$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft File: UyaKJzal_1VLlAcD83T8NXkijDA.mft (raw, json) Hash identifier: QMXpnl7Lc9Sn1rIZfMfb6yv5l6EjLpg/7oboclY1cdE= Subject key identifier: 2C:94:5D:34:E4:08:A9:D1:1B:FA:5A:DA:32:DE:A5:19:7A:B1:9C:FB Authority key identifier: 53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30 Certificate issuer: /CN=A91DCBAD/serialNumber=53268A2736A5FF554B940703F374FC3579228C30 Certificate serial: 0A5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft Manifest number: 0A53 Signing time: Sun 24 Aug 2025 19:43:02 +0000 Manifest this update: Sun 24 Aug 2025 19:43:01 +0000 Manifest next update: Sun 31 Aug 2025 19:43:01 +0000 Files and hashes: 1: UyaKJzal_1VLlAcD83T8NXkijDA.crl (hash: VWpIoBhdvPkmzZHjQ+hprwmwIyYFUJwEbo+MOXEBGuw=) 2: CF072592709211EAB1D2FA0FC4F9AE02.roa (hash: qgPwBHuJNODFhkIhrJVb9VAEuenY+/fH1u9JlBx0mT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2652 (0xa5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCBAD, serialNumber=53268A2736A5FF554B940703F374FC3579228C30 Validity Not Before: Aug 24 19:43:01 2025 GMT Not After : Aug 31 19:43:01 2025 GMT Subject: CN=68ab6b45-4487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:85:f5:23:69:3b:84:c9:e8:e1:3e:f1:0f: bf:e7:29:9a:eb:55:af:fc:b8:19:83:d3:ec:15:ac: 6a:ba:b9:0e:23:da:76:51:34:d6:b4:ad:e0:93:f3: 4d:8c:78:89:38:9b:4a:c3:bc:f7:99:35:72:3a:a6: 12:ea:2e:0e:20:91:e2:1d:1a:3d:b9:c1:ec:54:5c: 67:8b:49:c6:3f:cf:7f:d8:78:f9:53:d3:bc:fa:cb: e5:99:27:69:ad:a1:c5:f1:c2:bf:a4:b5:28:f4:74: ea:15:07:f9:9b:a7:23:58:5c:3f:e0:45:54:e8:f8: 7b:53:3b:10:2b:96:0b:b0:c5:e6:da:6a:8f:93:af: a8:0e:36:73:8b:95:2b:2d:2a:66:bf:75:f9:67:b8: dc:36:69:a6:08:94:34:48:5e:de:00:5b:b0:b8:ef: 2b:32:55:d4:4b:81:4c:f8:5c:00:5a:d0:31:35:96: 73:21:9f:c9:18:51:d6:f4:ba:87:d5:09:c6:b7:02: c2:65:46:95:71:40:a3:45:03:a6:fb:c2:44:52:b8: 2c:fc:08:2c:d4:62:c0:c8:bc:0a:12:58:b1:2e:f5: a2:a9:09:65:d3:47:f6:55:21:2e:cc:5b:e3:58:02: 2c:3a:78:da:14:9d:e1:7b:d3:26:1e:25:b6:4b:08: 8c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:94:5D:34:E4:08:A9:D1:1B:FA:5A:DA:32:DE:A5:19:7A:B1:9C:FB X509v3 Authority Key Identifier: keyid:53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:1b:80:c5:b3:8e:00:19:b0:15:1d:b0:fe:55:4c:c0:3d:a3: c5:2b:cc:11:ce:10:15:5c:23:7f:2a:db:c3:48:ec:be:9c:00: bd:7b:f9:74:a9:77:6f:a5:38:84:b2:d0:78:a5:74:4b:6b:91: e0:53:6d:f0:16:f2:f1:7e:df:33:01:69:ec:1d:90:d2:15:f4: 59:44:ba:b1:e3:e6:7a:95:84:32:41:92:8f:b8:7a:b6:8d:39: 09:7e:0c:a3:c3:17:97:9b:58:11:56:d0:72:07:36:14:ab:f5: 14:51:01:0a:f7:8b:88:ce:4d:9b:01:12:aa:e0:b8:a1:aa:46: b6:6f:22:3a:1d:a6:b8:9a:a9:7c:52:d4:2e:0f:78:b7:c9:ff: 24:3f:bd:ac:44:86:c8:db:14:40:8b:41:ef:27:72:8d:b9:d4: f1:a0:89:64:a8:b3:43:e1:c8:70:17:64:23:d2:3a:6e:df:e7: 9a:64:36:00:23:26:9b:23:1c:b6:07:6a:45:f6:94:17:d8:6e: 53:45:3e:ff:28:09:af:63:5d:2c:d3:89:2e:61:34:a5:86:87: b9:04:cc:1b:05:e8:67:e6:b1:07:53:53:fb:32:29:4e:bf:38: 03:eb:0e:bd:c5:f7:52:7f:27:92:83:c4:eb:a4:fc:e6:71:c6: ef:29:b1:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENCQUQxMTAvBgNVBAUTKDUzMjY4QTI3MzZBNUZGNTU0Qjk0MDcwM0YzNzRGQzM1 NzkyMjhDMzAwHhcNMjUwODI0MTk0MzAxWhcNMjUwODMxMTk0MzAxWjAYMRYwFAYD VQQDEw02OGFiNmI0NS00NDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseqF9SNpO4TJ6OE+8Q+/5yma61Wv/LgZg9PsFaxqurkOI9p2UTTWtK3gk/NN jHiJOJtKw7z3mTVyOqYS6i4OIJHiHRo9ucHsVFxni0nGP89/2Hj5U9O8+svlmSdp raHF8cK/pLUo9HTqFQf5m6cjWFw/4EVU6Ph7UzsQK5YLsMXm2mqPk6+oDjZzi5Ur LSpmv3X5Z7jcNmmmCJQ0SF7eAFuwuO8rMlXUS4FM+FwAWtAxNZZzIZ/JGFHW9LqH 1QnGtwLCZUaVcUCjRQOm+8JEUrgs/Ags1GLAyLwKElixLvWiqQll00f2VSEuzFvj WAIsOnjaFJ3he9MmHiW2SwiMCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyUXTTk CKnRG/pa2jLepRl6sZz7MB8GA1UdIwQYMBaAFFMmiic2pf9VS5QHA/N0/DV5Ioww MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0JBRC8zNjU5RTdBRTcw OTExMUVBOEE5QjRFMERDNEY5QUUwMi9VeWFLSnphbF8xVkxsQWNEODNUOE5Ya2lq REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5YUtKemFsXzFWTGxBY0Q4M1Q4TlhraWpEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0JBRC8zNjU5RTdBRTcwOTExMUVBOEE5QjRFMERDNEY5QUUwMi9VeWFLSnphbF8x VkxsQWNEODNUOE5Ya2lqREEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4G4DFs44AGbAVHbD+VUzAPaPFK8wRzhAVXCN/KtvDSOy+nAC9e/l0 qXdvpTiEstB4pXRLa5HgU23wFvLxft8zAWnsHZDSFfRZRLqx4+Z6lYQyQZKPuHq2 jTkJfgyjwxeXm1gRVtByBzYUq/UUUQEK94uIzk2bARKq4Lihqka2byI6Haa4mql8 UtQuD3i3yf8kP72sRIbI2xRAi0HvJ3KNudTxoIlkqLND4chwF2Qj0jpu3+eaZDYA IyabIxy2B2pF9pQX2G5TRT7/KAmvY10s04kuYTSlhoe5BMwbBehn5rEHU1P7MilO vzgD6w69xfdSfyeSg8TrpPzmccbvKbG1 -----END CERTIFICATE-----Generated at Sun Aug 24 21:54:07 2025 by rpki-client