$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft File: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft (raw, json) Hash identifier: Vsw+q8vL/DxxMh2Smstd6M8dyNknhqiKmm8rFyENCHw= Subject key identifier: 60:EC:8B:2D:B5:E4:94:6E:4A:91:0E:63:0D:70:6D:6C:DD:02:1D:30 Authority key identifier: B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 Certificate issuer: /CN=A91D1149/serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Certificate serial: 0E84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft Manifest number: 0E7A Signing time: Sun 24 Aug 2025 17:41:08 +0000 Manifest this update: Sun 24 Aug 2025 17:41:07 +0000 Manifest next update: Sun 31 Aug 2025 17:41:07 +0000 Files and hashes: 1: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl (hash: 9aWf3lTFIAzspsX8yYgV/hoPrT1hmvwIyIFPrUSKVmI=) 2: BD22841E9E4911E9A136D25AC4F9AE02.roa (hash: Gdmjy4eOm23bZo0u+QNI+KYIouesOlIiUyP5E+hvG08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3716 (0xe84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1149, serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Validity Not Before: Aug 24 17:41:07 2025 GMT Not After : Aug 31 17:41:07 2025 GMT Subject: CN=68ab4eb4-c8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f8:08:3b:a4:7e:cb:a6:7a:ae:70:32:6e:9e: 5d:21:2f:80:4e:6a:0e:a5:79:e4:0e:27:b7:a5:eb: ab:d6:be:f3:de:26:5f:ee:c1:6a:79:9b:a8:7f:14: b7:c2:9c:72:3b:a7:d8:a5:cf:37:93:9a:73:ab:76: 4f:29:9d:af:88:6a:03:b5:f3:2a:07:ef:d6:46:73: a5:6a:a7:c1:06:21:01:05:b0:44:f6:dd:b1:4c:40: c2:71:c0:9a:71:3f:30:ca:d2:89:28:dc:26:7f:4c: cc:4d:21:0a:70:1e:99:52:39:ac:89:02:70:88:f6: 80:3a:36:74:d5:7c:63:94:e7:a4:7a:ea:f3:de:88: 94:ae:4b:c4:5e:6f:2d:0c:75:5e:b3:2e:d3:dc:f2: 61:87:ad:0b:39:9f:32:e7:33:fd:8e:38:a4:d7:7e: 1f:47:dc:dc:52:9e:af:df:22:e6:cb:6a:41:bf:24: 20:54:fd:56:98:f0:3a:29:69:9f:3a:08:a8:69:a7: 67:dd:87:e4:b6:24:2f:ad:d2:3c:97:b4:3a:fc:59: 33:2b:6b:5c:e7:bd:b0:e6:1d:fd:34:68:9b:4d:8c: de:43:19:02:b9:89:98:3d:4f:2c:4f:58:7c:ac:e5: 70:4a:4b:79:d4:a3:db:55:cc:7a:2b:75:53:bc:3c: 86:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EC:8B:2D:B5:E4:94:6E:4A:91:0E:63:0D:70:6D:6C:DD:02:1D:30 X509v3 Authority Key Identifier: keyid:B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:98:44:8d:35:59:c5:15:98:7c:83:c3:42:6d:37:46:0d:56: fc:16:f3:5b:2d:64:a4:f4:fd:bb:c9:26:9c:d9:e9:6e:d0:7c: 79:df:5a:a7:59:b1:0e:f1:80:f9:d7:e6:c0:68:74:c1:31:0f: 48:9f:ff:29:eb:51:7c:80:6c:e2:62:15:99:71:24:68:8e:b3: 07:c9:cf:3f:0d:18:82:eb:4a:47:35:ae:6e:05:5e:a0:b4:25: bf:69:c7:30:77:3e:2b:3d:81:25:52:8f:44:fa:6a:5e:41:d7: 84:8d:bd:14:1f:c4:b5:f0:ac:d5:c9:a5:be:f0:f1:2e:bf:00: 30:79:d9:c5:f8:0b:81:5d:64:79:17:14:ff:79:36:b6:65:df: 6b:1b:d6:cc:14:42:06:d5:b3:b1:56:02:2b:7b:32:c6:65:fa: a8:5a:74:02:36:90:42:31:3d:88:6e:92:db:88:6a:c4:a9:ae: b8:eb:3a:75:4e:29:a1:80:36:16:20:c7:16:5f:41:01:8c:3e: 01:41:b2:2a:a3:e5:7a:3f:87:8e:2d:4a:d4:fa:8f:57:5e:db: 11:cb:19:8c:20:ef:92:eb:f2:25:d3:ba:11:25:93:75:33:2e: a6:05:59:87:2e:80:33:0d:84:64:11:9e:c3:f4:f8:ac:58:27: e4:e0:d1:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExNDkxMTAvBgNVBAUTKEI4MzQwMUNGQkM0MDVDRkI1MkZEQTBGRUJENEEwMkI3 QjFDRTI3NjIwHhcNMjUwODI0MTc0MTA3WhcNMjUwODMxMTc0MTA3WjAYMRYwFAYD VQQDEw02OGFiNGViNC1jOGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/gIO6R+y6Z6rnAybp5dIS+ATmoOpXnkDie3peur1r7z3iZf7sFqeZuofxS3 wpxyO6fYpc83k5pzq3ZPKZ2viGoDtfMqB+/WRnOlaqfBBiEBBbBE9t2xTEDCccCa cT8wytKJKNwmf0zMTSEKcB6ZUjmsiQJwiPaAOjZ01XxjlOekeurz3oiUrkvEXm8t DHVesy7T3PJhh60LOZ8y5zP9jjik134fR9zcUp6v3yLmy2pBvyQgVP1WmPA6KWmf Ogioaadn3YfktiQvrdI8l7Q6/FkzK2tc572w5h39NGibTYzeQxkCuYmYPU8sT1h8 rOVwSkt51KPbVcx6K3VTvDyGtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDsiy21 5JRuSpEOYw1wbWzdAh0wMB8GA1UdIwQYMBaAFLg0Ac+8QFz7Uv2g/r1KArexzidi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTE0OS8yNEJCMjRDRTlF NDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQdFNfYUQtdlVvQ3Q3SE9K MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VEUUJ6N3hBWFB0U19hRC12VW9DdDdIT0oySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTE0OS8yNEJCMjRDRTlFNDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQ dFNfYUQtdlVvQ3Q3SE9KMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBymESNNVnFFZh8g8NCbTdGDVb8FvNbLWSk9P27ySac2elu0Hx531qn WbEO8YD51+bAaHTBMQ9In/8p61F8gGziYhWZcSRojrMHyc8/DRiC60pHNa5uBV6g tCW/accwdz4rPYElUo9E+mpeQdeEjb0UH8S18KzVyaW+8PEuvwAwednF+AuBXWR5 FxT/eTa2Zd9rG9bMFEIG1bOxVgIrezLGZfqoWnQCNpBCMT2IbpLbiGrEqa646zp1 TimhgDYWIMcWX0EBjD4BQbIqo+V6P4eOLUrU+o9XXtsRyxmMIO+S6/Il07oRJZN1 My6mBVmHLoAzDYRkEZ7D9PisWCfk4NGI -----END CERTIFICATE-----Generated at Sun Aug 24 22:18:33 2025 by rpki-client