$ rpki-client -vvf rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft File: bUGUPlFfU_mSYZyH8COTgRJT3mc.mft (raw, json) Hash identifier: i8oesGyufP5mwqT4GB6fbNllZETo5hff4P9E8WYloZQ= Subject key identifier: 21:60:0F:68:D8:DC:3E:15:97:D7:AB:DC:A2:D6:BC:60:13:52:FB:07 Authority key identifier: 6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67 Certificate issuer: /CN=A915216F/serialNumber=6D41943E515F53F992619C87F02393811253DE67 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft Manifest number: 0122 Signing time: Tue 01 Jul 2025 05:15:36 +0000 Manifest this update: Tue 01 Jul 2025 05:15:36 +0000 Manifest next update: Tue 08 Jul 2025 05:15:36 +0000 Files and hashes: 1: bUGUPlFfU_mSYZyH8COTgRJT3mc.crl (hash: jNZWCT5/JBqj5L5fqa5y0VeN4Ypi/Rh0+zpiTZnF6Vs=) 2: 038457CEA3A011EEBE44947FC4F9AE02.roa (hash: PgCUtYUopFfJUcc6oCyLffXra/44Q+4sS+exi8w3QBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:15:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915216F, serialNumber=6D41943E515F53F992619C87F02393811253DE67 Validity Not Before: Jul 1 05:15:36 2025 GMT Not After : Jul 8 05:15:36 2025 GMT Subject: CN=68636ef8-d0a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3f:cf:55:20:5c:d3:fc:cd:7f:a1:8d:14:0e: 6a:d8:4d:45:57:20:71:1a:e2:23:6e:9d:82:a5:40: 37:51:43:87:1d:0c:20:2c:3b:96:25:64:2d:48:70: bf:0d:62:a6:9e:27:f9:bc:64:98:c4:e0:72:c6:eb: fe:fa:36:13:fc:cf:94:eb:f7:05:55:2d:b5:10:88: 68:87:9b:fa:34:83:46:4b:88:81:eb:a2:c1:91:c4: c1:ee:a6:b0:a8:fb:5e:d0:8c:b1:c3:10:c4:b1:d8: f0:e5:4c:5b:c8:1f:51:ce:0a:7a:fa:8b:47:4f:53: 55:bb:81:e7:17:52:ee:dd:c1:ae:8b:74:df:9d:69: e9:22:da:1e:12:d6:77:ee:ec:50:92:3a:46:77:4c: 39:27:7f:db:b2:e8:51:af:06:18:93:09:7c:c7:b1: a3:7f:aa:13:49:f8:72:83:84:6b:93:71:05:c6:3a: 31:36:3b:ed:d3:06:c2:31:07:48:02:43:e7:00:35: 8f:8e:a9:ca:1e:33:44:56:14:38:c7:0a:ab:c7:1b: b7:17:94:f7:02:1e:09:df:15:f0:4b:e3:5b:71:72: 33:5d:d8:a9:ba:8f:6a:1e:af:2d:63:15:cb:9e:48: dd:e7:35:94:48:8d:dd:a7:fe:4e:5f:80:7d:58:52: 9b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:60:0F:68:D8:DC:3E:15:97:D7:AB:DC:A2:D6:BC:60:13:52:FB:07 X509v3 Authority Key Identifier: keyid:6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:93:6e:fb:23:1a:67:28:45:6d:29:e0:34:be:8b:2a:d5:89: 3e:53:c7:c6:af:07:09:61:22:4c:ee:4b:42:e4:31:1c:37:c8: 30:04:ca:3b:d9:e1:bb:6b:89:97:cb:a8:31:fb:5a:eb:73:75: d6:02:e8:cd:93:1b:d9:77:83:bd:7e:75:57:16:ea:49:b4:5d: 38:a3:3e:f1:bf:8f:d3:18:08:2f:a3:b5:4e:d5:2b:55:64:38: 24:60:6a:68:78:0b:be:75:30:7b:99:80:7c:9c:bb:89:6e:e4: 57:ce:c3:69:a7:af:c8:5c:2a:31:35:82:ee:42:11:75:49:ba: 79:0d:49:51:e5:47:cf:4d:fa:0e:65:01:5c:f1:9a:ce:d3:af: 07:a6:f1:85:8f:69:fc:df:ce:15:d5:7d:9a:24:fb:af:68:80: 2f:11:93:f1:8a:fc:fe:99:bb:b4:f1:b7:b2:a3:9b:8c:62:c4: e6:6e:63:f4:93:28:90:74:6c:99:b6:9a:d3:96:aa:b3:79:73: 4e:74:59:23:8e:f0:56:34:89:83:bb:9b:e8:b1:58:f8:88:9a: bb:72:a3:1d:07:07:6a:2f:89:bb:d2:d5:0e:c7:50:80:4a:67: f6:ef:c2:22:02:de:f3:84:f4:d1:35:6a:52:b8:2d:b7:14:f5: 7d:cd:fe:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIxNkYxMTAvBgNVBAUTKDZENDE5NDNFNTE1RjUzRjk5MjYxOUM4N0YwMjM5Mzgx MTI1M0RFNjcwHhcNMjUwNzAxMDUxNTM2WhcNMjUwNzA4MDUxNTM2WjAYMRYwFAYD VQQDEw02ODYzNmVmOC1kMGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3T/PVSBc0/zNf6GNFA5q2E1FVyBxGuIjbp2CpUA3UUOHHQwgLDuWJWQtSHC/ DWKmnif5vGSYxOByxuv++jYT/M+U6/cFVS21EIhoh5v6NINGS4iB66LBkcTB7qaw qPte0IyxwxDEsdjw5UxbyB9Rzgp6+otHT1NVu4HnF1Lu3cGui3TfnWnpItoeEtZ3 7uxQkjpGd0w5J3/bsuhRrwYYkwl8x7Gjf6oTSfhyg4Rrk3EFxjoxNjvt0wbCMQdI AkPnADWPjqnKHjNEVhQ4xwqrxxu3F5T3Ah4J3xXwS+NbcXIzXdipuo9qHq8tYxXL nkjd5zWUSI3dp/5OX4B9WFKbAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFgD2jY 3D4Vl9er3KLWvGATUvsHMB8GA1UdIwQYMBaAFG1BlD5RX1P5kmGch/Ajk4ESU95n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjE2Ri8xMUIyQzgwQUEz OUUxMUVFOURDNzFDNjBDNEY5QUUwMi9iVUdVUGxGZlVfbVNZWnlIOENPVGdSSlQz bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JVR1VQbEZmVV9tU1laeUg4Q09UZ1JKVDNtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjE2Ri8xMUIyQzgwQUEzOUUxMUVFOURDNzFDNjBDNEY5QUUwMi9iVUdVUGxGZlVf bVNZWnlIOENPVGdSSlQzbWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXk277IxpnKEVtKeA0vosq1Yk+U8fGrwcJYSJM7ktC5DEcN8gwBMo7 2eG7a4mXy6gx+1rrc3XWAujNkxvZd4O9fnVXFupJtF04oz7xv4/TGAgvo7VO1StV ZDgkYGpoeAu+dTB7mYB8nLuJbuRXzsNpp6/IXCoxNYLuQhF1Sbp5DUlR5UfPTfoO ZQFc8ZrO068HpvGFj2n8384V1X2aJPuvaIAvEZPxivz+mbu08beyo5uMYsTmbmP0 kyiQdGyZtprTlqqzeXNOdFkjjvBWNImDu5vosVj4iJq7cqMdBwdqL4m70tUOx1CA Smf278IiAt7zhPTRNWpSuC23FPV9zf5+ -----END CERTIFICATE-----Generated at Wed Jul 2 05:22:01 2025 by rpki-client