$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft File: uoXZHSSsqengMR5VLb83WXY6Yro.mft (raw, json) Hash identifier: mxE/fHlLL7sTxc+lQc/w52haHfrfgbGuOZc1AECzwGc= Subject key identifier: 8F:4C:FF:97:48:D6:3B:06:9E:2D:BB:A2:C9:EA:2F:82:03:86:25:37 Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA Certificate issuer: /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft Manifest number: D9 Signing time: Wed 03 Sep 2025 06:07:37 +0000 Manifest this update: Wed 03 Sep 2025 06:07:37 +0000 Manifest next update: Wed 10 Sep 2025 06:07:37 +0000 Files and hashes: 1: uoXZHSSsqengMR5VLb83WXY6Yro.crl (hash: NtAlUV70UiOvBMZ323eOSXuH/oRXZmMDd/Yz834/tNk=) 2: 37C8E00A6EA011F0835F9E19C4F9AE02.roa (hash: RhQloGXtcZHnLcoyU2Qhf/8Ls5h2TxH8G+0z0bjWi3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 06:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B391F, serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA Validity Not Before: Sep 3 06:07:37 2025 GMT Not After : Sep 10 06:07:37 2025 GMT Subject: CN=68b7db29-781d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e7:20:41:87:2b:c8:02:c7:85:40:57:64:0b: 0e:58:ba:df:73:fa:09:b2:56:a2:a5:dd:b2:81:44: 10:22:53:11:b8:e7:30:9a:22:22:c2:48:23:2a:a8: c9:78:88:3a:0d:ba:71:83:ae:9f:69:3f:3a:6d:69: 9a:69:c3:f2:ea:7a:ff:06:ee:fd:c8:b6:28:92:36: 1b:62:8d:f3:d2:8c:ec:8f:75:d8:60:fb:03:75:62: ab:90:5a:7e:27:e8:dd:cc:21:39:60:c9:60:07:8f: 10:4e:c5:c8:4b:92:08:d4:2a:f6:21:f5:26:07:ad: a0:a3:46:fa:83:97:f9:f6:f7:d3:52:cb:7b:60:49: c7:c0:51:2b:3f:83:0f:b1:b2:04:3f:95:d9:a8:52: 8f:3f:72:d6:a4:3c:cf:57:75:25:35:96:9a:30:2d: 09:ae:ef:62:9b:c8:5b:03:4c:05:80:9a:3c:4b:87: 50:3e:7f:fa:2a:91:ff:b5:05:a0:bc:0d:81:56:33: 14:9d:37:8e:c6:4d:b2:dc:dc:b2:40:c5:a7:ca:d0: f6:ba:eb:2b:ac:b6:79:74:0a:ec:63:1d:65:62:50: d7:ad:a5:7d:fb:3c:7b:bf:22:a1:16:28:08:03:97: d0:75:d3:da:67:47:98:7e:d3:fb:5e:c8:78:8a:60: 94:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4C:FF:97:48:D6:3B:06:9E:2D:BB:A2:C9:EA:2F:82:03:86:25:37 X509v3 Authority Key Identifier: keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1a:3b:0a:4d:1a:a4:fd:65:55:0e:f8:77:ee:50:33:11:d4: da:56:7b:a7:4c:03:62:a1:ef:83:60:76:72:f7:dc:c8:a3:ae: 16:26:1f:8c:72:b7:be:70:c9:92:8f:31:d6:4e:cd:ae:65:52: 4d:c5:6b:e5:c7:86:97:3d:4c:52:5b:d8:af:34:7c:03:88:02: 41:39:c7:fc:61:3f:4f:84:b7:fb:c0:ab:c5:96:9c:27:c9:ce: b1:c9:e8:a0:21:98:fd:06:40:b8:64:be:8b:84:dd:4c:17:6c: e5:c7:35:a9:5b:90:de:17:eb:3c:b6:cd:48:85:ac:21:cd:da: 74:7c:df:66:19:69:bf:bf:72:c4:a9:0c:79:52:f6:e1:0e:a0: df:5d:58:43:dc:be:c6:70:00:ec:40:58:b5:26:6c:58:b0:71: ba:1a:b3:3e:bd:6f:0f:3a:4a:0f:be:cb:14:cf:09:87:c3:3e: e1:48:f4:bd:f0:02:ba:4f:82:46:53:d8:a5:a2:88:f7:e6:a6: bc:47:2d:00:1f:30:56:4d:cb:fa:fc:be:16:7f:b3:f7:fa:d1: 3a:1b:d7:27:23:a4:c3:9e:03:0a:fe:f6:45:b1:29:df:f1:60: 14:85:3c:5a:9d:e1:e0:3f:76:2a:2a:9b:a0:95:b9:8a:fd:b6: c3:bc:c8:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM5MUYxMTAvBgNVBAUTKEJBODVEOTFEMjRBQ0E5RTlFMDMxMUU1NTJEQkYzNzU5 NzYzQTYyQkEwHhcNMjUwOTAzMDYwNzM3WhcNMjUwOTEwMDYwNzM3WjAYMRYwFAYD VQQDEw02OGI3ZGIyOS03ODFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk+cgQYcryALHhUBXZAsOWLrfc/oJslaipd2ygUQQIlMRuOcwmiIiwkgjKqjJ eIg6Dbpxg66faT86bWmaacPy6nr/Bu79yLYokjYbYo3z0ozsj3XYYPsDdWKrkFp+ J+jdzCE5YMlgB48QTsXIS5II1Cr2IfUmB62go0b6g5f59vfTUst7YEnHwFErP4MP sbIEP5XZqFKPP3LWpDzPV3UlNZaaMC0Jru9im8hbA0wFgJo8S4dQPn/6KpH/tQWg vA2BVjMUnTeOxk2y3NyyQMWnytD2uusrrLZ5dArsYx1lYlDXraV9+zx7vyKhFigI A5fQddPaZ0eYftP7Xsh4imCUvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9M/5dI 1jsGni27osnqL4IDhiU3MB8GA1UdIwQYMBaAFLqF2R0krKnp4DEeVS2/N1l2OmK6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzkxRi81MDgzNUU2ODQ1 NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi91b1haSFNTc3FlbmdNUjVWTGI4M1dYWTZZ cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VvWFpIU1NzcWVuZ01SNVZMYjgzV1hZNllyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzkxRi81MDgzNUU2ODQ1NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi91b1haSFNTc3Fl bmdNUjVWTGI4M1dYWTZZcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOGjsKTRqk/WVVDvh37lAzEdTaVnunTANioe+DYHZy99zIo64WJh+M cre+cMmSjzHWTs2uZVJNxWvlx4aXPUxSW9ivNHwDiAJBOcf8YT9PhLf7wKvFlpwn yc6xyeigIZj9BkC4ZL6LhN1MF2zlxzWpW5DeF+s8ts1Ihawhzdp0fN9mGWm/v3LE qQx5UvbhDqDfXVhD3L7GcADsQFi1JmxYsHG6GrM+vW8POkoPvssUzwmHwz7hSPS9 8AK6T4JGU9ilooj35qa8Ry0AHzBWTcv6/L4Wf7P3+tE6G9cnI6TDngMK/vZFsSnf 8WAUhTxaneHgP3YqKpuglbmK/bbDvMgW -----END CERTIFICATE-----Generated at Thu Sep 4 14:02:17 2025 by rpki-client