$ rpki-client -vvf rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft File: uttpn6AqlXLm70n0-Rof4Kc8LI0.mft (raw, json) Hash identifier: C0DTrnYBpMY7jFivThSvgce+eS2UdlGD1CXsnpNSWh4= Subject key identifier: 66:D0:88:1D:81:6B:EE:D8:C9:2B:88:27:FB:BA:C0:38:E0:FA:F1:80 Authority key identifier: BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D Certificate issuer: /CN=A91E27B9/serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D Certificate serial: 0834 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft Manifest number: 081F Signing time: Wed 20 Aug 2025 20:58:48 +0000 Manifest this update: Wed 20 Aug 2025 20:58:47 +0000 Manifest next update: Wed 27 Aug 2025 20:58:47 +0000 Files and hashes: 1: uttpn6AqlXLm70n0-Rof4Kc8LI0.crl (hash: /SURd/hA/DINCajBo4Nom79ZcLFgN+WACB9Gic6bmlE=) 2: C8BD376C3ADF11EC85EB255FC4F9AE02.roa (hash: wZOUAFh3yH4xpJik8Ps1Fk72+HENAnV8sf4x6n94egk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 20:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2100 (0x834) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E27B9, serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D Validity Not Before: Aug 20 20:58:47 2025 GMT Not After : Aug 27 20:58:47 2025 GMT Subject: CN=68a63707-96a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3e:f7:ac:b2:3d:3b:a9:71:65:7d:28:0c:29: 42:b2:69:7f:63:b6:bc:a7:af:79:da:e6:a9:11:a6: 50:5a:9e:16:11:a9:5c:c4:35:d2:ec:bc:62:ac:8e: 05:ca:50:27:20:a3:e1:e7:79:dc:29:ea:df:56:e0: 91:2a:35:ed:ce:b5:19:38:da:d5:ae:41:f2:15:82: dd:1e:a9:37:50:43:80:88:30:95:5f:8a:45:bb:36: fa:c9:17:52:99:e2:50:ca:a7:17:4a:e5:24:4a:9d: c3:fc:a4:3d:c0:73:7c:92:55:23:34:aa:54:e6:b5: 94:45:9a:0b:21:7e:32:84:9c:0f:fa:43:cb:a3:fd: d1:53:c2:af:71:d7:bd:e1:7a:29:0c:4e:bb:75:50: 14:a4:b5:f7:8e:87:19:7a:2f:32:e6:01:b3:15:60: 9c:d6:ab:5f:8c:e4:d8:a7:78:35:91:9a:6f:25:2f: fb:d5:63:4d:e1:af:ea:55:f1:68:d7:b3:64:8b:f1: 07:9b:fe:d8:ef:3d:3b:67:1f:75:d3:76:5c:02:11: 11:4a:1f:91:d1:7d:57:f8:55:81:5a:31:57:a9:2a: 7d:16:b3:9a:91:49:d0:fb:d6:f5:f4:78:09:21:cb: 9d:65:c2:c9:38:4f:38:91:f6:47:b9:8e:f9:1d:7f: 80:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D0:88:1D:81:6B:EE:D8:C9:2B:88:27:FB:BA:C0:38:E0:FA:F1:80 X509v3 Authority Key Identifier: keyid:BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:f5:f2:a4:58:95:b6:06:08:d5:4d:e1:83:cf:a0:24:4f:48: 8d:86:a8:64:8c:ea:da:37:89:d1:8d:3d:b3:5e:d9:e8:ab:aa: 57:94:73:11:2a:1f:33:b2:d0:6a:e1:93:4e:67:b5:b4:73:87: c3:d5:ee:b5:cd:9c:6c:61:dd:3f:e2:6e:9d:39:01:34:53:3f: 74:dd:b3:b7:d3:19:9a:61:39:76:ea:36:90:a6:b1:7f:1d:f5: 1c:06:50:fe:a9:2c:fb:d0:99:3f:e6:51:b4:73:22:91:26:2a: 7d:bd:e3:04:34:4d:bd:70:41:38:75:e8:1f:b6:78:25:26:06: b5:11:8d:58:93:24:08:6a:a4:ac:ce:cb:34:82:bd:5f:28:41: 46:bf:56:6c:45:73:ae:2d:9a:23:c1:3f:7a:87:c5:b1:71:c9: 26:4e:dd:81:d7:b3:9d:23:ad:03:28:31:96:f2:9d:ed:60:7a: 27:c9:a7:dc:60:a9:45:da:11:95:b5:b0:c6:6f:92:20:35:7b: 41:a8:13:d9:4f:c2:14:50:50:db:fc:29:e0:37:71:8c:6b:13: 3e:56:ec:5d:34:d1:5f:c9:ec:e2:d9:62:ae:58:c9:17:38:02: 3f:1d:ee:9b:6e:e0:9f:87:65:05:5f:0f:2f:bd:95:88:32:01: 6d:7b:0a:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3QjkxMTAvBgNVBAUTKEJBREI2OTlGQTAyQTk1NzJFNkVGNDlGNEY5MUExRkUw QTczQzJDOEQwHhcNMjUwODIwMjA1ODQ3WhcNMjUwODI3MjA1ODQ3WjAYMRYwFAYD VQQDEw02OGE2MzcwNy05NmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmz73rLI9O6lxZX0oDClCsml/Y7a8p6952uapEaZQWp4WEalcxDXS7LxirI4F ylAnIKPh53ncKerfVuCRKjXtzrUZONrVrkHyFYLdHqk3UEOAiDCVX4pFuzb6yRdS meJQyqcXSuUkSp3D/KQ9wHN8klUjNKpU5rWURZoLIX4yhJwP+kPLo/3RU8Kvcde9 4XopDE67dVAUpLX3jocZei8y5gGzFWCc1qtfjOTYp3g1kZpvJS/71WNN4a/qVfFo 17Nki/EHm/7Y7z07Zx9103ZcAhERSh+R0X1X+FWBWjFXqSp9FrOakUnQ+9b19HgJ IcudZcLJOE84kfZHuY75HX+AmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbQiB2B a+7YySuIJ/u6wDjg+vGAMB8GA1UdIwQYMBaAFLrbaZ+gKpVy5u9J9PkaH+CnPCyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjdCOS84NEJBNzQ4MkYw Q0UxMUVBODkxQjJDNzZDNEY5QUUwMi91dHRwbjZBcWxYTG03MG4wLVJvZjRLYzhM STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V0dHBuNkFxbFhMbTcwbjAtUm9mNEtjOExJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjdCOS84NEJBNzQ4MkYwQ0UxMUVBODkxQjJDNzZDNEY5QUUwMi91dHRwbjZBcWxY TG03MG4wLVJvZjRLYzhMSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX9fKkWJW2BgjVTeGDz6AkT0iNhqhkjOraN4nRjT2zXtnoq6pXlHMR Kh8zstBq4ZNOZ7W0c4fD1e61zZxsYd0/4m6dOQE0Uz903bO30xmaYTl26jaQprF/ HfUcBlD+qSz70Jk/5lG0cyKRJip9veMENE29cEE4degftnglJga1EY1YkyQIaqSs zss0gr1fKEFGv1ZsRXOuLZojwT96h8WxcckmTt2B17OdI60DKDGW8p3tYHonyafc YKlF2hGVtbDGb5IgNXtBqBPZT8IUUFDb/CngN3GMaxM+VuxdNNFfyezi2WKuWMkX OAI/He6bbuCfh2UFXw8vvZWIMgFtewrK -----END CERTIFICATE-----Generated at Fri Aug 22 16:20:34 2025 by rpki-client