$ rpki-client -vvf rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft File: UyQGWmE9LRB4F5xiFjcczGp3UHo.mft (raw, json) Hash identifier: nijHwuJygbG1r7shnwRRnNbbpq1kFngh0cdI19KH6J0= Subject key identifier: 93:12:73:7F:A8:1B:5D:75:3B:69:10:21:E8:43:CD:E6:EB:99:B9:02 Authority key identifier: 53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A Certificate issuer: /CN=A9158EC4/serialNumber=5324065A613D2D1078179C6216371CCC6A77507A Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft Manifest number: F5 Signing time: Thu 03 Jul 2025 05:26:49 +0000 Manifest this update: Thu 03 Jul 2025 05:26:49 +0000 Manifest next update: Thu 10 Jul 2025 05:26:49 +0000 Files and hashes: 1: UyQGWmE9LRB4F5xiFjcczGp3UHo.crl (hash: rxDyqIfTro5jBIHTQzU4em90XuFSgdhjr5DgBndbZ88=) 2: 2805F2D6E5B511EEB34EF35AC4F9AE02.roa (hash: 0mdd1hPCY77vgsAR82vZE3qWvhrgXofs3UYJMwrKnGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158EC4, serialNumber=5324065A613D2D1078179C6216371CCC6A77507A Validity Not Before: Jul 3 05:26:49 2025 GMT Not After : Jul 10 05:26:49 2025 GMT Subject: CN=68661499-df3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7c:3e:e7:3b:a5:76:0f:11:85:f9:d1:fc:e5: db:6f:74:cb:38:98:d0:15:7e:8e:87:ba:98:64:b7: ef:15:12:f3:88:ac:49:05:9a:9a:14:f5:8c:8c:30: 89:70:84:b9:91:7c:73:fa:8e:80:b2:65:93:02:54: de:9b:64:be:8b:6a:45:88:50:d4:c8:80:df:15:c8: bb:7e:66:c1:e8:9f:31:50:61:48:a9:51:79:8e:e6: b2:1a:f3:36:e5:41:d0:e8:6c:93:55:eb:78:ce:29: a7:ed:19:a2:0c:1e:6b:98:d5:7d:af:ab:e5:c2:5b: 7d:6f:c4:86:99:fc:92:04:b3:56:26:ff:89:bc:ce: 80:95:90:51:11:4e:72:78:b4:20:14:a6:8b:b2:14: 23:3f:84:c3:e1:19:d5:1c:b5:10:b0:ab:68:6e:91: 31:10:23:18:cf:19:60:33:d9:83:d5:c7:eb:49:11: f1:52:19:6f:61:f5:e8:2e:85:b3:ae:40:3b:f9:03: 58:eb:dc:91:fd:c0:d5:e8:95:fe:d1:cd:21:22:d9: 4e:d6:44:e2:81:c8:a1:b6:9e:e0:d7:52:d0:92:fb: c6:9e:fe:0d:54:1c:d1:eb:9f:07:e9:57:1b:3f:bd: f1:a7:18:b3:cd:73:c4:07:68:c7:28:f8:ff:d5:58: a5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:12:73:7F:A8:1B:5D:75:3B:69:10:21:E8:43:CD:E6:EB:99:B9:02 X509v3 Authority Key Identifier: keyid:53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:e4:d4:6f:f2:c1:f5:52:25:84:ae:a0:21:fb:13:20:80:6f: 5a:12:29:0d:75:7d:8b:ee:17:3b:5d:0d:0d:6b:73:a7:54:26: c2:c8:b9:0b:15:f4:37:01:73:6a:66:a4:bb:ab:b5:3f:48:5c: 57:83:33:95:8a:fe:f1:f3:1d:3b:08:20:95:cf:6a:31:28:85: b3:df:61:f8:df:2f:e3:0c:65:37:7b:17:29:9b:38:6b:a6:8b: 53:1f:bd:1d:26:bb:6b:2c:c1:ca:1c:3c:1b:62:44:c7:f9:ba: ca:8b:8e:72:1b:7c:6e:f8:6a:28:f4:db:ad:74:d3:13:6c:32: 45:01:29:2d:e1:00:b0:58:5f:27:99:0f:f8:2e:ab:f2:15:4f: 9e:19:85:39:dc:f1:93:bc:ba:97:a8:70:1f:6f:1f:f8:bc:ec: fa:e3:e3:6c:f2:e9:c5:d6:ab:8e:7d:74:fa:e9:5d:fc:40:92: e8:61:ae:59:ed:26:d6:a0:a3:00:79:b6:bc:b3:d5:c0:e0:af: 69:f2:2d:cd:be:61:93:3f:cf:70:88:71:ca:75:0a:b0:b6:cb: 7f:0c:32:7c:d8:53:c3:ef:b5:21:b2:9f:cb:7a:2c:39:0a:df: c0:8a:8b:95:68:f4:b0:a0:7a:0d:a5:26:41:af:44:c7:af:2c: 63:64:47:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFQzQxMTAvBgNVBAUTKDUzMjQwNjVBNjEzRDJEMTA3ODE3OUM2MjE2MzcxQ0ND NkE3NzUwN0EwHhcNMjUwNzAzMDUyNjQ5WhcNMjUwNzEwMDUyNjQ5WjAYMRYwFAYD VQQDEw02ODY2MTQ5OS1kZjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXw+5zuldg8RhfnR/OXbb3TLOJjQFX6Oh7qYZLfvFRLziKxJBZqaFPWMjDCJ cIS5kXxz+o6AsmWTAlTem2S+i2pFiFDUyIDfFci7fmbB6J8xUGFIqVF5juayGvM2 5UHQ6GyTVet4zimn7RmiDB5rmNV9r6vlwlt9b8SGmfySBLNWJv+JvM6AlZBREU5y eLQgFKaLshQjP4TD4RnVHLUQsKtobpExECMYzxlgM9mD1cfrSRHxUhlvYfXoLoWz rkA7+QNY69yR/cDV6JX+0c0hItlO1kTigcihtp7g11LQkvvGnv4NVBzR658H6Vcb P73xpxizzXPEB2jHKPj/1VilfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMSc3+o G111O2kQIehDzebrmbkCMB8GA1UdIwQYMBaAFFMkBlphPS0QeBecYhY3HMxqd1B6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEVDNC80NTA2NDc5MEU1 QjExMUVFOUUzNUMzMzNDNEY5QUUwMi9VeVFHV21FOUxSQjRGNXhpRmpjY3pHcDNV SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5UUdXbUU5TFJCNEY1eGlGamNjekdwM1VIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEVDNC80NTA2NDc5MEU1QjExMUVFOUUzNUMzMzNDNEY5QUUwMi9VeVFHV21FOUxS QjRGNXhpRmpjY3pHcDNVSG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA5NRv8sH1UiWErqAh+xMggG9aEikNdX2L7hc7XQ0Na3OnVCbCyLkL FfQ3AXNqZqS7q7U/SFxXgzOViv7x8x07CCCVz2oxKIWz32H43y/jDGU3excpmzhr potTH70dJrtrLMHKHDwbYkTH+brKi45yG3xu+Goo9NutdNMTbDJFASkt4QCwWF8n mQ/4LqvyFU+eGYU53PGTvLqXqHAfbx/4vOz64+Ns8unF1quOfXT66V38QJLoYa5Z 7SbWoKMAeba8s9XA4K9p8i3NvmGTP89wiHHKdQqwtst/DDJ82FPD77Uhsp/Leiw5 Ct/AiouVaPSwoHoNpSZBr0THryxjZEdi -----END CERTIFICATE-----Generated at Thu Jul 3 21:09:41 2025 by rpki-client