$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft File: uHa2DaKzyctmxyu5_Kc77ssR_dE.mft (raw, json) Hash identifier: 4tIHK/bYL6EwiDZ/EYm9UopFKUk01Ygj42GaQnLa9HI= Subject key identifier: 63:86:2F:54:1A:71:7B:C1:E6:BC:15:F6:82:87:A6:89:07:7A:D5:2E Authority key identifier: B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 Certificate issuer: /CN=A912611F/serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Certificate serial: 0FF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft Manifest number: 1921 Signing time: Fri 04 Jul 2025 17:45:12 +0000 Manifest this update: Fri 04 Jul 2025 17:45:11 +0000 Manifest next update: Fri 11 Jul 2025 17:45:11 +0000 Files and hashes: 1: uHa2DaKzyctmxyu5_Kc77ssR_dE.crl (hash: hqZ+ppBXp4cxMRSNjXC811K75JzrqPJUjmtRjjihPHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4089 (0xff9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912611F, serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Validity Not Before: Jul 4 17:45:11 2025 GMT Not After : Jul 11 17:45:11 2025 GMT Subject: CN=68681328-d295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ec:c1:73:7d:18:a7:b4:1c:e7:32:d1:3d:22: de:cd:1b:b0:7b:42:27:59:0e:49:42:ed:fd:48:20: a9:9c:33:a2:1a:75:0b:69:82:7d:e4:0a:ab:7e:5a: 9f:99:2c:2e:58:30:03:e0:ae:0f:59:73:af:8d:99: 1a:27:50:f3:a4:08:fc:b1:7f:7a:d7:2d:3a:b6:69: ed:0d:90:52:12:83:ed:b6:0b:48:9d:d4:5a:3b:59: 3d:a1:5a:a3:c7:05:ef:f4:79:79:cd:cf:f6:25:86: c0:a9:a8:85:63:18:95:ce:be:55:f8:ba:03:0a:75: f1:93:56:4e:0b:bd:f0:49:ea:c0:04:25:2b:81:28: 6f:ee:c2:24:67:e0:1a:2b:24:cc:e1:ba:9c:c5:ad: 76:92:4c:8d:b5:ba:60:9d:6d:4c:89:a3:fd:05:13: 43:49:c0:a6:12:47:ec:5d:52:95:f9:a5:4d:7f:ad: 9a:20:10:1b:4d:e4:e9:2f:12:d6:28:c9:5e:d3:a5: 05:f5:76:12:0a:b2:89:46:fe:3c:0c:fc:26:2e:22: fd:65:c5:d8:b3:da:fe:f8:d2:ef:c3:0b:5f:3b:b1: cb:cb:26:58:b5:31:38:aa:63:02:51:cc:6d:a8:45: 45:18:cd:96:ff:b9:0d:bb:24:d3:e9:98:25:90:fd: 78:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:86:2F:54:1A:71:7B:C1:E6:BC:15:F6:82:87:A6:89:07:7A:D5:2E X509v3 Authority Key Identifier: keyid:B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:6c:a1:fa:fa:24:3c:ea:f1:98:ee:7e:f6:e7:66:14:40:be: c6:89:5a:8a:9d:84:88:ec:86:c8:f3:82:0c:33:c2:ee:7a:9c: 80:26:80:89:7b:9e:e8:e8:0e:59:99:55:e4:a9:03:01:dd:d0: f0:55:c5:a3:cd:2a:2c:2c:fd:02:fd:b7:b0:48:c2:b3:b9:3e: 49:4f:92:07:28:b3:c3:76:8d:46:e9:af:2f:c1:a9:cc:f4:cf: a9:9e:e8:26:1b:e9:d5:2f:f4:73:e7:57:0a:96:25:2a:8f:10: 77:e9:dc:72:61:b6:ec:e4:f2:fb:60:40:06:d7:d0:92:b5:68: a2:0c:17:d4:59:d0:92:c8:e5:44:c3:99:51:d3:eb:a5:ff:0c: e6:d0:ee:2a:ad:2d:4a:cb:e5:85:2f:45:ce:28:1e:a1:ed:91: 49:ee:b8:58:e3:03:49:2a:db:28:12:40:76:30:21:9e:c1:9e: 97:4f:14:4f:54:ea:ea:92:c1:7c:5e:79:15:fb:a8:82:89:78: 4f:c3:74:69:fa:c2:7d:fd:9c:f7:6a:29:c8:90:1d:44:c5:a6: d6:7d:e0:82:af:98:42:66:c8:7c:00:3f:aa:70:e7:81:d2:57: 84:31:7f:60:eb:e5:dd:6c:21:09:df:7f:24:c5:f7:aa:57:c5: 61:34:c7:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxMUYxMTAvBgNVBAUTKEI4NzZCNjBEQTJCM0M5Q0I2NkM3MkJCOUZDQTczQkVF Q0IxMUZERDEwHhcNMjUwNzA0MTc0NTExWhcNMjUwNzExMTc0NTExWjAYMRYwFAYD VQQDEw02ODY4MTMyOC1kMjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuzBc30Yp7Qc5zLRPSLezRuwe0InWQ5JQu39SCCpnDOiGnULaYJ95Aqrflqf mSwuWDAD4K4PWXOvjZkaJ1DzpAj8sX961y06tmntDZBSEoPttgtIndRaO1k9oVqj xwXv9Hl5zc/2JYbAqaiFYxiVzr5V+LoDCnXxk1ZOC73wSerABCUrgShv7sIkZ+Aa KyTM4bqcxa12kkyNtbpgnW1MiaP9BRNDScCmEkfsXVKV+aVNf62aIBAbTeTpLxLW KMle06UF9XYSCrKJRv48DPwmLiL9ZcXYs9r++NLvwwtfO7HLyyZYtTE4qmMCUcxt qEVFGM2W/7kNuyTT6ZglkP14LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOGL1Qa cXvB5rwV9oKHpokHetUuMB8GA1UdIwQYMBaAFLh2tg2is8nLZscrufynO+7LEf3R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenljdG14eXU1X0tjNzdzc1Jf ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VIYTJEYUt6eWN0bXh5dTVfS2M3N3NzUl9kRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenlj dG14eXU1X0tjNzdzc1JfZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtbKH6+iQ86vGY7n7252YUQL7GiVqKnYSI7IbI84IMM8LuepyAJoCJ e57o6A5ZmVXkqQMB3dDwVcWjzSosLP0C/bewSMKzuT5JT5IHKLPDdo1G6a8vwanM 9M+pnugmG+nVL/Rz51cKliUqjxB36dxyYbbs5PL7YEAG19CStWiiDBfUWdCSyOVE w5lR0+ul/wzm0O4qrS1Ky+WFL0XOKB6h7ZFJ7rhY4wNJKtsoEkB2MCGewZ6XTxRP VOrqksF8XnkV+6iCiXhPw3Rp+sJ9/Zz3ainIkB1ExabWfeCCr5hCZsh8AD+qcOeB 0leEMX9g6+XdbCEJ338kxfeqV8VhNMeA -----END CERTIFICATE-----Generated at Sun Jul 6 00:58:29 2025 by rpki-client