$ rpki-client -vvf rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft File: uftCI-sDug7mzge0ZgIXr69xbV0.mft (raw, json) Hash identifier: USgZq37O2fPaKw8DgmpUs9gXLGMc4DxJdyrGs4NjAaA= Subject key identifier: 5E:8B:54:AB:F5:20:C9:71:55:B9:B5:E8:B5:E4:96:D0:44:0F:CA:46 Authority key identifier: B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D Certificate issuer: /CN=A916D5A2/serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D Certificate serial: 0678 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft Manifest number: 0673 Signing time: Mon 30 Jun 2025 22:41:48 +0000 Manifest this update: Mon 30 Jun 2025 22:41:48 +0000 Manifest next update: Mon 07 Jul 2025 22:41:48 +0000 Files and hashes: 1: uftCI-sDug7mzge0ZgIXr69xbV0.crl (hash: 1xtaGddZjEETjJHoxrIR0uLdZ+9lb5PhWK3/tbLEfcc=) 2: 179D126A80BB11EB8827C40AC4F9AE02.roa (hash: Z2FHnDXg4Ip1mKaBZDT4wmtIm4sbvDrPsJ6u/yKuqxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1656 (0x678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D5A2, serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D Validity Not Before: Jun 30 22:41:48 2025 GMT Not After : Jul 7 22:41:48 2025 GMT Subject: CN=686312ac-315d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4e:01:34:f6:04:c7:7a:63:75:38:18:5d:2a: 02:b8:54:f6:26:f8:bf:0a:05:27:31:cc:13:11:61: 20:b7:a1:1a:93:51:3a:24:08:92:b7:f0:5e:41:50: 4e:7d:64:f6:07:b5:74:45:e3:3f:cf:13:fb:bd:7b: 32:0b:8a:07:09:56:02:56:16:63:70:a3:c2:d9:19: e4:fa:b1:0a:a1:f0:5a:1c:ab:39:f3:1b:90:6d:21: 1e:65:5c:d8:81:19:c7:ba:75:e0:16:be:ac:e8:bf: 78:2c:e4:53:ff:87:12:f6:9a:05:d9:f9:e5:33:fd: 63:6a:76:35:a9:ba:5b:69:6e:25:2a:89:9b:b5:c8: 43:09:bc:88:3d:fe:e7:1f:d5:3e:ec:9b:27:ba:f2: e1:05:ce:85:13:0f:a7:77:50:6a:cf:c3:53:e8:86: d7:6e:b8:1c:38:f5:a8:84:80:95:8d:f9:e3:3d:e3: 37:cb:30:41:24:c9:53:17:3f:05:bc:64:32:ba:d6: b9:27:64:78:f6:76:98:71:e6:05:f2:14:d1:ec:2b: e2:13:15:79:e5:9f:6f:e8:33:87:e3:45:5c:4f:4a: b3:50:07:f1:8a:88:15:38:bf:3d:83:49:52:fa:f3: 4b:64:d5:61:8f:35:51:6b:74:6d:6b:fe:50:69:18: d9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8B:54:AB:F5:20:C9:71:55:B9:B5:E8:B5:E4:96:D0:44:0F:CA:46 X509v3 Authority Key Identifier: keyid:B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:22:9a:24:ab:6a:f6:ad:84:33:cf:ef:79:33:73:8a:3a:69: c1:c7:5a:63:5a:71:b8:51:49:20:a8:f1:84:79:ab:3e:be:1a: 04:5c:85:83:e1:8d:75:4f:33:b6:b1:0c:b2:bf:d2:55:38:1a: a8:9a:24:30:dd:37:28:9c:b9:56:42:84:ba:f0:d9:da:1f:47: e3:97:01:23:a2:4e:f0:f6:7e:ce:ef:d9:53:7e:77:37:d0:e3: ef:6d:43:75:ad:17:f2:be:6f:3b:c0:78:f5:90:f9:3f:ad:f5: e0:1d:33:05:2d:dd:cc:28:05:d6:24:b8:91:7b:38:de:9a:3c: 26:6b:d9:84:93:51:6e:fa:99:e8:cc:41:4e:13:03:e3:71:88: d2:9e:65:88:94:3c:c0:47:78:13:4a:bf:65:73:31:36:8d:f8: 44:98:6b:75:47:b8:3e:8f:26:0e:1f:aa:af:f8:de:21:0c:64: 96:63:59:43:9e:bf:fa:f7:ec:d9:48:f9:fc:15:b0:71:13:79: bc:76:2b:5a:b9:83:8e:9b:c7:9d:db:c8:55:62:fb:17:f9:6a: 9d:f3:8e:93:c0:2e:47:05:63:35:18:d7:b7:eb:5d:e6:9a:db: b1:74:b6:c5:d5:09:e6:9b:a3:7b:16:39:ad:3e:c4:2c:df:d8: 4a:ad:10:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ1QTIxMTAvBgNVBAUTKEI5RkI0MjIzRUIwM0JBMEVFNkNFMDdCNDY2MDIxN0FG QUY3MTZENUQwHhcNMjUwNjMwMjI0MTQ4WhcNMjUwNzA3MjI0MTQ4WjAYMRYwFAYD VQQDEw02ODYzMTJhYy0zMTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwE4BNPYEx3pjdTgYXSoCuFT2Jvi/CgUnMcwTEWEgt6Eak1E6JAiSt/BeQVBO fWT2B7V0ReM/zxP7vXsyC4oHCVYCVhZjcKPC2Rnk+rEKofBaHKs58xuQbSEeZVzY gRnHunXgFr6s6L94LORT/4cS9poF2fnlM/1janY1qbpbaW4lKombtchDCbyIPf7n H9U+7JsnuvLhBc6FEw+nd1Bqz8NT6IbXbrgcOPWohICVjfnjPeM3yzBBJMlTFz8F vGQyuta5J2R49naYceYF8hTR7CviExV55Z9v6DOH40VcT0qzUAfxiogVOL89g0lS +vNLZNVhjzVRa3Rta/5QaRjZ6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6LVKv1 IMlxVbm16LXkltBED8pGMB8GA1UdIwQYMBaAFLn7QiPrA7oO5s4HtGYCF6+vcW1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDVBMi9DMjFBNTM4Njgw QjgxMUVCQkVCMTlFODNDNEY5QUUwMi91ZnRDSS1zRHVnN216Z2UwWmdJWHI2OXhi VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmdENJLXNEdWc3bXpnZTBaZ0lYcjY5eGJWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDVBMi9DMjFBNTM4NjgwQjgxMUVCQkVCMTlFODNDNEY5QUUwMi91ZnRDSS1zRHVn N216Z2UwWmdJWHI2OXhiVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2Ipokq2r2rYQzz+95M3OKOmnBx1pjWnG4UUkgqPGEeas+vhoEXIWD 4Y11TzO2sQyyv9JVOBqomiQw3TconLlWQoS68NnaH0fjlwEjok7w9n7O79lTfnc3 0OPvbUN1rRfyvm87wHj1kPk/rfXgHTMFLd3MKAXWJLiRezjemjwma9mEk1Fu+pno zEFOEwPjcYjSnmWIlDzAR3gTSr9lczE2jfhEmGt1R7g+jyYOH6qv+N4hDGSWY1lD nr/69+zZSPn8FbBxE3m8ditauYOOm8ed28hVYvsX+Wqd846TwC5HBWM1GNe3613m mtuxdLbF1Qnmm6N7FjmtPsQs39hKrRAM -----END CERTIFICATE-----Generated at Tue Jul 1 21:08:13 2025 by rpki-client