$ rpki-client -vvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft File: 0uwHkLxOvTQHyVB05rVrQAA4Eto.mft (raw, json) Hash identifier: Den1bqG7tb0/neiaig9/QOESd/1bZ97d5npwIXtekT4= Subject key identifier: 1D:1F:5C:A8:6E:28:34:4F:27:BE:95:18:6B:20:59:C5:0D:A7:B0:0C Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA Certificate issuer: /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Certificate serial: 0AFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft Manifest number: 0AF2 Signing time: Sun 24 Aug 2025 19:22:28 +0000 Manifest this update: Sun 24 Aug 2025 19:22:28 +0000 Manifest next update: Sun 31 Aug 2025 19:22:28 +0000 Files and hashes: 1: 0uwHkLxOvTQHyVB05rVrQAA4Eto.crl (hash: AffopawYuwWVeTDk9Lq+IZ1bzfWyr96voFq1HgeBxF4=) 2: 5E2A4C584ED911EAA7F1A521C4F9AE02.roa (hash: QAE/MC+xtHDwjDC4We28f6uqNECigc7G6Vc7+DGOZ34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2810 (0xafa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D87CF, serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Validity Not Before: Aug 24 19:22:28 2025 GMT Not After : Aug 31 19:22:28 2025 GMT Subject: CN=68ab6674-1a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:00:dd:0e:b5:0c:36:af:6d:82:4d:65:e8:8f: b5:e7:91:f0:ba:4a:c1:73:ee:7c:5c:b0:b5:e7:80: d5:80:f3:a2:46:04:56:9e:54:18:3c:8f:4b:fc:bb: f9:6a:fe:43:f4:6b:0d:40:d7:1e:b6:01:bb:b6:74: a4:b4:39:8a:21:0f:40:0a:67:9d:cd:c9:fb:1f:3a: 1d:4c:d6:be:eb:98:15:9d:92:09:2e:e9:cb:28:ae: de:f1:0d:1e:31:89:98:22:de:07:c7:5d:2e:78:53: 3f:ec:b6:5f:f8:d1:a3:9f:b8:b8:8c:48:c3:56:7e: 22:05:07:55:e6:4d:86:fd:91:a7:75:36:96:50:f9: bd:ad:3d:e3:5c:d3:bb:20:9a:32:86:0b:05:b2:7b: a7:67:c2:be:74:af:72:97:d4:88:08:a8:9f:fa:d5: 8b:3e:d5:3d:f6:8d:40:04:70:c4:67:b6:cd:ad:4a: fc:3b:aa:ec:d2:a0:97:4d:dd:90:08:a9:e1:62:4e: 69:c9:8c:7e:0b:40:1a:ea:85:d4:be:80:2e:53:86: 3a:8f:e0:69:b3:05:c6:dd:3f:43:5b:0d:0a:c7:3a: 52:d5:88:55:cf:82:9c:03:e3:e6:54:07:ea:cc:a8: c2:1e:0e:bc:ac:5e:4e:87:04:b3:51:31:a9:dc:a7: e2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1F:5C:A8:6E:28:34:4F:27:BE:95:18:6B:20:59:C5:0D:A7:B0:0C X509v3 Authority Key Identifier: keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7d:cd:79:bc:08:86:32:fc:36:28:da:24:e8:fe:a2:8b:e5: 74:b9:0f:52:92:cc:3a:5c:e0:39:b7:cf:6b:9e:19:c6:6b:ff: 93:55:d3:c7:85:7f:16:8f:4f:33:34:04:d4:72:0d:7d:7d:ee: a4:29:30:df:aa:fd:97:08:58:8a:d6:7f:f1:d3:53:e4:73:90: 49:4d:bd:19:b4:0f:ad:ab:01:05:35:f1:74:84:53:64:c0:b2: 5b:e4:07:22:94:99:e7:ff:0a:1d:14:ae:29:b2:c4:c2:78:02: 49:1f:0c:bd:f9:1c:5f:7a:d0:63:02:cd:ad:8c:09:6f:8a:bb: 4b:8c:53:ad:49:70:0d:f1:5c:19:e9:b0:e1:e2:97:0e:af:35: e8:43:f3:15:cf:92:f7:64:25:92:1c:d0:3b:e6:2e:ef:f7:ff: 45:5a:5c:fd:a9:24:4b:31:69:50:6d:5c:d8:89:69:7f:64:68: d6:fb:7b:5c:36:e6:5d:8f:9e:ec:32:94:b0:23:fc:3c:e3:d0: 31:57:6c:e9:fd:8f:4c:f7:dd:72:ab:d9:3d:89:73:52:6a:ad: 38:d7:35:f5:63:b3:d6:c3:8e:93:3a:87:6f:16:2d:15:64:e7: 9a:bb:7e:85:74:0e:6f:84:fc:9b:6d:31:1d:ac:84:28:2b:cc: 8e:1c:40:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3Q0YxMTAvBgNVBAUTKEQyRUMwNzkwQkM0RUJEMzQwN0M5NTA3NEU2QjU2QjQw MDAzODEyREEwHhcNMjUwODI0MTkyMjI4WhcNMjUwODMxMTkyMjI4WjAYMRYwFAYD VQQDEw02OGFiNjY3NC0xYTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5gDdDrUMNq9tgk1l6I+155HwukrBc+58XLC154DVgPOiRgRWnlQYPI9L/Lv5 av5D9GsNQNcetgG7tnSktDmKIQ9ACmedzcn7HzodTNa+65gVnZIJLunLKK7e8Q0e MYmYIt4Hx10ueFM/7LZf+NGjn7i4jEjDVn4iBQdV5k2G/ZGndTaWUPm9rT3jXNO7 IJoyhgsFsnunZ8K+dK9yl9SICKif+tWLPtU99o1ABHDEZ7bNrUr8O6rs0qCXTd2Q CKnhYk5pyYx+C0Aa6oXUvoAuU4Y6j+BpswXG3T9DWw0KxzpS1YhVz4KcA+PmVAfq zKjCHg68rF5OhwSzUTGp3KfiLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0fXKhu KDRPJ76VGGsgWcUNp7AMMB8GA1UdIwQYMBaAFNLsB5C8Tr00B8lQdOa1a0AAOBLa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODdDRi9FNjg1QjEyQTRF RDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZUUUh5VkIwNXJWclFBQTRF dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB1d0hrTHhPdlRRSHlWQjA1clZyUUFBNEV0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODdDRi9FNjg1QjEyQTRFRDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZU UUh5VkIwNXJWclFBQTRFdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8fc15vAiGMvw2KNok6P6ii+V0uQ9Sksw6XOA5t89rnhnGa/+TVdPH hX8Wj08zNATUcg19fe6kKTDfqv2XCFiK1n/x01Pkc5BJTb0ZtA+tqwEFNfF0hFNk wLJb5AcilJnn/wodFK4pssTCeAJJHwy9+RxfetBjAs2tjAlvirtLjFOtSXAN8VwZ 6bDh4pcOrzXoQ/MVz5L3ZCWSHNA75i7v9/9FWlz9qSRLMWlQbVzYiWl/ZGjW+3tc NuZdj57sMpSwI/w849AxV2zp/Y9M991yq9k9iXNSaq041zX1Y7PWw46TOodvFi0V ZOeau36FdA5vhPybbTEdrIQoK8yOHEBo -----END CERTIFICATE-----Generated at Sun Aug 24 22:18:34 2025 by rpki-client