$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft File: UdUxrvegh8GOMB4OaixjcbJkw-g.mft (raw, json) Hash identifier: tUl2MSE0Faju2lcxbPa8kBfzfRTry9z2eFYICofIGRc= Subject key identifier: 99:7C:69:C8:C6:9E:36:E7:E4:2C:F6:EB:E9:E7:EF:FC:2A:09:7F:61 Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft Manifest number: 01CD Signing time: Mon 21 Jul 2025 03:12:16 +0000 Manifest this update: Mon 21 Jul 2025 03:12:15 +0000 Manifest next update: Mon 28 Jul 2025 03:12:15 +0000 Files and hashes: 1: UdUxrvegh8GOMB4OaixjcbJkw-g.crl (hash: OdiZy3pyYH6/MXbMD+tTfVzRUfqJjbKDFo6cBFN2/Nk=) 2: 891E633CB7F111EFA500D67CC4F9AE02.roa (hash: O4FUSN5LS+aElz5VOCMijpDVd7ugBsWS/neaZYIhjDU=) 3: 7D215B2CC3C111EE8F83CE1AC4F9AE02.roa (hash: WiLdUkxZVUsyLYaXHR0WIvWbfxTpV9CYC+KkS9rRgFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Validity Not Before: Jul 21 03:12:15 2025 GMT Not After : Jul 28 03:12:15 2025 GMT Subject: CN=687db00f-e17b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:83:9f:50:21:f7:04:fa:57:a5:d9:31:6b:e8: fd:28:6e:11:33:0c:71:9c:8a:b2:29:5b:cf:9c:62: 49:06:d0:41:bd:1b:c8:57:73:28:9d:96:88:89:72: f8:e4:c7:16:a8:41:f7:07:ee:cd:d8:d5:c1:00:04: 89:86:cf:d3:9a:0d:f7:fb:27:9f:27:88:da:07:d9: b4:9f:ba:5f:f3:07:a7:49:b0:4e:06:08:00:cb:c4: 1b:0c:ff:46:5a:33:7e:48:0e:6b:95:26:52:42:42: 14:39:38:ff:c7:34:f6:26:e9:ef:e0:ea:1c:9a:27: 82:58:d2:cc:2f:b4:de:7d:1e:c4:68:0c:10:70:aa: 32:d4:a0:dc:f9:2b:07:85:92:15:8b:5f:ac:d5:a4: fa:25:40:91:0e:da:e0:70:fe:9f:11:6d:f3:57:2a: c5:9b:57:7a:1c:41:2f:23:7f:4f:10:90:ee:65:a2: 5f:d0:d3:f8:47:50:60:b6:6d:cb:d0:3e:c7:5f:9e: 03:f8:24:8f:0c:f3:fe:6d:19:eb:57:3f:b4:47:bd: cb:19:a1:b8:ed:86:ca:f7:2e:de:7d:eb:60:8d:97: 06:c3:6f:08:d3:a4:84:51:8d:be:6a:6a:82:a8:09: 25:4f:26:2f:6b:91:b8:12:9c:fc:f6:97:5b:21:13: f1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7C:69:C8:C6:9E:36:E7:E4:2C:F6:EB:E9:E7:EF:FC:2A:09:7F:61 X509v3 Authority Key Identifier: keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:71:fc:ec:e4:20:27:bd:5f:43:14:69:da:f9:1c:b1:c1:cb: 91:5f:ca:02:a7:bc:da:42:9a:9d:2d:45:9e:7c:a0:ae:06:49: 9a:52:f0:a2:47:c2:e9:19:91:c8:e2:e9:7d:9e:88:75:ca:ea: 7b:60:65:b5:1a:4f:e5:fb:41:4d:cb:07:74:ba:33:63:04:a9: 41:71:9c:e3:07:fe:5f:ad:1d:69:69:67:44:3b:53:64:ef:5e: 4c:ed:0f:0f:78:56:a0:43:02:31:96:10:97:7a:d3:9d:c0:5a: 4e:ae:e1:a7:f6:77:a3:81:da:30:d5:b7:e0:42:b5:f3:f1:e5: d1:5d:f6:51:1a:74:d4:09:fc:33:2c:f2:f2:b2:90:55:ff:35: da:c4:09:1c:06:57:e6:50:a0:a0:7b:28:19:56:8f:24:b5:e7: 2f:9d:65:49:56:12:3c:43:ae:38:1e:b9:91:89:9e:fe:be:ec: 1b:3d:26:79:62:73:ee:99:eb:71:07:2c:43:bd:1e:5d:cf:f9: 84:0a:2b:48:55:aa:aa:aa:0c:7d:22:6b:7f:cd:b8:85:1d:db: 93:99:72:99:9d:c2:14:0f:25:05:fd:12:1f:e7:6f:14:18:0c: 4a:1f:b0:cf:ce:75:1b:17:cb:4a:40:59:c4:a1:2a:48:32:ca: 74:25:c4:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZBRkYxMTAvBgNVBAUTKDUxRDUzMUFFRjdBMDg3QzE4RTMwMUUwRTZBMkM2Mzcx QjI2NEMzRTgwHhcNMjUwNzIxMDMxMjE1WhcNMjUwNzI4MDMxMjE1WjAYMRYwFAYD VQQDEw02ODdkYjAwZi1lMTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIOfUCH3BPpXpdkxa+j9KG4RMwxxnIqyKVvPnGJJBtBBvRvIV3MonZaIiXL4 5McWqEH3B+7N2NXBAASJhs/Tmg33+yefJ4jaB9m0n7pf8wenSbBOBggAy8QbDP9G WjN+SA5rlSZSQkIUOTj/xzT2Junv4OocmieCWNLML7TefR7EaAwQcKoy1KDc+SsH hZIVi1+s1aT6JUCRDtrgcP6fEW3zVyrFm1d6HEEvI39PEJDuZaJf0NP4R1Bgtm3L 0D7HX54D+CSPDPP+bRnrVz+0R73LGaG47YbK9y7efetgjZcGw28I06SEUY2+amqC qAklTyYva5G4Epz89pdbIRPx2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJl8acjG njbn5Cz26+nn7/wqCX9hMB8GA1UdIwQYMBaAFFHVMa73oIfBjjAeDmosY3GyZMPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkFGRi9EMDYxMUYwNEND NDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4R09NQjRPYWl4amNiSmt3 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkVXhydmVnaDhHT01CNE9haXhqY2JKa3ctZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkFGRi9EMDYxMUYwNENDNDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4 R09NQjRPYWl4amNiSmt3LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrcfzs5CAnvV9DFGna+RyxwcuRX8oCp7zaQpqdLUWefKCuBkmaUvCi R8LpGZHI4ul9noh1yup7YGW1Gk/l+0FNywd0ujNjBKlBcZzjB/5frR1paWdEO1Nk 715M7Q8PeFagQwIxlhCXetOdwFpOruGn9nejgdow1bfgQrXz8eXRXfZRGnTUCfwz LPLyspBV/zXaxAkcBlfmUKCgeygZVo8ktecvnWVJVhI8Q644HrmRiZ7+vuwbPSZ5 YnPumetxByxDvR5dz/mECitIVaqqqgx9Imt/zbiFHduTmXKZncIUDyUF/RIf528U GAxKH7DPznUbF8tKQFnEoSpIMsp0JcSi -----END CERTIFICATE-----Generated at Mon Jul 21 18:23:44 2025 by rpki-client