$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft File: ukny4CpjXdB19WQWbxEfX63lp8s.mft (raw, json) Hash identifier: YDf0gbI5XBL+UUzyg/bDT3DS220u0KqjR7qeQJaIxI8= Subject key identifier: 14:AB:EC:C8:77:37:11:8C:0F:D3:C6:D6:F9:65:9B:A1:7D:43:E5:DA Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB Certificate issuer: /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB Certificate serial: 068E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft Manifest number: 067D Signing time: Wed 02 Jul 2025 22:39:34 +0000 Manifest this update: Wed 02 Jul 2025 22:39:33 +0000 Manifest next update: Wed 09 Jul 2025 22:39:33 +0000 Files and hashes: 1: ukny4CpjXdB19WQWbxEfX63lp8s.crl (hash: L6xBYCrpoNdQRnXTK6fCci2w+LNrkVGCLmYIuCDbHxY=) 2: D1B6FD008D6D11EB9DB49A32C4F9AE02.roa (hash: vO8BJ986/mLBngVCPGye7C9+jhQy/7A58iRckkgaf5o=) 3: D24316B48D6D11EB9DB49A32C4F9AE02.roa (hash: ydw76epyjXbZhwBlfsXtLnXh1HYx108LFVcke+cDAAQ=) 4: D2CFD4468D6D11EB9DB49A32C4F9AE02.roa (hash: Q6tSeAB9SXDJytuvhS/k9VLqC1gwcOY00UC/xNHWsMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1678 (0x68e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B, serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB Validity Not Before: Jul 2 22:39:33 2025 GMT Not After : Jul 9 22:39:33 2025 GMT Subject: CN=6865b526-2083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:9d:c8:11:48:a1:d3:66:a4:ff:11:03:55:dc: b1:ee:03:0e:70:ae:47:7a:b1:c6:50:a2:b1:d1:17: e6:6d:15:76:f0:7b:2c:7e:20:ad:3b:7a:e2:dc:f1: a0:84:e3:37:9d:92:28:63:bd:d3:e4:cc:41:98:71: 90:2f:d4:65:b6:be:3d:de:40:59:8a:d4:8a:65:ab: 6e:17:74:45:59:55:63:03:ab:d8:c0:c5:60:22:be: e6:ae:cb:9b:f6:0a:d8:83:ea:a8:65:a2:ff:cc:fd: 1a:f8:57:cd:a2:36:96:1b:95:a4:4a:64:3c:c5:d1: 38:62:de:f7:82:73:e1:80:c5:e6:f1:4b:7c:72:14: ca:50:3e:80:93:70:20:bf:78:52:e7:fd:44:95:65: bd:4b:44:03:f0:26:11:5a:45:3f:1c:3c:e7:f6:53: ca:0c:8c:e3:c1:fe:4c:5b:d8:91:05:e9:22:41:b9: dc:4c:98:36:52:27:f8:5f:3e:6e:e4:76:e8:c0:7c: 17:d6:6c:26:62:9b:ca:1a:f2:97:c7:72:b4:9f:c5: fa:47:f5:a1:34:ab:dd:e1:1e:20:3a:b4:aa:0e:89: 78:fa:be:75:51:49:f1:1a:6a:7d:d1:0b:9e:d1:5d: 8f:73:38:d0:79:18:d7:3f:ec:9d:70:21:f1:88:c9: c8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AB:EC:C8:77:37:11:8C:0F:D3:C6:D6:F9:65:9B:A1:7D:43:E5:DA X509v3 Authority Key Identifier: keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:44:0d:09:2f:53:dc:43:2d:af:93:c1:b0:c3:d9:d7:e3:54: 09:02:08:a5:a3:26:74:f4:b5:3f:d8:d6:23:7e:8e:3d:50:64: 69:cb:94:f9:6b:e8:23:00:ce:97:4c:ca:fb:90:0f:f1:6a:69: 99:4b:04:a3:32:3c:41:b1:36:97:f9:22:aa:9b:c0:4b:d3:2a: 8e:bc:1a:0c:73:94:af:a6:b6:c1:16:87:68:c5:e2:29:18:ae: 89:1c:a0:d5:1d:a1:30:d6:76:56:32:62:1c:90:03:83:31:37: 94:6a:88:c3:82:99:42:01:00:60:18:75:31:5d:27:e9:6f:c5: 14:b3:5d:2e:2e:bb:73:bd:12:77:28:20:94:3d:af:9c:69:68: 03:83:d1:24:80:5e:a7:21:b1:40:bb:de:74:4c:68:a4:8f:3b: 97:f1:9d:f5:c6:a1:45:13:a6:9c:99:bc:bc:7f:b1:4e:22:09: e6:c1:0d:c6:52:5e:2b:9a:89:e9:63:ad:e4:6c:0b:f3:16:e3: 6d:ce:ab:3c:8f:d6:bb:51:c7:42:06:ba:a4:c4:f9:36:be:ef: 1b:47:93:25:a9:b2:9e:c0:7c:fc:83:37:d3:47:62:d2:44:85: 7e:9f:d3:97:db:d7:76:0d:2a:39:d3:b4:0e:50:d1:38:be:ab: ce:d3:ec:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEJBNDlGMkUwMkE2MzVERDA3NUY1NjQxNjZGMTExRjVG QURFNUE3Q0IwHhcNMjUwNzAyMjIzOTMzWhcNMjUwNzA5MjIzOTMzWjAYMRYwFAYD VQQDEw02ODY1YjUyNi0yMDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+J3IEUih02ak/xEDVdyx7gMOcK5HerHGUKKx0RfmbRV28HssfiCtO3ri3PGg hOM3nZIoY73T5MxBmHGQL9Rltr493kBZitSKZatuF3RFWVVjA6vYwMVgIr7mrsub 9grYg+qoZaL/zP0a+FfNojaWG5WkSmQ8xdE4Yt73gnPhgMXm8Ut8chTKUD6Ak3Ag v3hS5/1ElWW9S0QD8CYRWkU/HDzn9lPKDIzjwf5MW9iRBekiQbncTJg2Uif4Xz5u 5HbowHwX1mwmYpvKGvKXx3K0n8X6R/WhNKvd4R4gOrSqDol4+r51UUnxGmp90Que 0V2PczjQeRjXP+ydcCHxiMnIBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSr7Mh3 NxGMD9PG1vllm6F9Q+XaMB8GA1UdIwQYMBaAFLpJ8uAqY13QdfVkFm8RH1+t5afL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi9GMzZCNzlCMDgw NzcxMUVCQjkyNUYxNTRDNEY5QUUwMi91a255NENwalhkQjE5V1FXYnhFZlg2M2xw OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vrbnk0Q3BqWGRCMTlXUVdieEVmWDYzbHA4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTg4Qi9GMzZCNzlCMDgwNzcxMUVCQjkyNUYxNTRDNEY5QUUwMi91a255NENwalhk QjE5V1FXYnhFZlg2M2xwOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARRA0JL1PcQy2vk8Gww9nX41QJAgiloyZ09LU/2NYjfo49UGRpy5T5 a+gjAM6XTMr7kA/xammZSwSjMjxBsTaX+SKqm8BL0yqOvBoMc5SvprbBFodoxeIp GK6JHKDVHaEw1nZWMmIckAODMTeUaojDgplCAQBgGHUxXSfpb8UUs10uLrtzvRJ3 KCCUPa+caWgDg9EkgF6nIbFAu950TGikjzuX8Z31xqFFE6acmby8f7FOIgnmwQ3G Ul4rmonpY63kbAvzFuNtzqs8j9a7UcdCBrqkxPk2vu8bR5MlqbKewHz8gzfTR2LS RIV+n9OX29d2DSo507QOUNE4vqvO0+xs -----END CERTIFICATE-----Generated at Thu Jul 3 06:11:53 2025 by rpki-client