$ rpki-client -vvf rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft File: cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft (raw, json) Hash identifier: hf3s60aI5LtnRFFdtH6BR9jpP/1nARhaB+AsIQtpEFQ= Subject key identifier: 0E:42:C0:A6:9D:1D:B5:19:DE:58:61:32:B2:D3:48:64:9F:95:83:88 Authority key identifier: 71:4B:A2:8D:D8:35:A7:D4:19:70:1F:AD:37:2A:34:B7:C6:6C:FA:A0 Certificate issuer: /CN=A91238D6/serialNumber=714BA28DD835A7D419701FAD372A34B7C66CFAA0 Certificate serial: 227A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft Manifest number: 2248 Signing time: Fri 04 Jul 2025 16:05:38 +0000 Manifest this update: Fri 04 Jul 2025 16:05:38 +0000 Manifest next update: Fri 11 Jul 2025 16:05:38 +0000 Files and hashes: 1: cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl (hash: wy8kGNpgHuvN8VJbZ3m3pQ6gp8WpbUDA3KCGL3j1AQI=) 2: BB62FBD82AEC11EA972CB627C4F9AE02.roa (hash: KdmEZEpKoLyIMn6+XZO0IZiKVzRjxKxZXmexqgggUFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8826 (0x227a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91238D6, serialNumber=714BA28DD835A7D419701FAD372A34B7C66CFAA0 Validity Not Before: Jul 4 16:05:38 2025 GMT Not After : Jul 11 16:05:38 2025 GMT Subject: CN=6867fbd2-2a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9d:11:bd:3f:3e:13:cf:18:bd:d0:a8:b0:12: 88:8a:ed:c7:ba:e3:72:3d:98:eb:dd:bb:b9:c3:9c: 65:2e:95:34:51:a4:51:8b:6c:db:8f:91:40:85:62: 96:15:38:6c:b5:63:ba:2b:59:23:17:01:65:e3:86: 4a:4d:e5:4b:3e:6c:1e:4b:68:cd:59:c5:85:5b:1b: bf:86:31:67:f0:c3:c2:3a:f6:a1:a2:ab:60:04:ba: 1c:62:ae:11:0f:dd:e8:3d:e8:8f:89:8e:93:3d:11: 41:3d:cd:df:c8:2c:b9:21:ca:df:46:e1:b9:ec:e2: 67:cc:65:e1:7e:bd:e9:57:c4:14:93:49:90:e9:aa: e4:67:fa:23:09:1b:b9:4d:19:26:4a:b2:cf:fc:75: 4a:bc:cb:ee:20:1e:c3:8e:72:bf:28:8d:15:3a:75: f2:dd:29:b6:e7:ed:90:84:e2:73:ac:0e:76:3c:37: ef:d0:d5:17:d2:df:64:70:54:03:e7:15:f6:05:ec: 67:8b:80:1c:0f:60:b2:f0:2f:ca:e4:4c:9a:a1:d5: 09:2d:34:df:d2:93:59:52:3b:be:62:c2:ab:3c:c2: 43:bc:58:3e:d7:be:92:2f:9f:be:61:52:32:18:a0: 55:f5:38:29:2a:ef:83:b7:14:dc:9f:f6:ff:5a:d0: 74:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:42:C0:A6:9D:1D:B5:19:DE:58:61:32:B2:D3:48:64:9F:95:83:88 X509v3 Authority Key Identifier: keyid:71:4B:A2:8D:D8:35:A7:D4:19:70:1F:AD:37:2A:34:B7:C6:6C:FA:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:b3:91:ed:04:c7:a8:dd:13:6c:8f:4e:c8:ad:07:61:f2:20: 71:6e:31:d8:00:00:9f:ea:ab:51:dc:d5:e9:91:90:f8:97:be: b6:98:7c:c6:33:ef:95:cb:c3:bb:f3:9c:1f:f7:19:5f:6f:39: ba:5e:dc:aa:e5:b4:9c:f9:3c:66:e4:62:ee:77:4c:1b:76:2e: cf:18:8e:c0:14:12:7d:d6:0a:3d:07:95:4e:13:0c:5e:76:c4: b6:05:cf:22:8e:be:59:42:03:e0:63:69:00:a2:7e:4b:c5:38: 9f:8c:1d:b4:10:76:fb:42:e1:24:39:ab:85:b8:80:a9:87:33: d1:61:7a:67:35:9d:4d:64:c4:af:22:ae:f9:67:74:e2:90:5c: e2:73:4c:de:7e:ea:5e:b5:a1:ed:40:a5:cf:22:29:6b:eb:a0: 32:7b:71:a6:d7:01:c2:f9:e1:98:44:5e:dc:82:74:61:d5:d1: 29:20:f4:ba:84:7e:4d:38:82:74:dc:b2:cd:7f:43:9c:cc:93: 5b:c3:55:b3:d9:aa:d5:cb:99:f8:3d:8e:13:dd:32:a1:c5:36: d1:43:14:a4:5b:d2:2e:35:89:b3:f7:a9:e8:11:04:67:72:46: 5b:89:5c:ba:af:91:76:95:06:bb:9e:9c:0f:21:ed:60:a4:88: 7b:cb:ad:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICInowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4RDYxMTAvBgNVBAUTKDcxNEJBMjhERDgzNUE3RDQxOTcwMUZBRDM3MkEzNEI3 QzY2Q0ZBQTAwHhcNMjUwNzA0MTYwNTM4WhcNMjUwNzExMTYwNTM4WjAYMRYwFAYD VQQDEw02ODY3ZmJkMi0yYTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz50RvT8+E88YvdCosBKIiu3HuuNyPZjr3bu5w5xlLpU0UaRRi2zbj5FAhWKW FThstWO6K1kjFwFl44ZKTeVLPmweS2jNWcWFWxu/hjFn8MPCOvahoqtgBLocYq4R D93oPeiPiY6TPRFBPc3fyCy5IcrfRuG57OJnzGXhfr3pV8QUk0mQ6arkZ/ojCRu5 TRkmSrLP/HVKvMvuIB7DjnK/KI0VOnXy3Sm25+2QhOJzrA52PDfv0NUX0t9kcFQD 5xX2Bexni4AcD2Cy8C/K5EyaodUJLTTf0pNZUju+YsKrPMJDvFg+176SL5++YVIy GKBV9TgpKu+DtxTcn/b/WtB0oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5CwKad HbUZ3lhhMrLTSGSflYOIMB8GA1UdIwQYMBaAFHFLoo3YNafUGXAfrTcqNLfGbPqg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzhENi8yODk5MDUzMEJF NTQxMUU1OERDQzQzNTdDNEY5QUUwMi9jVXVpamRnMXA5UVpjQi10TnlvMHQ4WnMt cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NVdWlqZGcxcDlRWmNCLXROeW8wdDhacy1xQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzhENi8yODk5MDUzMEJFNTQxMUU1OERDQzQzNTdDNEY5QUUwMi9jVXVpamRnMXA5 UVpjQi10TnlvMHQ4WnMtcUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4s5HtBMeo3RNsj07IrQdh8iBxbjHYAACf6qtR3NXpkZD4l762mHzG M++Vy8O785wf9xlfbzm6Xtyq5bSc+Txm5GLud0wbdi7PGI7AFBJ91go9B5VOEwxe dsS2Bc8ijr5ZQgPgY2kAon5LxTifjB20EHb7QuEkOauFuICphzPRYXpnNZ1NZMSv Iq75Z3TikFzic0zefupetaHtQKXPIilr66Aye3Gm1wHC+eGYRF7cgnRh1dEpIPS6 hH5NOIJ03LLNf0OczJNbw1Wz2arVy5n4PY4T3TKhxTbRQxSkW9IuNYmz96noEQRn ckZbiVy6r5F2lQa7npwPIe1gpIh7y63h -----END CERTIFICATE-----Generated at Sat Jul 5 12:04:02 2025 by rpki-client