$ rpki-client -vvf rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft File: uNk1BsinkdH5_6W2fDiBbdwD7ms.mft (raw, json) Hash identifier: lakTLeO01rbBFcJk0+RfE5myBb6C+Or1svZV2HFvxR0= Subject key identifier: 47:59:07:FD:24:F3:90:9A:4F:FF:4C:6B:7E:37:E4:A6:FE:9E:9B:F4 Authority key identifier: B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B Certificate issuer: /CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B Certificate serial: 0A49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft Manifest number: 0A43 Signing time: Fri 04 Jul 2025 20:05:17 +0000 Manifest this update: Fri 04 Jul 2025 20:05:17 +0000 Manifest next update: Fri 11 Jul 2025 20:05:17 +0000 Files and hashes: 1: uNk1BsinkdH5_6W2fDiBbdwD7ms.crl (hash: r9dwUchDod7Qk1n0RWPEZV1Xzd7hhl+q7UAx2fOl6a0=) 2: C01674A86BF011EA87B33D25C4F9AE02.roa (hash: 70ds0/DyF5wXCHSmR464rx4ZYg97rO4f023Z3VGG144=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2633 (0xa49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110DEC, serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B Validity Not Before: Jul 4 20:05:17 2025 GMT Not After : Jul 11 20:05:17 2025 GMT Subject: CN=686833fd-281c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:89:b0:13:8f:e2:16:d6:d3:80:5a:ec:17:32: ee:2b:38:54:4b:71:73:7c:f3:18:42:b6:3a:b8:5a: 04:ed:1b:54:f1:c3:82:cc:7c:54:7b:e8:5a:70:09: d1:e2:e0:1f:36:b9:b8:11:98:ca:bf:45:b6:4f:28: d7:74:1a:34:6c:e1:b8:33:cb:11:e3:88:c4:13:86: fd:9f:58:3a:a4:61:21:a3:37:f2:37:34:94:78:cd: 6e:39:93:c7:16:18:fa:35:fa:73:50:fa:3a:85:82: 5e:cb:dc:12:26:e8:ae:e2:4e:65:e8:b2:ef:90:28: 3e:25:e8:87:dc:47:24:0c:14:68:c1:db:92:89:3e: 38:04:2d:0a:15:1a:84:0a:a1:a3:ae:fa:27:81:72: b3:0b:e5:01:69:d5:aa:aa:e0:ae:03:17:af:e0:96: ba:5b:e1:2c:51:31:26:db:82:4f:ac:0e:9c:57:e5: a1:d2:f3:b7:62:cd:de:41:90:13:6d:ff:a5:eb:c6: 74:ad:91:b5:c5:5c:d5:6e:78:1d:7e:75:91:a9:bd: 4f:67:75:6f:35:e2:2e:48:c9:8d:d8:21:ac:08:89: 87:89:dc:c2:bc:4a:aa:e3:7d:43:f1:f2:5c:9a:1c: 83:2f:e5:1d:5a:ad:8f:5e:a6:d7:c5:3e:57:a2:8f: 8f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:59:07:FD:24:F3:90:9A:4F:FF:4C:6B:7E:37:E4:A6:FE:9E:9B:F4 X509v3 Authority Key Identifier: keyid:B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:a9:5b:5e:27:cf:6f:6a:32:12:5c:b3:8c:81:9f:4c:32:aa: 33:3b:20:ee:d4:29:a7:53:30:a6:eb:e7:0f:f7:50:09:af:6b: ea:c9:49:22:00:17:5f:a4:0c:63:88:e1:03:cf:dc:03:2a:d2: 89:22:94:c3:86:1c:a2:ba:8e:48:22:4a:1e:f1:d8:f7:71:f8: ed:93:1b:eb:3a:3d:3c:71:f1:c2:7c:c5:0a:d4:3e:cf:40:ab: 46:10:98:39:b1:28:94:6d:15:79:06:5a:0d:38:d0:58:d1:b6: 51:a5:b8:12:91:09:ab:99:64:4c:63:93:cf:45:d6:86:09:e9: 1b:aa:7c:26:37:12:68:e8:c6:18:9b:d9:d4:3e:77:eb:7f:c6: e8:56:ee:41:29:25:c0:e2:1a:18:4f:8d:09:d1:fb:db:bc:25: 19:b2:07:16:f8:87:c7:95:38:40:a1:7a:e0:7a:5a:19:d9:a6: eb:d2:86:3b:41:6f:7f:1a:ed:eb:d9:43:b9:74:90:75:9a:e2: 05:65:74:87:a5:8e:be:68:cd:e0:0a:d8:81:c0:b0:63:45:d8: 44:d4:fe:e8:1b:8d:96:7e:20:b1:64:ad:ed:02:b6:e6:c4:6d: 8d:35:a3:00:8d:fb:b5:c2:da:7c:45:65:6a:2a:22:f7:10:92: ea:ec:94:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBERUMxMTAvBgNVBAUTKEI4RDkzNTA2QzhBNzkxRDFGOUZGQTVCNjdDMzg4MTZE REMwM0VFNkIwHhcNMjUwNzA0MjAwNTE3WhcNMjUwNzExMjAwNTE3WjAYMRYwFAYD VQQDEw02ODY4MzNmZC0yODFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7omwE4/iFtbTgFrsFzLuKzhUS3FzfPMYQrY6uFoE7RtU8cOCzHxUe+hacAnR 4uAfNrm4EZjKv0W2TyjXdBo0bOG4M8sR44jEE4b9n1g6pGEhozfyNzSUeM1uOZPH Fhj6NfpzUPo6hYJey9wSJuiu4k5l6LLvkCg+JeiH3EckDBRowduSiT44BC0KFRqE CqGjrvongXKzC+UBadWqquCuAxev4Ja6W+EsUTEm24JPrA6cV+Wh0vO3Ys3eQZAT bf+l68Z0rZG1xVzVbngdfnWRqb1PZ3VvNeIuSMmN2CGsCImHidzCvEqq431D8fJc mhyDL+UdWq2PXqbXxT5Xoo+PjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdZB/0k 85CaT/9Ma3435Kb+npv0MB8GA1UdIwQYMBaAFLjZNQbIp5HR+f+ltnw4gW3cA+5r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMERFQy8xNzJEMEEyNDZC RUYxMUVBQTI2QTVFMjJDNEY5QUUwMi91TmsxQnNpbmtkSDVfNlcyZkRpQmJkd0Q3 bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VOazFCc2lua2RINV82VzJmRGlCYmR3RDdtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MERFQy8xNzJEMEEyNDZCRUYxMUVBQTI2QTVFMjJDNEY5QUUwMi91TmsxQnNpbmtk SDVfNlcyZkRpQmJkd0Q3bXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWqVteJ89vajISXLOMgZ9MMqozOyDu1CmnUzCm6+cP91AJr2vqyUki ABdfpAxjiOEDz9wDKtKJIpTDhhyiuo5IIkoe8dj3cfjtkxvrOj08cfHCfMUK1D7P QKtGEJg5sSiUbRV5BloNONBY0bZRpbgSkQmrmWRMY5PPRdaGCekbqnwmNxJo6MYY m9nUPnfrf8boVu5BKSXA4hoYT40J0fvbvCUZsgcW+IfHlThAoXrgeloZ2abr0oY7 QW9/Gu3r2UO5dJB1muIFZXSHpY6+aM3gCtiBwLBjRdhE1P7oG42WfiCxZK3tArbm xG2NNaMAjfu1wtp8RWVqKiL3EJLq7JT/ -----END CERTIFICATE-----Generated at Sat Jul 5 21:43:01 2025 by rpki-client