$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft File: UgupTND7nnwUDfvAzFi5PPVMIvM.mft (raw, json) Hash identifier: +dffNhGW2IHevxd/c6qyFjsCVh/Qql3dgbUbl+cQcDM= Subject key identifier: E6:F0:04:81:16:1A:02:DA:9B:AE:A7:66:0B:47:33:05:AD:14:08:EE Authority key identifier: 52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3 Certificate issuer: /CN=A91F8981/serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft Manifest number: A1 Signing time: Sat 19 Jul 2025 06:27:34 +0000 Manifest this update: Sat 19 Jul 2025 06:27:33 +0000 Manifest next update: Sat 26 Jul 2025 06:27:33 +0000 Files and hashes: 1: UgupTND7nnwUDfvAzFi5PPVMIvM.crl (hash: FERsEh2IEvHioufxfhGEYpEBzArChFGZu3OmurPeaNs=) 2: D79D112E6C7F11EF92105459C4F9AE02.roa (hash: HfxBV0ZJ9ixuR1eesZIIiZUZrrfXBYTU4Z7Ry5c0lbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8981, serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3 Validity Not Before: Jul 19 06:27:33 2025 GMT Not After : Jul 26 06:27:33 2025 GMT Subject: CN=687b3ad5-76ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8f:7e:44:7d:23:ad:89:bc:60:b9:52:62:bb: a7:61:ee:92:76:12:c5:76:9c:04:03:65:17:c9:df: 10:dc:4b:c9:4d:cf:6e:44:94:0d:bb:a5:af:cf:83: a7:09:c6:92:95:36:20:90:e5:2e:9e:19:2a:97:f3: 3f:92:55:b7:4f:55:56:16:aa:b7:fb:85:5d:11:fa: be:e5:5b:14:6e:67:ed:d7:32:49:9e:0a:80:b7:93: 53:3e:c7:13:a2:64:6c:8f:44:16:7f:fa:e8:06:4e: 8b:88:96:a4:d5:9f:40:86:5a:3a:1f:a0:80:d1:dc: f3:94:0b:13:68:d6:f9:50:6e:d0:36:6f:33:50:1b: 88:bc:61:ab:66:15:56:e6:b7:53:41:ac:6f:ee:59: ab:a2:c5:dc:fa:ed:0a:4e:02:b0:4c:34:9d:c7:e9: 01:8d:a0:b6:d1:50:00:2b:6d:80:ed:07:34:a7:f7: e9:d1:a5:8a:e0:51:a2:48:38:c7:c7:25:9f:f0:06: f8:b9:b1:f2:75:2a:27:48:0e:fc:82:46:a7:77:66: b1:db:dc:f7:c3:bf:3f:8f:2a:e7:aa:4b:44:6a:d4: 8b:a6:3e:30:6e:2a:8e:76:6c:e7:07:04:eb:19:84: d1:d4:5a:80:5c:6d:c9:1f:c7:4d:2f:9e:30:73:05: bc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F0:04:81:16:1A:02:DA:9B:AE:A7:66:0B:47:33:05:AD:14:08:EE X509v3 Authority Key Identifier: keyid:52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:44:14:b5:7d:1c:00:21:ac:e4:3c:0e:2b:08:d6:5b:cf:92: 70:1c:a0:9e:90:21:b6:92:5a:e7:31:91:92:b4:b8:62:29:25: 55:8a:93:f2:c5:62:aa:34:ab:47:56:53:fe:29:68:ac:ce:ff: 1c:5f:72:c4:8b:03:3b:35:70:cb:09:e8:ca:e1:3f:2e:cc:3e: 24:2e:43:71:60:99:09:75:cd:a7:7b:69:4e:54:a7:b4:ac:8c: ff:90:74:95:e4:70:34:e2:d1:5b:bf:e6:9e:fe:f2:5b:25:1e: 65:41:b3:0c:22:f4:91:89:74:9c:bf:e2:46:8d:20:25:2c:ee: 7a:af:7e:53:34:81:e4:07:98:cd:f1:aa:55:d2:2f:50:fd:61: b3:b0:a8:ea:76:f0:78:c3:4f:b0:85:9f:83:71:d7:38:d3:13: 15:54:45:ec:f2:ad:12:5b:b3:ac:ca:a1:2f:ea:59:85:98:63: fa:c4:36:b9:df:c6:0e:46:1e:8d:49:d0:9f:b4:fd:cc:07:bb: f0:c8:30:aa:7a:ee:56:f9:26:3c:31:5c:0d:06:4b:4e:32:70: 1a:b7:16:31:0a:78:41:04:74:76:e6:bb:10:a8:eb:0d:17:69: c7:0e:fe:f9:0e:b3:cd:be:ad:d6:6a:f2:ba:b1:eb:87:2c:71: 09:aa:4c:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5ODExMTAvBgNVBAUTKDUyMEJBOTRDRDBGQjlFN0MxNDBERkJDMENDNThCOTND RjU0QzIyRjMwHhcNMjUwNzE5MDYyNzMzWhcNMjUwNzI2MDYyNzMzWjAYMRYwFAYD VQQDEw02ODdiM2FkNS03NmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxY9+RH0jrYm8YLlSYrunYe6SdhLFdpwEA2UXyd8Q3EvJTc9uRJQNu6Wvz4On CcaSlTYgkOUunhkql/M/klW3T1VWFqq3+4VdEfq+5VsUbmft1zJJngqAt5NTPscT omRsj0QWf/roBk6LiJak1Z9Ahlo6H6CA0dzzlAsTaNb5UG7QNm8zUBuIvGGrZhVW 5rdTQaxv7lmrosXc+u0KTgKwTDSdx+kBjaC20VAAK22A7Qc0p/fp0aWK4FGiSDjH xyWf8Ab4ubHydSonSA78gkand2ax29z3w78/jyrnqktEatSLpj4wbiqOdmznBwTr GYTR1FqAXG3JH8dNL54wcwW8YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObwBIEW GgLam66nZgtHMwWtFAjuMB8GA1UdIwQYMBaAFFILqUzQ+558FA37wMxYuTz1TCLz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk4MS8xQ0Y2Q0Q3NDZD N0YxMUVGOTE0RDdENTdDNEY5QUUwMi9VZ3VwVE5EN25ud1VEZnZBekZpNVBQVk1J dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VndXBUTkQ3bm53VURmdkF6Rmk1UFBWTUl2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk4MS8xQ0Y2Q0Q3NDZDN0YxMUVGOTE0RDdENTdDNEY5QUUwMi9VZ3VwVE5EN25u d1VEZnZBekZpNVBQVk1Jdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzRBS1fRwAIazkPA4rCNZbz5JwHKCekCG2klrnMZGStLhiKSVVipPy xWKqNKtHVlP+KWiszv8cX3LEiwM7NXDLCejK4T8uzD4kLkNxYJkJdc2ne2lOVKe0 rIz/kHSV5HA04tFbv+ae/vJbJR5lQbMMIvSRiXScv+JGjSAlLO56r35TNIHkB5jN 8apV0i9Q/WGzsKjqdvB4w0+whZ+Dcdc40xMVVEXs8q0SW7OsyqEv6lmFmGP6xDa5 38YORh6NSdCftP3MB7vwyDCqeu5W+SY8MVwNBktOMnAatxYxCnhBBHR25rsQqOsN F2nHDv75DrPNvq3WavK6seuHLHEJqkxd -----END CERTIFICATE-----Generated at Sun Jul 20 06:18:36 2025 by rpki-client