$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft File: uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft (raw, json) Hash identifier: ew2VYfV2c4Nhu9AGentKX/XP2PikX5yyxBMGB6lOFNs= Subject key identifier: F4:64:2C:DA:10:BA:CC:1B:83:1F:23:55:73:C7:9F:D1:22:9F:E3:A6 Authority key identifier: BA:F3:55:F0:3A:2E:D8:84:A6:17:A4:74:27:C2:5C:FC:CC:E3:12:76 Certificate issuer: /CN=A91D61DF/serialNumber=BAF355F03A2ED884A617A47427C25CFCCCE31276 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft Manifest number: 2B Signing time: Fri 05 Sep 2025 03:43:29 +0000 Manifest this update: Fri 05 Sep 2025 03:43:28 +0000 Manifest next update: Fri 12 Sep 2025 03:43:28 +0000 Files and hashes: 1: uvNV8Dou2ISmF6R0J8Jc_MzjEnY.crl (hash: xP87zVKQkkaYUtB/yRobpZa3E1mnd13BEQI8WWS/jMA=) 2: 7CC500A86DEC11F0BD1BF429C4F9AE02.roa (hash: an5FBHdExL03BomoR3qCdi2JEtigEIvsA7HXj74aq6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.crl rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 03:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D61DF, serialNumber=BAF355F03A2ED884A617A47427C25CFCCCE31276 Validity Not Before: Sep 5 03:43:28 2025 GMT Not After : Sep 12 03:43:28 2025 GMT Subject: CN=68ba5c60-126e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:02:a1:48:5c:00:c0:8e:98:b0:19:20:10:e3: d7:d8:a0:77:b5:55:20:3e:7d:e6:6c:47:a8:b0:90: a6:32:57:9b:e9:10:c3:06:92:64:18:72:5f:2f:ab: a8:85:c7:66:8b:9d:da:0f:08:45:0b:05:61:37:c9: 93:94:79:70:18:ee:1c:16:eb:d9:ec:7d:28:ad:92: 93:2d:ee:66:31:ee:fb:d4:ef:ea:59:e5:8a:36:a5: e5:0c:d1:74:76:71:3e:9b:11:d2:9e:85:e3:fb:b3: 22:17:05:6d:01:5d:b7:89:3d:c0:b3:5d:27:db:4e: a3:0b:06:9d:2a:3e:d0:02:55:fc:60:1d:6a:d2:87: 1a:1d:63:19:bc:d8:89:b3:d9:d6:4d:93:fb:f6:45: 7c:40:70:52:fc:d3:b8:63:db:3c:30:eb:22:05:06: 3c:6c:7b:49:95:43:2e:86:e2:2b:2a:1e:a2:2b:4e: dc:cd:31:66:0c:1b:80:ad:30:a6:65:b3:e5:2b:3b: 7b:8c:f0:c6:c7:3e:90:50:d1:ae:ae:d6:1e:1e:ed: 7f:f8:2c:f2:0c:b3:bd:ab:36:18:c9:d2:36:0a:b2: 85:eb:eb:9a:d0:67:6c:3d:51:6f:aa:8b:30:58:79: c8:12:06:f3:c4:ce:1f:57:74:f0:85:9e:7f:5c:4a: 71:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:64:2C:DA:10:BA:CC:1B:83:1F:23:55:73:C7:9F:D1:22:9F:E3:A6 X509v3 Authority Key Identifier: keyid:BA:F3:55:F0:3A:2E:D8:84:A6:17:A4:74:27:C2:5C:FC:CC:E3:12:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:b1:6b:dc:92:f4:26:98:eb:cb:59:96:98:f4:a5:42:25:81: 49:f6:2a:15:fd:62:53:41:9a:a4:96:75:52:50:c5:0d:1f:3c: 87:82:ef:79:48:c3:1d:b9:f8:8e:97:53:cc:d6:07:bf:14:b9: 19:41:f7:da:c2:44:0b:73:43:b8:8b:9e:38:fa:89:1f:6f:4e: 89:7d:d1:70:d4:9d:d9:3a:9d:24:25:6c:b7:c0:3c:83:7a:fa: d1:2b:70:56:b2:e7:ed:51:d5:f1:d1:e2:e2:f4:e1:fd:92:f8: ee:18:ba:5a:a5:b2:d1:ce:e3:43:6a:14:fc:52:bb:50:54:90: 1c:cc:d7:c7:67:54:e0:ee:f9:08:e2:3b:90:54:58:0c:35:a6: 7e:e5:d8:53:b0:cc:11:5c:db:4c:6e:c2:a2:44:d1:51:b8:49: 62:15:b1:ec:e5:20:d9:73:16:2f:57:fa:0c:7d:4e:a8:42:e4: 3c:69:22:82:97:e6:f6:13:38:fe:ae:96:6f:6a:68:2a:bc:ae: 83:01:d5:f3:bd:ff:8a:09:cd:01:d4:7e:b8:f4:81:01:74:15: f1:bf:60:c3:66:3b:b3:a3:08:cb:47:18:ef:55:82:4a:ab:f2: 55:20:5d:8c:28:c2:2d:18:8b:cc:73:e7:f2:8c:72:c4:26:3c: b7:c0:9a:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NjFERjExMC8GA1UEBRMoQkFGMzU1RjAzQTJFRDg4NEE2MTdBNDc0MjdDMjVDRkND Q0UzMTI3NjAeFw0yNTA5MDUwMzQzMjhaFw0yNTA5MTIwMzQzMjhaMBgxFjAUBgNV BAMTDTY4YmE1YzYwLTEyNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnAqFIXADAjpiwGSAQ49fYoHe1VSA+feZsR6iwkKYyV5vpEMMGkmQYcl8vq6iF x2aLndoPCEULBWE3yZOUeXAY7hwW69nsfSitkpMt7mYx7vvU7+pZ5Yo2peUM0XR2 cT6bEdKeheP7syIXBW0BXbeJPcCzXSfbTqMLBp0qPtACVfxgHWrShxodYxm82Imz 2dZNk/v2RXxAcFL807hj2zww6yIFBjxse0mVQy6G4isqHqIrTtzNMWYMG4CtMKZl s+UrO3uM8MbHPpBQ0a6u1h4e7X/4LPIMs72rNhjJ0jYKsoXr65rQZ2w9UW+qizBY ecgSBvPEzh9XdPCFnn9cSnHRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9GQs2hC6 zBuDHyNVc8ef0SKf46YwHwYDVR0jBBgwFoAUuvNV8Dou2ISmF6R0J8Jc/MzjEnYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2MURGL0I0OTE1MUNBNEQ5 QTExRjBCQzdCNUU2QkM0RjlBRTAyL3V2TlY4RG91MklTbUY2UjBKOEpjX016akVu WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdXZOVjhEb3UySVNtRjZSMEo4SmNfTXpqRW5ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2 MURGL0I0OTE1MUNBNEQ5QTExRjBCQzdCNUU2QkM0RjlBRTAyL3V2TlY4RG91MklT bUY2UjBKOEpjX016akVuWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI+xa9yS9CaY68tZlpj0pUIlgUn2KhX9YlNBmqSWdVJQxQ0fPIeC73lI wx25+I6XU8zWB78UuRlB99rCRAtzQ7iLnjj6iR9vTol90XDUndk6nSQlbLfAPIN6 +tErcFay5+1R1fHR4uL04f2S+O4YulqlstHO40NqFPxSu1BUkBzM18dnVODu+Qji O5BUWAw1pn7l2FOwzBFc20xuwqJE0VG4SWIVsezlINlzFi9X+gx9TqhC5DxpIoKX 5vYTOP6ulm9qaCq8roMB1fO9/4oJzQHUfrj0gQF0FfG/YMNmO7OjCMtHGO9Vgkqr 8lUgXYwowi0Yi8xz5/KMcsQmPLfAmtc= -----END CERTIFICATE-----Generated at Sat Sep 6 21:01:24 2025 by rpki-client