$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft File: uRokzwRxERfIw7omSjM5Xad_kbQ.mft (raw, json) Hash identifier: ZMximUeS1AydrJuw1VhPlEtgFsYgN/9TzH70OfYhw80= Subject key identifier: 3D:7C:C5:61:48:DA:59:F4:0C:06:A5:3E:35:B5:A1:5D:16:BD:0C:DF Authority key identifier: B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4 Certificate issuer: /CN=A9133BB0/serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft Manifest number: A8 Signing time: Thu 03 Jul 2025 06:16:40 +0000 Manifest this update: Thu 03 Jul 2025 06:16:40 +0000 Manifest next update: Thu 10 Jul 2025 06:16:40 +0000 Files and hashes: 1: uRokzwRxERfIw7omSjM5Xad_kbQ.crl (hash: MPjJkfnHOLTqVp9Huixz6WrEO3GBm+aPAI+A+r3yG4c=) 2: 27995372566911EF9D53B517C4F9AE02.roa (hash: xq/tIHChRUQ/SVgEnorDvzsCIu9u4UcNJR+//ggbghs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4 Validity Not Before: Jul 3 06:16:40 2025 GMT Not After : Jul 10 06:16:40 2025 GMT Subject: CN=68662048-bf5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b7:86:7d:09:06:09:8e:3e:49:45:9f:86:64: 9f:79:e0:12:a3:94:05:48:97:54:fe:dc:29:43:14: 1f:06:de:2f:a4:b6:e9:2e:ae:54:ce:45:80:c0:e8: e8:e2:92:14:89:cf:28:a0:3d:ca:aa:46:ed:2f:2d: 3d:3b:81:13:47:72:e9:be:57:29:c0:98:c4:d7:ee: 81:84:0d:09:92:c1:b4:19:17:b5:8e:b8:48:df:22: 76:d0:49:ea:88:03:f5:07:71:f0:f9:9a:4c:ca:0a: 0f:5f:b0:26:c4:60:bf:86:48:85:b1:51:19:51:e5: 99:f5:c0:20:3c:31:fb:ca:94:3b:0e:68:ff:a0:7d: d4:f9:c0:ed:58:5d:63:2f:0c:be:8e:5a:5c:38:fb: 92:03:8f:ce:10:ad:92:0b:99:16:83:07:e9:b1:8a: 98:fe:10:0f:c8:c8:75:94:e0:b1:17:1b:f1:bc:ad: 78:37:ac:fb:4d:f5:df:93:82:cc:c9:32:25:e7:96: fb:88:58:6b:67:d4:11:76:c0:87:ba:dd:b8:61:c0: c5:d1:f0:e4:9c:b5:2b:04:94:26:7e:ca:c1:e6:44: 8d:98:56:6b:70:99:96:eb:df:d1:01:b2:b1:f6:4d: 1b:a1:cb:b8:87:06:fd:90:7e:d9:71:c7:98:46:22: 51:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7C:C5:61:48:DA:59:F4:0C:06:A5:3E:35:B5:A1:5D:16:BD:0C:DF X509v3 Authority Key Identifier: keyid:B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:54:f8:7a:92:60:3a:a3:6c:1f:de:b4:c3:3e:f4:8c:d1:98: ed:79:f6:8c:49:67:83:72:a8:8f:24:94:bf:27:6f:09:ae:03: 73:ed:71:83:57:2a:12:5f:3f:4f:09:0d:8c:fd:e1:37:ea:8d: 9c:d1:45:eb:cc:cb:14:4a:90:50:be:d7:17:29:8b:af:b0:73: ef:ff:40:65:6d:2d:b5:92:f2:d2:ce:fb:a0:cc:65:32:05:e4: c6:c5:b2:b6:9d:28:cb:a2:aa:27:91:4f:d3:83:7c:8c:37:bc: c5:5f:af:7b:55:66:6e:c9:4f:cc:77:ff:5f:b5:de:72:f0:8d: 74:cf:57:a7:f1:e4:33:fc:2b:f6:81:9d:34:49:b6:aa:7d:e5: 53:a9:79:40:79:f9:63:ee:f2:dc:14:be:13:7e:c4:1e:97:b5: a5:56:a8:63:a3:99:36:b2:2c:14:3a:cc:c3:af:cf:6b:d3:1b: 37:3c:09:6d:3f:48:7c:d8:b8:04:7d:54:6f:8a:23:3e:45:33: 8b:54:61:c2:a1:33:53:76:3a:48:dd:05:e7:a8:ee:0e:f8:cb: e1:54:f9:b7:81:01:db:a3:37:93:1f:84:f5:a8:c4:dd:3b:cc: 81:03:ec:20:1a:cd:ae:f2:4a:32:2e:02:ff:a2:54:03:7b:02: 6b:81:ec:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKEI5MUEyNENGMDQ3MTExMTdDOEMzQkEyNjRBMzMzOTVE QTc3RjkxQjQwHhcNMjUwNzAzMDYxNjQwWhcNMjUwNzEwMDYxNjQwWjAYMRYwFAYD VQQDEw02ODY2MjA0OC1iZjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8LeGfQkGCY4+SUWfhmSfeeASo5QFSJdU/twpQxQfBt4vpLbpLq5UzkWAwOjo 4pIUic8ooD3KqkbtLy09O4ETR3LpvlcpwJjE1+6BhA0JksG0GRe1jrhI3yJ20Enq iAP1B3Hw+ZpMygoPX7AmxGC/hkiFsVEZUeWZ9cAgPDH7ypQ7Dmj/oH3U+cDtWF1j Lwy+jlpcOPuSA4/OEK2SC5kWgwfpsYqY/hAPyMh1lOCxFxvxvK14N6z7TfXfk4LM yTIl55b7iFhrZ9QRdsCHut24YcDF0fDknLUrBJQmfsrB5kSNmFZrcJmW69/RAbKx 9k0bocu4hwb9kH7ZcceYRiJRxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD18xWFI 2ln0DAalPjW1oV0WvQzfMB8GA1UdIwQYMBaAFLkaJM8EcREXyMO6JkozOV2nf5G0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9CODY1QjM3RTU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi91Um9rendSeEVSZkl3N29tU2pNNVhhZF9r YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VSb2t6d1J4RVJmSXc3b21Tak01WGFkX2tiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0JCMC9CODY1QjM3RTU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi91Um9rendSeEVS Zkl3N29tU2pNNVhhZF9rYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYVPh6kmA6o2wf3rTDPvSM0ZjtefaMSWeDcqiPJJS/J28JrgNz7XGD VyoSXz9PCQ2M/eE36o2c0UXrzMsUSpBQvtcXKYuvsHPv/0BlbS21kvLSzvugzGUy BeTGxbK2nSjLoqonkU/Tg3yMN7zFX697VWZuyU/Md/9ftd5y8I10z1en8eQz/Cv2 gZ00SbaqfeVTqXlAeflj7vLcFL4TfsQel7WlVqhjo5k2siwUOszDr89r0xs3PAlt P0h82LgEfVRviiM+RTOLVGHCoTNTdjpI3QXnqO4O+MvhVPm3gQHbozeTH4T1qMTd O8yBA+wgGs2u8koyLgL/olQDewJrgeyo -----END CERTIFICATE-----Generated at Thu Jul 3 21:36:35 2025 by rpki-client