$ rpki-client -vvf rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft File: uIPha7zTcVtWFzExa6Gw70BTwS4.mft (raw, json) Hash identifier: g+iccklSxqvd/ZxLIdZxUQLJs+T26sGk8Lh3FUTZAnA= Subject key identifier: F5:D5:9B:DF:1B:4E:B3:24:25:5A:77:B8:05:0A:60:E1:42:6A:DD:8F Authority key identifier: B8:83:E1:6B:BC:D3:71:5B:56:17:31:31:6B:A1:B0:EF:40:53:C1:2E Certificate issuer: /CN=A914B05F/serialNumber=B883E16BBCD3715B561731316BA1B0EF4053C12E Certificate serial: 185D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft Manifest number: 1852 Signing time: Wed 02 Jul 2025 16:37:57 +0000 Manifest this update: Wed 02 Jul 2025 16:37:57 +0000 Manifest next update: Wed 09 Jul 2025 16:37:57 +0000 Files and hashes: 1: uIPha7zTcVtWFzExa6Gw70BTwS4.crl (hash: xRP3FdK4zOrP6YJmfxk3j6PYm8RQ89IlmtDIt8XLVL0=) 2: 3482BB06AB3E11E7B15D1874C4F9AE02.roa (hash: f/iGCTTWKgyC6GDNoG48hLtnpOGko6TY6XeoD7uohtY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.crl rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6237 (0x185d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B05F, serialNumber=B883E16BBCD3715B561731316BA1B0EF4053C12E Validity Not Before: Jul 2 16:37:57 2025 GMT Not After : Jul 9 16:37:57 2025 GMT Subject: CN=68656065-b3a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a6:64:0d:53:5d:e1:cb:e4:97:09:1f:57:75: f1:ec:8a:15:b7:45:b9:61:f3:c5:bb:1e:a7:71:4a: 45:88:1b:eb:b8:42:97:cd:16:8f:b7:98:9c:f7:f3: 26:b8:a5:89:09:f3:33:f3:98:08:cd:c9:b0:bc:03: d1:d8:2c:59:8c:94:0b:d8:b1:4e:49:24:b7:b3:6e: 89:a1:8b:5a:67:0b:a9:dc:b7:47:59:3a:27:3a:f6: e8:98:b9:08:8a:7b:1b:6a:f4:91:34:e0:2a:1a:fe: e3:22:74:b3:8a:1a:1b:93:f6:8b:92:bc:a3:d9:80: 7f:b0:c3:47:e2:ff:45:c4:08:c4:58:8e:2b:99:67: ab:24:c1:0d:7b:26:b3:b0:71:f1:34:9c:dd:1b:f0: 97:e1:54:f8:7e:42:5d:f1:d8:ea:8c:75:b3:93:11: 61:21:08:75:73:fa:a7:a2:71:68:b4:24:f5:20:e4: fa:bc:01:71:e8:9f:b8:eb:7b:89:ad:b5:a7:c4:4a: cc:d5:85:98:bd:d5:01:2f:91:83:b8:cf:a1:cd:ae: 6b:a1:78:2a:a9:9a:df:c4:99:8c:bf:49:13:ed:ca: 18:fd:39:6c:7f:29:a0:a0:b4:7a:de:b7:ef:c3:dd: 64:2f:27:b7:8f:7d:e9:f6:ac:81:3c:02:75:0e:2c: 9f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D5:9B:DF:1B:4E:B3:24:25:5A:77:B8:05:0A:60:E1:42:6A:DD:8F X509v3 Authority Key Identifier: keyid:B8:83:E1:6B:BC:D3:71:5B:56:17:31:31:6B:A1:B0:EF:40:53:C1:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:3c:59:6f:23:db:4a:6a:c9:98:c6:f8:15:0c:ec:a5:78:c1: f9:10:b2:7f:99:3d:61:fc:57:75:a6:47:ec:1d:6a:2d:99:f8: dd:a1:c4:25:0b:32:45:95:fc:0e:42:dc:7d:31:5b:07:6f:d2: d3:e1:47:11:6a:a6:62:5b:cb:e9:04:1c:84:d9:f7:48:73:df: 4b:7e:d2:fa:dd:ae:5e:bb:97:1f:19:39:7b:17:5b:c3:6b:5e: b5:68:34:ae:c1:e1:08:6b:78:f4:e2:0a:6b:fa:17:f7:41:a5: d7:e3:98:bd:3f:3f:4c:67:03:6f:f4:26:7c:f4:d9:b6:d8:b3: 28:b1:c5:a3:f4:97:f2:69:f5:fe:06:08:49:b4:5f:2a:d1:84: 05:b1:51:d7:61:ca:15:62:9e:97:28:27:d3:d1:b2:da:96:31: a2:8d:53:1b:be:d7:73:4e:61:ac:e5:8f:5d:96:9e:dc:bf:a4: a9:87:ae:63:5e:67:d3:05:62:3b:c7:dd:b8:e6:57:aa:e1:4a: 0a:ee:7c:3d:21:4e:4a:f4:0e:f9:ad:d6:83:35:ff:9e:4c:a4: a3:c1:b6:ee:69:9d:95:69:af:b9:0b:35:98:06:ce:86:ae:cb: 5f:8f:ce:c7:06:8d:b0:11:d3:28:47:6c:4a:93:7f:a3:a8:6a: aa:89:49:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwNUYxMTAvBgNVBAUTKEI4ODNFMTZCQkNEMzcxNUI1NjE3MzEzMTZCQTFCMEVG NDA1M0MxMkUwHhcNMjUwNzAyMTYzNzU3WhcNMjUwNzA5MTYzNzU3WjAYMRYwFAYD VQQDEw02ODY1NjA2NS1iM2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaZkDVNd4cvklwkfV3Xx7IoVt0W5YfPFux6ncUpFiBvruEKXzRaPt5ic9/Mm uKWJCfMz85gIzcmwvAPR2CxZjJQL2LFOSSS3s26JoYtaZwup3LdHWTonOvbomLkI insbavSRNOAqGv7jInSzihobk/aLkryj2YB/sMNH4v9FxAjEWI4rmWerJMENeyaz sHHxNJzdG/CX4VT4fkJd8djqjHWzkxFhIQh1c/qnonFotCT1IOT6vAFx6J+463uJ rbWnxErM1YWYvdUBL5GDuM+hza5roXgqqZrfxJmMv0kT7coY/TlsfymgoLR63rfv w91kLye3j33p9qyBPAJ1Diyf2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXVm98b TrMkJVp3uAUKYOFCat2PMB8GA1UdIwQYMBaAFLiD4Wu803FbVhcxMWuhsO9AU8Eu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjA1Ri8zMzUxMjA0MEFC M0IxMUU3QkFBQjBENkJDNEY5QUUwMi91SVBoYTd6VGNWdFdGekV4YTZHdzcwQlR3 UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VJUGhhN3pUY1Z0V0Z6RXhhNkd3NzBCVHdTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjA1Ri8zMzUxMjA0MEFCM0IxMUU3QkFBQjBENkJDNEY5QUUwMi91SVBoYTd6VGNW dFdGekV4YTZHdzcwQlR3UzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgPFlvI9tKasmYxvgVDOyleMH5ELJ/mT1h/Fd1pkfsHWotmfjdocQl CzJFlfwOQtx9MVsHb9LT4UcRaqZiW8vpBByE2fdIc99LftL63a5eu5cfGTl7F1vD a161aDSuweEIa3j04gpr+hf3QaXX45i9Pz9MZwNv9CZ89Nm22LMoscWj9JfyafX+ BghJtF8q0YQFsVHXYcoVYp6XKCfT0bLaljGijVMbvtdzTmGs5Y9dlp7cv6Sph65j XmfTBWI7x9245leq4UoK7nw9IU5K9A75rdaDNf+eTKSjwbbuaZ2Vaa+5CzWYBs6G rstfj87HBo2wEdMoR2xKk3+jqGqqiUmv -----END CERTIFICATE-----Generated at Thu Jul 3 03:51:02 2025 by rpki-client