSVL811ImcMddSS2Ya37XFbytQ2Sn61aOtRXiphXgglN ZHW1qiLQxREP4doaC4ocuPcgw5XZUNTj8ziAFcPlcyNyQuy/nkfWYUL4GvPGyv4i xmrjKc+VXw1xWyYMkgx5uP8FjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRV3WIF bv8GJRIyTPjxBuLv6QUhMB8GA1UdIwQYMBaAFFM0qULjNpCygSYbuuOXE12+pBOX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTAyMi85RDhEOTQ1OENG RUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtMS0JKaHU2NDVjVFhiNmtF NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6U3BRdU0ya0xLQkpodTY0NWNUWGI2a0U1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTAyMi85RDhEOTQ1OENGRUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtM S0JKaHU2NDVjVFhiNmtFNWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbMHqxdnN9PAWG/vCnybJS/Sq7DqPd9Q92mfVqramYSjCEfnk1pKqR PIJN6aphJgoEt0dVl2XovKhokZUqLzzttBVLi9rLFWhsSqiiHhZdFY04Mxr9eBoG IEhOt28PhLMr67LfA4jYXM0eENqC6CX1gUMBkO8h1E+CEVgrRQmDNw00xIqvVkS9 JPKh/8hdWIwrcRzPavJs/I2gBuDR4BhRpvTxE3OtupMHaAUtDrRKogJaUn8vEint JXLhahbynKOM6D5DFBUZE6oETk+CjXGUUuHgjSCdea242sRV7YWhibvYKyJ7NCQV c/tjVs3Lsl522id2kUS/7Q/8xLPrVG+R -----END CERTIFICATE-----Generated at Sun Jul 20 03:14:20 2025 by rpki-client