$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft File: uokBTrxJS2f9iz-C6LOO9vbFck0.mft (raw, json) Hash identifier: ANQ7+fGD9a3z3Nm4IwLizL34ZIsSbIfqxE6fZSX2LJY= Subject key identifier: 7B:DB:E1:09:AB:8D:69:0A:FE:32:9C:0A:7F:DB:F3:28:E4:75:8F:1B Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D Certificate issuer: /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft Manifest number: 012B Signing time: Tue 19 Aug 2025 05:04:54 +0000 Manifest this update: Tue 19 Aug 2025 05:04:54 +0000 Manifest next update: Tue 26 Aug 2025 05:04:54 +0000 Files and hashes: 1: uokBTrxJS2f9iz-C6LOO9vbFck0.crl (hash: fwmQtqAwp73tLTZLrxbvsC5UzotSQkeUymT+CK6du8Q=) 2: ED352AAEBFE511EEBB3B4D25C4F9AE02.roa (hash: Cg10Lh1/jWjaqO5EBHv5C6vMK3khuwZ/+iMJMpvh7AE=) 3: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (hash: lJjM0vXxFGkR8fpKRXKFywWPgH/0gbH+qkVNiWKRaAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4EC7, serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Validity Not Before: Aug 19 05:04:54 2025 GMT Not After : Aug 26 05:04:54 2025 GMT Subject: CN=68a405f6-a129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:67:f9:4d:b9:c4:c2:af:60:49:1f:ea:66:2c: 97:a3:18:96:ce:e7:b9:95:c0:07:77:f2:72:4b:1c: a8:5e:35:1c:c9:c3:34:96:a5:aa:67:3d:f8:6f:b8: e6:9b:9e:0c:52:3e:ce:cf:e2:5d:43:da:4e:5d:71: a4:6a:bb:57:1d:14:38:26:d8:fb:1c:cb:e2:4b:60: 80:2a:8c:51:29:ab:a8:3b:a7:97:e1:c8:46:24:c2: 90:e3:66:ee:12:ea:c5:da:bd:1b:50:00:26:51:4d: 72:d4:c8:c4:ba:ba:cb:ca:f5:6f:fe:44:55:fd:32: b0:95:34:46:2f:47:2f:f6:bd:f0:28:2f:3a:04:d5: ae:8e:d4:a1:29:b2:b8:ea:22:af:7a:39:13:c5:bb: 3d:45:e9:66:48:bb:c7:9b:08:b3:e6:6f:8d:a5:96: 58:cc:dd:de:a2:0e:39:73:fd:3c:6e:89:b0:02:02: 15:16:02:77:a5:66:91:0f:c5:9d:c4:2d:87:3c:7a: 43:09:57:b9:1e:6b:08:75:4e:0d:90:6e:bf:f8:65: 3c:d3:9c:a8:cf:76:b9:89:5f:99:91:08:12:88:67: 72:f0:30:0d:29:4a:41:ac:43:28:80:94:d0:52:d3: f2:41:b8:18:81:ea:64:42:c5:27:8d:86:27:1a:5c: c2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DB:E1:09:AB:8D:69:0A:FE:32:9C:0A:7F:DB:F3:28:E4:75:8F:1B X509v3 Authority Key Identifier: keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:cc:e9:db:08:b3:83:b4:a9:36:15:08:e9:27:56:64:50:51: 1c:b8:1f:75:cb:86:be:94:b0:4b:bb:d9:eb:cf:46:31:98:8b: 38:f7:62:16:ab:5b:4f:0f:22:18:75:3d:06:86:6a:85:03:6f: ef:80:d6:98:f3:d0:e8:0b:04:e5:42:d7:26:3d:c2:74:3e:81: 43:5b:36:8e:d2:95:be:16:47:2d:75:69:f2:ab:b8:8c:d9:22: aa:9c:39:aa:dc:a5:93:c4:ca:2c:2d:10:7b:01:36:cb:24:97: 9a:43:75:39:03:b4:d7:4c:c8:61:07:1a:9c:bc:25:99:f2:b8: 45:9f:fc:c4:7a:76:8e:3e:dc:8b:c3:97:c6:69:41:c3:02:b1: e2:a0:85:01:1c:70:43:fb:96:5d:5e:44:28:27:ca:90:aa:2f: d0:d6:ad:ff:80:44:16:a5:91:d2:83:0f:d4:2b:20:e3:52:ed: cd:49:6e:56:d3:fc:26:e0:de:f0:be:5c:e8:e5:66:1d:66:9c: ed:d0:62:18:20:f0:d8:7b:7d:f9:b2:a8:c8:63:ed:7c:fd:46: 62:e3:31:99:ec:af:49:a4:4f:16:a4:f7:8f:59:6f:4b:56:9d: 35:18:07:59:10:da:c6:ea:97:f8:fb:9f:4c:ca:f2:dd:0a:d9: 28:8a:60:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFQzcxMTAvBgNVBAUTKEJBODkwMTRFQkM0OTRCNjdGRDhCM0Y4MkU4QjM4RUY2 RjZDNTcyNEQwHhcNMjUwODE5MDUwNDU0WhcNMjUwODI2MDUwNDU0WjAYMRYwFAYD VQQDEw02OGE0MDVmNi1hMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWf5TbnEwq9gSR/qZiyXoxiWzue5lcAHd/JySxyoXjUcycM0lqWqZz34b7jm m54MUj7Oz+JdQ9pOXXGkartXHRQ4Jtj7HMviS2CAKoxRKauoO6eX4chGJMKQ42bu EurF2r0bUAAmUU1y1MjEurrLyvVv/kRV/TKwlTRGL0cv9r3wKC86BNWujtShKbK4 6iKvejkTxbs9RelmSLvHmwiz5m+NpZZYzN3eog45c/08bomwAgIVFgJ3pWaRD8Wd xC2HPHpDCVe5HmsIdU4NkG6/+GU805yoz3a5iV+ZkQgSiGdy8DANKUpBrEMogJTQ UtPyQbgYgepkQsUnjYYnGlzCYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvb4Qmr jWkK/jKcCn/b8yjkdY8bMB8GA1UdIwQYMBaAFLqJAU68SUtn/Ys/guizjvb2xXJN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVDNy83NTc1Nzg3MEJG RTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMyZjlpei1DNkxPTzl2YkZj azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vva0JUcnhKUzJmOWl6LUM2TE9POXZiRmNrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEVDNy83NTc1Nzg3MEJGRTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMy Zjlpei1DNkxPTzl2YkZjazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1zOnbCLODtKk2FQjpJ1ZkUFEcuB91y4a+lLBLu9nrz0YxmIs492IW q1tPDyIYdT0GhmqFA2/vgNaY89DoCwTlQtcmPcJ0PoFDWzaO0pW+FkctdWnyq7iM 2SKqnDmq3KWTxMosLRB7ATbLJJeaQ3U5A7TXTMhhBxqcvCWZ8rhFn/zEenaOPtyL w5fGaUHDArHioIUBHHBD+5ZdXkQoJ8qQqi/Q1q3/gEQWpZHSgw/UKyDjUu3NSW5W 0/wm4N7wvlzo5WYdZpzt0GIYIPDYe335sqjIY+18/UZi4zGZ7K9JpE8WpPePWW9L Vp01GAdZENrG6pf4+59MyvLdCtkoimAe -----END CERTIFICATE-----Generated at Wed Aug 20 23:04:53 2025 by rpki-client