$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft File: uOVJaYlT9l5x-4S20zjAisF4Glo.mft (raw, json) Hash identifier: eB5JW2EIgfjyAoLmd/KsVFvQRNPPshcx4U6WjGBY098= Subject key identifier: EE:01:98:A8:F6:7E:60:76:57:4B:A7:D7:67:CE:46:DB:F4:5A:31:37 Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A Certificate issuer: /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Certificate serial: 09D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft Manifest number: 09B6 Signing time: Mon 08 Sep 2025 20:03:54 +0000 Manifest this update: Mon 08 Sep 2025 20:03:53 +0000 Manifest next update: Mon 15 Sep 2025 20:03:53 +0000 Files and hashes: 1: uOVJaYlT9l5x-4S20zjAisF4Glo.crl (hash: 0PRCm7qWzG65slkMKyjSAsHb1jPv15ESsyScC08zaRs=) 2: 4B31BDC4B76911ED8A503224C4F9AE02.roa (hash: l0BRfiLqHQsOV1ADKIbKK5vOrt/xeo6mhndQAShwIN8=) 3: 49DDFE0682F511F0B6DCE147C4F9AE02.roa (hash: XUn3CIuvEXS6KPUlF+3czLodjUH67iWEKRvo5E16IQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 20:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2512 (0x9d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5C70, serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Validity Not Before: Sep 8 20:03:53 2025 GMT Not After : Sep 15 20:03:53 2025 GMT Subject: CN=68bf36aa-8e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b5:ac:b6:1d:21:bb:5d:a8:f2:83:0f:77:7e: 45:04:5a:65:40:25:f5:05:47:9f:f0:0a:f6:c8:56: 4d:f3:79:89:76:b7:13:7a:09:18:bc:61:49:a5:01: 68:c7:66:44:a2:fd:5f:0c:1d:60:08:0c:c2:da:d0: 29:3a:db:c1:b8:e6:fb:30:fe:c8:71:4b:72:d0:e7: d8:5b:1f:7c:ed:be:d6:56:a9:95:6e:6e:67:65:53: fc:d3:1c:e0:5d:7b:15:5e:9f:0d:27:aa:0b:2a:03: a9:d4:42:d9:e4:2d:b8:8d:76:2a:13:a5:2e:2e:3b: df:00:43:da:43:d9:36:22:0b:51:16:31:8a:1a:d9: aa:e9:f5:3e:9f:96:df:4e:1f:ce:ea:8f:94:59:21: 15:e4:83:d8:cf:3f:ab:a4:cf:a2:c6:ba:0e:13:c5: f3:ef:71:9e:70:d9:cb:c4:4d:7a:f3:84:ca:84:ee: 33:4f:69:18:0a:f7:8f:2f:fd:09:e3:94:ef:30:4c: 09:90:72:83:89:4e:17:f2:01:d9:80:40:d5:a9:42: d8:ad:17:bd:82:bb:d6:f0:a9:cc:a4:ab:b5:7e:80: f3:33:55:a6:69:93:49:c2:8d:2a:17:24:f9:33:82: 03:ce:cf:7e:65:9d:d9:41:12:11:26:5a:1a:67:af: de:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:01:98:A8:F6:7E:60:76:57:4B:A7:D7:67:CE:46:DB:F4:5A:31:37 X509v3 Authority Key Identifier: keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:08:1e:9d:5f:b5:72:83:e3:09:0d:e2:67:65:fa:17:37:6c: 58:ae:bc:af:97:ad:b4:09:82:44:41:42:05:02:c3:db:df:e8: 05:dd:37:9f:49:5d:c8:1c:73:d9:e7:9c:1c:e8:9a:88:cf:7d: 36:3b:37:b8:85:95:74:ea:77:e2:7c:ef:6b:b2:17:ba:42:5b: 31:7b:ba:3a:78:23:c5:0c:23:24:ca:53:75:b3:f6:10:fd:2d: 66:c3:94:bd:a0:26:bb:4d:34:b9:c0:0d:05:39:59:d7:7d:36: b7:c9:ae:85:fc:62:27:4e:a4:dc:08:55:0c:ac:67:47:5b:a2: 56:2e:a1:2e:fe:9b:d8:f5:20:03:06:7c:10:ea:b6:97:5c:72: 95:a6:82:8f:16:01:32:bb:44:cb:32:ef:55:0d:35:d1:d7:d6: 75:da:a5:05:13:d7:ff:82:50:0f:da:c2:97:5e:6e:b8:f8:cb: ab:c2:6d:d5:b9:1e:68:cc:69:81:84:a4:66:d4:e4:ad:87:0e: 6c:69:2a:a9:5a:dd:8c:46:30:3a:51:71:a7:7e:f7:64:e8:15: 97:1c:bf:cf:29:6e:fa:09:ab:c5:0e:87:70:1c:f6:53:8a:14: 5a:12:1b:b2:7e:ef:7a:12:23:8b:8f:e2:93:60:65:39:50:d0: 64:0e:19:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDNzAxMTAvBgNVBAUTKEI4RTU0OTY5ODk1M0Y2NUU3MUZCODRCNkQzMzhDMDhB QzE3ODFBNUEwHhcNMjUwOTA4MjAwMzUzWhcNMjUwOTE1MjAwMzUzWjAYMRYwFAYD VQQDEw02OGJmMzZhYS04ZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLWsth0hu12o8oMPd35FBFplQCX1BUef8Ar2yFZN83mJdrcTegkYvGFJpQFo x2ZEov1fDB1gCAzC2tApOtvBuOb7MP7IcUty0OfYWx987b7WVqmVbm5nZVP80xzg XXsVXp8NJ6oLKgOp1ELZ5C24jXYqE6UuLjvfAEPaQ9k2IgtRFjGKGtmq6fU+n5bf Th/O6o+UWSEV5IPYzz+rpM+ixroOE8Xz73GecNnLxE1684TKhO4zT2kYCvePL/0J 45TvMEwJkHKDiU4X8gHZgEDVqULYrRe9grvW8KnMpKu1foDzM1WmaZNJwo0qFyT5 M4IDzs9+ZZ3ZQRIRJloaZ6/ecwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4BmKj2 fmB2V0un12fORtv0WjE3MB8GA1UdIwQYMBaAFLjlSWmJU/ZecfuEttM4wIrBeBpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUM3MC8yM0EwQUMwNjkx MDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDlsNXgtNFMyMHpqQWlzRjRH bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPVkphWWxUOWw1eC00UzIwempBaXNGNEdsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUM3MC8yM0EwQUMwNjkxMDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDls NXgtNFMyMHpqQWlzRjRHbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxCB6dX7Vyg+MJDeJnZfoXN2xYrryvl620CYJEQUIFAsPb3+gF3Tef SV3IHHPZ55wc6JqIz302Oze4hZV06nfifO9rshe6Qlsxe7o6eCPFDCMkylN1s/YQ /S1mw5S9oCa7TTS5wA0FOVnXfTa3ya6F/GInTqTcCFUMrGdHW6JWLqEu/pvY9SAD BnwQ6raXXHKVpoKPFgEyu0TLMu9VDTXR19Z12qUFE9f/glAP2sKXXm64+Murwm3V uR5ozGmBhKRm1OSthw5saSqpWt2MRjA6UXGnfvdk6BWXHL/PKW76CavFDodwHPZT ihRaEhuyfu96EiOLj+KTYGU5UNBkDhkn -----END CERTIFICATE-----Generated at Tue Sep 9 13:24:30 2025 by rpki-client