$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft File: UzSpQuM2kLKBJhu645cTXb6kE5c.mft (raw, json) Hash identifier: jVYqDSCFMiCA1aBb3RH7HntmCAjnBwdViYvY66wZxVc= Subject key identifier: 5F:02:CC:F1:EC:A3:20:E4:01:A6:30:D7:B5:89:D2:B5:37:B4:DD:A2 Authority key identifier: 53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 Certificate issuer: /CN=A91DA022/serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Certificate serial: 0873 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft Manifest number: 086C Signing time: Thu 18 Sep 2025 20:53:41 +0000 Manifest this update: Thu 18 Sep 2025 20:53:40 +0000 Manifest next update: Thu 25 Sep 2025 20:53:40 +0000 Files and hashes: 1: UzSpQuM2kLKBJhu645cTXb6kE5c.crl (hash: o4cskCddrS4UKM32oqxvfYoIakYxn8G9UJp9DF99QYU=) 2: DF3136A2CFF011EAB2F1D086C4F9AE02.roa (hash: Us01OaqyY9hkYagplVuFKDaxQc/+mQDnpIsRSuf4AxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2163 (0x873) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA022, serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Validity Not Before: Sep 18 20:53:40 2025 GMT Not After : Sep 25 20:53:40 2025 GMT Subject: CN=68cc7154-62cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b6:ad:50:f0:92:61:a7:94:ab:2e:cf:b8:d9: fd:31:39:a6:90:5a:a1:9d:94:a6:b0:8f:bf:9d:d8: f5:c1:71:06:76:69:98:78:df:3d:f1:ba:e4:c4:36: 11:60:a1:c0:0b:b4:78:05:cd:42:2f:74:16:c6:75: 1b:af:b6:b8:16:4e:2b:5e:14:c7:da:cf:1d:97:d3: a6:6e:2c:9f:ea:d3:a7:6b:49:a0:d3:3a:05:48:23: 9e:9a:dd:ad:5a:da:bd:4f:00:25:f0:c5:6f:90:c8: dc:44:05:2b:5b:d9:36:f1:62:44:b2:ec:4d:53:3b: c9:56:d8:b3:6c:7d:b9:83:29:4a:64:04:63:db:50: a9:e1:53:a4:f1:b6:10:f5:29:4d:e7:5a:54:31:bd: 9c:b9:4b:3a:31:df:ef:44:86:3e:bc:10:19:23:96: 46:a2:ad:91:9a:b9:e9:6a:1b:5b:9e:88:cd:19:cf: 52:7b:9b:b3:52:f7:ac:ff:79:d5:67:d4:f7:0a:33: fe:e8:43:fd:27:78:08:24:32:75:69:c8:88:17:0e: b7:e9:e0:d6:f1:6e:16:92:e8:00:96:d1:92:51:c1: 63:69:d9:0b:b7:6c:e6:2f:e6:a3:41:6e:4d:8e:db: 53:30:03:80:02:84:3c:a7:0f:f9:ea:c0:9e:0a:33: 09:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:02:CC:F1:EC:A3:20:E4:01:A6:30:D7:B5:89:D2:B5:37:B4:DD:A2 X509v3 Authority Key Identifier: keyid:53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:38:b6:6d:92:2d:f7:33:d8:e3:6f:2e:64:ab:00:f7:ff:67: 51:5f:33:a0:60:9a:74:c3:17:49:aa:b1:24:5f:bd:5c:fe:ac: 0e:f4:ae:4c:1b:07:a3:1a:2a:db:fb:c6:11:93:e8:1d:e9:6b: 81:d4:5f:ca:57:e9:99:f8:57:b9:0d:76:14:e3:d5:b8:26:7e: be:db:53:50:00:d1:91:3e:8d:03:d6:8f:da:11:a0:21:9d:0f: 8b:e7:02:e5:61:d8:db:5a:17:94:79:97:8f:88:dd:2f:17:af: 0c:5c:7e:b4:01:44:89:21:9d:75:3f:a3:a9:0d:95:4a:61:33: 16:85:3a:d2:9b:4f:98:55:3d:4e:d4:99:c6:e8:77:b1:2d:fa: 6c:34:eb:06:72:38:57:70:57:0c:cf:fa:5e:bf:9d:26:39:fd: 36:bc:ce:29:95:a1:0a:21:60:4f:92:72:d3:20:da:9f:24:62: 2b:75:0a:5a:16:c0:0d:13:fd:10:c5:14:7b:b7:6b:9a:d0:62: bd:7b:bd:5a:fb:8e:87:8a:14:03:0c:00:e5:2a:7e:37:b2:89: f3:2a:7f:50:cb:b5:6d:c7:a1:3f:23:55:02:c3:78:c8:2c:b6: 71:62:6e:75:42:cc:d2:d2:e3:f5:db:54:45:b4:fe:fb:12:d2: 34:a4:fa:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwMjIxMTAvBgNVBAUTKDUzMzRBOTQyRTMzNjkwQjI4MTI2MUJCQUUzOTcxMzVE QkVBNDEzOTcwHhcNMjUwOTE4MjA1MzQwWhcNMjUwOTI1MjA1MzQwWjAYMRYwFAYD VQQDEw02OGNjNzE1NC02MmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLatUPCSYaeUqy7PuNn9MTmmkFqhnZSmsI+/ndj1wXEGdmmYeN898brkxDYR YKHAC7R4Bc1CL3QWxnUbr7a4Fk4rXhTH2s8dl9Ombiyf6tOna0mg0zoFSCOemt2t Wtq9TwAl8MVvkMjcRAUrW9k28WJEsuxNUzvJVtizbH25gylKZARj21Cp4VOk8bYQ 9SlN51pUMb2cuUs6Md/vRIY+vBAZI5ZGoq2RmrnpahtbnojNGc9Se5uzUves/3nV Z9T3CjP+6EP9J3gIJDJ1aciIFw636eDW8W4WkugAltGSUcFjadkLt2zmL+ajQW5N jttTMAOAAoQ8pw/56sCeCjMJTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8CzPHs oyDkAaYw17WJ0rU3tN2iMB8GA1UdIwQYMBaAFFM0qULjNpCygSYbuuOXE12+pBOX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTAyMi85RDhEOTQ1OENG RUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtMS0JKaHU2NDVjVFhiNmtF NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6U3BRdU0ya0xLQkpodTY0NWNUWGI2a0U1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTAyMi85RDhEOTQ1OENGRUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtM S0JKaHU2NDVjVFhiNmtFNWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIOLZtki33M9jjby5kqwD3/2dRXzOgYJp0wxdJqrEkX71c/qwO9K5M GwejGirb+8YRk+gd6WuB1F/KV+mZ+Fe5DXYU49W4Jn6+21NQANGRPo0D1o/aEaAh nQ+L5wLlYdjbWheUeZePiN0vF68MXH60AUSJIZ11P6OpDZVKYTMWhTrSm0+YVT1O 1JnG6HexLfpsNOsGcjhXcFcMz/pev50mOf02vM4plaEKIWBPknLTINqfJGIrdQpa FsANE/0QxRR7t2ua0GK9e71a+46HihQDDADlKn43sonzKn9Qy7Vtx6E/I1UCw3jI LLZxYm51QszS0uP121RFtP77EtI0pPpo -----END CERTIFICATE-----Generated at Fri Sep 19 00:34:15 2025 by rpki-client