$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft File: uo1v5dgowFOZs-GqZY_AWIYf3OA.mft (raw, json) Hash identifier: IIIqGODJX8eF6KV/OGMQqLP2oxfSWX/YYXVuYnmcP9M= Subject key identifier: 82:86:5B:40:09:CF:65:9D:51:24:3F:8D:4D:AA:B0:50:A3:AB:3D:6F Authority key identifier: BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0 Certificate issuer: /CN=A91AAF02/serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0 Certificate serial: 0F68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft Manifest number: 0F5D Signing time: Thu 18 Sep 2025 17:45:15 +0000 Manifest this update: Thu 18 Sep 2025 17:45:14 +0000 Manifest next update: Thu 25 Sep 2025 17:45:14 +0000 Files and hashes: 1: uo1v5dgowFOZs-GqZY_AWIYf3OA.crl (hash: 6kY4FU/DYLdmXnySexm70iXpiAawSX8sOOBV/eiHkaA=) 2: 7EA856A6C3F511EEB2610F2FC4F9AE02.roa (hash: tn6ujwfx2fxOjVcWSqeXpg3bHl3JICdgt6OHucuWivU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3944 (0xf68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02, serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0 Validity Not Before: Sep 18 17:45:14 2025 GMT Not After : Sep 25 17:45:14 2025 GMT Subject: CN=68cc452b-2560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:35:87:41:8d:ac:e6:1e:fe:4b:8b:56:8c:2f: 80:ba:53:ac:29:27:e6:18:19:1f:99:62:6e:1a:2d: 89:57:3d:70:1d:87:4f:d4:24:85:9f:a5:50:90:6d: 58:c3:16:66:78:ad:c3:a8:17:32:92:ca:3e:1e:ce: 97:f2:59:29:8b:d8:9e:a6:82:43:c4:d4:df:d4:c0: f6:24:b0:64:02:4b:43:1a:67:da:d0:cd:a7:f9:8e: 24:58:58:4a:af:45:4a:61:61:6e:0f:27:32:20:5a: b2:3f:e5:d1:c5:23:82:5e:16:6f:99:89:bd:e1:e2: 39:d0:b1:6f:fe:f4:9d:14:59:da:5b:a3:46:dc:f5: 42:c7:ff:21:cd:3b:f3:56:bc:b8:0d:5c:99:f3:89: 32:93:ea:5f:65:7b:72:7e:09:e4:0a:13:57:05:b3: 65:77:86:1b:78:ac:a3:40:9d:5e:2a:17:bf:4a:80: 45:74:dd:d2:a5:8c:3c:58:46:37:e6:7f:29:a6:1e: 7a:69:8e:04:9b:2b:c1:b5:b8:32:78:cd:c4:4b:80: 2d:b8:90:f8:2c:0a:6e:83:1d:ad:07:40:08:07:b9: a6:fc:92:d0:80:94:0e:64:5b:7a:56:2a:ed:ad:49: 68:f9:a6:b6:9f:85:38:f2:f8:82:64:78:69:22:dc: 87:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:86:5B:40:09:CF:65:9D:51:24:3F:8D:4D:AA:B0:50:A3:AB:3D:6F X509v3 Authority Key Identifier: keyid:BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:3c:ea:cd:bd:fd:fe:82:63:a2:72:23:7a:df:79:10:99:e5: 8a:33:65:a5:13:d4:18:8f:3e:36:69:2c:c2:a0:4a:ae:2a:6c: 2b:54:82:87:9b:2e:d9:86:81:02:34:f6:6e:d5:16:67:20:3b: 73:1d:c0:10:f4:20:94:a9:c0:db:51:51:2c:91:de:2d:60:24: 3d:53:ae:f9:d8:79:81:e7:20:c8:f8:62:2c:ca:c4:08:ca:61: f5:7e:52:06:90:59:bc:f5:cc:8f:b1:dd:a6:ce:17:2a:f3:a6: 1e:6f:80:fe:3d:20:50:e4:f2:d1:0c:f1:24:ef:c9:e1:70:7d: 00:dc:15:a0:cb:a6:cd:7e:2c:c5:36:2c:e5:98:1b:71:68:b9: b3:63:06:1e:01:9b:c2:77:02:55:6d:d8:c9:f3:df:23:7f:4f: 4e:18:e0:86:89:73:8e:1a:50:1f:3e:6d:8b:68:e3:22:70:bf: 4d:cf:0d:ca:9e:3c:e9:d6:be:4d:42:be:1a:8c:80:01:e6:bb: 49:18:aa:7e:f3:84:bd:1e:ac:5f:d6:c0:5d:ea:77:40:f3:64: c3:8f:a6:2d:4d:b8:ce:fa:0f:dc:5b:d9:a3:13:2e:1d:54:bd: 2f:f8:37:5d:ed:11:fe:e6:b8:e8:f8:11:89:84:bd:e3:aa:46: 94:20:4a:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKEJBOEQ2RkU1RDgyOEMwNTM5OUIzRTFBQTY1OEZDMDU4 ODYxRkRDRTAwHhcNMjUwOTE4MTc0NTE0WhcNMjUwOTI1MTc0NTE0WjAYMRYwFAYD VQQDEw02OGNjNDUyYi0yNTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjWHQY2s5h7+S4tWjC+AulOsKSfmGBkfmWJuGi2JVz1wHYdP1CSFn6VQkG1Y wxZmeK3DqBcykso+Hs6X8lkpi9iepoJDxNTf1MD2JLBkAktDGmfa0M2n+Y4kWFhK r0VKYWFuDycyIFqyP+XRxSOCXhZvmYm94eI50LFv/vSdFFnaW6NG3PVCx/8hzTvz Vry4DVyZ84kyk+pfZXtyfgnkChNXBbNld4YbeKyjQJ1eKhe/SoBFdN3SpYw8WEY3 5n8pph56aY4EmyvBtbgyeM3ES4AtuJD4LApugx2tB0AIB7mm/JLQgJQOZFt6Virt rUlo+aa2n4U48viCZHhpItyHJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKGW0AJ z2WdUSQ/jU2qsFCjqz1vMB8GA1UdIwQYMBaAFLqNb+XYKMBTmbPhqmWPwFiGH9zg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi9FQUNENDg3Njc2 NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dGT1pzLUdxWllfQVdJWWYz T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VvMXY1ZGdvd0ZPWnMtR3FaWV9BV0lZZjNPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUYwMi9FQUNENDg3Njc2NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dG T1pzLUdxWllfQVdJWWYzT0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBPOrNvf3+gmOiciN633kQmeWKM2WlE9QYjz42aSzCoEquKmwrVIKH my7ZhoECNPZu1RZnIDtzHcAQ9CCUqcDbUVEskd4tYCQ9U6752HmB5yDI+GIsysQI ymH1flIGkFm89cyPsd2mzhcq86Yeb4D+PSBQ5PLRDPEk78nhcH0A3BWgy6bNfizF NizlmBtxaLmzYwYeAZvCdwJVbdjJ898jf09OGOCGiXOOGlAfPm2LaOMicL9Nzw3K njzp1r5NQr4ajIAB5rtJGKp+84S9Hqxf1sBd6ndA82TDj6YtTbjO+g/cW9mjEy4d VL0v+Ddd7RH+5rjo+BGJhL3jqkaUIEqU -----END CERTIFICATE-----Generated at Thu Sep 18 20:29:08 2025 by rpki-client