$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft File: ujgt6jovW4xMIgXskp9gG-NP538.mft (raw, json) Hash identifier: L5YcZOZJ/P4/KjyGBzfsySIoAfprWhx5MX0ia9q6DC4= Subject key identifier: 7D:C2:67:34:ED:E7:BD:C8:15:0F:D4:8B:AB:0A:EF:DD:B8:C7:64:16 Authority key identifier: BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F Certificate issuer: /CN=A91B7B34/serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F Certificate serial: 0C73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft Manifest number: 0C69 Signing time: Sun 24 Aug 2025 18:24:30 +0000 Manifest this update: Sun 24 Aug 2025 18:24:30 +0000 Manifest next update: Sun 31 Aug 2025 18:24:30 +0000 Files and hashes: 1: ujgt6jovW4xMIgXskp9gG-NP538.crl (hash: uBnI/a5lv4YFBTmRCHp/C3E6mpviQxfv9nd/6OUgef8=) 2: 52E56FA806C711EA84978821C4F9AE02.roa (hash: pC6YASmlOW3gbC5Njuzzo1yhASqi/WroinaiHpfVYXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3187 (0xc73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B34, serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F Validity Not Before: Aug 24 18:24:30 2025 GMT Not After : Aug 31 18:24:30 2025 GMT Subject: CN=68ab58de-484d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:09:65:3a:dc:76:06:06:30:48:cd:94:ec: c8:21:85:de:37:7f:31:dd:a8:2e:59:c3:f8:ca:40: 95:21:87:b5:21:5f:45:be:c7:c2:b6:c7:b4:78:e6: 33:4d:d3:26:96:b1:34:6b:1c:42:99:eb:aa:06:1a: a2:e7:48:c3:50:19:1d:be:e7:5b:4f:c3:b6:da:89: 73:d9:39:00:fe:8e:f6:78:c9:72:29:98:bb:07:da: 13:03:9c:85:28:9f:79:2b:fc:fb:f3:a3:01:2f:9b: 16:ed:17:19:16:0f:be:aa:57:71:65:70:b9:b7:c8: f1:01:3d:0e:ae:e4:05:a3:42:2a:e3:19:b8:8e:4b: 01:b4:d5:f7:50:fe:9e:e5:6d:6d:f7:7c:d8:1e:d7: 50:84:7d:3d:43:b2:7d:0b:b2:51:28:b1:64:19:10: 7b:9f:64:e7:e9:87:42:dd:86:56:09:c6:60:c1:ae: 86:93:61:14:e0:cc:3e:b9:21:1e:0a:07:e3:73:83: eb:de:10:c1:c6:7b:7b:ad:12:c0:73:6c:f8:42:b9: 76:19:eb:63:ac:3a:c6:06:f5:4c:ac:20:b9:4c:c9: c9:59:f9:78:37:60:13:35:ee:dc:c5:32:62:53:ea: de:5f:5f:d3:65:64:1a:e7:03:19:f5:2b:a0:f0:3e: fc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C2:67:34:ED:E7:BD:C8:15:0F:D4:8B:AB:0A:EF:DD:B8:C7:64:16 X509v3 Authority Key Identifier: keyid:BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:a8:97:e1:42:94:14:a4:13:62:b3:6f:ac:cc:a0:62:56:b8: 7d:da:b1:63:be:6d:98:81:98:37:37:db:f1:9a:b8:70:f3:5e: 84:bc:03:f7:f0:a8:c2:da:51:cb:d8:38:11:4f:a1:13:13:c8: ef:53:09:e1:e2:c5:a8:cf:14:60:c6:9e:5d:6c:83:a3:b0:ba: 98:f3:8c:ee:19:60:84:a6:d0:31:4f:57:ef:d5:59:b2:c4:38: 22:65:33:ce:f6:49:70:86:a0:10:55:5c:71:e4:5e:63:f2:45: ae:b8:b2:c6:0c:a0:15:22:18:f8:7e:d8:07:af:ae:a6:ce:66: af:4b:2e:47:32:3b:8e:b6:20:83:ba:9c:d6:c9:aa:ae:c5:68: 1d:32:1f:3c:89:ed:05:32:ab:74:fe:92:87:68:97:53:a2:f4: ff:95:b1:19:7c:e5:b5:84:f1:dc:63:b7:ea:92:48:14:2b:19: 67:bf:03:8b:45:b6:14:87:1a:b5:3b:de:d9:ff:51:f7:5d:6c: ac:c4:5b:15:52:e8:8e:38:1c:27:3f:cc:90:c3:ec:c5:20:48: 2e:7d:dd:b3:b1:36:a0:e7:d2:f8:87:5a:23:fa:ba:bb:43:29: f7:36:f3:c5:37:6c:24:2f:d3:d5:bd:7c:2b:7e:d3:03:7b:91: 3c:43:d2:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMzQxMTAvBgNVBAUTKEJBMzgyREVBM0EyRjVCOEM0QzIyMDVFQzkyOUY2MDFC RTM0RkU3N0YwHhcNMjUwODI0MTgyNDMwWhcNMjUwODMxMTgyNDMwWjAYMRYwFAYD VQQDEw02OGFiNThkZS00ODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQIJZTrcdgYGMEjNlOzIIYXeN38x3aguWcP4ykCVIYe1IV9FvsfCtse0eOYz TdMmlrE0axxCmeuqBhqi50jDUBkdvudbT8O22olz2TkA/o72eMlyKZi7B9oTA5yF KJ95K/z786MBL5sW7RcZFg++qldxZXC5t8jxAT0OruQFo0Iq4xm4jksBtNX3UP6e 5W1t93zYHtdQhH09Q7J9C7JRKLFkGRB7n2Tn6YdC3YZWCcZgwa6Gk2EU4Mw+uSEe Cgfjc4Pr3hDBxnt7rRLAc2z4Qrl2GetjrDrGBvVMrCC5TMnJWfl4N2ATNe7cxTJi U+reX1/TZWQa5wMZ9Sug8D78uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3CZzTt 573IFQ/Ui6sK7924x2QWMB8GA1UdIwQYMBaAFLo4Leo6L1uMTCIF7JKfYBvjT+d/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IzNC9ERUNFM0VCQTA2 QzYxMUVBQTUxQTYwMjFDNEY5QUUwMi91amd0Nmpvdlc0eE1JZ1hza3A5Z0ctTlA1 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VqZ3Q2am92VzR4TUlnWHNrcDlnRy1OUDUzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IzNC9ERUNFM0VCQTA2QzYxMUVBQTUxQTYwMjFDNEY5QUUwMi91amd0Nmpvdlc0 eE1JZ1hza3A5Z0ctTlA1MzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUqJfhQpQUpBNis2+szKBiVrh92rFjvm2YgZg3N9vxmrhw816EvAP3 8KjC2lHL2DgRT6ETE8jvUwnh4sWozxRgxp5dbIOjsLqY84zuGWCEptAxT1fv1Vmy xDgiZTPO9klwhqAQVVxx5F5j8kWuuLLGDKAVIhj4ftgHr66mzmavSy5HMjuOtiCD upzWyaquxWgdMh88ie0FMqt0/pKHaJdTovT/lbEZfOW1hPHcY7fqkkgUKxlnvwOL RbYUhxq1O97Z/1H3XWysxFsVUuiOOBwnP8yQw+zFIEgufd2zsTag59L4h1oj+rq7 Qyn3NvPFN2wkL9PVvXwrftMDe5E8Q9IV -----END CERTIFICATE-----Generated at Sun Aug 24 22:04:58 2025 by rpki-client