$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft File: UPqOjU4pl_9d5gjaeMrGVMzRabY.mft (raw, json) Hash identifier: ODq4GoGpnfZ1Roepo2m0fF4l4VXcLuGmTTl7dLhq1C0= Subject key identifier: 25:54:6F:CB:E0:FF:B3:A7:A3:49:E0:70:8F:83:0E:74:C1:D3:3F:BA Authority key identifier: 50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6 Certificate issuer: /CN=A91AEE26/serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6 Certificate serial: 091D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft Manifest number: 0912 Signing time: Sun 24 Aug 2025 20:20:37 +0000 Manifest this update: Sun 24 Aug 2025 20:20:37 +0000 Manifest next update: Sun 31 Aug 2025 20:20:37 +0000 Files and hashes: 1: UPqOjU4pl_9d5gjaeMrGVMzRabY.crl (hash: fJejQca2wtOxTjCUpMtd6dVDHZg29kvzWI08fpZ9RCQ=) 2: CD095756AF1211EAA486D140C4F9AE02.roa (hash: nvWxmCSAUBjo1M2/wF1sYZaCvwMpa6MX82x33FgigCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2333 (0x91d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE26, serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6 Validity Not Before: Aug 24 20:20:37 2025 GMT Not After : Aug 31 20:20:37 2025 GMT Subject: CN=68ab7415-47a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c5:be:a7:7e:71:e5:09:c8:98:a9:53:73:22: 1b:91:dd:a2:e2:c4:4b:c9:75:0d:0b:25:fa:88:f3: f1:54:32:b1:e1:69:59:b7:70:ba:c8:00:dd:fe:42: 21:88:0f:b0:64:c3:3f:59:30:41:27:b8:d8:72:46: cc:a5:33:d2:fa:fd:84:a5:8c:fe:67:fa:b0:2d:b4: d9:30:a7:3f:10:81:c2:fd:e4:e0:6f:1b:f1:01:c0: 38:06:24:90:39:3e:f3:9a:15:b7:82:74:90:32:e8: c6:6e:7e:09:eb:00:43:b8:27:50:06:c7:53:22:c0: 38:a8:56:a7:76:bc:0f:30:3b:bc:26:76:d0:97:e8: a1:3b:56:c3:6f:3d:e5:57:e8:43:4a:70:88:9b:a6: 57:1f:bd:45:28:c2:22:51:7d:ea:98:2f:6f:68:96: 42:58:ab:86:8e:a0:8c:02:43:67:ff:76:c6:63:e4: 69:e3:3f:0c:cd:0a:a5:87:92:3e:76:25:fb:c2:53: 25:7b:b3:05:e2:f5:32:0a:08:4b:81:b7:61:5f:36: 31:f9:91:87:34:bc:8e:59:91:f8:c1:08:a1:36:cb: 8e:98:76:db:08:c1:dc:5a:50:45:25:74:5d:9e:8d: 75:2a:61:13:c1:89:e8:a9:76:ab:17:f3:c6:3c:08: f3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:54:6F:CB:E0:FF:B3:A7:A3:49:E0:70:8F:83:0E:74:C1:D3:3F:BA X509v3 Authority Key Identifier: keyid:50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:99:28:7a:d9:88:08:7d:30:bd:02:4f:4b:e7:e6:20:b3:c4: 5c:e6:0f:da:a2:be:f2:db:62:6b:b0:cb:d5:af:dd:05:0d:f8: 1e:c1:f0:9f:34:09:73:31:6f:f2:11:7e:8e:5f:5b:b9:5f:84: 59:7a:90:74:cc:33:b6:23:b2:de:5d:5f:a8:41:89:93:50:b2: cd:fa:c4:c7:dd:71:c6:58:02:44:2d:70:34:86:86:3f:a7:2e: 7e:30:2b:3e:0f:f9:bb:27:65:0c:4c:c9:80:11:31:76:e9:57: 4e:9a:76:29:2a:66:3e:01:57:79:06:55:20:08:95:43:76:d3: 3e:a6:a6:53:75:f5:c6:8d:89:21:29:68:a6:33:cd:e3:a3:5c: 92:82:cd:44:cb:0c:5b:9e:0d:51:59:35:36:09:07:8c:be:ab: 02:e0:12:4b:88:8a:38:6a:ac:f9:0c:b4:9d:22:f8:10:dd:92: ee:92:0c:c0:c3:7f:72:15:69:65:7f:c2:95:0d:85:7c:2a:03: f5:33:8d:f9:e5:39:a7:db:fc:46:de:a5:29:3d:d1:e8:ec:33: ee:88:af:1e:9a:a6:ce:08:7c:39:36:ce:25:9f:a9:b6:0c:e8: 8a:91:0c:5b:68:be:a4:0d:dc:94:4c:4e:78:f5:dd:16:5c:25: 5b:88:b7:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFMjYxMTAvBgNVBAUTKDUwRkE4RThENEUyOTk3RkY1REU2MDhEQTc4Q0FDNjU0 Q0NEMTY5QjYwHhcNMjUwODI0MjAyMDM3WhcNMjUwODMxMjAyMDM3WjAYMRYwFAYD VQQDEw02OGFiNzQxNS00N2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsW+p35x5QnImKlTcyIbkd2i4sRLyXUNCyX6iPPxVDKx4WlZt3C6yADd/kIh iA+wZMM/WTBBJ7jYckbMpTPS+v2EpYz+Z/qwLbTZMKc/EIHC/eTgbxvxAcA4BiSQ OT7zmhW3gnSQMujGbn4J6wBDuCdQBsdTIsA4qFandrwPMDu8JnbQl+ihO1bDbz3l V+hDSnCIm6ZXH71FKMIiUX3qmC9vaJZCWKuGjqCMAkNn/3bGY+Rp4z8MzQqlh5I+ diX7wlMle7MF4vUyCghLgbdhXzYx+ZGHNLyOWZH4wQihNsuOmHbbCMHcWlBFJXRd no11KmETwYnoqXarF/PGPAjzFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVUb8vg /7Ono0ngcI+DDnTB0z+6MB8GA1UdIwQYMBaAFFD6jo1OKZf/XeYI2njKxlTM0Wm2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUUyNi9BN0MxNjEwQ0FG MTAxMUVBQkY2MUQzM0FDNEY5QUUwMi9VUHFPalU0cGxfOWQ1Z2phZU1yR1ZNelJh YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VQcU9qVTRwbF85ZDVnamFlTXJHVk16UmFiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUUyNi9BN0MxNjEwQ0FGMTAxMUVBQkY2MUQzM0FDNEY5QUUwMi9VUHFPalU0cGxf OWQ1Z2phZU1yR1ZNelJhYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5mSh62YgIfTC9Ak9L5+Ygs8Rc5g/aor7y22JrsMvVr90FDfgewfCf NAlzMW/yEX6OX1u5X4RZepB0zDO2I7LeXV+oQYmTULLN+sTH3XHGWAJELXA0hoY/ py5+MCs+D/m7J2UMTMmAETF26VdOmnYpKmY+AVd5BlUgCJVDdtM+pqZTdfXGjYkh KWimM83jo1ySgs1Eywxbng1RWTU2CQeMvqsC4BJLiIo4aqz5DLSdIvgQ3ZLukgzA w39yFWllf8KVDYV8KgP1M4355Tmn2/xG3qUpPdHo7DPuiK8emqbOCHw5Ns4ln6m2 DOiKkQxbaL6kDdyUTE549d0WXCVbiLcT -----END CERTIFICATE-----Generated at Sun Aug 24 22:02:58 2025 by rpki-client