$ rpki-client -vvf rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft File: uEHIC-gYxhquhBeUDKPmnMFB348.mft (raw, json) Hash identifier: YdEpqyHNbGQHpz9zSuw79c1awanbBJ5dAho6CHF0i5Q= Subject key identifier: FB:C4:FC:18:D4:BB:D0:C5:F5:5A:41:8D:BE:F3:89:87:A8:E2:29:70 Authority key identifier: B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F Certificate issuer: /CN=A91859A3/serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F Certificate serial: 0FB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft Manifest number: 0FA8 Signing time: Sun 24 Aug 2025 17:29:15 +0000 Manifest this update: Sun 24 Aug 2025 17:29:15 +0000 Manifest next update: Sun 31 Aug 2025 17:29:15 +0000 Files and hashes: 1: uEHIC-gYxhquhBeUDKPmnMFB348.crl (hash: PUjyq94GS8rJ5ND1/55A41FjLLfhThvoIVbPlcOjNFM=) 2: FB45F610638211E9A58B4C45C4F9AE02.roa (hash: IofhJ7EiHeyM1r1MV+JctpkNg1pbQMhCCkdpR4fk3JY=) 3: 65EADA381A8011ECAD1E4B30C4F9AE02.roa (hash: WDBmQN8GrovE0YfJl6NcfDbYlw4MdWA6w33AFuBSc4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4022 (0xfb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91859A3, serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F Validity Not Before: Aug 24 17:29:15 2025 GMT Not After : Aug 31 17:29:15 2025 GMT Subject: CN=68ab4beb-8cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8b:6b:46:a3:1d:bc:36:ac:c5:ff:51:24:89: 67:be:c8:d1:b0:fe:66:9b:99:7b:4a:e0:68:23:7b: 57:f7:dd:a3:da:bd:e0:f6:42:4d:f8:15:14:80:cc: 45:8f:dc:53:fc:b9:c4:57:2e:ce:c4:44:14:8d:72: 6f:ae:16:82:d1:1f:b2:fc:cc:4e:2e:7e:f0:16:7c: 94:9d:ad:47:ae:22:68:f8:56:bc:6a:9c:37:c6:dd: 46:ac:2c:f0:ae:f7:23:2f:84:bb:ad:d3:90:72:d2: 0a:16:0d:82:cc:a2:11:20:d3:6c:a3:bd:c4:95:ae: 80:f7:df:87:95:2b:6d:8d:1f:82:4e:f9:f8:5f:67: 3a:0e:48:62:c7:0a:bc:46:1e:16:51:6f:35:56:4d: c1:1a:ff:ad:be:f2:1d:71:9e:41:3c:85:43:89:59: b5:84:0d:29:35:cb:1f:76:c2:74:7d:a2:d0:ba:15: 1a:3c:a6:df:a8:bf:86:e4:3b:a5:99:39:c4:9b:a4: 34:3d:05:63:9e:62:b1:8e:48:81:54:75:b0:22:38: 4e:41:9a:4e:f2:ae:ea:59:77:31:2f:00:5d:70:77: a2:b7:2d:65:d5:cd:b3:34:97:a9:22:a0:e0:1e:e3: d0:5d:fe:04:2f:1a:e7:79:65:c2:df:2b:09:f6:5c: 77:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C4:FC:18:D4:BB:D0:C5:F5:5A:41:8D:BE:F3:89:87:A8:E2:29:70 X509v3 Authority Key Identifier: keyid:B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:5d:10:8f:2f:c9:bf:ac:a8:a7:ef:6e:7d:96:72:8f:ad:f3: fa:5c:cd:dd:64:db:12:6a:62:a4:76:fe:80:e6:f1:4e:de:1d: e3:87:f8:bd:94:85:e6:dc:96:c5:8e:6f:7e:11:54:26:24:6c: 87:6b:e2:99:a4:76:8e:b6:c0:f0:b3:78:8a:9f:d8:83:da:d0: 23:67:df:32:cb:44:80:bd:e8:26:6b:5b:e7:0a:bf:03:d9:05: 24:7a:ab:8e:39:a8:5a:73:98:9a:52:f3:5e:71:ff:a3:db:53: 83:c6:a3:fa:18:b8:cc:de:5e:2a:3b:61:05:71:4d:b5:28:3d: 48:aa:b6:c6:69:05:0d:18:47:2d:a3:73:60:b3:45:12:18:c8: a1:c6:db:10:71:4a:8a:9f:69:2d:2d:d8:b4:ca:64:eb:ac:42: 83:71:9a:16:41:d1:a7:14:a2:48:9a:54:39:2f:cc:cb:3f:a4: fa:f9:bb:93:57:5e:69:df:c6:78:bd:02:04:19:72:ff:c7:31: 95:f3:d8:d4:07:4a:4b:24:55:88:fc:45:91:5d:4c:47:49:b5: fa:e9:85:47:8b:33:24:d7:80:e6:4b:db:77:c6:f4:4c:f5:62: 0d:56:b5:b4:d8:6c:70:7e:7c:56:72:cd:dd:37:a1:63:37:c1: 26:ae:44:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU5QTMxMTAvBgNVBAUTKEI4NDFDODBCRTgxOEM2MUFBRTg0MTc5NDBDQTNFNjlD QzE0MURGOEYwHhcNMjUwODI0MTcyOTE1WhcNMjUwODMxMTcyOTE1WjAYMRYwFAYD VQQDEw02OGFiNGJlYi04Y2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5YtrRqMdvDasxf9RJIlnvsjRsP5mm5l7SuBoI3tX992j2r3g9kJN+BUUgMxF j9xT/LnEVy7OxEQUjXJvrhaC0R+y/MxOLn7wFnyUna1HriJo+Fa8apw3xt1GrCzw rvcjL4S7rdOQctIKFg2CzKIRINNso73Ela6A99+HlSttjR+CTvn4X2c6Dkhixwq8 Rh4WUW81Vk3BGv+tvvIdcZ5BPIVDiVm1hA0pNcsfdsJ0faLQuhUaPKbfqL+G5Dul mTnEm6Q0PQVjnmKxjkiBVHWwIjhOQZpO8q7qWXcxLwBdcHeity1l1c2zNJepIqDg HuPQXf4ELxrneWXC3ysJ9lx3lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvE/BjU u9DF9VpBjb7ziYeo4ilwMB8GA1UdIwQYMBaAFLhByAvoGMYaroQXlAyj5pzBQd+P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTlBMy83NjQzNUZFRTYz ODExMUU5OUE1MUE2NDJDNEY5QUUwMi91RUhJQy1nWXhocXVoQmVVREtQbW5NRkIz NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VFSElDLWdZeGhxdWhCZVVES1Btbk1GQjM0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTlBMy83NjQzNUZFRTYzODExMUU5OUE1MUE2NDJDNEY5QUUwMi91RUhJQy1nWXho cXVoQmVVREtQbW5NRkIzNDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHXRCPL8m/rKin7259lnKPrfP6XM3dZNsSamKkdv6A5vFO3h3jh/i9 lIXm3JbFjm9+EVQmJGyHa+KZpHaOtsDws3iKn9iD2tAjZ98yy0SAvegma1vnCr8D 2QUkequOOahac5iaUvNecf+j21ODxqP6GLjM3l4qO2EFcU21KD1IqrbGaQUNGEct o3Ngs0USGMihxtsQcUqKn2ktLdi0ymTrrEKDcZoWQdGnFKJImlQ5L8zLP6T6+buT V15p38Z4vQIEGXL/xzGV89jUB0pLJFWI/EWRXUxHSbX66YVHizMk14DmS9t3xvRM 9WINVrW02GxwfnxWcs3dN6FjN8EmrkS5 -----END CERTIFICATE-----Generated at Sun Aug 24 22:20:56 2025 by rpki-client