$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json) Hash identifier: KIwDugDj7nNw1BkH6c8Hi+jdzezT/5kaV+6bsERV06g= Subject key identifier: E4:15:6F:57:1E:A7:F1:37:60:4E:7A:49:7A:D8:B5:F2:E8:93:E0:71 Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Certificate serial: 0639 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft Manifest number: 0617 Signing time: Sat 06 Sep 2025 23:12:56 +0000 Manifest this update: Sat 06 Sep 2025 23:12:55 +0000 Manifest next update: Sat 13 Sep 2025 23:12:55 +0000 Files and hashes: 1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: 1a6yBmD3hGskVd+FrTeNVdk18DL6cr1huAsnzIwELIE=) 2: C9BA671C3A2611F0908A2B20C4F9AE02.roa (hash: hAsOFqLGhlXPlJQqq8o+TJ1lqU96PHU1fRQ8ll9kM1c=) 3: F44E1EECCD8411EF88CD1464C4F9AE02.roa (hash: RAzhHtW1VH/eUjgZQiEsm0Ej6j+0F6PlwpjTpjOi8Jo=) 4: F4C73FCACD8411EF88CD1464C4F9AE02.roa (hash: EkzwfsPvhq1FP6pm5CT4LDCnqWr4szU6ESASOp0o6DU=) 5: 3FE8CD1051B111F0932E1173C4F9AE02.roa (hash: RB6HB76Hd37I1Qyua/UNLhe473Y5QaFhWKPCNvGT+Jc=) 6: DBF856463A3011F0B0C6F437C4F9AE02.roa (hash: 3y3NqdGA4Yb7KDxIbZnutCZORNmNgdB027E2G7UT98A=) 7: F559B7E2CD8411EF88CD1464C4F9AE02.roa (hash: 1YFs0Zqq59OdTTfQ9TRBhg+ye+627iyYVeuBlex3Kfk=) 8: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: ehyJGIeBDK390bSFLx2HamOEcgKmw6zu6VhcLaVRD/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 19:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1593 (0x639) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Validity Not Before: Sep 6 23:12:55 2025 GMT Not After : Sep 13 23:12:55 2025 GMT Subject: CN=68bcbff8-70e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7d:b3:ac:a0:67:a1:e4:fe:24:45:4e:76:37: 6e:43:70:00:8b:c0:9d:98:3f:ea:ae:d4:d0:44:78: 13:09:be:4d:14:5a:86:75:6c:1a:a3:20:58:fb:28: 9a:d0:f4:50:35:06:43:38:3b:ea:6a:b8:c0:65:b0: 05:53:1e:d7:56:50:f5:bc:68:00:5c:48:95:30:ab: 33:1b:e9:32:81:45:3b:d3:5e:0c:65:b9:5e:fa:0a: 91:d1:2a:d4:93:c8:a7:c5:5b:fe:32:29:d9:74:63: c1:86:e1:74:35:63:4f:e5:8e:7c:2e:13:97:19:2a: f4:fa:b0:79:b1:9e:da:8e:98:c6:2a:87:12:fb:0e: f1:7d:b2:a7:bd:2b:1a:2a:f4:de:d3:97:d2:44:95: 3c:d6:15:80:b1:63:92:8d:9a:11:98:70:e8:49:5b: d4:76:3d:ed:44:f2:be:a2:79:b8:f9:63:8d:ec:bf: 6c:3a:59:f4:4c:dc:0c:60:a2:c9:e9:24:7a:1c:98: 53:01:79:58:ad:b0:15:96:30:eb:e7:cd:a5:3a:e9: 8c:b6:d5:44:5c:11:c1:b0:7d:e1:14:e9:97:30:6c: d0:79:d1:08:e0:e3:bf:ab:02:d8:13:f7:1d:14:02: 58:fc:9d:0b:4d:74:c2:c1:e5:6e:96:61:9e:55:5f: 69:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:15:6F:57:1E:A7:F1:37:60:4E:7A:49:7A:D8:B5:F2:E8:93:E0:71 X509v3 Authority Key Identifier: keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ce:17:cf:38:1c:22:dd:4a:08:bb:93:2d:76:84:8f:17:d7: 18:59:7d:77:b1:73:38:06:f7:1a:94:b1:ec:e9:d2:7e:35:99: bb:2a:f7:5b:78:40:e1:ba:ba:f1:58:67:2e:ae:03:dd:4e:23: 90:d4:1d:a4:7c:48:76:13:11:a5:88:bb:5b:cf:11:39:ee:f3: 94:da:41:b4:a3:18:fe:66:da:a3:28:b8:b1:13:cf:e8:af:6b: 35:c7:62:5f:54:7d:8d:54:95:ac:6f:c8:8c:b8:d9:c0:50:57: 32:ae:70:3d:88:ab:93:39:5f:47:97:6c:eb:da:b3:ba:e1:56: 4e:f1:8e:1f:c8:86:d7:d5:a8:2f:b0:12:a5:53:3a:ef:e0:e4: 5d:df:16:1e:21:f8:0a:21:08:80:70:8f:c2:cf:23:9d:09:0b: 06:62:db:12:a7:18:0a:67:28:6a:43:8a:f2:b3:42:fb:72:07: 6a:6b:cd:bc:43:bf:4e:bb:77:62:44:6b:29:c9:ae:c9:bd:3c: 7d:12:fa:66:f9:e8:b1:a6:7c:f4:d5:42:ae:2f:b2:9f:cd:51: e3:a6:fd:4b:76:33:8d:74:a8:0c:44:e3:4d:78:2b:6a:43:d5: 5d:55:14:9b:ab:42:34:cd:22:a9:63:37:8f:fd:64:c9:a4:cb: 3b:42:02:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc3NjExMTAvBgNVBAUTKDUxRDVDQzJENUU0MjhGQzk1NTE0OUY1NzYyMTE5MDRG MDVCQUYyMTEwHhcNMjUwOTA2MjMxMjU1WhcNMjUwOTEzMjMxMjU1WjAYMRYwFAYD VQQDEw02OGJjYmZmOC03MGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuX2zrKBnoeT+JEVOdjduQ3AAi8CdmD/qrtTQRHgTCb5NFFqGdWwaoyBY+yia 0PRQNQZDODvqarjAZbAFUx7XVlD1vGgAXEiVMKszG+kygUU7014MZble+gqR0SrU k8inxVv+MinZdGPBhuF0NWNP5Y58LhOXGSr0+rB5sZ7ajpjGKocS+w7xfbKnvSsa KvTe05fSRJU81hWAsWOSjZoRmHDoSVvUdj3tRPK+onm4+WON7L9sOln0TNwMYKLJ 6SR6HJhTAXlYrbAVljDr582lOumMttVEXBHBsH3hFOmXMGzQedEI4OO/qwLYE/cd FAJY/J0LTXTCweVulmGeVV9pywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQVb1ce p/E3YE56SXrYtfLok+BxMB8GA1UdIwQYMBaAFFHVzC1eQo/JVRSfV2IRkE8FuvIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzc2MS8wRTRCOTE2OEJE MzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4bFZGSjlYWWhHUVR3VzY4 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkWE1MVjVDajhsVkZKOVhZaEdRVHdXNjhoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzc2MS8wRTRCOTE2OEJEMzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4 bFZGSjlYWWhHUVR3VzY4aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBazhfPOBwi3UoIu5MtdoSPF9cYWX13sXM4BvcalLHs6dJ+NZm7Kvdb eEDhurrxWGcurgPdTiOQ1B2kfEh2ExGliLtbzxE57vOU2kG0oxj+ZtqjKLixE8/o r2s1x2JfVH2NVJWsb8iMuNnAUFcyrnA9iKuTOV9Hl2zr2rO64VZO8Y4fyIbX1agv sBKlUzrv4ORd3xYeIfgKIQiAcI/CzyOdCQsGYtsSpxgKZyhqQ4rys0L7cgdqa828 Q79Ou3diRGspya7JvTx9Evpm+eixpnz01UKuL7KfzVHjpv1LdjONdKgMRONNeCtq Q9VdVRSbq0I0zSKpYzeP/WTJpMs7QgIR -----END CERTIFICATE-----Generated at Sun Sep 7 02:25:08 2025 by rpki-client