$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft File: u0yWZedfnhna1G-LYJ00RPto7Uc.mft (raw, json) Hash identifier: 7Nf8OnerwaeJyj2Qeht+D3RNNT7QTazse3+3m+1uUnA= Subject key identifier: AF:E8:0B:09:66:82:A5:E9:4C:BF:88:DD:84:2B:BF:B0:98:E0:31:2D Authority key identifier: BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 Certificate issuer: /CN=A9142DA4/serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Certificate serial: 037C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft Manifest number: 036C Signing time: Thu 03 Jul 2025 01:19:27 +0000 Manifest this update: Thu 03 Jul 2025 01:19:26 +0000 Manifest next update: Thu 10 Jul 2025 01:19:26 +0000 Files and hashes: 1: u0yWZedfnhna1G-LYJ00RPto7Uc.crl (hash: iLKDSxgMuLUvfQJss9unQIM8XfDvnlKm4lBCC0/sJZw=) 2: FC35CE340A4711F0809C3032C4F9AE02.roa (hash: TYw7pVipg0tBF5NEai8ggwulJFGrtpH064BJjOwSImo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 892 (0x37c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DA4, serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Validity Not Before: Jul 3 01:19:26 2025 GMT Not After : Jul 10 01:19:26 2025 GMT Subject: CN=6865da9e-2165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:62:9f:bd:9d:08:57:ed:ce:c1:a3:30:5d:0b: 38:4e:e6:3c:a0:ef:ea:bc:7a:7f:a7:6c:d1:ad:3a: 75:86:a2:15:d6:08:9c:a8:b5:bb:90:b5:e4:9d:4a: bb:91:1b:6c:31:90:61:f8:d3:e4:d0:c2:be:e2:db: 46:e3:21:47:b7:09:cb:d5:d6:46:d7:a0:95:1b:bb: 81:b7:8c:da:c4:3f:d5:3a:98:66:20:f1:18:b8:2a: be:d9:c1:69:64:d5:de:70:e1:3c:f3:3a:f3:04:d6: 9f:ae:06:f3:3f:03:88:84:08:eb:d9:b8:e3:15:1d: 7e:09:c6:45:c1:9a:8e:bf:4d:41:30:74:ee:2f:05: 70:6a:2e:31:fd:18:68:8a:e7:00:3b:8b:0e:4a:7d: 91:78:d6:64:06:49:05:91:44:48:5f:60:b3:90:c5: 05:70:73:3e:e3:7a:77:6f:df:4d:4f:7c:ff:9d:5e: ab:98:bc:53:eb:46:bc:4a:27:71:32:ac:9f:36:02: cd:c8:fb:b8:77:ff:dc:fd:34:1e:21:c3:c9:6b:6b: 06:28:a3:e9:9a:ed:d0:71:d0:4f:79:ec:88:0f:40: fe:2b:64:1b:a9:18:d8:50:2d:ac:91:65:00:8c:4d: 61:9a:e5:38:85:4e:f5:70:ce:6a:96:da:1c:57:b9: c6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E8:0B:09:66:82:A5:E9:4C:BF:88:DD:84:2B:BF:B0:98:E0:31:2D X509v3 Authority Key Identifier: keyid:BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:63:5c:ae:a6:80:81:20:2b:00:1e:d5:c9:b4:3e:5d:6b:e5: b2:f5:9a:54:9e:bc:8f:99:69:e0:9c:e6:27:6e:9a:12:21:dd: 84:fd:b2:43:4a:b2:52:ad:d3:a0:47:e2:64:90:69:de:67:df: fc:1f:94:28:2d:55:c1:d6:94:db:c7:b7:cf:a6:61:09:d5:ee: 97:a5:98:bb:b8:c3:71:4e:2a:ed:d6:60:ff:f5:9e:bd:d1:c4: df:35:4a:0c:1d:0c:05:46:88:d2:cc:6f:85:54:cf:50:c9:66: 14:74:ac:3a:3b:64:b3:89:ab:82:7e:30:bf:7d:bc:e7:0c:b9: 1d:bd:a0:5a:d4:97:f3:5d:36:61:52:0a:b7:14:50:12:18:c2: 99:ad:75:bb:81:fe:b3:d9:fd:2a:c6:ef:fd:0e:03:8a:a0:98: c7:33:b2:52:9a:9a:70:1d:52:a2:cb:b9:d2:fd:bb:97:e2:91: 28:4e:7b:92:99:f7:d6:59:69:ff:70:c9:9d:7b:7e:a1:75:91: 0d:3e:16:81:c4:77:e5:f0:f8:84:2d:8a:5e:d8:77:27:19:e5: ba:98:16:4d:ea:84:08:4a:45:02:fa:aa:76:d6:6a:c2:93:2b: d5:c3:f0:5d:e2:51:1b:02:75:eb:c0:ff:13:5b:f0:2a:ce:d3: b2:dc:ca:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQTQxMTAvBgNVBAUTKEJCNEM5NjY1RTc1RjlFMTlEQUQ0NkY4QjYwOUQzNDQ0 RkI2OEVENDcwHhcNMjUwNzAzMDExOTI2WhcNMjUwNzEwMDExOTI2WjAYMRYwFAYD VQQDEw02ODY1ZGE5ZS0yMTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWKfvZ0IV+3OwaMwXQs4TuY8oO/qvHp/p2zRrTp1hqIV1gicqLW7kLXknUq7 kRtsMZBh+NPk0MK+4ttG4yFHtwnL1dZG16CVG7uBt4zaxD/VOphmIPEYuCq+2cFp ZNXecOE88zrzBNafrgbzPwOIhAjr2bjjFR1+CcZFwZqOv01BMHTuLwVwai4x/Rho iucAO4sOSn2ReNZkBkkFkURIX2CzkMUFcHM+43p3b99NT3z/nV6rmLxT60a8Sidx MqyfNgLNyPu4d//c/TQeIcPJa2sGKKPpmu3QcdBPeeyID0D+K2QbqRjYUC2skWUA jE1hmuU4hU71cM5qltocV7nG1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/oCwlm gqXpTL+I3YQrv7CY4DEtMB8GA1UdIwQYMBaAFLtMlmXnX54Z2tRvi2CdNET7aO1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRBNC84QUQ0OUY3RUJB RTgxMUVDQTgyRjE0MUNDNEY5QUUwMi91MHlXWmVkZm5obmExRy1MWUowMFJQdG83 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UweVdaZWRmbmhuYTFHLUxZSjAwUlB0bzdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRBNC84QUQ0OUY3RUJBRTgxMUVDQTgyRjE0MUNDNEY5QUUwMi91MHlXWmVkZm5o bmExRy1MWUowMFJQdG83VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTY1yupoCBICsAHtXJtD5da+Wy9ZpUnryPmWngnOYnbpoSId2E/bJD SrJSrdOgR+JkkGneZ9/8H5QoLVXB1pTbx7fPpmEJ1e6XpZi7uMNxTirt1mD/9Z69 0cTfNUoMHQwFRojSzG+FVM9QyWYUdKw6O2SziauCfjC/fbznDLkdvaBa1JfzXTZh Ugq3FFASGMKZrXW7gf6z2f0qxu/9DgOKoJjHM7JSmppwHVKiy7nS/buX4pEoTnuS mffWWWn/cMmde36hdZENPhaBxHfl8PiELYpe2HcnGeW6mBZN6oQISkUC+qp21mrC kyvVw/Bd4lEbAnXrwP8TW/AqztOy3MpS -----END CERTIFICATE-----Generated at Thu Jul 3 07:08:42 2025 by rpki-client