$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft File: uSVP8yozKY2dXGFc_aRTFeFcfLU.mft (raw, json) Hash identifier: sZAxnbhe59+dyVUWMyrdjcrxaY72We/9fdhV9lSTRhI= Subject key identifier: 6A:62:24:E7:0E:17:49:11:FB:28:B0:CC:0F:02:04:2E:3B:AE:8D:F9 Authority key identifier: B9:25:4F:F3:2A:33:29:8D:9D:5C:61:5C:FD:A4:53:15:E1:5C:7C:B5 Certificate issuer: /CN=A91F3043/serialNumber=B9254FF32A33298D9D5C615CFDA45315E15C7CB5 Certificate serial: 0663 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft Manifest number: 065A Signing time: Sun 20 Jul 2025 22:44:40 +0000 Manifest this update: Sun 20 Jul 2025 22:44:39 +0000 Manifest next update: Sun 27 Jul 2025 22:44:39 +0000 Files and hashes: 1: uSVP8yozKY2dXGFc_aRTFeFcfLU.crl (hash: KmUldtVQq9CjeRhSr4VzKWpaSlLFZy3/Eq/gXRo4EjE=) 2: BDFE68F491FD11EB84408D16C4F9AE02.roa (hash: NiOCVi1ZAoRhfdZ2LF+ut8x9beDsO9AQBCdgx3wc2ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.crl rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1635 (0x663) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3043, serialNumber=B9254FF32A33298D9D5C615CFDA45315E15C7CB5 Validity Not Before: Jul 20 22:44:39 2025 GMT Not After : Jul 27 22:44:39 2025 GMT Subject: CN=687d7157-8c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1c:2e:61:9f:29:8d:d5:1a:93:36:eb:91:68: 9f:1a:1a:c3:b6:67:d1:ae:38:72:74:d3:da:e1:00: 8e:8b:87:7e:75:79:66:6b:72:e8:cf:f2:e5:a5:c0: a6:48:b9:3d:a9:75:5a:d5:b6:7b:fe:d8:e3:c2:0a: 0e:ec:de:ab:e0:ff:cf:87:b5:20:cf:14:a8:4d:15: c5:59:08:59:19:fc:bf:ef:9b:b7:fd:81:4f:b5:b8: 5b:10:60:da:15:a8:68:6a:1c:84:06:78:fa:fd:65: b2:4d:53:ad:df:87:97:00:ec:c3:42:8b:a0:66:c1: ea:ad:9d:98:25:43:e8:e5:fe:fd:b8:09:35:ab:41: 18:d5:d0:30:d3:94:55:ad:ef:4b:c6:bf:2a:94:eb: 58:ab:68:80:b3:e9:9b:fb:c9:2f:11:c9:43:98:8a: 81:6e:96:c0:b7:3e:2e:e2:2e:83:4c:b8:b2:8f:32: 77:1e:36:d2:2b:30:fb:7d:a8:8f:15:bd:c2:16:62: 63:0f:ba:c0:94:4e:32:88:38:cd:d3:8f:77:c7:d5: 80:31:74:67:f5:6a:11:f6:3a:14:9b:f9:fb:6a:1b: 91:3e:4a:98:65:d5:2d:84:f7:f2:d7:f6:75:2e:81: 8f:56:26:1f:48:17:da:2b:a9:c2:41:39:eb:c5:27: 99:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:62:24:E7:0E:17:49:11:FB:28:B0:CC:0F:02:04:2E:3B:AE:8D:F9 X509v3 Authority Key Identifier: keyid:B9:25:4F:F3:2A:33:29:8D:9D:5C:61:5C:FD:A4:53:15:E1:5C:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:4b:29:95:07:e0:57:15:06:b5:33:8e:77:35:33:5f:09:e5: 5f:7f:9f:72:92:b2:15:ae:e2:91:bf:17:5d:13:05:cc:75:54: e6:13:e5:d6:9b:33:b3:c2:9f:b4:37:bf:0b:a1:f8:47:4c:cd: fa:66:8c:e2:39:7a:82:41:f1:e6:4d:8f:af:69:49:f3:07:1d: 4a:2c:70:c7:db:0b:06:48:be:52:bf:8b:77:15:e9:00:35:5c: 32:f3:91:5d:ec:32:18:ae:ab:b9:ed:f6:54:f4:33:2e:46:14: 09:2f:70:3d:59:c7:37:19:c7:8d:3d:93:68:b1:3b:55:f7:96: 63:5b:6f:dc:44:29:15:a3:84:1c:09:c2:ce:a5:11:b8:02:d1: b1:ee:0d:24:96:c2:38:9f:7c:f2:9a:3f:4e:de:82:75:95:93: 43:16:ac:57:c8:ca:48:0b:9e:8e:9e:6c:55:ea:7a:39:71:77: b2:c0:5a:38:c4:d0:6f:20:bb:82:d3:4f:46:de:df:cd:17:de: a3:37:a7:19:4b:3b:dc:8d:b3:c4:8d:a5:eb:b1:71:0a:73:aa: 4a:15:02:79:21:7a:b7:00:1a:9f:d0:d0:eb:4c:6e:0a:82:e8: fa:1a:1b:cc:f5:82:9e:67:e8:20:03:fc:21:c6:ec:46:24:67: d8:d0:16:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwNDMxMTAvBgNVBAUTKEI5MjU0RkYzMkEzMzI5OEQ5RDVDNjE1Q0ZEQTQ1MzE1 RTE1QzdDQjUwHhcNMjUwNzIwMjI0NDM5WhcNMjUwNzI3MjI0NDM5WjAYMRYwFAYD VQQDEw02ODdkNzE1Ny04YzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxwuYZ8pjdUakzbrkWifGhrDtmfRrjhydNPa4QCOi4d+dXlma3Loz/LlpcCm SLk9qXVa1bZ7/tjjwgoO7N6r4P/Ph7UgzxSoTRXFWQhZGfy/75u3/YFPtbhbEGDa FahoahyEBnj6/WWyTVOt34eXAOzDQougZsHqrZ2YJUPo5f79uAk1q0EY1dAw05RV re9Lxr8qlOtYq2iAs+mb+8kvEclDmIqBbpbAtz4u4i6DTLiyjzJ3HjbSKzD7faiP Fb3CFmJjD7rAlE4yiDjN0493x9WAMXRn9WoR9joUm/n7ahuRPkqYZdUthPfy1/Z1 LoGPViYfSBfaK6nCQTnrxSeZ7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpiJOcO F0kR+yiwzA8CBC47ro35MB8GA1UdIwQYMBaAFLklT/MqMymNnVxhXP2kUxXhXHy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzA0My8zOTZDNUQ0MDkx RkMxMUVCQTk5OERCMTRDNEY5QUUwMi91U1ZQOHlvektZMmRYR0ZjX2FSVEZlRmNm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VTVlA4eW96S1kyZFhHRmNfYVJURmVGY2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzA0My8zOTZDNUQ0MDkxRkMxMUVCQTk5OERCMTRDNEY5QUUwMi91U1ZQOHlvektZ MmRYR0ZjX2FSVEZlRmNmTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzSymVB+BXFQa1M453NTNfCeVff59ykrIVruKRvxddEwXMdVTmE+XW mzOzwp+0N78LofhHTM36ZoziOXqCQfHmTY+vaUnzBx1KLHDH2wsGSL5Sv4t3FekA NVwy85Fd7DIYrqu57fZU9DMuRhQJL3A9Wcc3GceNPZNosTtV95ZjW2/cRCkVo4Qc CcLOpRG4AtGx7g0klsI4n3zymj9O3oJ1lZNDFqxXyMpIC56OnmxV6no5cXeywFo4 xNBvILuC009G3t/NF96jN6cZSzvcjbPEjaXrsXEKc6pKFQJ5IXq3ABqf0NDrTG4K guj6GhvM9YKeZ+ggA/whxuxGJGfY0BZ5 -----END CERTIFICATE-----Generated at Tue Jul 22 04:53:11 2025 by rpki-client