$ rpki-client -vvf rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft File: V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft (raw, json) Hash identifier: zCPlEDcKKcuwCB3mCda+i5/9CRBVgrzPaZVj3SFm6lk= Subject key identifier: C8:36:CB:F8:D5:F4:33:8C:3C:35:7C:2A:AB:3F:C8:F4:50:1A:C7:AA Authority key identifier: 57:FB:89:39:53:89:64:0B:68:69:A5:E2:40:74:B4:2E:42:1E:2B:D7 Certificate issuer: /CN=A9132DF5/serialNumber=57FB89395389640B6869A5E24074B42E421E2BD7 Certificate serial: 0F12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft Manifest number: 0F0A Signing time: Mon 30 Jun 2025 17:50:58 +0000 Manifest this update: Mon 30 Jun 2025 17:50:58 +0000 Manifest next update: Mon 07 Jul 2025 17:50:58 +0000 Files and hashes: 1: V_uJOVOJZAtoaaXiQHS0LkIeK9c.crl (hash: bjS2ZudsFKvc4ehuB6lrdHUuMNuy6VVanrUjpL2DgiA=) 2: 3058390A7C4511E984DEA431C4F9AE02.roa (hash: 9rDCv+WsiAPR7NnxfH7AASwbAfQNHmC84LRbeE1lu4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.crl rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3858 (0xf12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132DF5, serialNumber=57FB89395389640B6869A5E24074B42E421E2BD7 Validity Not Before: Jun 30 17:50:58 2025 GMT Not After : Jul 7 17:50:58 2025 GMT Subject: CN=6862ce82-aafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:c1:57:f9:7e:c5:0a:d4:24:bd:89:42:34: 54:e2:48:8b:82:ca:23:16:9e:09:c3:62:62:01:84: b1:7b:5f:99:7e:6d:2e:19:cb:57:3a:55:40:b5:2a: 05:62:61:87:1a:85:3b:f5:03:a9:79:97:1e:43:3d: f2:f2:83:b2:eb:9e:01:75:95:de:01:53:32:f8:88: 5d:9a:32:0c:bb:87:9a:cd:4c:04:69:82:c0:c5:a7: 70:eb:e2:58:32:11:24:f8:ba:14:62:b0:20:1f:39: 8e:8e:dd:53:61:c0:b7:8f:e5:d2:5e:75:d0:af:58: 2d:4c:9e:a5:92:b0:5f:32:68:d6:9f:d9:f0:08:b3: 53:3a:99:bc:71:2e:68:db:1d:ad:e5:a7:9b:2e:1f: c8:e7:75:d5:fd:d2:47:bf:03:cf:73:c4:85:ba:16: ab:08:9e:d1:52:15:46:9f:18:01:1d:72:a0:a0:f0: ca:08:85:76:fb:cd:99:ce:e9:ed:38:3e:7a:cb:4a: b6:a5:17:75:df:08:26:c4:98:e1:47:a6:fa:6d:bd: 31:63:d6:30:38:3b:9a:d1:ea:34:eb:78:72:bb:58: 4d:52:d4:72:34:17:58:12:f2:dc:ed:2c:c3:66:9b: b1:39:64:1a:6a:dc:48:a6:47:0b:46:14:25:59:b3: d8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:36:CB:F8:D5:F4:33:8C:3C:35:7C:2A:AB:3F:C8:F4:50:1A:C7:AA X509v3 Authority Key Identifier: keyid:57:FB:89:39:53:89:64:0B:68:69:A5:E2:40:74:B4:2E:42:1E:2B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:01:62:14:ea:40:a4:ce:e0:5d:80:3c:d1:0c:ed:23:be:e9: 2b:d7:d4:a8:6b:b1:cf:fe:e5:8a:85:0b:c8:87:3a:42:ab:d3: e0:01:fd:22:8d:8d:79:e3:06:af:d4:1a:01:bf:6b:f5:80:b3: 63:c0:47:2f:21:d8:7b:b6:79:46:96:05:45:79:13:86:91:56: 1a:e2:34:26:5f:87:f8:a7:c5:98:3a:ae:90:be:3a:3e:73:ad: 1f:0e:bb:6f:59:ca:9c:41:85:ea:ed:1c:4d:de:29:5a:d0:82: 9a:2e:0a:f3:93:d9:46:57:17:a2:b8:6f:92:2b:2a:43:e9:de: 17:1a:44:8f:bb:d9:38:84:2c:a5:a9:87:06:9a:bf:c7:d4:ef: b5:1c:49:a8:66:97:6b:9c:19:89:f0:8b:98:35:d3:aa:36:24: a5:81:ce:0b:bb:ce:fd:e2:5d:cc:50:96:5b:71:bb:b8:d1:a7: ac:e0:13:cb:57:70:e5:01:ec:cd:a9:51:5b:00:99:d4:d8:6a: 12:b2:8d:89:bf:83:97:f9:25:75:d6:aa:b7:0b:47:4c:8d:05: 80:f3:18:9e:1b:6d:89:c5:98:d3:24:3c:0b:ec:10:2b:35:87: 25:6c:57:cf:22:3b:a9:4d:1d:45:20:00:87:ca:82:15:0d:1e: 9a:ef:26:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJERjUxMTAvBgNVBAUTKDU3RkI4OTM5NTM4OTY0MEI2ODY5QTVFMjQwNzRCNDJF NDIxRTJCRDcwHhcNMjUwNjMwMTc1MDU4WhcNMjUwNzA3MTc1MDU4WjAYMRYwFAYD VQQDEw02ODYyY2U4Mi1hYWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsTBV/l+xQrUJL2JQjRU4kiLgsojFp4Jw2JiAYSxe1+Zfm0uGctXOlVAtSoF YmGHGoU79QOpeZceQz3y8oOy654BdZXeAVMy+IhdmjIMu4eazUwEaYLAxadw6+JY MhEk+LoUYrAgHzmOjt1TYcC3j+XSXnXQr1gtTJ6lkrBfMmjWn9nwCLNTOpm8cS5o 2x2t5aebLh/I53XV/dJHvwPPc8SFuharCJ7RUhVGnxgBHXKgoPDKCIV2+82Zzunt OD56y0q2pRd13wgmxJjhR6b6bb0xY9YwODua0eo063hyu1hNUtRyNBdYEvLc7SzD ZpuxOWQaatxIpkcLRhQlWbPYDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMg2y/jV 9DOMPDV8Kqs/yPRQGseqMB8GA1UdIwQYMBaAFFf7iTlTiWQLaGml4kB0tC5CHivX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkRGNS84MjA3MkU3QTdD NDMxMUU5ODI4NjUxMkNDNEY5QUUwMi9WX3VKT1ZPSlpBdG9hYVhpUUhTMExrSWVL OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZfdUpPVk9KWkF0b2FhWGlRSFMwTGtJZUs5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkRGNS84MjA3MkU3QTdDNDMxMUU5ODI4NjUxMkNDNEY5QUUwMi9WX3VKT1ZPSlpB dG9hYVhpUUhTMExrSWVLOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJAWIU6kCkzuBdgDzRDO0jvukr19Soa7HP/uWKhQvIhzpCq9PgAf0i jY154wav1BoBv2v1gLNjwEcvIdh7tnlGlgVFeROGkVYa4jQmX4f4p8WYOq6Qvjo+ c60fDrtvWcqcQYXq7RxN3ila0IKaLgrzk9lGVxeiuG+SKypD6d4XGkSPu9k4hCyl qYcGmr/H1O+1HEmoZpdrnBmJ8IuYNdOqNiSlgc4Lu8794l3MUJZbcbu40aes4BPL V3DlAezNqVFbAJnU2GoSso2Jv4OX+SV11qq3C0dMjQWA8xieG22JxZjTJDwL7BAr NYclbFfPIjupTR1FIACHyoIVDR6a7yZZ -----END CERTIFICATE-----Generated at Tue Jul 1 01:01:46 2025 by rpki-client