$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft File: uoXZHSSsqengMR5VLb83WXY6Yro.mft (raw, json) Hash identifier: YtAutcpVN0OH3gmBr1wARizDtVxvOKN3MvxucAFl2Ik= Subject key identifier: A9:21:22:BC:95:C7:FA:1E:5F:E8:B5:63:22:0A:4C:82:5F:FE:19:28 Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA Certificate issuer: /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft Manifest number: BC Signing time: Sat 19 Jul 2025 06:06:00 +0000 Manifest this update: Sat 19 Jul 2025 06:05:59 +0000 Manifest next update: Sat 26 Jul 2025 06:05:59 +0000 Files and hashes: 1: uoXZHSSsqengMR5VLb83WXY6Yro.crl (hash: nFg8wwYHSsZn0P8VLfwSuuzvL9Cdzu97Ho98A9mLeV8=) 2: C57D59A8457011EFA624C172C4F9AE02.roa (hash: ID73Pz3s55NAjs8USBhRX9L9yvmp5FUr9fdsYXFscuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B391F, serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA Validity Not Before: Jul 19 06:05:59 2025 GMT Not After : Jul 26 06:05:59 2025 GMT Subject: CN=687b35c8-c6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:51:d8:68:4a:40:6f:df:3d:8a:11:83:69:a7: a5:d0:63:bd:da:a5:47:45:00:e4:42:ae:25:c7:ef: 3f:25:07:91:6d:f5:91:b6:99:07:0d:12:1d:9d:d4: dd:a6:0b:53:4b:77:d6:5f:65:68:b5:bf:2d:14:b6: cc:c9:26:a4:0c:6d:7b:96:12:f8:88:93:aa:3b:f2: 86:8f:ae:51:5c:7e:54:6c:9b:b1:b5:2f:fb:bf:d5: cd:19:36:3c:1f:38:8b:dd:0e:5c:c6:11:8c:d3:93: 45:9c:fd:b8:a6:62:3d:77:d0:44:d1:19:fb:30:30: 32:1d:de:5d:b0:88:15:2e:af:ae:52:c0:83:57:07: 6c:5d:69:81:83:fd:2d:5d:28:e4:66:8b:ef:8b:4a: d2:b4:55:a3:e8:c8:bd:b7:12:e6:75:43:d4:a5:31: 2d:e0:3c:fb:a9:df:5f:59:c3:67:ea:79:f7:18:67: d7:50:69:fe:4d:2b:ed:1c:91:d6:18:ca:ca:c8:20: b0:f9:04:0e:95:5b:da:f7:91:ef:b2:ea:38:f8:77: 66:54:7f:3a:e5:3d:e5:f2:aa:9c:6d:1a:ab:91:3d: a9:5b:0a:96:fb:e3:33:00:5f:7c:1e:32:bd:87:c0: b4:92:84:d2:19:ea:e1:50:fd:cc:be:d2:42:7c:db: 5a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:21:22:BC:95:C7:FA:1E:5F:E8:B5:63:22:0A:4C:82:5F:FE:19:28 X509v3 Authority Key Identifier: keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:5f:79:ff:4a:52:a9:27:d4:b7:60:6e:2c:95:7d:0c:c0:71: 4a:1c:47:2c:74:c0:88:ae:9b:26:00:33:52:98:93:ab:bb:1e: b3:be:a8:21:e0:e5:a4:f1:2d:5a:c9:50:a0:ae:a5:5c:8f:a1: 95:ef:1c:60:4e:8c:c7:a9:e0:b5:c0:dd:56:ff:88:00:01:06: 9a:55:95:2f:4f:b6:45:ec:20:c8:4a:9b:40:94:cc:90:68:51: e2:6f:c1:a0:93:35:d8:69:dd:da:10:01:9a:60:0b:7c:16:d3: 04:9a:11:dc:7a:04:0d:54:df:95:0c:12:0f:cd:87:f0:61:a5: 88:f4:9f:9a:77:1b:5f:d0:f4:00:22:74:42:2d:46:80:77:8e: 96:e5:58:9b:81:4a:f2:9a:49:8e:63:b3:e3:ce:06:86:85:bc: 50:45:26:11:2c:70:51:b6:3f:1a:59:aa:4c:38:f6:54:51:36: 69:93:98:f1:9f:81:3c:28:22:d3:34:2d:0f:5d:0f:49:94:54: d6:f5:35:ac:55:d6:54:ab:de:1a:7c:e6:2a:e4:80:a9:dc:9c: 36:17:41:4a:24:3d:aa:6f:08:ed:68:f0:7e:63:1a:98:d7:6c: b8:81:be:19:62:a1:75:3e:0c:a1:0f:03:71:4b:67:cb:af:74: 5d:d1:12:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM5MUYxMTAvBgNVBAUTKEJBODVEOTFEMjRBQ0E5RTlFMDMxMUU1NTJEQkYzNzU5 NzYzQTYyQkEwHhcNMjUwNzE5MDYwNTU5WhcNMjUwNzI2MDYwNTU5WjAYMRYwFAYD VQQDEw02ODdiMzVjOC1jNmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFHYaEpAb989ihGDaael0GO92qVHRQDkQq4lx+8/JQeRbfWRtpkHDRIdndTd pgtTS3fWX2Votb8tFLbMySakDG17lhL4iJOqO/KGj65RXH5UbJuxtS/7v9XNGTY8 HziL3Q5cxhGM05NFnP24pmI9d9BE0Rn7MDAyHd5dsIgVLq+uUsCDVwdsXWmBg/0t XSjkZovvi0rStFWj6Mi9txLmdUPUpTEt4Dz7qd9fWcNn6nn3GGfXUGn+TSvtHJHW GMrKyCCw+QQOlVva95Hvsuo4+HdmVH865T3l8qqcbRqrkT2pWwqW++MzAF98HjK9 h8C0koTSGerhUP3MvtJCfNtaiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkhIryV x/oeX+i1YyIKTIJf/hkoMB8GA1UdIwQYMBaAFLqF2R0krKnp4DEeVS2/N1l2OmK6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzkxRi81MDgzNUU2ODQ1 NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi91b1haSFNTc3FlbmdNUjVWTGI4M1dYWTZZ cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VvWFpIU1NzcWVuZ01SNVZMYjgzV1hZNllyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzkxRi81MDgzNUU2ODQ1NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi91b1haSFNTc3Fl bmdNUjVWTGI4M1dYWTZZcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdX3n/SlKpJ9S3YG4slX0MwHFKHEcsdMCIrpsmADNSmJOrux6zvqgh 4OWk8S1ayVCgrqVcj6GV7xxgTozHqeC1wN1W/4gAAQaaVZUvT7ZF7CDISptAlMyQ aFHib8GgkzXYad3aEAGaYAt8FtMEmhHcegQNVN+VDBIPzYfwYaWI9J+adxtf0PQA InRCLUaAd46W5VibgUrymkmOY7PjzgaGhbxQRSYRLHBRtj8aWapMOPZUUTZpk5jx n4E8KCLTNC0PXQ9JlFTW9TWsVdZUq94afOYq5ICp3Jw2F0FKJD2qbwjtaPB+YxqY 12y4gb4ZYqF1PgyhDwNxS2fLr3Rd0RJt -----END CERTIFICATE-----Generated at Mon Jul 21 02:45:51 2025 by rpki-client