$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft File: u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft (raw, json) Hash identifier: sbsjGhbYyTOEHnENNyXFY8oVxwNhlarYp1c0+XWgbYg= Subject key identifier: 70:A1:B1:F6:D0:24:81:ED:F2:2B:9D:A5:F1:81:5F:2B:0D:39:E0:81 Authority key identifier: BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB Certificate issuer: /CN=A9152D28/serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft Manifest number: 0179 Signing time: Thu 03 Jul 2025 03:53:52 +0000 Manifest this update: Thu 03 Jul 2025 03:53:51 +0000 Manifest next update: Thu 10 Jul 2025 03:53:51 +0000 Files and hashes: 1: u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl (hash: ZITa97DFMT7c5lGfRz4O70EkCMlpir9cuFzVMwEDl9Q=) 2: E94B9DBC34EC11EE94A16565C4F9AE02.roa (hash: kUXrIsCImr57H9iIsS2NOqb5zBoEdoozllgsXyGeV7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D28, serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB Validity Not Before: Jul 3 03:53:51 2025 GMT Not After : Jul 10 03:53:51 2025 GMT Subject: CN=6865fed0-c703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:47:13:45:ab:ec:fe:11:3d:58:5f:14:eb:49: c7:89:e6:7b:60:7c:e7:94:ef:cb:75:c8:0c:8e:0c: 0b:3c:c9:1c:fb:2e:62:09:0b:48:13:6e:2e:bc:68: c2:8e:dd:03:45:ac:05:70:47:b5:c7:99:04:1d:0f: 75:53:f6:96:a4:9d:bd:a5:81:98:54:a5:04:fa:93: 01:3c:92:f4:b2:d8:10:07:fa:76:64:c7:d7:aa:b4: 1f:e0:11:07:62:71:3e:98:b6:81:ae:e0:fa:8b:b6: d9:e9:c9:26:e0:d0:ab:08:60:30:c7:d8:9f:38:95: 5d:c4:7e:21:c8:6c:e5:37:36:2d:ac:89:7d:fc:95: f5:29:b5:08:a4:a5:c2:f9:98:6c:27:50:bf:e0:e0: d4:72:06:1a:4e:61:5f:82:34:60:c7:9d:1a:2f:f7: c6:58:3e:d6:23:7b:44:81:a0:97:9d:9d:73:ca:b0: 69:6b:3f:ac:a0:55:d6:58:45:56:83:66:d2:93:44: 62:b5:c5:e1:49:dd:f4:2c:85:ad:09:f5:8c:59:3b: 19:53:ae:d0:be:9e:27:28:ee:2f:ea:2c:5d:71:c9: c3:8b:a2:61:69:ca:03:71:31:ba:31:1a:90:86:63: de:09:97:ee:22:99:fa:12:cb:e6:96:20:ff:f7:b4: ea:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A1:B1:F6:D0:24:81:ED:F2:2B:9D:A5:F1:81:5F:2B:0D:39:E0:81 X509v3 Authority Key Identifier: keyid:BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:5e:03:25:d8:f5:19:73:cf:3c:74:b7:0e:11:60:fc:a7:93: 33:3f:f7:1a:8a:32:a2:f4:0d:f1:eb:52:b0:59:34:15:62:43: 19:3d:4a:cb:a0:a9:af:d5:64:2c:15:77:a5:c7:e4:74:47:34: f0:80:f3:be:11:06:38:5b:73:8a:8f:ce:b5:4e:63:ad:79:0d: 72:1e:e0:56:7f:02:ae:12:7f:b7:0f:e5:f8:c5:d1:29:0a:57: 5b:a9:a4:e4:f8:f0:23:ad:9a:ee:6c:75:76:8a:d7:6a:62:c2: 2d:2d:63:23:e2:93:f7:cb:65:ab:0f:3d:66:04:47:0c:5f:b7: d5:95:90:72:ea:05:40:3e:27:73:11:b5:90:ca:2d:b0:e1:b6: 35:2e:1b:d9:e5:78:7c:56:45:c4:9b:8e:6d:84:c3:c3:25:b1: 6a:53:96:30:d1:9c:f1:79:78:a6:03:49:fe:3c:d1:d6:cd:fc: 95:a4:60:bb:12:b1:c3:12:3b:a2:a4:b7:d4:08:d2:6b:93:d6: 63:16:8d:1b:47:19:f4:b4:b2:48:0e:db:eb:cb:b4:12:33:1c: 5e:8d:10:df:06:ae:6b:cf:9d:2e:f5:31:2e:b0:80:ef:ee:ce: 91:e9:e0:bb:72:89:db:ac:66:0f:7b:ae:44:c1:d4:99:64:eb: ae:46:bc:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMjgxMTAvBgNVBAUTKEJCNTc1NTVGODJBQTIwQTUxQzFCNDhGN0IyNkMzNTY3 RjVBMUU3QkIwHhcNMjUwNzAzMDM1MzUxWhcNMjUwNzEwMDM1MzUxWjAYMRYwFAYD VQQDEw02ODY1ZmVkMC1jNzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnkcTRavs/hE9WF8U60nHieZ7YHznlO/LdcgMjgwLPMkc+y5iCQtIE24uvGjC jt0DRawFcEe1x5kEHQ91U/aWpJ29pYGYVKUE+pMBPJL0stgQB/p2ZMfXqrQf4BEH YnE+mLaBruD6i7bZ6ckm4NCrCGAwx9ifOJVdxH4hyGzlNzYtrIl9/JX1KbUIpKXC +ZhsJ1C/4ODUcgYaTmFfgjRgx50aL/fGWD7WI3tEgaCXnZ1zyrBpaz+soFXWWEVW g2bSk0RitcXhSd30LIWtCfWMWTsZU67Qvp4nKO4v6ixdccnDi6JhacoDcTG6MRqQ hmPeCZfuIpn6EsvmliD/97TqFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHChsfbQ JIHt8iudpfGBXysNOeCBMB8GA1UdIwQYMBaAFLtXVV+CqiClHBtI97JsNWf1oee7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQyOC9BRjkzRDE2MjIy MjYxMUVFODlBRTc2ODNDNEY5QUUwMi91MWRWWDRLcUlLVWNHMGozc213MVpfV2g1 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxZFZYNEtxSUtVY0cwajNzbXcxWl9XaDU3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQyOC9BRjkzRDE2MjIyMjYxMUVFODlBRTc2ODNDNEY5QUUwMi91MWRWWDRLcUlL VWNHMGozc213MVpfV2g1N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWXgMl2PUZc888dLcOEWD8p5MzP/caijKi9A3x61KwWTQVYkMZPUrL oKmv1WQsFXelx+R0RzTwgPO+EQY4W3OKj861TmOteQ1yHuBWfwKuEn+3D+X4xdEp CldbqaTk+PAjrZrubHV2itdqYsItLWMj4pP3y2WrDz1mBEcMX7fVlZBy6gVAPidz EbWQyi2w4bY1LhvZ5Xh8VkXEm45thMPDJbFqU5Yw0ZzxeXimA0n+PNHWzfyVpGC7 ErHDEjuipLfUCNJrk9ZjFo0bRxn0tLJIDtvry7QSMxxejRDfBq5rz50u9TEusIDv 7s6R6eC7conbrGYPe65EwdSZZOuuRrxA -----END CERTIFICATE-----Generated at Thu Jul 3 17:40:18 2025 by rpki-client