$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft File: UhSSEEqxqLu-vYCplinU4uZjI3A.mft (raw, json) Hash identifier: Te0ytSXHN7IP5A3QlM5PDaCuu4n52JW2l8reKiXnIBA= Subject key identifier: AE:73:F2:F2:2F:71:A9:D4:6B:9A:B3:51:F3:4E:BA:22:1F:09:74:A0 Authority key identifier: 52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70 Certificate issuer: /CN=A91C7409/serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft Manifest number: 04 Signing time: Sat 23 Aug 2025 08:24:21 +0000 Manifest this update: Sat 23 Aug 2025 08:24:21 +0000 Manifest next update: Sat 30 Aug 2025 08:24:21 +0000 Files and hashes: 1: UhSSEEqxqLu-vYCplinU4uZjI3A.crl (hash: F8WRqxZNItlrVtlYsAvAIAGhxEiTDj+VYc4a04R6ZI4=) 2: E983DB547CB711F0AC8F9D6EC4F9AE02.roa (hash: E0HpiYi9oekDhMBwLHO28cWKce/Mgln+cFcKFRPDwlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7409, serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370 Validity Not Before: Aug 23 08:24:21 2025 GMT Not After : Aug 30 08:24:21 2025 GMT Subject: CN=68a97ab5-9805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b4:b9:d1:e1:47:05:82:b9:86:99:68:0e:53: a4:b1:90:75:da:11:b5:fe:e5:be:70:af:bf:88:d7: 2c:b1:15:22:0f:63:e1:92:f2:3f:04:c3:9e:a4:c5: 9c:25:38:16:6c:c9:d8:70:76:6e:e7:83:f8:9b:34: 0f:0d:ff:4e:0f:5b:b8:f1:32:ca:03:59:d6:b1:b7: 79:5d:44:88:07:83:42:e0:d8:4c:0f:8c:ec:c8:90: 11:1e:b1:9b:e8:78:bf:64:b2:1d:a6:a8:73:3f:93: c3:a5:1b:72:8b:c0:f1:8c:f2:13:a3:4b:a1:6f:3c: b1:fe:ed:85:b2:ee:55:74:9a:f5:4d:24:9d:41:be: 64:43:18:29:96:88:94:b6:66:57:38:a0:fb:13:39: 5c:9a:ba:7d:9f:48:0a:c2:a3:e2:2e:c7:2e:27:76: 5d:f8:1a:13:94:21:4f:32:d1:d2:1c:d9:3d:0a:26: 44:aa:be:de:94:8d:2c:ea:1a:07:c4:51:1a:62:36: a5:3d:28:f5:4a:fc:80:3b:81:df:ea:86:13:fb:ae: b7:3b:cc:f8:7d:41:05:9e:a0:b4:8e:0b:42:ec:2d: fa:09:89:6e:21:a9:2b:61:93:49:a0:cc:f6:ac:c9: 7b:9b:14:29:b4:3b:da:06:2a:8d:64:db:6d:18:39: 47:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:73:F2:F2:2F:71:A9:D4:6B:9A:B3:51:F3:4E:BA:22:1F:09:74:A0 X509v3 Authority Key Identifier: keyid:52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:30:b5:40:12:c0:62:b6:df:55:8e:34:19:61:23:d5:ae:5b: 38:ab:40:ea:31:44:d7:c8:57:df:0f:34:d4:7f:e2:13:17:3d: 19:a9:3f:2d:4e:be:69:44:96:6c:f1:51:8c:ef:96:e1:c9:49: 21:fe:2e:e0:67:80:90:c9:af:6d:33:d7:3c:f5:ec:61:12:86: 8c:1a:9c:32:63:52:b4:34:93:48:23:6b:0e:41:db:06:d3:ae: 6d:23:62:d9:c6:41:be:29:86:76:e3:f2:4e:bd:95:ac:94:90: 8a:15:df:f4:81:05:e8:3a:76:c6:90:f6:b9:14:f6:55:70:28: e1:60:d7:55:d8:9c:f5:c1:06:03:b8:b1:29:f3:68:bd:59:23: 79:80:5a:0b:96:a7:ff:48:3e:77:23:72:7d:62:3e:22:bd:a4: e1:84:97:15:06:13:39:68:27:3c:d3:d5:f3:72:3c:a6:2f:df: 72:32:1e:5b:62:c5:21:0d:b3:62:1f:22:70:72:e9:d4:b1:38: 6b:ee:a3:bd:44:11:8e:60:0e:82:fc:fb:0e:59:20:ae:65:af: 6b:4b:fb:2c:9e:89:4e:3f:bd:da:d6:1a:33:ca:7a:b3:3c:18: 77:18:a2:8c:bb:f9:82:04:42:5a:ae:b0:d2:d9:90:1e:38:f8: fa:02:21:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzQwOTExMC8GA1UEBRMoNTIxNDkyMTA0QUIxQThCQkJFQkQ4MEE5OTYyOUQ0RTJF NjYzMjM3MDAeFw0yNTA4MjMwODI0MjFaFw0yNTA4MzAwODI0MjFaMBgxFjAUBgNV BAMTDTY4YTk3YWI1LTk4MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOtLnR4UcFgrmGmWgOU6SxkHXaEbX+5b5wr7+I1yyxFSIPY+GS8j8Ew56kxZwl OBZsydhwdm7ng/ibNA8N/04PW7jxMsoDWdaxt3ldRIgHg0Lg2EwPjOzIkBEesZvo eL9ksh2mqHM/k8OlG3KLwPGM8hOjS6FvPLH+7YWy7lV0mvVNJJ1BvmRDGCmWiJS2 Zlc4oPsTOVyaun2fSArCo+Iuxy4ndl34GhOUIU8y0dIc2T0KJkSqvt6UjSzqGgfE URpiNqU9KPVK/IA7gd/qhhP7rrc7zPh9QQWeoLSOC0LsLfoJiW4hqSthk0mgzPas yXubFCm0O9oGKo1k220YOUenAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrnPy8i9x qdRrmrNR8066Ih8JdKAwHwYDVR0jBBgwFoAUUhSSEEqxqLu+vYCplinU4uZjI3Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3NDA5LzQxRDUyRDQ2N0NC NjExRjA4QzVGNzc2OUM0RjlBRTAyL1VoU1NFRXF4cUx1LXZZQ3BsaW5VNHVaakkz QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVWhTU0VFcXhxTHUtdllDcGxpblU0dVpqSTNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 NDA5LzQxRDUyRDQ2N0NCNjExRjA4QzVGNzc2OUM0RjlBRTAyL1VoU1NFRXF4cUx1 LXZZQ3BsaW5VNHVaakkzQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGIwtUASwGK231WONBlhI9WuWzirQOoxRNfIV98PNNR/4hMXPRmpPy1O vmlElmzxUYzvluHJSSH+LuBngJDJr20z1zz17GEShowanDJjUrQ0k0gjaw5B2wbT rm0jYtnGQb4phnbj8k69layUkIoV3/SBBeg6dsaQ9rkU9lVwKOFg11XYnPXBBgO4 sSnzaL1ZI3mAWguWp/9IPncjcn1iPiK9pOGElxUGEzloJzzT1fNyPKYv33IyHlti xSENs2IfInBy6dSxOGvuo71EEY5gDoL8+w5ZIK5lr2tL+yyeiU4/vdrWGjPKerM8 GHcYooy7+YIEQlqusNLZkB44+PoCIWg= -----END CERTIFICATE-----Generated at Sun Aug 24 22:02:42 2025 by rpki-client