$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft File: UCfzGS691UlQo5w9EwlKcfHTMmY.mft (raw, json) Hash identifier: g/5pQldSg30/k9kFFmO09iIgWgDUuQsGB9Lrk6JOo4s= Subject key identifier: 42:14:1E:BE:7F:8B:62:E6:D1:FC:6A:4A:9D:41:B9:53:E4:EC:CA:0D Authority key identifier: 50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 Certificate issuer: /CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Certificate serial: 0B3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft Manifest number: 0B1B Signing time: Sat 06 Sep 2025 19:31:15 +0000 Manifest this update: Sat 06 Sep 2025 19:31:15 +0000 Manifest next update: Sat 13 Sep 2025 19:31:15 +0000 Files and hashes: 1: UCfzGS691UlQo5w9EwlKcfHTMmY.crl (hash: xzOtizlQUaTCH/TM5OR3MbmPbkx6tNQAtfZRIb4lyE8=) 2: F3F7D2B0CE9711ECA2477C19C4F9AE02.roa (hash: YSanlXPMFGlUc59onSU43QiRooXV0uHeNRhQl6sQvzs=) 3: CDD62642854E11EBA2CFDC87C4F9AE02.roa (hash: EMIkCzah8q7OcQkgGcb8CJSovHyJ1MV1+D6g6V84DdU=) 4: CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa (hash: neskcJ2ryIraX5yGhHnDKoHimVr5nfZfeUgF/8p7xpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 19:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2874 (0xb3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3078, serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Validity Not Before: Sep 6 19:31:15 2025 GMT Not After : Sep 13 19:31:15 2025 GMT Subject: CN=68bc8c03-99dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ba:5b:69:fd:e4:da:ca:d2:6c:b9:e9:f9:72: 93:a4:91:10:79:3b:fb:32:07:84:21:8b:36:c3:d2: 63:c9:dc:32:9b:c3:86:df:81:26:83:73:e0:fb:07: d4:a2:6b:c2:9e:c5:0b:90:86:0f:3c:97:c0:6c:ed: fe:17:f0:57:9f:99:d4:51:44:2f:46:1e:f4:b1:99: d6:ad:27:23:d4:d4:27:9e:42:1e:50:d2:b8:7e:2f: 39:d4:60:14:0f:aa:92:e1:b3:a6:a6:b9:42:78:19: a5:f9:66:9e:ca:91:91:7d:25:f3:d3:ca:ef:5a:47: 13:19:14:f0:36:5f:4e:fa:4d:44:44:c7:2c:29:06: ec:61:5b:40:b0:62:7e:e8:c7:04:89:b7:ec:8e:af: f3:30:3a:c7:bf:36:8d:35:9c:6b:38:4b:1e:09:91: 81:93:1f:21:b3:6e:d2:73:d1:b2:01:42:25:be:22: 18:7c:da:a3:88:5f:21:7d:03:a5:fa:c1:06:85:aa: a8:9b:68:54:04:df:88:43:27:cf:b5:47:5c:90:98: 54:62:04:85:62:01:2c:97:57:c7:2a:bc:2e:3f:97: 5b:d6:87:24:20:02:1b:a5:62:aa:3d:36:a5:68:78: a2:b7:10:38:65:de:37:8f:3e:49:bc:6b:ec:e5:29: 27:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:14:1E:BE:7F:8B:62:E6:D1:FC:6A:4A:9D:41:B9:53:E4:EC:CA:0D X509v3 Authority Key Identifier: keyid:50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:8d:15:f7:65:54:eb:f7:e7:67:40:3f:98:f7:a0:49:cf:68: dc:7c:88:b2:83:4f:f3:12:16:b8:c9:06:21:4c:61:ab:fc:69: 8e:13:75:cd:62:55:9a:0b:67:28:e0:c7:5f:c6:39:17:5d:30: 2c:50:d5:fb:66:65:0f:ea:4b:ce:3c:51:0e:31:92:45:d1:5d: a4:d1:67:1c:a7:42:de:59:a8:43:fa:d7:10:e3:0d:c7:46:bd: 82:1e:40:1b:84:77:84:21:51:a6:09:60:a4:96:38:c0:ed:0f: 52:60:48:0c:a0:5e:56:ec:4b:78:3a:1c:a2:2f:3f:72:da:9a: fb:db:02:c8:69:c8:0b:c4:20:89:d4:f6:bb:98:f1:dd:f6:cb: b8:33:67:e7:58:b2:04:b4:6f:b2:97:9c:73:3c:cf:21:0a:c6: 0f:79:4d:d2:f0:9d:4e:cf:48:1c:99:fb:1f:e5:b5:4a:2c:37: 6f:b8:92:77:8d:d9:0e:63:4d:93:fb:29:88:7d:aa:05:c4:ed: 65:97:3f:88:e9:f3:7f:08:fc:56:54:47:75:7d:6d:39:68:eb: 16:37:f0:3b:92:6c:d5:6f:6d:33:6a:ce:d0:d8:1a:d4:57:0a: af:d4:4b:f1:6f:99:bc:0e:5b:70:fa:d0:52:f5:7e:c1:6e:65: 4d:ca:b1:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwNzgxMTAvBgNVBAUTKDUwMjdGMzE5MkVCREQ1NDk1MEEzOUMzRDEzMDk0QTcx RjFEMzMyNjYwHhcNMjUwOTA2MTkzMTE1WhcNMjUwOTEzMTkzMTE1WjAYMRYwFAYD VQQDEw02OGJjOGMwMy05OWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLpbaf3k2srSbLnp+XKTpJEQeTv7MgeEIYs2w9Jjydwym8OG34Emg3Pg+wfU omvCnsULkIYPPJfAbO3+F/BXn5nUUUQvRh70sZnWrScj1NQnnkIeUNK4fi851GAU D6qS4bOmprlCeBml+WaeypGRfSXz08rvWkcTGRTwNl9O+k1ERMcsKQbsYVtAsGJ+ 6McEibfsjq/zMDrHvzaNNZxrOEseCZGBkx8hs27Sc9GyAUIlviIYfNqjiF8hfQOl +sEGhaqom2hUBN+IQyfPtUdckJhUYgSFYgEsl1fHKrwuP5db1ockIAIbpWKqPTal aHiitxA4Zd43jz5JvGvs5Skn5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIUHr5/ i2Lm0fxqSp1BuVPk7MoNMB8GA1UdIwQYMBaAFFAn8xkuvdVJUKOcPRMJSnHx0zJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA3OC84NjMwQjFDODRD OEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFVbFFvNXc5RXdsS2NmSFRN bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VDZnpHUzY5MVVsUW81dzlFd2xLY2ZIVE1tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA3OC84NjMwQjFDODRDOEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFV bFFvNXc5RXdsS2NmSFRNbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6jRX3ZVTr9+dnQD+Y96BJz2jcfIiyg0/zEha4yQYhTGGr/GmOE3XN YlWaC2co4MdfxjkXXTAsUNX7ZmUP6kvOPFEOMZJF0V2k0Wccp0LeWahD+tcQ4w3H Rr2CHkAbhHeEIVGmCWCkljjA7Q9SYEgMoF5W7Et4OhyiLz9y2pr72wLIacgLxCCJ 1Pa7mPHd9su4M2fnWLIEtG+yl5xzPM8hCsYPeU3S8J1Oz0gcmfsf5bVKLDdvuJJ3 jdkOY02T+ymIfaoFxO1llz+I6fN/CPxWVEd1fW05aOsWN/A7kmzVb20zas7Q2BrU Vwqv1Evxb5m8Dltw+tBS9X7BbmVNyrFp -----END CERTIFICATE-----Generated at Mon Sep 8 10:27:50 2025 by rpki-client