$ rpki-client -vvf rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft File: UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft (raw, json) Hash identifier: NibhSI87T32BaTnMd2jEYBaCAgFnXFfh102vgmk1dq4= Subject key identifier: 98:0D:27:CA:31:8A:0F:7C:68:CA:57:C8:3E:CE:2C:F4:A6:27:19:BC Authority key identifier: 50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1 Certificate issuer: /CN=A9130803/serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1 Certificate serial: 0BFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft Manifest number: 0BF6 Signing time: Wed 02 Jul 2025 18:59:46 +0000 Manifest this update: Wed 02 Jul 2025 18:59:46 +0000 Manifest next update: Wed 09 Jul 2025 18:59:46 +0000 Files and hashes: 1: UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl (hash: i+CIS11PgDFgtCC6HHOQ6SB4P51xJLTmd2K8dMMsHdU=) 2: 8DC4FE4C175F11EAB3DB1F61C4F9AE02.roa (hash: 44EICOrdULHxxmbJqfrzipdifGEHemkJ/PfPJGyHNtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3069 (0xbfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130803, serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1 Validity Not Before: Jul 2 18:59:46 2025 GMT Not After : Jul 9 18:59:46 2025 GMT Subject: CN=686581a2-2c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:67:b2:ed:0c:0f:58:83:cc:72:de:fc:61:fb: 5c:33:db:d1:bc:99:d7:9c:03:ff:c7:ab:29:80:69: 2e:13:51:9a:d6:a3:31:27:a6:ee:79:5f:f0:34:c3: 2c:20:be:cc:26:49:c0:03:a8:e3:5a:25:92:9c:d7: 8b:bf:5e:c6:88:5f:23:30:8c:37:28:21:17:b0:c4: 34:40:b5:d8:95:0f:cc:02:87:f5:6f:d6:0c:42:7c: 8b:6b:ee:fe:e4:e0:ef:73:99:47:e7:34:63:18:7f: 51:5b:e6:a0:6d:53:ad:de:ea:52:b1:9a:10:0f:bf: 18:4c:0e:6a:42:2d:cb:60:d1:6d:ba:45:da:bd:52: 13:e5:7e:63:4a:1d:5a:30:29:dc:36:e5:f8:8b:0b: a7:15:b5:cf:e2:81:4f:a6:93:0f:98:f6:90:4b:2a: d3:ef:fc:02:94:e8:de:78:85:74:54:50:ef:2a:44: 14:a0:64:2a:42:e2:ef:50:9c:94:43:a3:38:be:9e: 40:ff:c9:03:0a:f0:ad:d3:c8:59:3a:53:5b:68:30: 81:40:fc:75:1a:d8:82:9d:11:6e:d0:25:c9:9d:b4: c6:7d:bc:2b:f4:6e:32:15:5f:4d:a3:00:40:f7:b3: ac:8d:06:75:5b:24:7a:d9:15:8d:cf:65:8d:00:f0: 38:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0D:27:CA:31:8A:0F:7C:68:CA:57:C8:3E:CE:2C:F4:A6:27:19:BC X509v3 Authority Key Identifier: keyid:50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:46:53:dc:94:4d:2f:4d:c6:8a:50:a7:d8:e8:bd:cf:71:10: d6:04:be:20:34:42:77:18:d6:36:b0:ff:d5:da:76:62:d6:ff: 3e:bd:3c:a2:34:89:40:bf:26:ca:2a:21:cf:fd:ce:e3:34:f4: 2b:7d:9d:83:00:21:71:e7:2b:4f:bc:ff:5c:9f:95:07:82:ed: 6c:0f:a6:7d:45:9e:82:e1:09:fb:ac:50:4f:c2:cf:f0:22:17: 7a:86:e4:61:c7:d1:22:5c:ea:a8:37:c1:e7:3a:31:81:e6:b7: 51:fa:d7:b3:bb:a3:10:f0:5a:1e:12:78:eb:35:e5:8d:50:dc: ae:44:16:14:d2:a1:36:7a:90:95:cc:9b:41:b3:e4:34:b9:29: c6:92:5a:69:f9:3c:2f:10:a8:f4:b2:5b:e5:70:bf:a4:c3:9b: ed:b9:c5:e7:90:4f:bd:22:4f:90:bc:f3:4a:e0:fe:b8:0e:ef: 16:b1:5c:3c:6f:01:49:06:0e:5a:db:63:9d:14:10:a8:a5:31: 70:ff:57:22:ff:9d:f4:0a:87:71:58:eb:ee:57:ed:7b:12:71: c3:ab:34:90:fa:1d:43:b2:d0:44:07:9b:05:eb:60:5a:1f:48: 8d:19:4c:24:fb:59:fd:fe:b9:8d:cd:7e:7b:44:16:92:08:bd: aa:1f:44:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4MDMxMTAvBgNVBAUTKDUwN0EwRUFGNDc1MUFDQjUyQzJDN0ZCRjk4MUQxMUJD RTgzNThCQTEwHhcNMjUwNzAyMTg1OTQ2WhcNMjUwNzA5MTg1OTQ2WjAYMRYwFAYD VQQDEw02ODY1ODFhMi0yYzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2ey7QwPWIPMct78YftcM9vRvJnXnAP/x6spgGkuE1Ga1qMxJ6bueV/wNMMs IL7MJknAA6jjWiWSnNeLv17GiF8jMIw3KCEXsMQ0QLXYlQ/MAof1b9YMQnyLa+7+ 5ODvc5lH5zRjGH9RW+agbVOt3upSsZoQD78YTA5qQi3LYNFtukXavVIT5X5jSh1a MCncNuX4iwunFbXP4oFPppMPmPaQSyrT7/wClOjeeIV0VFDvKkQUoGQqQuLvUJyU Q6M4vp5A/8kDCvCt08hZOlNbaDCBQPx1GtiCnRFu0CXJnbTGfbwr9G4yFV9NowBA 97OsjQZ1WyR62RWNz2WNAPA4QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgNJ8ox ig98aMpXyD7OLPSmJxm8MB8GA1UdIwQYMBaAFFB6Dq9HUay1LCx/v5gdEbzoNYuh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDgwMy9EODZBQkYwMDE3 NUUxMUVBQThBMzMyNjBDNEY5QUUwMi9VSG9PcjBkUnJMVXNMSC1fbUIwUnZPZzFp NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIb09yMGRSckxVc0xILV9tQjBSdk9nMWk2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDgwMy9EODZBQkYwMDE3NUUxMUVBQThBMzMyNjBDNEY5QUUwMi9VSG9PcjBkUnJM VXNMSC1fbUIwUnZPZzFpNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoRlPclE0vTcaKUKfY6L3PcRDWBL4gNEJ3GNY2sP/V2nZi1v8+vTyi NIlAvybKKiHP/c7jNPQrfZ2DACFx5ytPvP9cn5UHgu1sD6Z9RZ6C4Qn7rFBPws/w Ihd6huRhx9EiXOqoN8HnOjGB5rdR+tezu6MQ8FoeEnjrNeWNUNyuRBYU0qE2epCV zJtBs+Q0uSnGklpp+TwvEKj0slvlcL+kw5vtucXnkE+9Ik+QvPNK4P64Du8WsVw8 bwFJBg5a22OdFBCopTFw/1ci/530CodxWOvuV+17EnHDqzSQ+h1DstBEB5sF62Ba H0iNGUwk+1n9/rmNzX57RBaSCL2qH0Tz -----END CERTIFICATE-----Generated at Thu Jul 3 15:16:38 2025 by rpki-client