$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft File: UqHEINgnwWzqoEKD3Si2QKMVY00.mft (raw, json) Hash identifier: uVN7qaZvh3DwWFXrzOoxi8xbHNlyUmnm6O0eEch2dms= Subject key identifier: 44:D2:1D:0A:62:24:FA:F6:D8:E6:00:94:CD:6C:51:31:E5:B4:22:F6 Authority key identifier: 52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D Certificate issuer: /CN=A91B13FE/serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft Manifest number: 07 Signing time: Mon 07 Jul 2025 08:34:07 +0000 Manifest this update: Mon 07 Jul 2025 08:34:06 +0000 Manifest next update: Mon 14 Jul 2025 08:34:06 +0000 Files and hashes: 1: UqHEINgnwWzqoEKD3Si2QKMVY00.crl (hash: YwDd7fPyTRZDX6t3emwyD90zu4Y6rsURs1WtQ9AFdFQ=) 2: 07026748564511F09ED8993AC4F9AE02.roa (hash: 6QcYqyX5KFb0vGx40KSlwE5riWI0V4vT0LCNn9S8ZHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Jul 2025 08:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13FE, serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D Validity Not Before: Jul 7 08:34:06 2025 GMT Not After : Jul 14 08:34:06 2025 GMT Subject: CN=686b867e-d8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ba:a2:e2:72:d9:10:21:74:9f:c5:24:84:62: ce:7e:54:12:a1:94:ca:da:84:c3:4f:61:6d:65:b0: f0:b7:e1:30:65:8b:63:75:50:9a:2c:07:2c:27:fa: 35:e1:92:05:f7:82:c0:82:c1:ea:48:9f:1c:bb:a0: 58:03:f8:ef:5a:34:69:47:b6:62:01:04:c6:f2:7c: a3:8a:67:9f:fe:3e:1f:08:3b:8d:60:4a:ef:6f:1d: 57:95:39:33:38:50:ec:75:56:f2:6f:6e:60:8e:86: 96:65:0d:d7:82:71:97:26:f4:62:57:cf:60:2f:93: 38:3b:81:c7:4d:f1:79:f6:75:1c:31:2b:7e:0b:4c: 63:b8:2a:ee:ea:03:42:71:fd:05:25:5e:67:25:9c: 16:0f:ed:8c:88:38:54:6b:f8:92:16:d5:94:df:bf: 71:55:a2:5f:38:cb:a5:9c:00:e3:5a:18:2c:43:5c: ad:9f:75:de:0c:aa:c1:88:bc:c2:a2:8a:61:50:25: 40:67:64:ac:44:49:5e:18:b6:9a:f7:ff:e4:f7:35: 04:90:fd:6a:69:9d:46:d4:91:8c:f8:78:fa:9e:ad: ef:52:80:f5:1c:cf:07:f2:3d:2b:cc:06:75:28:89: 0d:75:c4:6e:ac:b7:72:46:d9:66:68:32:5d:c7:10: b3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D2:1D:0A:62:24:FA:F6:D8:E6:00:94:CD:6C:51:31:E5:B4:22:F6 X509v3 Authority Key Identifier: keyid:52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:ec:e2:b8:5a:3d:57:ed:d0:a2:6e:76:94:8a:95:3d:94:cf: f6:82:69:36:af:84:42:75:38:f8:84:70:30:e9:d2:b9:ed:e3: df:50:b7:c2:a2:fa:72:9c:2a:1b:c1:e0:6d:c7:c9:a2:2e:f2: 24:2b:40:4e:e6:ad:2d:8e:9c:65:2f:3f:1f:60:a5:39:e8:45: e4:cf:e8:ee:ba:6d:08:c6:02:fa:ca:9b:1d:d2:52:5b:f0:69: 29:7b:0e:0b:84:21:1f:35:ea:2b:9f:91:74:3b:4d:7c:6c:6d: 71:26:c5:41:07:ca:78:db:f8:b1:70:1f:d6:85:8e:62:a2:24: f2:f9:8b:c3:4c:70:9b:98:57:42:06:18:73:ec:5d:bf:2c:04: c7:ae:7f:c1:ef:60:08:d2:ba:ac:64:ee:60:d8:87:6f:66:7b: 27:f3:3b:54:ab:dd:b1:00:d2:cd:ab:64:ed:e6:db:6a:63:c4: 45:98:af:ec:a1:1b:5e:64:0a:1a:9c:75:ef:25:d1:f7:6e:4e: e5:2b:5e:af:2f:92:50:87:47:9c:b5:97:a2:e6:ce:de:83:d2: b4:ac:12:63:fb:03:e6:d0:fa:00:13:35:43:55:7f:28:35:8e: bc:bd:e4:98:86:0a:b7:9d:4f:3e:9e:2e:4b:d2:00:b6:fa:8c: fc:e1:f2:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTNGRTExMC8GA1UEBRMoNTJBMUM0MjBEODI3QzE2Q0VBQTA0MjgzREQyOEI2NDBB MzE1NjM0RDAeFw0yNTA3MDcwODM0MDZaFw0yNTA3MTQwODM0MDZaMBgxFjAUBgNV BAMTDTY4NmI4NjdlLWQ4Y2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkuqLictkQIXSfxSSEYs5+VBKhlMrahMNPYW1lsPC34TBli2N1UJosBywn+jXh kgX3gsCCwepInxy7oFgD+O9aNGlHtmIBBMbyfKOKZ5/+Ph8IO41gSu9vHVeVOTM4 UOx1VvJvbmCOhpZlDdeCcZcm9GJXz2Avkzg7gcdN8Xn2dRwxK34LTGO4Ku7qA0Jx /QUlXmclnBYP7YyIOFRr+JIW1ZTfv3FVol84y6WcAONaGCxDXK2fdd4MqsGIvMKi imFQJUBnZKxESV4Ytpr3/+T3NQSQ/WppnUbUkYz4ePqere9SgPUczwfyPSvMBnUo iQ11xG6st3JG2WZoMl3HELOnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURNIdCmIk +vbY5gCUzWxRMeW0IvYwHwYDVR0jBBgwFoAUUqHEINgnwWzqoEKD3Si2QKMVY00w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxM0ZFLzhEOEUyMkMyNTY0 MzExRjBCMTYyN0ExNUM0RjlBRTAyL1VxSEVJTmdud1d6cW9FS0QzU2kyUUtNVlkw MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVXFIRUlOZ253V3pxb0VLRDNTaTJRS01WWTAwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx M0ZFLzhEOEUyMkMyNTY0MzExRjBCMTYyN0ExNUM0RjlBRTAyL1VxSEVJTmdud1d6 cW9FS0QzU2kyUUtNVlkwMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABTs4rhaPVft0KJudpSKlT2Uz/aCaTavhEJ1OPiEcDDp0rnt499Qt8Ki +nKcKhvB4G3HyaIu8iQrQE7mrS2OnGUvPx9gpTnoReTP6O66bQjGAvrKmx3SUlvw aSl7DguEIR816iufkXQ7TXxsbXEmxUEHynjb+LFwH9aFjmKiJPL5i8NMcJuYV0IG GHPsXb8sBMeuf8HvYAjSuqxk7mDYh29meyfzO1Sr3bEA0s2rZO3m22pjxEWYr+yh G15kChqcde8l0fduTuUrXq8vklCHR5y1l6Lmzt6D0rSsEmP7A+bQ+gATNUNVfyg1 jry95JiGCredTz6eLkvSALb6jPzh8iE= -----END CERTIFICATE-----Generated at Mon Jul 7 23:33:55 2025 by rpki-client