$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft File: uo1v5dgowFOZs-GqZY_AWIYf3OA.mft (raw, json) Hash identifier: VP3dLzV39RtRQ9j4GXqNu2CDInqCQGEUC508ECW8m4c= Subject key identifier: 0E:61:0D:3D:31:6B:81:B8:D3:A9:A4:45:61:FB:A0:39:09:7B:FA:E9 Authority key identifier: BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0 Certificate issuer: /CN=A91AAF02/serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0 Certificate serial: 0F4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft Manifest number: 0F41 Signing time: Sat 26 Jul 2025 17:41:06 +0000 Manifest this update: Sat 26 Jul 2025 17:41:05 +0000 Manifest next update: Sat 02 Aug 2025 17:41:05 +0000 Files and hashes: 1: uo1v5dgowFOZs-GqZY_AWIYf3OA.crl (hash: /wvLLojAaS2Xg01L/KUb2PRipq+fEprxeHN0yqdfR/I=) 2: 7EA856A6C3F511EEB2610F2FC4F9AE02.roa (hash: tn6ujwfx2fxOjVcWSqeXpg3bHl3JICdgt6OHucuWivU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Aug 2025 17:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3916 (0xf4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02, serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0 Validity Not Before: Jul 26 17:41:05 2025 GMT Not After : Aug 2 17:41:05 2025 GMT Subject: CN=68851331-48a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8a:35:b7:8c:14:be:b2:cb:6e:5f:48:88:d6: 82:a8:c4:09:88:b9:32:24:1a:bd:8e:57:ce:52:74: a0:b0:b5:d4:a1:2b:a8:ad:00:29:0d:87:39:bb:17: c2:c7:b8:1b:8c:2a:f4:83:d4:3c:61:cf:cb:37:1d: 35:e8:38:5e:72:11:bc:6d:54:bc:b8:71:b5:db:bb: 0a:db:b3:18:2c:b2:c8:f5:1a:28:e8:55:95:fb:8b: 33:76:9c:9a:ac:22:a9:de:fb:e1:86:42:3e:1c:2a: 18:2c:f3:47:74:25:03:2a:f7:a9:69:0f:ac:28:4a: 4e:04:e3:77:79:51:5e:66:42:42:54:0d:36:fe:a2: 23:54:f3:5e:67:59:fe:5e:34:13:12:64:2f:53:f8: 8a:a8:5d:f0:61:c9:de:d3:96:40:aa:e6:6e:0b:21: 19:d4:1a:56:c8:c9:8f:ef:cd:4f:2d:f6:97:41:34: 64:e1:8e:3b:8d:3d:92:a7:32:a8:31:04:eb:66:59: 65:ca:66:11:d2:0d:0d:46:d7:04:50:cc:74:34:b9: 73:ae:4a:38:e5:7b:b8:99:e5:6f:1c:3a:30:a2:c0: d6:7a:0f:8b:a7:79:44:8a:e3:34:62:63:ad:df:8c: 13:17:3e:70:e2:98:02:b9:d9:31:25:93:08:63:33: 3d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:61:0D:3D:31:6B:81:B8:D3:A9:A4:45:61:FB:A0:39:09:7B:FA:E9 X509v3 Authority Key Identifier: keyid:BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:d8:21:62:6c:06:6a:4f:19:70:20:dd:05:d1:1f:61:2a:9a: 9d:e3:36:c8:c7:bc:29:f1:6f:3c:bf:d6:e1:24:84:e8:79:77: 56:a4:7d:ff:e5:16:8b:9d:6f:29:a4:c6:b4:b2:64:19:46:74: a4:00:23:fb:18:f1:ed:2b:15:3b:cd:5a:b1:2f:f8:c0:ed:b0: 2d:03:1e:a5:d9:6a:51:bd:62:a1:21:22:32:5f:4a:d1:27:f0: 81:1f:9e:3e:5e:93:5d:9b:2f:3a:51:1c:2e:bb:19:a1:38:32: 7b:b5:25:3d:47:8e:bf:5b:3f:59:a5:b8:ef:4d:9b:14:41:45: ea:d4:41:91:54:15:10:3b:67:7c:f3:86:da:2d:6d:38:c9:7c: b6:fb:5e:b7:cc:b4:b5:2c:a4:eb:98:72:34:29:95:4c:9c:a9: db:8f:ce:db:53:02:4b:0f:4d:3d:31:3e:dd:f7:36:d1:41:d3: 1a:e4:05:ae:75:a1:5d:43:08:86:15:1f:19:b9:d6:ab:b3:2b: 7e:6d:a7:b6:bc:9e:8e:01:04:74:22:56:cc:62:0f:37:7a:16: 6a:64:7b:16:67:42:83:89:77:0e:10:76:2f:c5:0f:06:eb:22: f0:bf:49:d9:8d:d8:ab:59:2d:fe:32:98:11:b9:00:87:8d:e2: 25:1d:ea:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKEJBOEQ2RkU1RDgyOEMwNTM5OUIzRTFBQTY1OEZDMDU4 ODYxRkRDRTAwHhcNMjUwNzI2MTc0MTA1WhcNMjUwODAyMTc0MTA1WjAYMRYwFAYD VQQDEw02ODg1MTMzMS00OGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIo1t4wUvrLLbl9IiNaCqMQJiLkyJBq9jlfOUnSgsLXUoSuorQApDYc5uxfC x7gbjCr0g9Q8Yc/LNx016DhechG8bVS8uHG127sK27MYLLLI9Roo6FWV+4szdpya rCKp3vvhhkI+HCoYLPNHdCUDKvepaQ+sKEpOBON3eVFeZkJCVA02/qIjVPNeZ1n+ XjQTEmQvU/iKqF3wYcne05ZAquZuCyEZ1BpWyMmP781PLfaXQTRk4Y47jT2SpzKo MQTrZlllymYR0g0NRtcEUMx0NLlzrko45Xu4meVvHDowosDWeg+Lp3lEiuM0YmOt 34wTFz5w4pgCudkxJZMIYzM9OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5hDT0x a4G406mkRWH7oDkJe/rpMB8GA1UdIwQYMBaAFLqNb+XYKMBTmbPhqmWPwFiGH9zg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi9FQUNENDg3Njc2 NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dGT1pzLUdxWllfQVdJWWYz T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VvMXY1ZGdvd0ZPWnMtR3FaWV9BV0lZZjNPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUYwMi9FQUNENDg3Njc2NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dG T1pzLUdxWllfQVdJWWYzT0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm2CFibAZqTxlwIN0F0R9hKpqd4zbIx7wp8W88v9bhJIToeXdWpH3/ 5RaLnW8ppMa0smQZRnSkACP7GPHtKxU7zVqxL/jA7bAtAx6l2WpRvWKhISIyX0rR J/CBH54+XpNdmy86URwuuxmhODJ7tSU9R46/Wz9ZpbjvTZsUQUXq1EGRVBUQO2d8 84baLW04yXy2+163zLS1LKTrmHI0KZVMnKnbj87bUwJLD009MT7d9zbRQdMa5AWu daFdQwiGFR8Zudarsyt+bae2vJ6OAQR0IlbMYg83ehZqZHsWZ0KDiXcOEHYvxQ8G 6yLwv0nZjdirWS3+MpgRuQCHjeIlHeot -----END CERTIFICATE-----Generated at Sat Jul 26 21:07:22 2025 by rpki-client