$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft File: Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft (raw, json) Hash identifier: wKztNJkUUSj8gqDH6xO730zamCyYURW1vfz3XCgIfgs= Subject key identifier: DD:6F:2F:EA:6A:D9:79:15:C1:2D:02:49:67:C6:99:51:25:46:B1:3E Authority key identifier: 52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94 Certificate issuer: /CN=A91AFA16/serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894 Certificate serial: 0B7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft Manifest number: 0B75 Signing time: Sun 24 Aug 2025 19:02:17 +0000 Manifest this update: Sun 24 Aug 2025 19:02:16 +0000 Manifest next update: Sun 31 Aug 2025 19:02:16 +0000 Files and hashes: 1: Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl (hash: JlCGABzzHFZOo1jSmnxu0+p/fN6Sp+dDadeJ/9Jasp4=) 2: 11DB043CF61E11EEB39BD261C4F9AE02.roa (hash: e4wDPqjhV3r7vEA4MsvAFc5ifRump5FxJZTH+nviBcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2941 (0xb7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFA16, serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894 Validity Not Before: Aug 24 19:02:16 2025 GMT Not After : Aug 31 19:02:16 2025 GMT Subject: CN=68ab61b9-9b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8a:6b:3b:1d:fa:e5:e4:59:1b:9f:02:ad:cf: f8:90:1d:1f:79:61:e6:a9:39:c4:65:e5:af:d8:48: cc:35:09:b9:56:e8:a6:1d:9e:67:14:db:c0:24:39: 23:33:95:47:01:95:e4:a8:9f:a9:12:92:e5:df:d4: a1:bf:e9:a7:76:02:47:46:17:60:dc:74:dc:33:c0: cc:98:90:af:12:90:5e:82:dc:bb:43:dd:bd:98:d9: f6:02:91:f1:cc:99:48:c0:2e:81:1c:51:ce:2c:9e: ff:1b:a1:01:d6:b1:8c:b0:eb:52:74:12:69:63:06: 5f:ee:79:b4:d9:ba:2c:c4:9c:13:bf:cd:43:e9:fa: fd:2f:6d:10:d2:5e:b3:8d:97:d3:a5:c9:9f:9f:5d: 44:e0:b6:dd:6d:5b:31:c7:e7:8b:59:23:07:b5:2e: 69:b2:fd:be:47:98:8e:f7:09:af:fe:b1:e5:25:a5: d9:1b:86:14:8b:3f:17:b3:00:10:a1:4a:43:bc:94: 6a:cd:c0:f1:b7:a5:c7:3f:13:f6:08:29:ab:98:3c: e6:5d:f9:2f:e3:ee:d8:23:1d:86:a4:29:f2:59:c9: 92:bb:f8:53:a1:de:cf:48:4a:ce:38:1c:2d:9f:e1: ff:b2:fe:ae:2e:be:78:36:fb:30:9e:2d:69:68:aa: 3d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6F:2F:EA:6A:D9:79:15:C1:2D:02:49:67:C6:99:51:25:46:B1:3E X509v3 Authority Key Identifier: keyid:52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:81:1b:06:42:de:0f:51:ec:bd:13:d8:1e:b9:8f:71:ce:b0: 17:48:32:a0:e8:ed:fa:dc:f5:a7:46:86:7f:d0:a1:76:10:96: 22:a8:85:d7:45:8b:02:33:f3:ed:3f:e1:40:45:50:c8:21:18: e6:b7:bd:f4:1f:13:2f:d3:74:ed:b4:83:87:33:d4:5a:a9:30: 0d:ff:98:e4:be:e4:60:c3:9b:dc:ae:ce:07:f8:77:48:ac:11: ee:2f:63:b0:1d:6e:be:d4:5c:2d:24:00:e9:0c:9d:20:db:3b: 35:37:3a:f4:d6:05:86:17:82:2f:88:a8:c4:54:d5:5a:2c:3c: e9:31:fa:e3:1f:70:0a:59:0d:10:ea:c5:51:4e:88:c4:2b:91: 92:69:06:61:af:98:3a:69:c4:a0:03:d4:8a:e9:db:23:65:1e: 54:a3:8f:44:5b:0a:d8:7d:09:eb:91:b8:eb:88:37:09:e3:ac: 42:46:e8:63:42:19:14:4c:51:d1:72:ca:58:70:ce:a3:f7:4e: 2c:31:11:ba:1c:c7:72:5b:b8:bd:4b:88:77:f7:39:91:9c:1a: 1d:e2:0c:53:ec:be:91:bb:ea:cd:3d:f1:86:63:74:41:f4:06: 63:77:54:37:53:a2:21:98:f2:2f:35:55:17:d1:94:5a:ce:5a: ad:f1:2e:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZBMTYxMTAvBgNVBAUTKDUyRkQxREUyNERBRjhERDVGQzNBQTAwNzhCMDc3MzJG QzI3NDc4OTQwHhcNMjUwODI0MTkwMjE2WhcNMjUwODMxMTkwMjE2WjAYMRYwFAYD VQQDEw02OGFiNjFiOS05YjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24prOx365eRZG58Crc/4kB0feWHmqTnEZeWv2EjMNQm5VuimHZ5nFNvAJDkj M5VHAZXkqJ+pEpLl39Shv+mndgJHRhdg3HTcM8DMmJCvEpBegty7Q929mNn2ApHx zJlIwC6BHFHOLJ7/G6EB1rGMsOtSdBJpYwZf7nm02bosxJwTv81D6fr9L20Q0l6z jZfTpcmfn11E4LbdbVsxx+eLWSMHtS5psv2+R5iO9wmv/rHlJaXZG4YUiz8XswAQ oUpDvJRqzcDxt6XHPxP2CCmrmDzmXfkv4+7YIx2GpCnyWcmSu/hTod7PSErOOBwt n+H/sv6uLr54Nvswni1paKo9iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1vL+pq 2XkVwS0CSWfGmVElRrE+MB8GA1UdIwQYMBaAFFL9HeJNr43V/DqgB4sHcy/CdHiU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkExNi9DNTU0MjA4MDM1 QzkxMUVBQjRBRkNCMTVDNEY5QUUwMi9VdjBkNGsydmpkWDhPcUFIaXdkekw4SjBl SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V2MGQ0azJ2amRYOE9xQUhpd2R6TDhKMGVKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkExNi9DNTU0MjA4MDM1QzkxMUVBQjRBRkNCMTVDNEY5QUUwMi9VdjBkNGsydmpk WDhPcUFIaXdkekw4SjBlSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAogRsGQt4PUey9E9geuY9xzrAXSDKg6O363PWnRoZ/0KF2EJYiqIXX RYsCM/PtP+FARVDIIRjmt730HxMv03TttIOHM9RaqTAN/5jkvuRgw5vcrs4H+HdI rBHuL2OwHW6+1FwtJADpDJ0g2zs1Nzr01gWGF4IviKjEVNVaLDzpMfrjH3AKWQ0Q 6sVRTojEK5GSaQZhr5g6acSgA9SK6dsjZR5Uo49EWwrYfQnrkbjriDcJ46xCRuhj QhkUTFHRcspYcM6j904sMRG6HMdyW7i9S4h39zmRnBod4gxT7L6Ru+rNPfGGY3RB 9AZjd1Q3U6IhmPIvNVUX0ZRazlqt8S4M -----END CERTIFICATE-----Generated at Sun Aug 24 21:38:49 2025 by rpki-client