$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft File: UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft (raw, json) Hash identifier: CQ8EuoF88OEX65Ochzb2CztMdxhwGQzMqGFL0Yihv+M= Subject key identifier: E5:E7:A7:35:72:A2:3F:0C:E4:19:1D:22:BE:0A:E7:BA:E8:46:1F:A4 Authority key identifier: 50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3 Certificate issuer: /CN=A91E5191/serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3 Certificate serial: 07B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft Manifest number: 07AA Signing time: Thu 18 Sep 2025 21:38:46 +0000 Manifest this update: Thu 18 Sep 2025 21:38:46 +0000 Manifest next update: Thu 25 Sep 2025 21:38:46 +0000 Files and hashes: 1: UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl (hash: z5VwTX9NkbTCgvd9Ev4f3WV9nWGBfDeSPuoTMYjuTjY=) 2: 3E78F3541E2D11EB95754317C4F9AE02.roa (hash: L4y/BSdD8jixu1gcFYl1/VYG0pr8T2e5WODxblJYDOg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1971 (0x7b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5191, serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3 Validity Not Before: Sep 18 21:38:46 2025 GMT Not After : Sep 25 21:38:46 2025 GMT Subject: CN=68cc7be6-ac93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bb:78:ee:b4:c2:85:89:0c:68:ad:2e:f4:f0: b2:30:7e:26:94:d0:55:2b:cf:ef:3a:52:73:d5:a3: e4:18:18:9c:4d:4f:be:ac:67:a9:46:5b:5d:d6:9c: 34:74:ce:b3:f3:02:7c:58:15:e1:7e:d4:6a:58:24: fc:89:40:6c:a4:91:01:01:36:cc:cc:84:78:ec:64: ff:11:0d:cf:4c:0a:e9:57:59:d1:d1:5a:6b:49:9f: e3:68:cd:64:19:9c:64:0a:67:12:da:69:c5:b0:e7: 7a:1c:aa:01:40:ef:6d:93:01:5e:68:20:af:7e:76: b3:5f:73:4a:8f:93:d9:a1:4c:8b:1d:4a:8d:9f:e2: 8a:9e:2b:15:25:b6:7d:16:c5:b0:b0:87:62:33:b2: 3f:b0:d8:40:b5:91:4d:fb:9d:ac:23:b8:7d:2f:7f: 63:d3:8d:84:c2:c8:af:c7:e2:98:26:b2:0e:76:e0: e0:45:ce:78:a7:60:c8:ea:23:10:e4:e5:7c:ba:6b: 3f:f9:5b:12:ed:4c:c0:68:ec:3a:89:00:1d:45:bc: 24:42:2e:8a:4f:ab:18:0c:85:93:89:41:3d:bd:b7: 8a:ea:1a:cc:b1:69:86:67:83:e9:d4:a7:f9:ab:ed: 34:06:05:35:c8:88:37:f9:77:7a:f2:d0:46:13:64: fe:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E7:A7:35:72:A2:3F:0C:E4:19:1D:22:BE:0A:E7:BA:E8:46:1F:A4 X509v3 Authority Key Identifier: keyid:50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:28:67:b8:aa:ce:03:90:38:e0:4e:fa:74:a4:bd:43:62:e3: 14:9c:91:94:b7:a5:e3:9f:65:a9:15:70:1b:f6:46:53:34:07: a7:b1:0f:6f:e3:bb:a4:71:83:ef:e4:8b:83:3f:25:43:3f:0b: d5:7f:1d:a0:4a:ab:04:0d:58:0d:f9:05:bd:9c:64:f0:11:e6: 73:be:60:8b:99:5c:74:65:c6:de:5b:36:03:c3:03:80:e9:92: 50:50:df:4e:83:09:ff:0e:95:4d:8d:04:d7:4f:68:e5:05:ee: 82:20:71:51:7d:54:e4:44:c6:bc:52:7b:a1:c1:02:6f:92:6d: 21:ab:19:91:7a:c0:3b:d7:0a:2c:13:8c:ce:d7:2c:06:b1:b7: 83:fb:40:05:f8:f3:9f:81:57:9a:fa:49:87:72:5b:f0:e7:38: 62:31:d9:e5:a1:6b:7e:ea:30:49:2e:d3:90:5d:68:7a:9c:f1: f5:53:d4:19:0c:ac:ae:8b:21:38:3b:0a:a2:0e:53:26:14:6b: 51:14:6b:ea:b2:c0:73:d2:f7:3a:cf:2f:b7:88:3c:30:d4:e3: b8:d0:77:71:6f:fa:36:3a:67:64:a0:b2:2d:3d:db:59:58:ae: 7e:89:1e:0b:3e:40:45:a5:fa:4c:cb:69:99:96:17:bd:c2:40: 81:60:34:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUxOTExMTAvBgNVBAUTKDUwQTcxMTZCQjlGMzY5N0JDNUUzRTIyMkVGMDM1Rjcw MzQyQ0REQTMwHhcNMjUwOTE4MjEzODQ2WhcNMjUwOTI1MjEzODQ2WjAYMRYwFAYD VQQDEw02OGNjN2JlNi1hYzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLt47rTChYkMaK0u9PCyMH4mlNBVK8/vOlJz1aPkGBicTU++rGepRltd1pw0 dM6z8wJ8WBXhftRqWCT8iUBspJEBATbMzIR47GT/EQ3PTArpV1nR0VprSZ/jaM1k GZxkCmcS2mnFsOd6HKoBQO9tkwFeaCCvfnazX3NKj5PZoUyLHUqNn+KKnisVJbZ9 FsWwsIdiM7I/sNhAtZFN+52sI7h9L39j042Ewsivx+KYJrIOduDgRc54p2DI6iMQ 5OV8ums/+VsS7UzAaOw6iQAdRbwkQi6KT6sYDIWTiUE9vbeK6hrMsWmGZ4Pp1Kf5 q+00BgU1yIg3+Xd68tBGE2T+gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXnpzVy oj8M5BkdIr4K57roRh+kMB8GA1UdIwQYMBaAFFCnEWu582l7xePiIu8DX3A0LN2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTE5MS80OEFBMDcwNjE5 NzIxMUVCODA1RTZCN0ZDNEY5QUUwMi9VS2NSYTduemFYdkY0LUlpN3dOZmNEUXMz YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLY1JhN256YVh2RjQtSWk3d05mY0RRczNhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTE5MS80OEFBMDcwNjE5NzIxMUVCODA1RTZCN0ZDNEY5QUUwMi9VS2NSYTduemFY dkY0LUlpN3dOZmNEUXMzYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdKGe4qs4DkDjgTvp0pL1DYuMUnJGUt6Xjn2WpFXAb9kZTNAensQ9v 47ukcYPv5IuDPyVDPwvVfx2gSqsEDVgN+QW9nGTwEeZzvmCLmVx0ZcbeWzYDwwOA 6ZJQUN9Ogwn/DpVNjQTXT2jlBe6CIHFRfVTkRMa8UnuhwQJvkm0hqxmResA71wos E4zO1ywGsbeD+0AF+POfgVea+kmHclvw5zhiMdnloWt+6jBJLtOQXWh6nPH1U9QZ DKyuiyE4OwqiDlMmFGtRFGvqssBz0vc6zy+3iDww1OO40Hdxb/o2OmdkoLItPdtZ WK5+iR4LPkBFpfpMy2mZlhe9wkCBYDRZ -----END CERTIFICATE-----Generated at Fri Sep 19 03:41:17 2025 by rpki-client