$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft File: UdUxrvegh8GOMB4OaixjcbJkw-g.mft (raw, json) Hash identifier: 2fobLvL+pQ7fHqenfS25mAxgixom+fThYr1wSy0eShE= Subject key identifier: CA:FD:C0:F9:0F:71:59:38:FE:E8:47:5B:39:BA:2C:8B:51:6D:6F:B8 Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft Manifest number: 01EC Signing time: Fri 19 Sep 2025 03:16:24 +0000 Manifest this update: Fri 19 Sep 2025 03:16:24 +0000 Manifest next update: Fri 26 Sep 2025 03:16:24 +0000 Files and hashes: 1: UdUxrvegh8GOMB4OaixjcbJkw-g.crl (hash: yCmBvR97VWLCFnCK+qRFavquGyAkapgM+eLyEeN7MU8=) 2: 891E633CB7F111EFA500D67CC4F9AE02.roa (hash: O4FUSN5LS+aElz5VOCMijpDVd7ugBsWS/neaZYIhjDU=) 3: 7D215B2CC3C111EE8F83CE1AC4F9AE02.roa (hash: WiLdUkxZVUsyLYaXHR0WIvWbfxTpV9CYC+KkS9rRgFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Validity Not Before: Sep 19 03:16:24 2025 GMT Not After : Sep 26 03:16:24 2025 GMT Subject: CN=68cccb08-d638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:49:e7:18:d3:4f:a8:47:bd:b9:5b:93:02: ba:3b:52:e5:ca:a4:a1:64:25:01:fc:30:64:22:8b: ca:9f:f3:54:53:0e:b4:df:f4:93:94:79:19:25:d2: ec:c5:3b:38:f5:5e:98:23:af:02:52:20:b5:22:09: f9:cd:fa:66:7d:05:62:b4:ae:c5:a7:4f:0c:96:c8: ed:49:8d:67:3b:7d:e7:04:00:2d:95:f0:8f:80:50: 18:c3:42:e2:f9:49:90:34:86:89:5d:2a:dc:68:50: b6:cc:15:5b:06:02:94:82:21:0e:94:c9:ab:1a:6d: eb:a7:4d:70:f7:6e:21:4a:66:66:b8:a7:d3:ce:76: a6:e0:48:e5:36:00:96:91:79:f9:91:9f:e0:b6:a1: 89:f4:b0:fd:cf:b4:0f:b1:b0:a1:72:b8:fe:3c:72: 61:e8:1b:b5:79:f9:32:7b:2c:5e:1d:8f:1a:48:2d: 79:1b:bf:d9:26:c9:db:ae:9f:c9:e7:8e:62:77:5d: 9b:ad:d8:17:2e:ea:0d:0b:07:cb:a7:af:c0:9c:8c: 33:66:7e:c9:90:36:10:8f:1b:62:89:30:09:78:4d: a3:f4:22:a2:89:94:3c:90:22:6d:4a:ca:c6:66:81: 06:25:03:d8:18:37:ad:2d:a8:5a:5c:e6:f8:ef:c5: 4d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FD:C0:F9:0F:71:59:38:FE:E8:47:5B:39:BA:2C:8B:51:6D:6F:B8 X509v3 Authority Key Identifier: keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:cf:20:04:99:66:05:a2:6e:29:81:f1:51:fa:a5:72:2d:c7: 78:c2:e8:eb:10:5c:2a:5b:5a:17:2e:c4:c2:5e:6e:05:2f:89: 1b:4a:7a:3d:da:2e:a9:42:3b:ad:5e:a1:7c:0d:15:fd:4c:c3: 26:36:61:7d:59:bc:be:32:c1:3f:2e:3e:48:b0:ef:3f:e4:62: f6:7c:91:a3:b1:3c:36:c7:57:c7:8d:4f:d3:99:c4:c4:36:d9: 40:6b:8f:94:fd:08:0f:35:ae:f5:78:29:2b:78:db:71:e8:a9: 1e:a5:97:95:fc:fe:ea:b0:75:74:b3:cb:ba:df:02:f2:51:8f: 37:21:db:59:91:d3:b5:99:ab:1e:12:8e:93:6b:ac:46:22:b3: 8a:b2:e3:c5:8f:bc:fc:f0:a5:21:35:45:fb:4f:02:f5:dd:1f: 08:21:d9:5a:0e:2c:eb:ac:bc:07:af:8f:2c:9d:53:f9:91:76: ca:03:1e:78:ac:c4:97:d7:2f:06:53:93:9d:77:d3:26:e1:08: f3:60:1d:a0:1b:4a:66:0d:50:b9:f3:a9:ae:5e:19:af:07:fe: eb:d2:50:15:4c:7b:9f:a8:d6:7b:fc:67:89:1e:a1:e8:d5:36: 5c:1e:a3:bd:05:67:b0:82:e1:d6:c1:51:43:e1:30:13:f6:04: 96:64:fe:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZBRkYxMTAvBgNVBAUTKDUxRDUzMUFFRjdBMDg3QzE4RTMwMUUwRTZBMkM2Mzcx QjI2NEMzRTgwHhcNMjUwOTE5MDMxNjI0WhcNMjUwOTI2MDMxNjI0WjAYMRYwFAYD VQQDEw02OGNjY2IwOC1kNjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbtJ5xjTT6hHvblbkwK6O1LlyqShZCUB/DBkIovKn/NUUw603/STlHkZJdLs xTs49V6YI68CUiC1Ign5zfpmfQVitK7Fp08MlsjtSY1nO33nBAAtlfCPgFAYw0Li +UmQNIaJXSrcaFC2zBVbBgKUgiEOlMmrGm3rp01w924hSmZmuKfTznam4EjlNgCW kXn5kZ/gtqGJ9LD9z7QPsbChcrj+PHJh6Bu1efkyeyxeHY8aSC15G7/ZJsnbrp/J 545id12brdgXLuoNCwfLp6/AnIwzZn7JkDYQjxtiiTAJeE2j9CKiiZQ8kCJtSsrG ZoEGJQPYGDetLahaXOb478VNOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMr9wPkP cVk4/uhHWzm6LItRbW+4MB8GA1UdIwQYMBaAFFHVMa73oIfBjjAeDmosY3GyZMPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkFGRi9EMDYxMUYwNEND NDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4R09NQjRPYWl4amNiSmt3 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkVXhydmVnaDhHT01CNE9haXhqY2JKa3ctZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkFGRi9EMDYxMUYwNENDNDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4 R09NQjRPYWl4amNiSmt3LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMzyAEmWYFom4pgfFR+qVyLcd4wujrEFwqW1oXLsTCXm4FL4kbSno9 2i6pQjutXqF8DRX9TMMmNmF9Wby+MsE/Lj5IsO8/5GL2fJGjsTw2x1fHjU/TmcTE NtlAa4+U/QgPNa71eCkreNtx6KkepZeV/P7qsHV0s8u63wLyUY83IdtZkdO1mase Eo6Ta6xGIrOKsuPFj7z88KUhNUX7TwL13R8IIdlaDizrrLwHr48snVP5kXbKAx54 rMSX1y8GU5Odd9Mm4QjzYB2gG0pmDVC586muXhmvB/7r0lAVTHufqNZ7/GeJHqHo 1TZcHqO9BWewguHWwVFD4TAT9gSWZP41 -----END CERTIFICATE-----Generated at Fri Sep 19 10:02:01 2025 by rpki-client