$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft File: UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft (raw, json) Hash identifier: P42d2Yz/36vV2X1POE3shCF1iN76e14E1kHZiiDEdSE= Subject key identifier: 1C:07:CE:53:DB:ED:4E:B6:78:0E:B2:90:09:13:A3:06:94:EE:98:E7 Authority key identifier: 51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB Certificate issuer: /CN=A91EBA1C/serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB Certificate serial: 22B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft Manifest number: 226B Signing time: Sun 24 Aug 2025 15:51:02 +0000 Manifest this update: Sun 24 Aug 2025 15:51:01 +0000 Manifest next update: Sun 31 Aug 2025 15:51:01 +0000 Files and hashes: 1: UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl (hash: zCVAhmTAFiuPH65I03xzY4IpUXERIGP/iM5YFhhamsQ=) 2: 410B457E609811F0A70C2B32C4F9AE02.roa (hash: AJZwPASrCJ7F+xJTKr0sCmRQySB9T9a/QWn2vj0KBKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8886 (0x22b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA1C, serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB Validity Not Before: Aug 24 15:51:01 2025 GMT Not After : Aug 31 15:51:01 2025 GMT Subject: CN=68ab34e5-2714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7c:4d:c2:ed:db:b1:dc:5c:82:95:aa:39:a3: 4d:9c:72:c4:70:b2:5f:cf:af:10:db:e1:cf:f5:ad: 59:6d:e1:19:db:34:e3:40:17:55:ab:3f:00:3e:1e: 7c:fe:e8:7b:3e:6f:b2:51:be:76:cd:4d:0c:56:f9: 54:f9:02:d6:42:7e:ca:73:77:c3:c6:39:1c:1a:13: a6:ef:5f:7f:be:ae:d1:33:09:67:44:49:ef:74:89: 3f:8d:d5:26:cb:5e:57:b5:f5:a4:85:97:c1:23:9e: 03:23:26:27:ca:57:20:01:16:d2:81:d4:68:26:e9: c7:51:d7:dc:f0:6a:fb:4d:7b:33:e5:22:55:35:ea: 55:bf:15:c2:c2:99:b8:fb:bc:8a:28:77:36:3a:a1: 35:c4:31:3a:55:3e:ef:77:84:b6:d1:d8:82:6c:29: 96:09:f6:34:ad:c6:96:fe:9b:49:ef:4c:8c:16:91: 53:28:9d:b4:0d:c4:b2:bd:31:76:f2:68:39:03:8e: 08:a4:4f:6c:22:f1:06:d9:5c:ad:d1:ed:3f:c4:a1: b2:55:35:00:4a:01:f6:ac:22:22:f1:fd:6c:86:5a: 65:be:d6:81:0b:dc:98:77:c0:95:26:f3:6e:d9:49: d6:c1:44:51:b0:4f:f8:de:f2:d6:07:70:28:35:74: 76:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:07:CE:53:DB:ED:4E:B6:78:0E:B2:90:09:13:A3:06:94:EE:98:E7 X509v3 Authority Key Identifier: keyid:51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:f5:0e:fc:0f:86:97:2f:1b:d7:2c:07:55:7d:2f:31:eb:25: f8:78:76:ee:85:48:91:2c:39:72:7e:ce:75:42:18:91:97:64: a9:4a:2b:84:c4:57:2a:6a:6a:2d:69:e1:74:68:48:69:b3:f5: 99:64:7e:fd:72:eb:8b:48:2d:6a:c7:a3:d8:7f:a3:f1:ab:2c: a2:5f:54:74:bd:b3:0a:a8:a6:21:6d:c9:b1:60:03:34:4c:71: 4f:44:fc:f2:70:9d:9b:f6:8b:0d:bf:2b:fa:3f:fd:25:a0:e3: 49:08:5c:14:0d:9b:bd:0b:b9:71:57:e8:30:f0:4c:f4:a8:0d: 3b:ea:22:55:fc:43:aa:f6:73:22:23:31:92:dd:89:59:c7:7b: 19:a3:33:d2:1a:ea:5e:03:9d:ad:f6:3e:9c:4d:6c:78:14:bc: 59:aa:54:b5:a0:ea:61:bb:a6:6d:c0:2e:e9:e8:0d:ea:04:a0: 47:40:cf:5f:4c:74:54:81:46:dd:6d:36:2f:d5:75:df:ca:81: 74:37:e8:18:92:3e:cb:fd:f8:68:ec:4f:4e:ce:0c:68:65:11: af:f5:fd:9c:4f:d4:fd:c1:8b:90:3b:05:fd:dd:49:f6:ca:03: 2d:43:19:b9:68:32:d8:4a:56:52:49:7d:08:1e:49:f1:63:28: 10:d6:e8:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBMUMxMTAvBgNVBAUTKDUxQzI2MTFCNDYxREQ1MTE4MzVBNTE0MUY4QUVFNTAy RDNBMzlBRUIwHhcNMjUwODI0MTU1MTAxWhcNMjUwODMxMTU1MTAxWjAYMRYwFAYD VQQDEw02OGFiMzRlNS0yNzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXxNwu3bsdxcgpWqOaNNnHLEcLJfz68Q2+HP9a1ZbeEZ2zTjQBdVqz8APh58 /uh7Pm+yUb52zU0MVvlU+QLWQn7Kc3fDxjkcGhOm719/vq7RMwlnREnvdIk/jdUm y15XtfWkhZfBI54DIyYnylcgARbSgdRoJunHUdfc8Gr7TXsz5SJVNepVvxXCwpm4 +7yKKHc2OqE1xDE6VT7vd4S20diCbCmWCfY0rcaW/ptJ70yMFpFTKJ20DcSyvTF2 8mg5A44IpE9sIvEG2Vyt0e0/xKGyVTUASgH2rCIi8f1shlplvtaBC9yYd8CVJvNu 2UnWwURRsE/43vLWB3AoNXR2xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwHzlPb 7U62eA6ykAkTowaU7pjnMB8GA1UdIwQYMBaAFFHCYRtGHdURg1pRQfiu5QLTo5rr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkExQy82M0IyMTRBMkM4 MTUxMUU1ODFEMjA4ODRDNEY5QUUwMi9VY0poRzBZZDFSR0RXbEZCLUs3bEF0T2pt dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VjSmhHMFlkMVJHRFdsRkItSzdsQXRPam11cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkExQy82M0IyMTRBMkM4MTUxMUU1ODFEMjA4ODRDNEY5QUUwMi9VY0poRzBZZDFS R0RXbEZCLUs3bEF0T2ptdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi9Q78D4aXLxvXLAdVfS8x6yX4eHbuhUiRLDlyfs51QhiRl2SpSiuE xFcqamotaeF0aEhps/WZZH79cuuLSC1qx6PYf6PxqyyiX1R0vbMKqKYhbcmxYAM0 THFPRPzycJ2b9osNvyv6P/0loONJCFwUDZu9C7lxV+gw8Ez0qA076iJV/EOq9nMi IzGS3YlZx3sZozPSGupeA52t9j6cTWx4FLxZqlS1oOphu6ZtwC7p6A3qBKBHQM9f THRUgUbdbTYv1XXfyoF0N+gYkj7L/fho7E9OzgxoZRGv9f2cT9T9wYuQOwX93Un2 ygMtQxm5aDLYSlZSSX0IHknxYygQ1uhK -----END CERTIFICATE-----Generated at Sun Aug 24 22:11:29 2025 by rpki-client