$ rpki-client -vvf rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft File: 0ueOUsXby_XhhB2s5SeuqolKmnY.mft (raw, json) Hash identifier: dkirlMTQ/z6XQWeJZLzPQH4/4WXmDN042xUb9t2szHo= Subject key identifier: 68:E1:A8:8E:CB:F0:A7:DA:DF:35:BE:9E:CE:AB:01:87:11:FD:12:1A Authority key identifier: D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76 Certificate issuer: /CN=A91262BD/serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76 Certificate serial: 0648 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft Manifest number: 0638 Signing time: Mon 30 Jun 2025 23:02:43 +0000 Manifest this update: Mon 30 Jun 2025 23:02:42 +0000 Manifest next update: Mon 07 Jul 2025 23:02:42 +0000 Files and hashes: 1: 0ueOUsXby_XhhB2s5SeuqolKmnY.crl (hash: /vuyq5rgiOp5FUSDTtrnyrAU6EVIzMIgM1pAXWkxLfc=) 2: D0A31DDC8E6011EC93F6710FC4F9AE02.roa (hash: 56SXWg9vgGgESxFQOAJJzB+wTF1OQoT0wNilbJGbabc=) 3: CFD605CC8E6011EC93F6710FC4F9AE02.roa (hash: s1rfV8r68HE4TuansWzDnqISJzRH7RjJXWNUpk6BVJU=) 4: D19ABBB48E6011EC93F6710FC4F9AE02.roa (hash: 2Y9C9KiNax/FdL7eQM2hCoTzZKyNjRhe4AuCRgLGZn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1608 (0x648) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262BD, serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76 Validity Not Before: Jun 30 23:02:42 2025 GMT Not After : Jul 7 23:02:42 2025 GMT Subject: CN=68631792-7278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:9d:1e:bb:9f:7e:d5:0c:c9:b2:2f:46:1b:99: 94:5f:6e:68:5f:03:1f:1a:43:91:e6:ba:1b:da:86: 15:a1:ae:33:6b:1a:5c:3f:10:78:bb:74:91:31:14: 8c:c2:86:79:68:fc:5c:f4:b6:64:1b:c9:3c:8a:c2: 2c:c6:da:4b:f2:b1:05:fe:f1:ac:27:5c:77:05:20: 9f:e9:c2:05:c0:07:f9:7c:26:77:c2:92:cc:cf:b4: 81:7d:f2:ee:5d:7a:9c:5d:e7:00:6d:61:1c:53:9d: 64:df:7b:45:1a:d0:5f:ee:81:3c:59:a1:a4:33:39: 63:cd:24:76:ac:e4:17:a6:22:39:06:82:5f:38:09: c5:8d:5c:b5:3e:82:8c:49:63:2a:b6:48:34:bf:7f: 43:6b:bb:17:a6:3b:e7:9b:44:67:50:32:91:1f:97: 5e:a9:95:bc:c5:e5:eb:ec:52:3b:f2:99:44:cc:6f: b4:db:85:8a:69:e0:99:43:b5:d9:ba:9b:33:da:4a: 4b:91:3c:86:04:a6:01:5f:c0:ef:0d:de:9f:3b:03: fb:9c:8b:4c:c0:ff:a8:b7:f0:ec:62:b5:6c:6c:66: 19:14:7b:ce:2a:2d:62:27:9b:68:5e:1b:f4:fc:49: 97:5a:d9:1b:a2:09:55:d3:4f:5c:f4:a8:55:31:a8: 41:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E1:A8:8E:CB:F0:A7:DA:DF:35:BE:9E:CE:AB:01:87:11:FD:12:1A X509v3 Authority Key Identifier: keyid:D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:42:cf:fd:35:a2:6d:f1:75:5f:62:84:e3:19:b6:98:ce:ca: 10:47:2f:50:4b:ff:41:07:9f:ac:9c:f3:52:4e:cf:a3:4a:1a: 4b:98:69:1a:2c:d2:aa:86:32:4b:c1:5e:4b:0f:c0:e9:3c:2c: ac:c8:d3:a8:14:1a:a1:c4:20:cf:40:f7:49:33:59:94:a7:23: 2e:dd:08:05:33:b4:26:40:98:46:53:26:86:03:d4:3c:1a:bf: 69:b6:9a:25:72:fe:eb:f6:20:59:e2:cc:30:54:b0:04:22:7c: 8c:3a:72:e6:cc:94:a4:32:80:8f:4f:57:b4:56:34:3e:41:05: 83:82:51:fc:d7:fb:93:b6:81:8f:e7:0f:97:c5:a2:19:13:1c: c3:e9:67:4f:3c:da:84:d4:72:55:43:71:a7:c7:53:3d:f1:9e: b6:fa:4b:09:80:fc:b1:e3:a1:3f:0e:60:53:eb:bb:ac:e9:e2: 9a:7e:2b:4f:b1:38:c6:c1:44:a5:b3:c5:53:91:db:7d:c0:e4: 3c:ce:0a:d7:91:24:28:25:36:f9:f9:90:99:c5:b5:aa:f0:58: 31:04:3c:76:c3:6a:6c:69:29:de:50:86:1e:63:08:eb:17:22: 34:3d:b5:87:f0:5d:2e:89:94:5a:d3:68:bc:4d:c3:e1:ad:11: 3e:1d:7f:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQkQxMTAvBgNVBAUTKEQyRTc4RTUyQzVEQkNCRjVFMTg0MURBQ0U1MjdBRUFB ODk0QTlBNzYwHhcNMjUwNjMwMjMwMjQyWhcNMjUwNzA3MjMwMjQyWjAYMRYwFAYD VQQDEw02ODYzMTc5Mi03Mjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9J0eu59+1QzJsi9GG5mUX25oXwMfGkOR5rob2oYVoa4zaxpcPxB4u3SRMRSM woZ5aPxc9LZkG8k8isIsxtpL8rEF/vGsJ1x3BSCf6cIFwAf5fCZ3wpLMz7SBffLu XXqcXecAbWEcU51k33tFGtBf7oE8WaGkMzljzSR2rOQXpiI5BoJfOAnFjVy1PoKM SWMqtkg0v39Da7sXpjvnm0RnUDKRH5deqZW8xeXr7FI78plEzG+024WKaeCZQ7XZ upsz2kpLkTyGBKYBX8DvDd6fOwP7nItMwP+ot/DsYrVsbGYZFHvOKi1iJ5toXhv0 /EmXWtkboglV009c9KhVMahBKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjhqI7L 8Kfa3zW+ns6rAYcR/RIaMB8GA1UdIwQYMBaAFNLnjlLF28v14YQdrOUnrqqJSpp2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJCRC9EM0YxMUYwRTk5 MTMxMUVCODYwRERCM0RDNEY5QUUwMi8wdWVPVXNYYnlfWGhoQjJzNVNldXFvbEtt blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB1ZU9Vc1hieV9YaGhCMnM1U2V1cW9sS21uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJCRC9EM0YxMUYwRTk5MTMxMUVCODYwRERCM0RDNEY5QUUwMi8wdWVPVXNYYnlf WGhoQjJzNVNldXFvbEttblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKQs/9NaJt8XVfYoTjGbaYzsoQRy9QS/9BB5+snPNSTs+jShpLmGka LNKqhjJLwV5LD8DpPCysyNOoFBqhxCDPQPdJM1mUpyMu3QgFM7QmQJhGUyaGA9Q8 Gr9ptpolcv7r9iBZ4swwVLAEInyMOnLmzJSkMoCPT1e0VjQ+QQWDglH81/uTtoGP 5w+XxaIZExzD6WdPPNqE1HJVQ3Gnx1M98Z62+ksJgPyx46E/DmBT67us6eKafitP sTjGwUSls8VTkdt9wOQ8zgrXkSQoJTb5+ZCZxbWq8FgxBDx2w2psaSneUIYeYwjr FyI0PbWH8F0uiZRa02i8TcPhrRE+HX/7 -----END CERTIFICATE-----Generated at Wed Jul 2 22:42:01 2025 by rpki-client