$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft File: u9oqUrUEjxqKq79cJBcmASd8svM.mft (raw, json) Hash identifier: 8zUSri5DLKqwZkrwLPkYqTOjHnGva2EAMi9zClMXPgs= Subject key identifier: F5:FA:28:48:BF:36:33:AC:FE:39:A4:CB:9E:12:34:03:45:A3:C4:6D Authority key identifier: BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 Certificate issuer: /CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft Manifest number: 0102 Signing time: Thu 03 Jul 2025 05:17:01 +0000 Manifest this update: Thu 03 Jul 2025 05:17:00 +0000 Manifest next update: Thu 10 Jul 2025 05:17:00 +0000 Files and hashes: 1: u9oqUrUEjxqKq79cJBcmASd8svM.crl (hash: ul04LB+zgvsRJM7nHW8/8MJkhHMDTlY700VzfJwHXTk=) 2: 32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa (hash: YjW6NRyoT2Yd6bOqBMqlNLXFCINZXzceER+JobJKz/s=) 3: 6133230CEB3311EEA75DE77DC4F9AE02.roa (hash: yJ7MqVkk1tgytYWvBl1+oFmFkyxkl54djaWZOByH5xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BA82, serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3 Validity Not Before: Jul 3 05:17:00 2025 GMT Not After : Jul 10 05:17:00 2025 GMT Subject: CN=6866124d-06b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e4:a0:01:a4:9d:e1:ba:0d:2a:86:a5:15:65: b6:f4:f8:a4:d8:e8:57:eb:1c:67:31:d6:a6:09:91: 1c:c6:e9:42:11:7a:07:28:ed:47:dc:3e:01:cd:aa: 35:5c:c3:61:0e:12:94:52:fd:04:fa:b1:bd:33:95: 63:32:f7:2c:75:fa:c0:0c:81:65:18:c2:2d:2e:a5: a7:70:97:af:99:6e:56:7b:c0:6a:0d:42:6f:40:c1: ab:5d:a8:85:76:dd:67:5a:68:7f:bd:30:96:aa:98: d9:83:37:5a:35:df:9d:74:19:69:e4:7f:38:79:18: c4:aa:0f:96:ef:14:21:40:c4:41:ab:93:8e:c0:be: 82:4f:24:c6:47:e4:9a:f4:b1:fa:43:d8:24:44:b3: 72:6c:86:f3:d9:14:30:02:1e:69:19:3c:46:64:24: 38:22:63:6b:60:81:98:e3:21:12:8d:09:60:03:17: c3:27:8e:85:cb:70:c2:77:98:43:a5:92:c3:c0:6d: 08:d4:b8:9b:23:4d:b5:a5:17:73:47:94:02:e2:9d: ed:53:5f:44:19:4f:4b:b1:7b:31:dc:0a:3f:e1:75: 28:d9:01:cd:30:11:b4:81:d4:bd:db:2e:7f:e5:7c: 47:8d:80:c6:ed:2e:aa:66:8d:13:04:63:ea:8e:9c: 2f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FA:28:48:BF:36:33:AC:FE:39:A4:CB:9E:12:34:03:45:A3:C4:6D X509v3 Authority Key Identifier: keyid:BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:09:5c:e8:7b:ad:87:d3:07:96:a6:ae:ca:87:4a:0c:f3:85: 94:46:a6:e2:77:60:c8:fd:6a:4d:75:61:62:57:d7:fc:75:d0: 2e:38:ad:c6:ab:db:28:90:a7:f8:90:fd:70:68:c9:38:88:f0: 50:71:d7:87:31:2b:0e:a2:3c:f3:b7:93:b6:c7:a6:9c:3f:e5: 23:e0:63:b9:82:da:12:90:32:58:3e:7a:b2:0d:6d:3e:90:3a: 76:12:90:80:2c:83:3e:91:b3:c9:1e:c7:b8:86:e3:52:39:4c: c0:5b:92:20:ec:ad:01:bd:f1:27:f8:71:3e:1b:b5:fc:03:00: 09:18:35:7b:53:b2:ed:36:a0:ed:e0:fa:7a:c5:98:6e:21:a5: a5:59:1f:e4:84:2d:70:b8:90:2e:b6:cd:ee:9d:83:27:18:2e: 68:8b:8b:90:8a:cf:49:01:24:45:e9:2b:51:f9:00:e2:dd:36: a2:d5:cb:10:05:c4:14:66:ac:ec:0b:fc:67:4e:51:a9:37:37: f4:ed:51:f1:d0:e5:22:36:12:57:eb:01:18:47:b6:30:9a:dc: d2:03:38:a7:42:e4:af:b0:aa:f4:bd:bd:25:26:a3:57:e3:f0: ec:b4:fb:88:ca:f5:e3:76:49:c9:a1:06:f9:11:4f:f0:f0:02: 9d:41:a3:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBODIxMTAvBgNVBAUTKEJCREEyQTUyQjUwNDhGMUE4QUFCQkY1QzI0MTcyNjAx Mjc3Q0IyRjMwHhcNMjUwNzAzMDUxNzAwWhcNMjUwNzEwMDUxNzAwWjAYMRYwFAYD VQQDEw02ODY2MTI0ZC0wNmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuSgAaSd4boNKoalFWW29Pik2OhX6xxnMdamCZEcxulCEXoHKO1H3D4Bzao1 XMNhDhKUUv0E+rG9M5VjMvcsdfrADIFlGMItLqWncJevmW5We8BqDUJvQMGrXaiF dt1nWmh/vTCWqpjZgzdaNd+ddBlp5H84eRjEqg+W7xQhQMRBq5OOwL6CTyTGR+Sa 9LH6Q9gkRLNybIbz2RQwAh5pGTxGZCQ4ImNrYIGY4yESjQlgAxfDJ46Fy3DCd5hD pZLDwG0I1LibI021pRdzR5QC4p3tU19EGU9LsXsx3Ao/4XUo2QHNMBG0gdS92y5/ 5XxHjYDG7S6qZo0TBGPqjpwveQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPX6KEi/ NjOs/jmky54SNANFo8RtMB8GA1UdIwQYMBaAFLvaKlK1BI8aiqu/XCQXJgEnfLLz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkE4Mi9GMjYwMTRFOENF NUExMUVFOEMzQkQwM0FDNEY5QUUwMi91OW9xVXJVRWp4cUtxNzljSkJjbUFTZDhz dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U5b3FVclVFanhxS3E3OWNKQmNtQVNkOHN2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkE4Mi9GMjYwMTRFOENFNUExMUVFOEMzQkQwM0FDNEY5QUUwMi91OW9xVXJVRWp4 cUtxNzljSkJjbUFTZDhzdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyCVzoe62H0weWpq7Kh0oM84WURqbid2DI/WpNdWFiV9f8ddAuOK3G q9sokKf4kP1waMk4iPBQcdeHMSsOojzzt5O2x6acP+Uj4GO5gtoSkDJYPnqyDW0+ kDp2EpCALIM+kbPJHse4huNSOUzAW5Ig7K0BvfEn+HE+G7X8AwAJGDV7U7LtNqDt 4Pp6xZhuIaWlWR/khC1wuJAuts3unYMnGC5oi4uQis9JASRF6StR+QDi3Tai1csQ BcQUZqzsC/xnTlGpNzf07VHx0OUiNhJX6wEYR7YwmtzSAzinQuSvsKr0vb0lJqNX 4/DstPuIyvXjdknJoQb5EU/w8AKdQaPA -----END CERTIFICATE-----Generated at Thu Jul 3 10:26:33 2025 by rpki-client