$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft File: UK5xbz02ub7q4n8QBo-eNqIzq5E.mft (raw, json) Hash identifier: fFV7zEoLfAqGZMdgmt6ryM8nOllwtW11QFFqyzhtJjU= Subject key identifier: 33:C0:9D:F0:B2:72:C4:AA:96:2B:79:38:D6:FB:54:AA:78:AB:FA:97 Authority key identifier: 50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91 Certificate issuer: /CN=A91CB4E9/serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft Manifest number: 2A Signing time: Tue 19 Aug 2025 08:16:13 +0000 Manifest this update: Tue 19 Aug 2025 08:16:12 +0000 Manifest next update: Tue 26 Aug 2025 08:16:12 +0000 Files and hashes: 1: UK5xbz02ub7q4n8QBo-eNqIzq5E.crl (hash: hxlfVYuZxDrZ73if1PeAzCAhN4qrPU3QUVDamBrN6V8=) 2: 539EAC9440EF11F08CFAFB1CC4F9AE02.roa (hash: WcSNu1HK0gGCU7aORSHhSulUdwLctmKgMDS1dq0RYbQ=) 3: BA23C0E440EF11F099D6761DC4F9AE02.roa (hash: pgsw/lIIAC86SHOBUAFVHyyezuLYZcEiwQh3Fbl1fpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB4E9, serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91 Validity Not Before: Aug 19 08:16:12 2025 GMT Not After : Aug 26 08:16:12 2025 GMT Subject: CN=68a432cc-39a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:14:f3:63:c6:2a:b5:fe:34:f9:98:48:14:71: af:d3:79:86:ca:36:80:7a:ac:7a:ad:7e:92:4a:9e: 27:b1:42:38:f8:62:67:53:9f:c7:fa:2c:87:37:47: fe:5a:a7:94:80:3e:d7:05:34:df:7c:59:b2:ff:37: 54:93:0a:21:32:bf:14:b6:8a:f2:b8:09:48:ce:9e: b6:28:a3:b7:9a:6d:e9:57:10:67:f3:c8:7d:9c:d9: b4:8d:84:ae:cd:09:dc:26:f3:ae:5b:9f:c0:85:97: b6:1c:56:51:04:99:aa:d0:74:12:7e:2e:8f:44:21: 24:a7:d7:59:30:1c:62:ee:85:f4:0f:48:5b:39:ce: c1:04:a0:ef:0c:9a:5e:da:c2:a8:62:75:c2:82:5a: 09:ee:cd:c2:7b:5c:2e:83:d0:fd:04:9c:17:d2:84: 66:03:68:7d:e4:18:f8:ad:41:63:ca:cf:02:e7:95: 51:9a:96:7a:ca:61:69:a6:0b:55:70:0a:b1:92:42: dd:74:40:72:14:72:94:2a:ae:3c:c9:c8:5d:4a:ad: fe:25:bc:31:43:03:81:fe:f8:ac:c4:42:c2:ea:a2: d2:85:3f:d6:9e:a6:bd:3d:6b:4e:31:88:cf:c3:60: 7f:61:c9:a4:ae:f9:83:83:38:a9:bc:59:78:e7:34: 03:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C0:9D:F0:B2:72:C4:AA:96:2B:79:38:D6:FB:54:AA:78:AB:FA:97 X509v3 Authority Key Identifier: keyid:50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:12:da:07:62:1c:53:7f:47:78:b0:94:3d:ef:f7:30:b0:a3: 6e:12:1e:2d:64:fa:8e:91:61:c2:e9:e5:ff:4d:7d:55:2a:f7: 07:79:34:20:5d:ab:23:7a:e8:ad:c5:1b:5f:6a:1a:ce:f3:ea: c3:ac:19:df:d4:2e:80:d4:02:72:19:11:4d:4e:49:47:16:24: a5:7a:fb:90:f0:8c:73:d5:6c:46:fe:59:51:37:8c:c8:c9:3a: c1:01:cb:10:b4:0f:1c:99:db:39:84:93:0a:7c:1e:6f:38:64: fe:ce:07:a4:9f:b5:e6:05:c0:32:48:88:34:64:9b:7e:d9:b8: 77:2e:bf:76:d2:bd:67:b9:a3:45:72:2d:44:57:2a:a2:7e:0a: 6a:2b:c6:c0:ff:2b:24:4d:e8:41:4f:19:f7:41:33:7e:ff:0e: b1:7a:d2:d2:92:51:9f:92:31:b5:8e:af:b5:9a:d8:c7:eb:c6: 2a:33:77:47:82:85:29:76:0b:44:bb:df:e2:d2:47:8c:90:7f: 48:7e:7c:ff:40:67:ec:90:6e:c1:4c:44:07:26:cd:26:39:89: b2:4b:01:55:5a:55:9f:35:ab:be:87:14:60:af:72:6d:18:79: a6:b9:a2:69:35:40:2b:95:7a:03:15:4c:f3:10:0f:52:fe:4a: 80:5c:d6:ef -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjRFOTExMC8GA1UEBRMoNTBBRTcxNkYzRDM2QjlCRUVBRTI3RjEwMDY4RjlFMzZB MjMzQUI5MTAeFw0yNTA4MTkwODE2MTJaFw0yNTA4MjYwODE2MTJaMBgxFjAUBgNV BAMTDTY4YTQzMmNjLTM5YTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZFPNjxiq1/jT5mEgUca/TeYbKNoB6rHqtfpJKniexQjj4YmdTn8f6LIc3R/5a p5SAPtcFNN98WbL/N1STCiEyvxS2ivK4CUjOnrYoo7eabelXEGfzyH2c2bSNhK7N Cdwm865bn8CFl7YcVlEEmarQdBJ+Lo9EISSn11kwHGLuhfQPSFs5zsEEoO8Mml7a wqhidcKCWgnuzcJ7XC6D0P0EnBfShGYDaH3kGPitQWPKzwLnlVGalnrKYWmmC1Vw CrGSQt10QHIUcpQqrjzJyF1Krf4lvDFDA4H++KzEQsLqotKFP9aepr09a04xiM/D YH9hyaSu+YODOKm8WXjnNANPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUM8Cd8LJy xKqWK3k41vtUqnir+pcwHwYDVR0jBBgwFoAUUK5xbz02ub7q4n8QBo+eNqIzq5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNEU5L0QzODYxMzQ0NDBF RTExRjA5RTkzMzUxQ0M0RjlBRTAyL1VLNXhiejAydWI3cTRuOFFCby1lTnFJenE1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVUs1eGJ6MDJ1YjdxNG44UUJvLWVOcUl6cTVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NEU5L0QzODYxMzQ0NDBFRTExRjA5RTkzMzUxQ0M0RjlBRTAyL1VLNXhiejAydWI3 cTRuOFFCby1lTnFJenE1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKES2gdiHFN/R3iwlD3v9zCwo24SHi1k+o6RYcLp5f9NfVUq9wd5NCBd qyN66K3FG19qGs7z6sOsGd/ULoDUAnIZEU1OSUcWJKV6+5DwjHPVbEb+WVE3jMjJ OsEByxC0DxyZ2zmEkwp8Hm84ZP7OB6SfteYFwDJIiDRkm37ZuHcuv3bSvWe5o0Vy LURXKqJ+CmorxsD/KyRN6EFPGfdBM37/DrF60tKSUZ+SMbWOr7Wa2Mfrxiozd0eC hSl2C0S73+LSR4yQf0h+fP9AZ+yQbsFMRAcmzSY5ibJLAVVaVZ81q76HFGCvcm0Y eaa5omk1QCuVegMVTPMQD1L+SoBc1u8= -----END CERTIFICATE-----Generated at Wed Aug 20 15:37:11 2025 by rpki-client