$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft File: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft (raw, json) Hash identifier: vQ00ei/6xN6MiDR3YYLqq98w8wtnNA7TZuLnDcdGuf4= Subject key identifier: FC:71:DF:2A:43:30:CD:D7:4E:E1:DB:20:09:09:AE:31:AF:42:D3:2A Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF Certificate issuer: /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Certificate serial: 18AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft Manifest number: 18A5 Signing time: Sun 20 Jul 2025 15:49:32 +0000 Manifest this update: Sun 20 Jul 2025 15:49:32 +0000 Manifest next update: Sun 27 Jul 2025 15:49:32 +0000 Files and hashes: 1: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl (hash: 6VUnlVREhF2dsEUAYqc9bTrA+NRUW7WRThonqzSyvpk=) 2: AE21A9C6818911EA81577016C4F9AE02.roa (hash: 7SxWILLdTrzJpYEt8Y/6XTCMP3sdZqZUyA4GDfqu88g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6315 (0x18ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Validity Not Before: Jul 20 15:49:32 2025 GMT Not After : Jul 27 15:49:32 2025 GMT Subject: CN=687d100c-f868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d2:8f:ca:40:f3:c3:3a:e7:f7:42:8e:14:00: 66:5d:a8:e3:28:e0:0f:de:d1:eb:a0:6c:31:8d:35: 64:57:66:f0:4b:66:5b:db:da:7b:b7:86:84:e5:53: 83:1f:bb:8d:79:6f:e6:bd:fa:a5:ee:e8:13:a7:59: fb:af:ed:e9:3b:67:45:fa:6c:90:cb:c0:e0:55:f7: c6:7a:02:92:c5:2f:01:11:9b:99:3a:5a:e7:da:7f: ca:d1:aa:ea:25:c1:b6:69:74:0e:ee:a3:2b:ad:3d: 72:1e:2b:df:fa:8c:2e:86:f7:d7:e4:16:62:92:7f: c5:fc:f4:ed:8e:41:55:cc:1b:0b:e8:1f:8f:51:75: 6a:88:b2:73:71:4a:e9:c7:0a:4b:81:c0:1d:6f:da: ed:3a:ab:6a:59:9f:41:02:00:e9:89:bf:b6:b4:72: ba:9f:92:39:8a:9c:3f:08:a0:33:6f:de:d5:8f:a2: 2b:5d:2b:b5:f9:09:b3:54:3e:98:85:19:dc:c0:79: 61:5d:07:6e:1b:07:5d:3e:8b:b1:80:51:20:6d:24: 43:f6:f9:c5:37:f5:be:59:db:4f:f1:73:0c:18:b3: ce:79:47:2b:89:da:c2:3f:b4:a1:5b:cb:c6:a3:70: 96:9c:66:e3:0b:a2:3d:95:86:fe:90:8a:03:f8:fe: 56:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:71:DF:2A:43:30:CD:D7:4E:E1:DB:20:09:09:AE:31:AF:42:D3:2A X509v3 Authority Key Identifier: keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:4f:85:86:5d:0d:2a:d2:a3:ec:89:b9:4a:5a:02:75:16:2f: 15:9e:e9:c3:e0:b5:ff:c8:8d:ff:56:fe:36:cd:bd:49:86:b7: a1:6b:e2:98:35:ea:de:f6:7f:42:fa:31:32:8d:4b:67:37:47: da:d5:14:bf:12:1a:75:bf:f9:6d:ce:77:93:f0:12:09:dc:c2: 25:00:fd:e6:3d:34:2f:bd:ac:b7:e1:c5:30:66:68:80:5f:40: 1c:e7:07:e8:da:d6:5a:2f:1a:1e:af:bc:38:8d:7d:13:37:90: 27:c9:38:85:14:1e:65:69:75:d9:23:9f:66:ad:4e:15:c5:eb: d7:30:7b:57:56:dc:97:5f:b6:5f:e0:42:33:12:4d:8d:01:80: 0f:75:f3:04:e4:40:fa:89:6c:a9:cb:63:12:eb:3b:ad:c0:93: 7d:ec:26:76:35:f8:3b:0c:d7:ed:17:e7:a5:64:86:a9:27:b8: f2:48:cd:37:c5:85:b5:cf:1b:21:df:4a:e4:42:44:2f:a2:8a: f0:65:66:02:20:33:ac:32:38:d9:0a:d9:bc:04:36:ca:84:37: 29:fb:1e:b6:4a:2e:9f:26:ff:28:b4:de:1a:8e:d0:e0:4c:8c: 5b:08:20:45:0b:d5:d3:42:95:d9:78:25:f0:1b:fb:fc:b5:97: 78:00:08:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKEQxNDc5RUY2MDM0MUUzOUVDQTE3MkU0Mzc2NDQzQTQ3 MTk3NUNCRUYwHhcNMjUwNzIwMTU0OTMyWhcNMjUwNzI3MTU0OTMyWjAYMRYwFAYD VQQDEw02ODdkMTAwYy1mODY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19KPykDzwzrn90KOFABmXajjKOAP3tHroGwxjTVkV2bwS2Zb29p7t4aE5VOD H7uNeW/mvfql7ugTp1n7r+3pO2dF+myQy8DgVffGegKSxS8BEZuZOlrn2n/K0arq JcG2aXQO7qMrrT1yHivf+owuhvfX5BZikn/F/PTtjkFVzBsL6B+PUXVqiLJzcUrp xwpLgcAdb9rtOqtqWZ9BAgDpib+2tHK6n5I5ipw/CKAzb97Vj6IrXSu1+QmzVD6Y hRncwHlhXQduGwddPouxgFEgbSRD9vnFN/W+WdtP8XMMGLPOeUcridrCP7ShW8vG o3CWnGbjC6I9lYb+kIoD+P5WWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxx3ypD MM3XTuHbIAkJrjGvQtMqMB8GA1UdIwQYMBaAFNFHnvYDQeOeyhcuQ3ZEOkcZdcvv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS80ODJCQTE3MjlE MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1N0tGeTVEZGtRNlJ4bDF5 LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBVZWU5Z05CNDU3S0Z5NURka1E2UnhsMXktOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS80ODJCQTE3MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1 N0tGeTVEZGtRNlJ4bDF5LTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcT4WGXQ0q0qPsiblKWgJ1Fi8VnunD4LX/yI3/Vv42zb1Jhreha+KY Nere9n9C+jEyjUtnN0fa1RS/Ehp1v/ltzneT8BIJ3MIlAP3mPTQvvay34cUwZmiA X0Ac5wfo2tZaLxoer7w4jX0TN5AnyTiFFB5laXXZI59mrU4VxevXMHtXVtyXX7Zf 4EIzEk2NAYAPdfME5ED6iWypy2MS6zutwJN97CZ2Nfg7DNftF+elZIapJ7jySM03 xYW1zxsh30rkQkQvoorwZWYCIDOsMjjZCtm8BDbKhDcp+x62Si6fJv8otN4ajtDg TIxbCCBFC9XTQpXZeCXwG/v8tZd4AAiR -----END CERTIFICATE-----Generated at Mon Jul 21 07:48:13 2025 by rpki-client