$ rpki-client -vvf rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft File: Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft (raw, json) Hash identifier: 30J0Tg9yJl2+c2vqXiwrnJ2YEhO+Vx06SFZBqdZhIBI= Subject key identifier: 98:F2:5B:5A:95:52:CC:9D:62:A4:D3:72:4A:7F:F0:CA:5F:69:66:40 Authority key identifier: 52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E Certificate issuer: /CN=A913CDC4/serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft Manifest number: 01E5 Signing time: Sat 05 Jul 2025 03:01:53 +0000 Manifest this update: Sat 05 Jul 2025 03:01:52 +0000 Manifest next update: Sat 12 Jul 2025 03:01:52 +0000 Files and hashes: 1: Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl (hash: mEDaInVX+cHaoNBeMuddaPDwNBzHg7AnkclTuDvq4VA=) 2: 2F38972E672B11EEBA84E00CC4F9AE02.roa (hash: F2m4EZaWhb+L+raUozQ7KqaAu1awnSWg4wSyn9tXN5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CDC4, serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E Validity Not Before: Jul 5 03:01:52 2025 GMT Not After : Jul 12 03:01:52 2025 GMT Subject: CN=686895a0-aba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:66:75:20:78:a0:cc:12:7d:25:d4:d2:eb:ef: cc:9b:87:71:f6:38:01:77:e5:24:3b:92:17:2d:51: a7:55:0a:cb:2c:4f:4a:9d:7b:ff:9e:67:a0:14:b0: d3:40:48:ea:b0:34:0d:24:8b:75:08:17:97:10:ec: 20:8f:8c:42:d5:e1:9c:92:14:8f:45:cc:0d:fc:9e: e4:24:e0:fd:ea:7b:a6:4b:92:a2:96:3b:da:c8:11: 7c:3f:5d:de:f9:65:89:ce:a3:41:91:45:3e:9b:bf: f0:d7:c7:13:f8:59:05:47:9c:8d:d1:da:70:3b:24: 3f:ab:96:4d:33:93:58:e5:1b:b0:24:eb:98:1b:95: 5a:21:d9:23:50:39:1f:f5:88:7d:17:6a:d2:fd:a7: cc:ed:9e:da:68:48:00:ed:dd:69:25:55:bf:b3:74: 2b:4b:cb:7a:bd:c3:7c:be:e1:38:c8:b4:38:98:be: b5:3c:f0:43:60:dc:56:df:11:dc:1e:18:b5:5e:bc: e9:5c:9d:5c:af:39:ec:4a:ff:a1:02:3d:9d:48:75: 3c:cd:5e:40:a6:b6:e1:3b:84:33:b3:71:75:2d:6e: 8e:05:4a:04:88:02:f3:fc:23:4e:1e:38:51:58:73: 10:56:43:5d:d0:c4:b6:0b:43:7d:80:d9:cc:c2:81: 27:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F2:5B:5A:95:52:CC:9D:62:A4:D3:72:4A:7F:F0:CA:5F:69:66:40 X509v3 Authority Key Identifier: keyid:52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:e8:66:38:f1:d9:8a:87:19:fe:c3:c0:e4:92:e0:06:09:ae: 1a:62:eb:88:30:10:b7:6e:01:9a:7b:2e:0b:98:a6:ca:19:ee: 1d:09:13:82:a8:ed:b9:8e:5f:eb:8a:52:0c:eb:b6:5c:3b:53: 62:a8:3b:9f:56:e9:ec:13:92:8a:d2:88:64:fa:ea:af:f4:bb: cb:eb:d7:7c:15:30:ac:dd:4b:77:f2:73:95:73:a3:6a:44:8b: 8b:6a:a1:f5:56:01:2d:df:30:e3:83:5c:0a:c0:dc:a3:e6:9c: d3:c0:d4:56:20:b6:e0:e3:25:b6:79:ea:18:b7:4a:bf:d1:18: be:3c:ef:62:26:3d:e6:2b:fe:c5:ad:5e:88:c9:2e:e4:9d:40: ed:fe:3b:dd:5a:8d:24:97:af:04:98:80:7f:c8:f9:bd:0c:94: 3b:23:9c:de:b4:1e:3f:ea:6f:d7:85:a1:05:99:d0:f8:c7:87: 38:53:c2:99:99:7f:3b:ca:73:8a:ad:50:e0:d0:cd:7b:c5:84: aa:e3:32:a8:27:20:df:1f:7a:e8:8a:93:8f:f2:43:cc:e2:58: 61:26:84:e3:72:ff:f5:58:95:1a:f3:89:21:fa:b9:91:df:68: 9c:1b:ca:88:10:9f:28:6f:53:41:2f:90:87:9c:7c:0c:34:b7: 85:4c:c0:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NEQzQxMTAvBgNVBAUTKDUyOEY2RUNFMDgyQkVCM0REMEE2NkQ5MTQ3M0ZDQzY1 NjlDRDVGNEUwHhcNMjUwNzA1MDMwMTUyWhcNMjUwNzEyMDMwMTUyWjAYMRYwFAYD VQQDEw02ODY4OTVhMC1hYmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWZ1IHigzBJ9JdTS6+/Mm4dx9jgBd+UkO5IXLVGnVQrLLE9KnXv/nmegFLDT QEjqsDQNJIt1CBeXEOwgj4xC1eGckhSPRcwN/J7kJOD96numS5KiljvayBF8P13e +WWJzqNBkUU+m7/w18cT+FkFR5yN0dpwOyQ/q5ZNM5NY5RuwJOuYG5VaIdkjUDkf 9Yh9F2rS/afM7Z7aaEgA7d1pJVW/s3QrS8t6vcN8vuE4yLQ4mL61PPBDYNxW3xHc Hhi1XrzpXJ1crznsSv+hAj2dSHU8zV5AprbhO4Qzs3F1LW6OBUoEiALz/CNOHjhR WHMQVkNd0MS2C0N9gNnMwoEnkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjyW1qV UsydYqTTckp/8MpfaWZAMB8GA1UdIwQYMBaAFFKPbs4IK+s90KZtkUc/zGVpzV9O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0RDNC9GODQ4NUY2Njgw Q0ExMUVEODVEQTkxM0RDNEY5QUUwMi9Vbzl1emdncjZ6M1FwbTJSUnpfTVpXbk5Y MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvOXV6Z2dyNnozUXBtMlJSel9NWlduTlgwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0RDNC9GODQ4NUY2NjgwQ0ExMUVEODVEQTkxM0RDNEY5QUUwMi9Vbzl1emdncjZ6 M1FwbTJSUnpfTVpXbk5YMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw6GY48dmKhxn+w8DkkuAGCa4aYuuIMBC3bgGaey4LmKbKGe4dCROC qO25jl/rilIM67ZcO1NiqDufVunsE5KK0ohk+uqv9LvL69d8FTCs3Ut38nOVc6Nq RIuLaqH1VgEt3zDjg1wKwNyj5pzTwNRWILbg4yW2eeoYt0q/0Ri+PO9iJj3mK/7F rV6IyS7knUDt/jvdWo0kl68EmIB/yPm9DJQ7I5zetB4/6m/XhaEFmdD4x4c4U8KZ mX87ynOKrVDg0M17xYSq4zKoJyDfH3roipOP8kPM4lhhJoTjcv/1WJUa84kh+rmR 32icG8qIEJ8ob1NBL5CHnHwMNLeFTMCx -----END CERTIFICATE-----Generated at Sat Jul 5 08:08:36 2025 by rpki-client