$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft File: UoKkZCr301eZKRu6RH6hQlGk1fw.mft (raw, json) Hash identifier: 3nQDGz+bZ6lujONpB/t1qrG3dkV1+xh4jhzbgq3/a3g= Subject key identifier: 7D:99:80:B4:CB:AF:9F:C3:49:00:70:89:D5:CC:C8:E7:1A:E9:C3:D5 Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Certificate serial: 087E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft Manifest number: 1FFA Signing time: Sat 06 Sep 2025 16:38:53 +0000 Manifest this update: Sat 06 Sep 2025 16:38:52 +0000 Manifest next update: Sat 13 Sep 2025 16:38:52 +0000 Files and hashes: 1: UoKkZCr301eZKRu6RH6hQlGk1fw.crl (hash: mvMiolqarLti89S77rw1V6xUofpMIdAFMj90A0yXKFE=) 2: 654665EA197611F09D2B1C76C4F9AE02.roa (hash: hgO4m8NBFvCWTk/xZ7lTPgH3uo1aBC3KP8OdcPsjkbo=) 3: B5E806CC8BC711EE899A5284C4F9AE02.roa (hash: XzzXA6m5Sfbs0sLhTPVckgYHL3ZiipFrwRLSzgKZ33U=) 4: 172C2B96197711F0A993397AC4F9AE02.roa (hash: 8Qo70bxIag9X+h+p9rkvEiGVmiiK66r021Qwo1g6tkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 16:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2174 (0x87e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9, serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Validity Not Before: Sep 6 16:38:52 2025 GMT Not After : Sep 13 16:38:52 2025 GMT Subject: CN=68bc639c-e723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:15:64:4d:7f:9c:ac:21:0b:9f:64:75:53:3d: 5c:28:a8:d1:47:c9:7a:c6:07:84:c9:86:a0:ae:b6: 03:4c:db:ff:c8:67:86:3b:e0:8b:b9:f2:ff:a3:24: 2a:b4:92:d3:70:16:7c:8b:00:eb:ae:e5:cc:84:f5: f0:99:02:3c:df:59:4b:6b:74:7f:63:2d:4b:ce:11: bd:d0:d3:97:be:63:cd:3c:89:9d:94:ab:19:85:83: fc:d6:a5:b8:1b:f6:94:78:06:7a:c2:d6:f5:3b:31: 72:84:e8:47:ca:97:60:51:eb:43:b7:63:71:ea:cc: a8:10:5b:a2:4f:ee:d5:89:48:ca:c9:83:7f:fa:ce: 61:66:12:18:b1:03:55:8f:8a:ed:80:86:2d:43:10: ed:5c:32:41:9d:ed:6e:2d:1f:d6:ae:3e:60:d1:f9: 09:e0:37:64:d1:dd:17:fc:4e:1f:94:95:40:ff:28: 41:72:59:72:8a:fc:d5:78:f3:02:1a:8c:b5:c4:2f: 97:8d:38:09:5c:05:93:b0:e9:34:90:c4:f9:20:45: ce:51:31:13:0e:26:61:bd:4d:79:49:38:c9:a3:84: 1d:dd:59:37:6b:eb:dd:58:d8:b4:76:d5:c7:1c:70: f1:35:76:31:a0:0f:6c:c3:76:9f:4f:06:ca:22:b8: 68:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:99:80:B4:CB:AF:9F:C3:49:00:70:89:D5:CC:C8:E7:1A:E9:C3:D5 X509v3 Authority Key Identifier: keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:7c:53:2f:95:6d:ca:3a:6b:13:20:06:84:52:b7:6d:13:50: 03:42:80:e7:1c:04:1e:77:0d:ba:2b:bd:01:1d:4d:a3:80:26: e2:c5:16:7d:b9:f9:dd:b1:d7:e3:0e:86:a5:0d:b5:80:dc:f1: a2:12:e9:8a:21:15:9c:90:f4:f5:8e:07:3b:af:0e:57:0a:f2: 3b:ef:3f:f1:29:00:77:3e:f6:a2:ae:81:8a:f2:ee:fd:14:08: 83:1e:10:34:32:bb:e7:24:e0:1c:6f:80:55:ee:49:af:06:88: b7:74:20:1a:c5:6d:ab:4a:41:55:43:28:12:d8:5e:95:80:4d: 04:fb:ca:d0:ff:95:af:f0:c5:9b:0f:4c:ba:09:99:39:d1:eb: 10:4f:a6:d5:1a:ac:9c:9e:4a:fa:ed:00:04:5d:d0:a7:f0:90: c3:a2:96:30:6b:aa:39:bd:48:51:ee:2c:5c:f3:d6:ad:b4:81: 07:50:c1:bb:67:1e:2b:52:26:4a:e3:d7:01:c0:24:fa:88:58: f6:8b:17:58:a0:ac:d3:2b:b4:c7:54:79:7a:ea:67:7a:29:5e: 7c:5f:be:ac:3f:73:97:ea:ae:e6:a6:ab:04:70:01:b3:a1:6e: 87:e1:d1:f7:14:4f:51:8d:be:f6:c7:5f:56:06:b1:64:16:c2: 53:c0:75:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDUyODJBNDY0MkFGN0QzNTc5OTI5MUJCQTQ0N0VBMTQy NTFBNEQ1RkMwHhcNMjUwOTA2MTYzODUyWhcNMjUwOTEzMTYzODUyWjAYMRYwFAYD VQQDEw02OGJjNjM5Yy1lNzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhVkTX+crCELn2R1Uz1cKKjRR8l6xgeEyYagrrYDTNv/yGeGO+CLufL/oyQq tJLTcBZ8iwDrruXMhPXwmQI831lLa3R/Yy1LzhG90NOXvmPNPImdlKsZhYP81qW4 G/aUeAZ6wtb1OzFyhOhHypdgUetDt2Nx6syoEFuiT+7ViUjKyYN/+s5hZhIYsQNV j4rtgIYtQxDtXDJBne1uLR/Wrj5g0fkJ4Ddk0d0X/E4flJVA/yhBcllyivzVePMC Goy1xC+XjTgJXAWTsOk0kMT5IEXOUTETDiZhvU15STjJo4Qd3Vk3a+vdWNi0dtXH HHDxNXYxoA9sw3afTwbKIrhoTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2ZgLTL r5/DSQBwidXMyOca6cPVMB8GA1UdIwQYMBaAFFKCpGQq99NXmSkbukR+oUJRpNX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAxZVpLUnU2Ukg2aFFsR2sx ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvS2taQ3IzMDFlWktSdTZSSDZoUWxHazFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODJEOS8wRURBNkQ1RUNEREExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAx ZVpLUnU2Ukg2aFFsR2sxZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSfFMvlW3KOmsTIAaEUrdtE1ADQoDnHAQedw26K70BHU2jgCbixRZ9 ufndsdfjDoalDbWA3PGiEumKIRWckPT1jgc7rw5XCvI77z/xKQB3PvairoGK8u79 FAiDHhA0MrvnJOAcb4BV7kmvBoi3dCAaxW2rSkFVQygS2F6VgE0E+8rQ/5Wv8MWb D0y6CZk50esQT6bVGqycnkr67QAEXdCn8JDDopYwa6o5vUhR7ixc89attIEHUMG7 Zx4rUiZK49cBwCT6iFj2ixdYoKzTK7THVHl66md6KV58X76sP3OX6q7mpqsEcAGz oW6H4dH3FE9Rjb72x19WBrFkFsJTwHVX -----END CERTIFICATE-----Generated at Mon Sep 8 17:35:01 2025 by rpki-client