$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft File: uLRz022lJgglzQu_YvbsGQ00Ahg.mft (raw, json) Hash identifier: IJRxNedqVMquvCsSn9KQH4Zwv9phVQvXNt7OZN/Kc0E= Subject key identifier: 11:62:99:30:21:DC:02:C1:CD:BF:07:B9:F8:0A:E8:0E:15:51:74:51 Authority key identifier: B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18 Certificate issuer: /CN=A91C5D81/serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218 Certificate serial: 34C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft Manifest number: 34BA Signing time: Fri 22 Aug 2025 14:18:27 +0000 Manifest this update: Fri 22 Aug 2025 14:18:26 +0000 Manifest next update: Fri 29 Aug 2025 14:18:26 +0000 Files and hashes: 1: uLRz022lJgglzQu_YvbsGQ00Ahg.crl (hash: CqYiShwc4LnefvzSyfDfXNCfi3PEUjcDvtrUcQDEJvE=) 2: 75C18F96305811EB94E3192FC4F9AE02.roa (hash: oI8UmPtI+e/lNHKPjl/mA09y7Gr50NMbgC5wn6SXx2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13504 (0x34c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D81, serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218 Validity Not Before: Aug 22 14:18:26 2025 GMT Not After : Aug 29 14:18:26 2025 GMT Subject: CN=68a87c32-193a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:16:44:0d:7d:8b:b0:7a:64:e0:94:05:4c:79: 52:f9:73:16:b5:ad:a8:e6:43:fd:76:8a:a1:11:6b: 83:05:de:a8:cb:d8:37:6b:53:9c:9c:07:e9:9d:61: e3:c7:a1:4a:fe:8f:3b:52:44:69:a3:0d:d6:cb:e5: 0b:5f:0a:58:22:84:8a:81:ba:7c:77:99:71:d7:23: 1a:e8:7f:c7:cb:0c:69:83:4f:32:49:02:7f:08:09: ad:82:01:a3:86:86:15:6a:f8:3c:22:36:e9:70:43: a7:8e:ff:f3:9f:f3:c0:0a:1e:49:31:73:45:8d:82: b3:04:ee:df:4a:1a:71:3a:eb:b6:27:a3:3e:7e:0e: 6e:2c:4d:65:4b:1d:cc:86:e2:e6:03:9b:95:fe:7d: 25:24:cd:e5:da:14:40:e7:ef:20:1c:68:bf:4d:f8: 02:ea:0f:3c:5f:c6:6f:94:6d:c6:10:47:59:97:79: 98:bd:03:97:7c:62:42:5f:90:fc:a5:06:e5:d9:8c: dc:fa:cc:52:dd:94:45:66:a2:8a:98:e7:67:0c:1c: 0e:3b:3d:7b:a6:26:89:5f:8c:84:a7:09:a3:02:b0: a7:a4:07:9b:48:bf:f4:a0:2a:f8:27:3a:3b:bf:c6: c8:86:4e:2d:c6:49:5a:9a:8a:90:c3:13:55:ad:a1: 5f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:62:99:30:21:DC:02:C1:CD:BF:07:B9:F8:0A:E8:0E:15:51:74:51 X509v3 Authority Key Identifier: keyid:B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:f9:b1:bc:69:06:0b:fc:89:f6:fd:8c:a4:5c:4c:0a:e0:a1: d0:3e:26:4b:f0:07:9a:60:70:cb:0b:83:f3:36:9a:b4:4c:44: 98:59:25:73:6d:24:25:bb:7d:51:8d:ea:ca:6a:7e:bc:58:b0: 7e:db:1d:b9:c5:da:86:c5:9d:95:64:dd:53:41:06:1e:e3:2b: d5:6e:cd:83:8e:45:af:a4:59:3d:79:f9:fb:a1:c5:4a:66:4b: 8e:5b:ce:88:f8:fe:c4:8e:6c:bd:14:dd:3d:c8:4c:7a:ef:da: df:3b:dd:91:68:2d:a6:d7:84:32:66:9d:9e:b3:95:9c:f9:81: 49:42:e8:4d:43:96:bc:f7:28:b2:7e:20:da:2d:b4:ad:6b:e8: b1:e7:99:d7:6c:08:32:a3:fa:c4:b7:cb:cc:17:6c:21:18:48: 70:01:f0:16:80:d3:77:73:34:c2:82:20:08:f8:06:fc:99:94: a3:50:22:a8:31:2d:83:81:d5:9e:48:2b:4d:af:ea:22:fa:b8: 9e:a7:b7:32:f7:30:55:be:da:f9:6c:7b:68:a8:2a:f8:6c:59: 2b:5a:65:c9:a5:8a:b9:83:50:6c:7d:48:f3:60:e5:1e:f6:c5: b9:d1:fd:f7:46:7c:ff:17:2f:09:c4:42:9d:10:19:d4:b3:49: a9:f1:2c:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVEODExMTAvBgNVBAUTKEI4QjQ3M0QzNkRBNTI2MDgyNUNEMEJCRjYyRjZFQzE5 MEQzNDAyMTgwHhcNMjUwODIyMTQxODI2WhcNMjUwODI5MTQxODI2WjAYMRYwFAYD VQQDEw02OGE4N2MzMi0xOTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhZEDX2LsHpk4JQFTHlS+XMWta2o5kP9doqhEWuDBd6oy9g3a1OcnAfpnWHj x6FK/o87UkRpow3Wy+ULXwpYIoSKgbp8d5lx1yMa6H/Hywxpg08ySQJ/CAmtggGj hoYVavg8IjbpcEOnjv/zn/PACh5JMXNFjYKzBO7fShpxOuu2J6M+fg5uLE1lSx3M huLmA5uV/n0lJM3l2hRA5+8gHGi/TfgC6g88X8ZvlG3GEEdZl3mYvQOXfGJCX5D8 pQbl2Yzc+sxS3ZRFZqKKmOdnDBwOOz17piaJX4yEpwmjArCnpAebSL/0oCr4Jzo7 v8bIhk4txklamoqQwxNVraFfMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFimTAh 3ALBzb8HufgK6A4VUXRRMB8GA1UdIwQYMBaAFLi0c9NtpSYIJc0Lv2L27BkNNAIY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQ4MS80NzA1OUREODFE NkUxMUUyOUI3NkFBQUYwOEIwMkNEMi91TFJ6MDIybEpnZ2x6UXVfWXZic0dRMDBB aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VMUnowMjJsSmdnbHpRdV9ZdmJzR1EwMEFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQ4MS80NzA1OUREODFENkUxMUUyOUI3NkFBQUYwOEIwMkNEMi91TFJ6MDIybEpn Z2x6UXVfWXZic0dRMDBBaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT+bG8aQYL/In2/YykXEwK4KHQPiZL8AeaYHDLC4PzNpq0TESYWSVz bSQlu31RjerKan68WLB+2x25xdqGxZ2VZN1TQQYe4yvVbs2DjkWvpFk9efn7ocVK ZkuOW86I+P7Ejmy9FN09yEx679rfO92RaC2m14QyZp2es5Wc+YFJQuhNQ5a89yiy fiDaLbSta+ix55nXbAgyo/rEt8vMF2whGEhwAfAWgNN3czTCgiAI+Ab8mZSjUCKo MS2DgdWeSCtNr+oi+riep7cy9zBVvtr5bHtoqCr4bFkrWmXJpYq5g1BsfUjzYOUe 9sW50f33Rnz/Fy8JxEKdEBnUs0mp8Sx9 -----END CERTIFICATE-----Generated at Fri Aug 22 16:15:46 2025 by rpki-client