$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft File: UqHEINgnwWzqoEKD3Si2QKMVY00.mft (raw, json) Hash identifier: RPQnDuE6snB7GCIiKSXxCtQdxbtWwwNDEncfQcTy7BM= Subject key identifier: BA:9F:A4:C5:BA:93:5D:F1:7C:E1:86:85:4C:B5:17:50:46:A9:64:00 Authority key identifier: 52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D Certificate issuer: /CN=A91B13FE/serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft Manifest number: 1E Signing time: Thu 21 Aug 2025 08:06:50 +0000 Manifest this update: Thu 21 Aug 2025 08:06:49 +0000 Manifest next update: Thu 28 Aug 2025 08:06:49 +0000 Files and hashes: 1: UqHEINgnwWzqoEKD3Si2QKMVY00.crl (hash: 2LTqagCBSspjMFJ/EWBoqancY8jfutZrfD+smuoa2WM=) 2: 07026748564511F09ED8993AC4F9AE02.roa (hash: 6QcYqyX5KFb0vGx40KSlwE5riWI0V4vT0LCNn9S8ZHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13FE, serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D Validity Not Before: Aug 21 08:06:49 2025 GMT Not After : Aug 28 08:06:49 2025 GMT Subject: CN=68a6d399-6995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bf:64:34:da:c8:c4:e7:59:02:e6:2c:ea:37: ce:7f:60:ed:e5:c3:c4:50:1b:a2:3a:76:23:64:6d: b2:b0:48:68:b2:3a:22:80:cf:84:ff:04:60:60:e6: 20:0b:1e:a4:71:c3:00:b2:68:2b:e4:ca:fa:c3:0c: 32:90:fe:6d:dd:52:21:1a:33:fc:99:de:35:fe:80: 57:e0:e2:64:9c:56:f4:39:87:02:b2:a6:c5:77:8c: aa:21:3f:b8:ff:78:a4:05:3a:40:69:34:f8:35:68: 1b:3f:c2:4a:6a:4e:74:b4:d6:2f:46:a2:7c:2d:e3: 60:0d:43:0d:9b:21:d3:26:ce:48:d0:d0:84:53:d3: 20:f5:dd:1c:63:96:5c:7c:5b:01:09:33:12:4c:2e: c9:5d:e2:85:68:18:37:bf:07:44:2a:a1:39:08:a8: ab:0b:3a:2c:97:12:09:e0:ae:14:70:e1:84:7b:40: b2:23:d7:1e:3d:8a:64:dc:14:d6:f7:99:8a:7c:38: 60:be:95:9d:07:ac:58:b7:3d:67:13:a3:8a:a1:fa: c2:bf:c9:f6:1a:94:c0:72:79:c2:2e:96:e0:e3:2e: 10:df:59:3a:64:99:a7:a7:c0:03:bd:a3:a7:e9:1d: 7e:87:9a:0c:72:5e:03:66:a0:0d:f9:bc:30:89:df: 64:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9F:A4:C5:BA:93:5D:F1:7C:E1:86:85:4C:B5:17:50:46:A9:64:00 X509v3 Authority Key Identifier: keyid:52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:5d:9a:3b:e7:57:43:b3:50:37:40:89:f6:15:80:50:26:79: 3f:9d:d7:40:99:b0:e0:37:fb:b1:87:80:71:5d:b0:a1:2f:66: f6:a1:ad:1a:e0:b0:35:fc:f3:7d:43:9b:d9:93:cf:d4:68:aa: 57:d6:dc:6d:2c:2a:b5:8a:d0:3e:6d:99:04:b9:64:1e:7d:5f: 18:dc:99:2c:55:bb:42:a1:da:20:b6:12:e3:43:ff:bd:1d:87: 03:e5:e8:84:50:4e:6e:2a:23:d1:10:6a:9a:9e:89:49:da:98: 1b:60:b7:48:6b:0f:b5:9e:70:03:6a:46:7f:85:53:77:ab:bb: d2:a9:82:95:41:94:ac:6c:93:5f:4f:23:2f:ac:54:db:31:62: 18:51:c8:40:03:c8:8a:47:89:7f:4f:0a:bb:59:6b:a1:e8:26: 28:55:d0:05:da:3b:f8:5b:da:1e:58:2f:b6:5c:91:9f:83:07: a5:c6:9f:09:b4:d2:1a:b6:cb:30:9c:2d:33:1b:e9:88:89:9e: 1d:ff:a6:c1:0a:c4:26:74:a4:7b:16:9f:0f:65:6c:e1:c3:6c: e8:34:bf:00:10:75:36:7d:46:df:a3:e6:fb:1d:99:71:60:15: ec:44:7d:f5:c7:89:0d:58:65:e3:37:72:d9:fd:13:e0:e0:21: 6a:00:61:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTNGRTExMC8GA1UEBRMoNTJBMUM0MjBEODI3QzE2Q0VBQTA0MjgzREQyOEI2NDBB MzE1NjM0RDAeFw0yNTA4MjEwODA2NDlaFw0yNTA4MjgwODA2NDlaMBgxFjAUBgNV BAMTDTY4YTZkMzk5LTY5OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAv2Q02sjE51kC5izqN85/YO3lw8RQG6I6diNkbbKwSGiyOiKAz4T/BGBg5iAL HqRxwwCyaCvkyvrDDDKQ/m3dUiEaM/yZ3jX+gFfg4mScVvQ5hwKypsV3jKohP7j/ eKQFOkBpNPg1aBs/wkpqTnS01i9Gonwt42ANQw2bIdMmzkjQ0IRT0yD13Rxjllx8 WwEJMxJMLsld4oVoGDe/B0QqoTkIqKsLOiyXEgngrhRw4YR7QLIj1x49imTcFNb3 mYp8OGC+lZ0HrFi3PWcTo4qh+sK/yfYalMByecIuluDjLhDfWTpkmaenwAO9o6fp HX6HmgxyXgNmoA35vDCJ32QdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUup+kxbqT XfF84YaFTLUXUEapZAAwHwYDVR0jBBgwFoAUUqHEINgnwWzqoEKD3Si2QKMVY00w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxM0ZFLzhEOEUyMkMyNTY0 MzExRjBCMTYyN0ExNUM0RjlBRTAyL1VxSEVJTmdud1d6cW9FS0QzU2kyUUtNVlkw MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVXFIRUlOZ253V3pxb0VLRDNTaTJRS01WWTAwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx M0ZFLzhEOEUyMkMyNTY0MzExRjBCMTYyN0ExNUM0RjlBRTAyL1VxSEVJTmdud1d6 cW9FS0QzU2kyUUtNVlkwMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEZdmjvnV0OzUDdAifYVgFAmeT+d10CZsOA3+7GHgHFdsKEvZvahrRrg sDX8831Dm9mTz9RoqlfW3G0sKrWK0D5tmQS5ZB59XxjcmSxVu0Kh2iC2EuND/70d hwPl6IRQTm4qI9EQapqeiUnamBtgt0hrD7WecANqRn+FU3eru9KpgpVBlKxsk19P Iy+sVNsxYhhRyEADyIpHiX9PCrtZa6HoJihV0AXaO/hb2h5YL7ZckZ+DB6XGnwm0 0hq2yzCcLTMb6YiJnh3/psEKxCZ0pHsWnw9lbOHDbOg0vwAQdTZ9Rt+j5vsdmXFg FexEffXHiQ1YZeM3ctn9E+DgIWoAYco= -----END CERTIFICATE-----Generated at Sat Aug 23 03:27:33 2025 by rpki-client