$ rpki-client -vvf rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft File: aUCPaxygKBZoPM5MCOAEkyUZRLI.mft (raw, json) Hash identifier: waunV1CJeadL/9286jopx1Ow6RPa0vUh3/cfKgLVABo= Subject key identifier: AE:2B:53:C4:F3:FC:B3:7E:F0:A5:8D:92:4F:DA:70:93:45:0C:25:99 Authority key identifier: 69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2 Certificate issuer: /CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2 Certificate serial: 0A78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft Manifest number: 0A62 Signing time: Mon 08 Sep 2025 19:43:46 +0000 Manifest this update: Mon 08 Sep 2025 19:43:46 +0000 Manifest next update: Mon 15 Sep 2025 19:43:46 +0000 Files and hashes: 1: aUCPaxygKBZoPM5MCOAEkyUZRLI.crl (hash: AEtsW6mqZq1KydgEDf1Vz7V+q+bTqnzdlqvfQWK88x8=) 2: 834C938A12C711F09998A234C4F9AE02.roa (hash: M4mfahqMzwmq58j++0Teybq9n4Aqspe3mvfksixkbgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 19:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2680 (0xa78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91166FC, serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2 Validity Not Before: Sep 8 19:43:46 2025 GMT Not After : Sep 15 19:43:46 2025 GMT Subject: CN=68bf31f2-bf46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7c:3b:71:b1:00:1f:f4:bc:80:4f:b5:f4:9b: f9:fa:ea:e3:d0:f9:91:c3:71:d2:34:07:86:ed:6e: 85:3f:14:5f:c8:f1:5a:ec:00:74:49:86:d0:34:f8: 85:f9:44:db:b2:78:cd:02:ff:d9:90:fd:88:e2:c2: 5a:da:39:7b:eb:6a:d9:07:48:8f:b4:f9:b3:22:ff: 12:27:6a:98:12:89:4d:68:2c:c3:54:74:01:88:8d: 74:a1:f4:98:4a:f2:16:38:92:68:b0:e6:0d:d1:0e: ed:30:4e:c5:c7:98:31:34:bd:30:73:83:ea:ec:0d: 53:eb:13:6b:8f:04:e3:96:5a:3a:f6:7c:11:6e:ed: b7:76:a7:df:4e:7c:e5:c5:b7:70:b8:8b:01:d8:50: a2:6e:8b:bc:dc:5c:f1:eb:f0:30:20:61:f5:7d:c6: d8:35:5b:cb:54:c9:8d:c6:7a:37:7f:d7:1a:d8:de: bd:88:ac:b9:7a:ef:eb:fe:43:ad:f8:38:d9:7a:19: b2:0a:2f:1a:87:68:0c:f7:9f:47:d7:a8:5c:8b:07: a7:5f:c8:10:e9:69:0c:30:84:70:8f:48:ba:57:35: 81:4c:e0:bc:99:3f:89:14:e6:bd:4e:02:d2:a2:10: b4:b1:36:b6:98:2d:14:60:3b:75:b0:1e:79:89:15: c5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2B:53:C4:F3:FC:B3:7E:F0:A5:8D:92:4F:DA:70:93:45:0C:25:99 X509v3 Authority Key Identifier: keyid:69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:ce:3f:d7:80:ea:6c:73:b2:7f:b2:d4:ef:4f:d1:0e:10:df: 51:56:ea:98:9d:d9:27:80:68:4f:9c:e2:80:3c:24:b1:83:98: db:8c:af:53:19:b1:78:9b:62:72:e7:98:42:7a:60:29:70:cb: 56:62:71:8c:88:cc:88:71:fd:9a:ee:eb:b4:1c:1b:54:68:5d: 8a:f3:d8:3f:9a:5a:25:b5:7c:09:28:1b:3c:be:71:65:dd:42: ae:9b:92:39:8b:b4:48:f8:6c:4b:17:73:6e:c2:74:2c:17:7e: fc:13:95:96:5c:80:7a:3e:bc:6c:05:4c:f8:0f:41:48:af:4f: 88:69:39:22:23:f9:b3:b4:b5:d4:b4:36:50:ef:a2:33:35:e1: e7:e2:6a:5d:0c:1c:6b:e8:b7:f6:60:36:80:85:e0:84:dc:05: 11:7d:b6:28:c1:fb:cb:4d:71:7a:30:bb:35:23:2c:98:a2:f2: b4:d5:d9:27:19:83:52:10:5c:37:b4:9d:87:4b:3c:4d:b1:b0: 48:b6:ec:38:3f:e3:17:b8:cd:9f:02:58:41:94:b5:0b:84:b8: db:b6:21:7e:25:b8:5c:b9:68:59:4f:cb:cd:0c:af:02:60:3a: a1:77:86:e1:20:0a:f6:ad:e4:a7:5f:3b:81:a7:7a:95:74:0e: 73:c6:14:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY2RkMxMTAvBgNVBAUTKDY5NDA4RjZCMUNBMDI4MTY2ODNDQ0U0QzA4RTAwNDkz MjUxOTQ0QjIwHhcNMjUwOTA4MTk0MzQ2WhcNMjUwOTE1MTk0MzQ2WjAYMRYwFAYD VQQDEw02OGJmMzFmMi1iZjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3w7cbEAH/S8gE+19Jv5+urj0PmRw3HSNAeG7W6FPxRfyPFa7AB0SYbQNPiF +UTbsnjNAv/ZkP2I4sJa2jl762rZB0iPtPmzIv8SJ2qYEolNaCzDVHQBiI10ofSY SvIWOJJosOYN0Q7tME7Fx5gxNL0wc4Pq7A1T6xNrjwTjllo69nwRbu23dqffTnzl xbdwuIsB2FCibou83Fzx6/AwIGH1fcbYNVvLVMmNxno3f9ca2N69iKy5eu/r/kOt +DjZehmyCi8ah2gM959H16hciwenX8gQ6WkMMIRwj0i6VzWBTOC8mT+JFOa9TgLS ohC0sTa2mC0UYDt1sB55iRXFiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4rU8Tz /LN+8KWNkk/acJNFDCWZMB8GA1UdIwQYMBaAFGlAj2scoCgWaDzOTAjgBJMlGUSy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZGQy9BQjFGNEVDQTcy OUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tCWm9QTTVNQ09BRWt5VVpS TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FVQ1BheHlnS0Jab1BNNU1DT0FFa3lVWlJMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjZGQy9BQjFGNEVDQTcyOUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tC Wm9QTTVNQ09BRWt5VVpSTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVzj/XgOpsc7J/stTvT9EOEN9RVuqYndkngGhPnOKAPCSxg5jbjK9T GbF4m2Jy55hCemApcMtWYnGMiMyIcf2a7uu0HBtUaF2K89g/mloltXwJKBs8vnFl 3UKum5I5i7RI+GxLF3NuwnQsF378E5WWXIB6PrxsBUz4D0FIr0+IaTkiI/mztLXU tDZQ76IzNeHn4mpdDBxr6Lf2YDaAheCE3AURfbYowfvLTXF6MLs1IyyYovK01dkn GYNSEFw3tJ2HSzxNsbBItuw4P+MXuM2fAlhBlLULhLjbtiF+JbhcuWhZT8vNDK8C YDqhd4bhIAr2reSnXzuBp3qVdA5zxhRv -----END CERTIFICATE-----Generated at Tue Sep 9 13:20:52 2025 by rpki-client