$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft File: UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft (raw, json) Hash identifier: HxgB79XJGVsjr3GeTGb8Hd+oi+xrJtGi2gJfWeCcskQ= Subject key identifier: E1:DB:FD:38:DA:2C:23:EF:B9:ED:2B:0F:C0:E5:AD:BD:41:80:D6:FB Authority key identifier: 52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13 Certificate issuer: /CN=A91DD1CC/serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft Manifest number: 2C Signing time: Fri 05 Sep 2025 08:13:18 +0000 Manifest this update: Fri 05 Sep 2025 08:13:18 +0000 Manifest next update: Fri 12 Sep 2025 08:13:18 +0000 Files and hashes: 1: UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl (hash: wXjAmChyU54opf+DESY+RuECK4v9MjgTXl0Iov8h5/g=) 2: 0745DA884A3C11F0AFF98454C4F9AE02.roa (hash: aHkW6AI6M6GCpQTIMNKGhCjE+iAmC4ZK4etHz7DUzdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1CC, serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813 Validity Not Before: Sep 5 08:13:18 2025 GMT Not After : Sep 12 08:13:18 2025 GMT Subject: CN=68ba9b9e-0732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:89:61:5b:e4:c0:7a:a0:8f:f2:79:7b:b9:ab: e0:5c:81:17:76:79:3f:49:c8:a1:c2:0c:aa:75:74: 89:9d:bf:6f:81:e7:c8:61:b1:11:8e:6d:e3:33:76: ce:f9:6f:70:95:4b:ca:3e:5d:b0:bb:e2:f6:e8:32: f3:1d:94:db:ac:af:55:67:1a:06:36:4b:a4:db:c3: 71:66:3c:2d:62:79:56:59:60:a1:18:31:e7:a8:b7: be:b3:e2:d7:5a:44:f3:73:b0:c6:0c:85:9a:1b:f0: f4:ac:77:3f:7f:1e:dc:d2:cc:7e:c7:34:1a:a6:60: 37:f5:eb:2a:10:44:49:5c:49:bb:58:61:f4:a9:24: 16:0e:76:e7:0d:3a:7e:a8:b7:7d:f3:ce:20:9a:e6: 6d:20:f7:cb:ca:c4:81:ae:cb:d2:8d:ca:c0:79:80: 49:4e:fb:c0:ce:73:fb:08:12:96:de:af:1b:f1:26: 31:0c:80:f8:8c:41:17:dd:68:e6:c3:de:cd:fd:e7: c5:83:bf:5c:11:ff:6b:a5:7e:16:90:34:c0:9f:6e: 10:6d:d1:0f:ff:03:37:03:e2:b8:c8:79:c3:75:0f: 83:fe:42:64:c4:f9:0b:40:a9:ff:4a:a9:44:80:13: b9:4c:af:64:61:b3:8b:c7:35:c7:ca:74:89:8d:a9: 22:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DB:FD:38:DA:2C:23:EF:B9:ED:2B:0F:C0:E5:AD:BD:41:80:D6:FB X509v3 Authority Key Identifier: keyid:52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:99:ff:be:bd:0d:39:3e:52:a5:d8:37:bf:32:62:c4:1d:bd: 43:84:11:e8:9d:01:c8:79:70:6d:68:b8:d3:ab:b8:b3:58:4d: 32:f2:08:34:27:97:3f:f9:b2:4a:e9:09:ff:5b:1b:57:37:fa: 92:8c:52:75:9a:77:85:c3:4e:06:0a:09:4a:3c:e2:0f:3c:2d: a7:ae:df:42:7a:b4:70:cd:0c:92:93:90:63:92:6b:13:b7:fa: 84:2f:fb:fc:20:3e:3f:57:76:89:19:cc:3f:31:9e:a4:28:29: f9:42:ee:65:85:8e:73:91:82:b8:7d:30:43:a5:10:08:68:8e: 8c:d8:6d:a7:6f:2f:c9:e0:a8:1c:da:db:b1:35:3c:6e:9f:62: e9:7d:9b:41:8c:fa:17:98:7c:78:2a:76:7a:b7:99:66:bb:be: 9e:5f:d6:da:09:65:da:bd:7c:5f:b0:da:de:e7:c5:02:13:45: 6a:ec:bb:81:e1:b9:68:82:c8:93:af:05:83:e7:91:e3:ce:8f: dc:1e:09:28:9e:17:17:eb:85:97:10:ad:a3:2a:db:0e:ea:c5: 35:d4:0a:82:b8:3e:01:cb:97:9f:5b:87:be:83:bb:70:b9:45: 2c:34:92:55:05:0d:24:c0:dc:79:3b:61:01:74:a5:73:1f:eb: bf:ee:63:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDFDQzExMC8GA1UEBRMoNTIzMUM0NTc0MTNCOUM3OUNENUIzMDBEODRBNDNCMDAz OUJCNjgxMzAeFw0yNTA5MDUwODEzMThaFw0yNTA5MTIwODEzMThaMBgxFjAUBgNV BAMTDTY4YmE5YjllLTA3MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaiWFb5MB6oI/yeXu5q+BcgRd2eT9JyKHCDKp1dImdv2+B58hhsRGObeMzds75 b3CVS8o+XbC74vboMvMdlNusr1VnGgY2S6Tbw3FmPC1ieVZZYKEYMeeot76z4tda RPNzsMYMhZob8PSsdz9/HtzSzH7HNBqmYDf16yoQRElcSbtYYfSpJBYOducNOn6o t33zziCa5m0g98vKxIGuy9KNysB5gElO+8DOc/sIEpberxvxJjEMgPiMQRfdaObD 3s3958WDv1wR/2ulfhaQNMCfbhBt0Q//AzcD4rjIecN1D4P+QmTE+QtAqf9KqUSA E7lMr2Rhs4vHNcfKdImNqSJlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4dv9ONos I++57SsPwOWtvUGA1vswHwYDVR0jBBgwFoAUUjHEV0E7nHnNWzANhKQ7ADm7aBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMUNDLzczOTA2ODBFNEEz QTExRjBCRDVDMUI0RkM0RjlBRTAyL1VqSEVWMEU3bkhuTld6QU5oS1E3QURtN2FC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVWpIRVYwRTduSG5OV3pBTmhLUTdBRG03YUJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MUNDLzczOTA2ODBFNEEzQTExRjBCRDVDMUI0RkM0RjlBRTAyL1VqSEVWMEU3bkhu Tld6QU5oS1E3QURtN2FCTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEmZ/769DTk+UqXYN78yYsQdvUOEEeidAch5cG1ouNOruLNYTTLyCDQn lz/5skrpCf9bG1c3+pKMUnWad4XDTgYKCUo84g88Laeu30J6tHDNDJKTkGOSaxO3 +oQv+/wgPj9XdokZzD8xnqQoKflC7mWFjnORgrh9MEOlEAhojozYbadvL8ngqBza 27E1PG6fYul9m0GM+heYfHgqdnq3mWa7vp5f1toJZdq9fF+w2t7nxQITRWrsu4Hh uWiCyJOvBYPnkePOj9weCSieFxfrhZcQraMq2w7qxTXUCoK4PgHLl59bh76Du3C5 RSw0klUFDSTA3Hk7YQF0pXMf67/uY00= -----END CERTIFICATE-----Generated at Sat Sep 6 21:06:12 2025 by rpki-client