$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft File: uesVSGZ3c32yc5_WVGKu55BhaMI.mft (raw, json) Hash identifier: NFRqTDE4CErOMSlMwQJLhiqhpbPHBTjWL5NlJDelZ34= Subject key identifier: 5B:D8:37:DE:A5:B1:23:C9:A7:9F:3B:45:DF:BA:28:07:05:48:7B:FE Authority key identifier: B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2 Certificate issuer: /CN=A91DA649/serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2 Certificate serial: 0C47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft Manifest number: 0C3E Signing time: Sun 24 Aug 2025 18:35:28 +0000 Manifest this update: Sun 24 Aug 2025 18:35:28 +0000 Manifest next update: Sun 31 Aug 2025 18:35:28 +0000 Files and hashes: 1: uesVSGZ3c32yc5_WVGKu55BhaMI.crl (hash: L78E1QonXsTmxhkEV/CLH0ZAWSM9mHmm0eS01lwiPgc=) 2: C4391160305611EABE7DF272C4F9AE02.roa (hash: ShWNoWlK1A1y7tJIOL2NddDhqDzgH2F/9l1o2jwcmL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3143 (0xc47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA649, serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2 Validity Not Before: Aug 24 18:35:28 2025 GMT Not After : Aug 31 18:35:28 2025 GMT Subject: CN=68ab5b70-6401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6a:3c:32:34:3d:81:e2:64:02:00:82:cc:24: 5d:e0:67:8a:1f:0c:27:fc:e8:bc:72:ef:8c:f6:c0: 41:72:54:e7:5e:ed:e2:e3:ba:89:ad:1f:6a:4f:37: b7:7b:01:40:a1:82:f8:ee:5d:65:11:28:c9:38:d7: 2c:0a:4d:47:09:57:52:2d:90:b9:37:70:a9:15:bc: 03:35:bc:2c:31:f7:8d:6b:da:d6:50:93:22:b5:c5: 6d:ee:56:54:2c:26:fb:3b:42:2d:ec:da:5a:7c:cc: 49:63:68:7e:bf:b1:bb:79:65:3d:fc:e9:c4:5c:f2: f7:2f:98:fd:de:5f:fd:c0:86:99:99:43:13:8e:a5: 4f:cc:ea:66:70:a1:d4:94:4e:39:e6:db:12:c5:d6: 8b:47:7d:ff:67:41:a6:9f:13:11:fe:a0:66:56:51: 6c:7b:8e:1c:7d:5a:14:9a:54:47:93:e3:e0:c4:e2: 4d:7b:29:51:7c:31:56:d1:a4:71:fd:63:08:9e:4c: ab:58:d4:8f:49:79:07:89:3c:29:a7:8c:6e:97:0c: 47:d1:a8:ae:02:94:30:ad:79:6e:66:92:15:16:c2: ac:24:2f:31:a7:b6:98:76:41:71:27:54:78:63:c2: b1:76:f9:23:9d:f3:6b:70:4e:e1:b7:20:54:10:ed: e9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D8:37:DE:A5:B1:23:C9:A7:9F:3B:45:DF:BA:28:07:05:48:7B:FE X509v3 Authority Key Identifier: keyid:B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:4a:32:27:6c:b5:d4:51:4d:5d:0c:ab:1d:cb:6e:bf:3f:e9: 34:59:d5:ee:83:0b:a4:e4:fa:7b:40:d2:3e:d0:09:ab:9b:2f: d2:ca:e1:ff:07:4b:d9:67:90:9b:81:53:e1:75:3d:81:0c:a0: 3d:83:4a:14:7c:7b:81:d4:0d:d6:aa:1f:2c:3e:dd:5c:05:80: 32:a3:6a:d3:90:63:c2:a6:25:ea:c4:a2:f7:23:4f:9c:c9:43: cf:b0:f9:eb:ec:c0:f8:46:fe:9a:f3:4f:3b:77:a5:cc:74:fc: 2b:a0:69:18:b8:35:ca:b2:8f:e4:03:c2:1f:dc:22:22:8b:52: 8e:15:c0:8b:c4:3b:c1:ab:7c:35:71:4f:61:0b:f2:ab:b1:25: 5f:1d:69:a6:05:83:0c:32:48:39:32:49:3f:94:01:85:fd:9c: 1b:29:d7:48:72:58:b7:19:f9:69:35:b8:3d:34:53:82:66:fa: 95:90:cb:70:8a:6c:bf:5f:dd:ba:77:80:6a:96:f2:58:26:7b: 6f:58:af:4f:c3:06:ed:69:cd:61:d7:03:ec:da:cf:03:c3:78: 87:74:d3:9e:57:b8:16:5e:98:ce:93:50:f0:44:25:0c:25:65: cc:49:a0:0c:cd:71:6a:8a:a0:c1:71:c7:a0:50:5f:03:ac:ad: 8c:ae:43:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE2NDkxMTAvBgNVBAUTKEI5RUIxNTQ4NjY3NzczN0RCMjczOUZENjU0NjJBRUU3 OTA2MTY4QzIwHhcNMjUwODI0MTgzNTI4WhcNMjUwODMxMTgzNTI4WjAYMRYwFAYD VQQDEw02OGFiNWI3MC02NDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWo8MjQ9geJkAgCCzCRd4GeKHwwn/Oi8cu+M9sBBclTnXu3i47qJrR9qTze3 ewFAoYL47l1lESjJONcsCk1HCVdSLZC5N3CpFbwDNbwsMfeNa9rWUJMitcVt7lZU LCb7O0It7NpafMxJY2h+v7G7eWU9/OnEXPL3L5j93l/9wIaZmUMTjqVPzOpmcKHU lE455tsSxdaLR33/Z0GmnxMR/qBmVlFse44cfVoUmlRHk+PgxOJNeylRfDFW0aRx /WMInkyrWNSPSXkHiTwpp4xulwxH0aiuApQwrXluZpIVFsKsJC8xp7aYdkFxJ1R4 Y8KxdvkjnfNrcE7htyBUEO3pHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvYN96l sSPJp587Rd+6KAcFSHv+MB8GA1UdIwQYMBaAFLnrFUhmd3N9snOf1lRirueQYWjC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTY0OS81RDk3Nzc0QzBG NTExMUVBOEM0QTVDMEFDNEY5QUUwMi91ZXNWU0daM2MzMnljNV9XVkdLdTU1Qmhh TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vlc1ZTR1ozYzMyeWM1X1dWR0t1NTVCaGFNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTY0OS81RDk3Nzc0QzBGNTExMUVBOEM0QTVDMEFDNEY5QUUwMi91ZXNWU0daM2Mz MnljNV9XVkdLdTU1QmhhTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUSjInbLXUUU1dDKsdy26/P+k0WdXugwuk5Pp7QNI+0Amrmy/SyuH/ B0vZZ5CbgVPhdT2BDKA9g0oUfHuB1A3Wqh8sPt1cBYAyo2rTkGPCpiXqxKL3I0+c yUPPsPnr7MD4Rv6a8087d6XMdPwroGkYuDXKso/kA8If3CIii1KOFcCLxDvBq3w1 cU9hC/KrsSVfHWmmBYMMMkg5Mkk/lAGF/ZwbKddIcli3GflpNbg9NFOCZvqVkMtw imy/X926d4BqlvJYJntvWK9Pwwbtac1h1wPs2s8Dw3iHdNOeV7gWXpjOk1DwRCUM JWXMSaAMzXFqiqDBccegUF8DrK2MrkNQ -----END CERTIFICATE-----Generated at Sun Aug 24 22:07:10 2025 by rpki-client