$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft File: UtXW_72oj1ReUbr5n32s4ZPAblc.mft (raw, json) Hash identifier: adpE6ToEYEcxymq9cdsVToiA+YuIz+W7i8JsnBg05gI= Subject key identifier: AD:02:D8:50:7B:45:97:6D:AB:54:C6:20:68:B0:27:13:96:70:3C:39 Authority key identifier: 52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57 Certificate issuer: /CN=A91F17F6/serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57 Certificate serial: 07F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft Manifest number: 07EC Signing time: Tue 22 Jul 2025 21:15:14 +0000 Manifest this update: Tue 22 Jul 2025 21:15:14 +0000 Manifest next update: Tue 29 Jul 2025 21:15:14 +0000 Files and hashes: 1: UtXW_72oj1ReUbr5n32s4ZPAblc.crl (hash: KBwFO240EVIOhUBybGp9mbuIYvnEp7LWHBCDELRyNS8=) 2: AF95E6D8F2B711EAA1C01744C4F9AE02.roa (hash: X3Zxmzy65RFAr4wRuSkQChvufHFA8zifcOkEqKI8dKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 21:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2035 (0x7f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17F6, serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57 Validity Not Before: Jul 22 21:15:14 2025 GMT Not After : Jul 29 21:15:14 2025 GMT Subject: CN=687fff62-7343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ac:8e:2d:20:11:be:53:8d:15:f3:79:e3:82: c5:94:41:52:82:ee:63:24:9f:53:24:25:b9:61:11: 5c:7a:c0:5b:14:99:c8:21:ad:a3:65:84:b5:36:f7: e7:8b:f8:a6:e9:57:00:a3:12:fd:20:20:6e:46:50: ad:ab:42:86:c6:9b:54:f8:f8:93:cf:df:e5:c9:d7: 5e:1b:fb:06:09:eb:9c:e4:5f:6c:bc:a6:6f:b4:55: c3:8f:17:f7:7d:62:bc:e7:e7:2f:bc:03:65:2c:3c: 85:36:e8:64:f8:4d:50:72:fb:54:3e:fc:19:14:84: a1:46:1e:aa:c3:2f:b4:ca:56:63:ad:39:8c:7d:d5: aa:2f:80:c4:b0:52:77:d2:7e:30:c6:54:0d:55:c9: a7:d1:d9:01:fe:23:2b:cd:6b:db:e5:92:b1:46:22: f3:fd:e9:ae:16:29:ff:ad:9a:f3:46:8f:5e:f3:fa: 74:ba:65:f8:c1:0b:26:c2:09:0c:fd:af:f5:0c:35: 88:6f:53:56:bb:57:6b:d8:63:02:a2:07:6a:7d:02: 9e:b3:09:79:ef:39:41:c3:58:7b:d3:de:84:ab:70: ea:78:59:c9:e6:6f:03:29:dd:ea:52:b3:75:1e:39: 46:5b:2d:96:d7:8e:41:08:be:db:95:04:3b:6f:35: 37:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:02:D8:50:7B:45:97:6D:AB:54:C6:20:68:B0:27:13:96:70:3C:39 X509v3 Authority Key Identifier: keyid:52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:0b:0f:7e:51:3d:3c:19:59:54:2a:1d:e8:7b:7a:07:c6:95: c6:d4:19:fc:fa:59:5d:de:be:b9:9d:94:95:ea:fe:ad:25:46: 76:f9:81:a3:b2:d3:59:68:ab:a2:d3:c0:b4:8c:af:05:41:c3: e0:80:bb:cd:ad:eb:f6:b8:49:58:b3:f9:ee:77:a8:32:e8:05: d5:25:e3:0b:16:22:4a:e2:c1:43:d9:18:c2:0c:e0:3d:32:ce: c4:e5:72:ee:09:f0:a5:cc:0c:5f:83:b3:0b:eb:f2:97:d2:a9: b6:d2:50:ee:c6:15:78:66:cf:68:4c:12:6e:2b:a1:b3:75:15: 8f:4e:57:d7:55:93:ef:3c:05:bd:84:35:41:b6:5b:ce:8f:32: 5b:75:6f:13:46:e7:9b:64:04:ab:41:64:5c:cf:4d:34:24:1a: 2a:66:48:0b:d6:c7:83:9d:c7:95:ef:56:73:a6:88:f3:8d:63: c6:a1:0e:cb:d6:25:09:f5:11:a1:89:07:c3:2d:82:0a:c3:7c: 45:36:68:28:ad:b9:2b:2f:31:70:b7:27:66:78:90:9f:e9:fa: 29:3b:04:80:b5:f2:44:3c:94:37:4d:29:53:82:11:27:b2:f9: 63:79:69:ad:e7:fe:0c:da:93:8f:a3:51:7f:0d:4d:92:15:55: 4f:8e:eb:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3RjYxMTAvBgNVBAUTKDUyRDVENkZGQkRBODhGNTQ1RTUxQkFGOTlGN0RBQ0Ux OTNDMDZFNTcwHhcNMjUwNzIyMjExNTE0WhcNMjUwNzI5MjExNTE0WjAYMRYwFAYD VQQDEw02ODdmZmY2Mi03MzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtayOLSARvlONFfN544LFlEFSgu5jJJ9TJCW5YRFcesBbFJnIIa2jZYS1Nvfn i/im6VcAoxL9ICBuRlCtq0KGxptU+PiTz9/lyddeG/sGCeuc5F9svKZvtFXDjxf3 fWK85+cvvANlLDyFNuhk+E1QcvtUPvwZFIShRh6qwy+0ylZjrTmMfdWqL4DEsFJ3 0n4wxlQNVcmn0dkB/iMrzWvb5ZKxRiLz/emuFin/rZrzRo9e8/p0umX4wQsmwgkM /a/1DDWIb1NWu1dr2GMCogdqfQKeswl57zlBw1h7096Eq3DqeFnJ5m8DKd3qUrN1 HjlGWy2W145BCL7blQQ7bzU30wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0C2FB7 RZdtq1TGIGiwJxOWcDw5MB8GA1UdIwQYMBaAFFLV1v+9qI9UXlG6+Z99rOGTwG5X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdGNi9FRDkzQ0VFOEYy QjUxMUVBOUEzRjYzNDFDNEY5QUUwMi9VdFhXXzcyb2oxUmVVYnI1bjMyczRaUEFi bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V0WFdfNzJvajFSZVVicjVuMzJzNFpQQWJsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdGNi9FRDkzQ0VFOEYyQjUxMUVBOUEzRjYzNDFDNEY5QUUwMi9VdFhXXzcyb2ox UmVVYnI1bjMyczRaUEFibGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHCw9+UT08GVlUKh3oe3oHxpXG1Bn8+lld3r65nZSV6v6tJUZ2+YGj stNZaKui08C0jK8FQcPggLvNrev2uElYs/nud6gy6AXVJeMLFiJK4sFD2RjCDOA9 Ms7E5XLuCfClzAxfg7ML6/KX0qm20lDuxhV4Zs9oTBJuK6GzdRWPTlfXVZPvPAW9 hDVBtlvOjzJbdW8TRuebZASrQWRcz000JBoqZkgL1seDnceV71ZzpojzjWPGoQ7L 1iUJ9RGhiQfDLYIKw3xFNmgorbkrLzFwtydmeJCf6fopOwSAtfJEPJQ3TSlTghEn svljeWmt5/4M2pOPo1F/DU2SFVVPjuvY -----END CERTIFICATE-----Generated at Wed Jul 23 12:17:09 2025 by rpki-client