$ rpki-client -vvf rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft File: UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft (raw, json) Hash identifier: n7yKC3c7gnvZrxfBB5Xe2pXLNf3WQTnRki3ZYvu2mkM= Subject key identifier: 9A:E1:32:B1:4C:3A:FC:D7:5E:36:4F:46:AE:E0:12:2A:4B:CE:DF:E5 Authority key identifier: 51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23 Certificate issuer: /CN=A91383BF/serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft Manifest number: D4 Signing time: Thu 03 Jul 2025 05:49:10 +0000 Manifest this update: Thu 03 Jul 2025 05:49:10 +0000 Manifest next update: Thu 10 Jul 2025 05:49:10 +0000 Files and hashes: 1: UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl (hash: RJZefp7thptJEj6WGxkHecTrnTv/o1Lug3WsR8mYyuk=) 2: C23053B019A911EF97366417C4F9AE02.roa (hash: YYki0NriwMd0PqjU0EOE6kz16/qKzKdVDNbbepKT0IA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383BF, serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623 Validity Not Before: Jul 3 05:49:10 2025 GMT Not After : Jul 10 05:49:10 2025 GMT Subject: CN=686619d6-03e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:43:c8:a0:fb:c1:2f:d2:82:4c:dc:2b:b3:7f: e9:65:57:53:7c:03:df:18:18:13:b6:93:24:7e:43: 9a:c2:04:b2:97:72:d6:bd:d6:91:73:18:f3:90:f9: f3:ad:14:63:e3:63:25:30:87:2d:7a:cd:55:3f:88: b7:cf:76:d4:be:ec:64:8f:ef:d8:ff:61:46:92:fa: 5f:6b:3c:72:c5:d6:95:ec:e8:5e:74:5d:0d:17:62: d3:bb:ca:46:b6:3a:ff:4c:e9:db:00:e4:ab:2a:cd: a5:6b:fa:6b:96:11:57:fd:2f:fe:aa:be:ca:c1:9c: ce:35:96:8d:10:66:9b:4d:33:31:dd:aa:86:54:7d: 01:8e:c2:78:d7:4d:27:f8:f2:56:9a:4c:14:e4:eb: 74:1d:1f:3a:4f:b9:70:fe:9c:69:ca:65:c0:d9:38: 4f:91:fd:bb:54:3d:80:6c:1c:8c:7a:08:10:f6:bb: f1:06:c8:34:af:c4:18:cd:99:d7:a6:28:af:db:84: a8:1b:b5:af:6f:0b:68:93:d1:08:53:64:de:ee:d2: 2d:0f:84:8f:e3:ed:3b:ca:af:47:af:5e:5b:1e:c8: 6f:ee:cd:44:9c:00:91:18:d5:40:f0:91:5d:a3:68: 00:cf:98:2c:6f:de:55:ee:f0:f6:19:51:d0:5f:37: d3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E1:32:B1:4C:3A:FC:D7:5E:36:4F:46:AE:E0:12:2A:4B:CE:DF:E5 X509v3 Authority Key Identifier: keyid:51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:72:d8:9c:c7:bd:84:55:37:b0:b2:44:a5:ea:65:72:8a:60: b1:2d:99:bd:ab:ff:1c:4c:1f:d1:45:ea:90:9e:79:8f:fd:7b: 34:88:64:64:a5:18:52:a3:48:4e:9e:ef:ee:0b:22:f5:43:ba: 04:fc:67:87:10:3e:e9:3a:4c:7a:29:08:df:d1:ff:fa:78:d7: 0c:08:ca:33:bd:7f:b0:9f:ac:68:cb:ee:1f:2b:a9:11:93:cf: 53:02:66:25:7c:12:0e:9e:f9:09:00:64:d5:76:07:9d:54:6b: 8c:be:1e:ee:53:59:e9:1c:b1:45:00:24:66:77:5f:82:27:87: 3b:0c:53:17:5e:82:9e:ba:b7:d4:59:16:db:59:e2:27:6c:4a: d6:2d:86:37:b3:71:db:64:5e:8f:14:92:f5:f4:81:40:e8:32: e4:1a:af:07:91:e1:34:62:6e:37:89:81:46:5d:ac:de:63:41: 0a:b3:cf:c8:ae:6b:a9:f6:0e:88:66:03:38:a2:8b:cf:1a:69: b3:e5:b3:03:d4:ca:38:98:a2:a5:20:3d:51:01:ba:a5:69:84: da:8e:25:26:af:4c:8c:f0:4a:f5:7b:7b:28:3e:8f:79:9e:0f: 9a:ca:99:83:aa:4e:04:7d:1f:32:8a:81:02:9a:81:ea:c3:97: fd:ae:f7:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQkYxMTAvBgNVBAUTKDUxQTQ4MjU4RDRDRDZFMDFEMjQ1OEM1QjkyMTZFRkE0 NTIxMEI2MjMwHhcNMjUwNzAzMDU0OTEwWhcNMjUwNzEwMDU0OTEwWjAYMRYwFAYD VQQDEw02ODY2MTlkNi0wM2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkPIoPvBL9KCTNwrs3/pZVdTfAPfGBgTtpMkfkOawgSyl3LWvdaRcxjzkPnz rRRj42MlMIctes1VP4i3z3bUvuxkj+/Y/2FGkvpfazxyxdaV7OhedF0NF2LTu8pG tjr/TOnbAOSrKs2la/prlhFX/S/+qr7KwZzONZaNEGabTTMx3aqGVH0BjsJ4100n +PJWmkwU5Ot0HR86T7lw/pxpymXA2ThPkf27VD2AbByMeggQ9rvxBsg0r8QYzZnX piiv24SoG7Wvbwtok9EIU2Te7tItD4SP4+07yq9Hr15bHshv7s1EnACRGNVA8JFd o2gAz5gsb95V7vD2GVHQXzfTJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrhMrFM OvzXXjZPRq7gEipLzt/lMB8GA1UdIwQYMBaAFFGkgljUzW4B0kWMW5IW76RSELYj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCRi9GNjdDNjFFQTE5 ODExMUVGQTVBQzQ3NTNDNEY5QUUwMi9VYVNDV05UTmJnSFNSWXhia2hidnBGSVF0 aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VhU0NXTlROYmdIU1JZeGJraGJ2cEZJUXRpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCRi9GNjdDNjFFQTE5ODExMUVGQTVBQzQ3NTNDNEY5QUUwMi9VYVNDV05UTmJn SFNSWXhia2hidnBGSVF0aU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwcticx72EVTewskSl6mVyimCxLZm9q/8cTB/RReqQnnmP/Xs0iGRk pRhSo0hOnu/uCyL1Q7oE/GeHED7pOkx6KQjf0f/6eNcMCMozvX+wn6xoy+4fK6kR k89TAmYlfBIOnvkJAGTVdgedVGuMvh7uU1npHLFFACRmd1+CJ4c7DFMXXoKeurfU WRbbWeInbErWLYY3s3HbZF6PFJL19IFA6DLkGq8HkeE0Ym43iYFGXazeY0EKs8/I rmup9g6IZgM4oovPGmmz5bMD1Mo4mKKlID1RAbqlaYTajiUmr0yM8Er1e3soPo95 ng+aypmDqk4EfR8yioECmoHqw5f9rvfk -----END CERTIFICATE-----Generated at Fri Jul 4 14:28:04 2025 by rpki-client