$ rpki-client -vvf rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft File: uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft (raw, json) Hash identifier: qKPiLbq94K2EZLrsOfXMLRpFzRM8M0GrMVnro4ZYiDQ= Subject key identifier: D4:D7:45:B8:6A:16:7F:A9:30:95:34:34:89:0A:7A:27:C6:EB:D0:DF Authority key identifier: B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25 Certificate issuer: /CN=A917068E/serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25 Certificate serial: 0674 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft Manifest number: 066C Signing time: Wed 02 Jul 2025 22:43:08 +0000 Manifest this update: Wed 02 Jul 2025 22:43:07 +0000 Manifest next update: Wed 09 Jul 2025 22:43:07 +0000 Files and hashes: 1: uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl (hash: IX1gvIj+RdhW5AWJ2lbmzUtTnpA26aXfjUhkACmV+54=) 2: 8889F4E484A711EBB701E773C4F9AE02.roa (hash: J+8/ZwrlIkoJr01jQAl9vk2aVwqPeoCZlFWB5DqiI1A=) 3: 7464EB1E876411EE8971C221C4F9AE02.roa (hash: ojB4V4VtVHXuFHAezvaTkfH4Bh/CstC86ZtstiMw1LA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1652 (0x674) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917068E, serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25 Validity Not Before: Jul 2 22:43:07 2025 GMT Not After : Jul 9 22:43:07 2025 GMT Subject: CN=6865b5fb-c6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:10:52:72:41:2f:a2:1e:9e:9f:2e:bf:37:b1: c8:bb:f2:0e:7b:fe:8e:ca:1d:e8:ab:b3:76:6a:13: 7b:c2:f3:a3:9b:d8:23:aa:b0:b6:f1:2c:3e:57:99: c1:a0:9d:db:b2:ae:e0:5c:d3:d4:88:d7:d4:c1:32: d8:ab:a0:fa:c2:66:78:87:25:07:79:dd:46:ff:c0: c7:93:2f:a6:e8:87:5f:e5:7e:64:12:5d:11:da:59: 65:fc:6d:40:b7:bf:0d:44:8e:eb:91:c2:f1:77:99: d4:c1:12:0a:0a:13:ad:d0:54:b3:2a:02:2f:f7:10: ee:e9:84:67:39:e7:39:41:09:e3:45:06:4f:1f:f0: 7f:42:e7:a5:0c:46:ab:ca:38:70:80:1e:d9:16:75: 87:97:56:6f:01:5e:b6:37:e0:c9:d4:6d:f8:44:f3: 6e:6e:c3:b6:8a:68:d9:42:45:ff:74:40:bd:79:e9: f0:26:a2:20:f0:ed:68:60:23:f3:bb:cb:dd:e3:ed: 78:9c:07:39:69:b9:53:5d:34:8a:a8:f1:ac:91:e0: c4:61:39:c8:43:35:b8:05:e8:af:45:25:54:74:b0: 1a:ed:a6:3d:5c:09:12:39:0d:4c:ba:9d:04:c5:7e: 44:a9:40:d4:ba:a8:59:24:f7:1d:1c:a4:67:c6:c5: db:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D7:45:B8:6A:16:7F:A9:30:95:34:34:89:0A:7A:27:C6:EB:D0:DF X509v3 Authority Key Identifier: keyid:B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7b:f2:04:cb:54:cd:e4:1e:75:e4:41:95:e1:84:9b:c8:56: f6:d4:fc:94:1d:e0:02:97:5b:ab:93:11:3c:ee:4b:36:1b:25: 9f:74:ac:88:ca:6d:83:84:0f:dc:28:ce:96:f0:ba:4f:f3:e1: 94:5b:be:01:de:3c:be:7f:d3:57:ab:7d:70:bb:d9:be:ca:cb: bd:68:a1:de:71:f8:4c:cc:27:ca:b6:ef:9e:6e:0b:ab:29:cb: 5d:72:ae:94:52:01:0f:b9:e0:23:53:48:8c:83:ea:76:48:57: ef:5c:81:07:fe:73:ab:6c:82:70:07:82:f6:f4:d3:bd:9d:3e: af:dc:2a:b8:53:ac:86:7e:9f:d6:5d:70:db:65:aa:01:f6:0a: fc:0e:85:34:a4:03:e3:86:16:67:03:92:25:8f:a7:50:74:59: 53:8d:57:6d:e1:2c:df:81:62:ee:5f:e4:ce:f4:40:e4:df:18: 64:4d:1e:62:26:5d:f3:5f:1b:03:0a:8c:f7:0f:62:6a:b5:d2: 1d:26:ec:ff:1f:94:b2:20:0a:0a:37:91:80:47:69:c6:a8:9a: de:bc:39:86:ef:b5:2d:c9:0a:41:7d:f9:e5:72:2c:d6:73:8f: 12:90:94:2f:9f:9d:4c:80:4a:7a:ac:a6:7f:eb:04:ff:f3:16: 4a:17:27:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2OEUxMTAvBgNVBAUTKEI4RjhDMzYyNkREMDYxNjJFNjdFMjVGNTlBOUE4MUZB RTQ3MjBBMjUwHhcNMjUwNzAyMjI0MzA3WhcNMjUwNzA5MjI0MzA3WjAYMRYwFAYD VQQDEw02ODY1YjVmYi1jNmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhBSckEvoh6eny6/N7HIu/IOe/6Oyh3oq7N2ahN7wvOjm9gjqrC28Sw+V5nB oJ3bsq7gXNPUiNfUwTLYq6D6wmZ4hyUHed1G/8DHky+m6Idf5X5kEl0R2lll/G1A t78NRI7rkcLxd5nUwRIKChOt0FSzKgIv9xDu6YRnOec5QQnjRQZPH/B/QuelDEar yjhwgB7ZFnWHl1ZvAV62N+DJ1G34RPNubsO2imjZQkX/dEC9eenwJqIg8O1oYCPz u8vd4+14nAc5ablTXTSKqPGskeDEYTnIQzW4BeivRSVUdLAa7aY9XAkSOQ1Mup0E xX5EqUDUuqhZJPcdHKRnxsXbGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTXRbhq Fn+pMJU0NIkKeifG69DfMB8GA1UdIwQYMBaAFLj4w2Jt0GFi5n4l9Zqagfrkcgol MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDY4RS9ENkVGNjcxQTg0 QTUxMUVCQUU5RTQ0NzJDNEY5QUUwMi91UGpEWW0zUVlXTG1maVgxbXBxQi11UnlD aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQakRZbTNRWVdMbWZpWDFtcHFCLXVSeUNpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDY4RS9ENkVGNjcxQTg0QTUxMUVCQUU5RTQ0NzJDNEY5QUUwMi91UGpEWW0zUVlX TG1maVgxbXBxQi11UnlDaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8e/IEy1TN5B515EGV4YSbyFb21PyUHeACl1urkxE87ks2GyWfdKyI ym2DhA/cKM6W8LpP8+GUW74B3jy+f9NXq31wu9m+ysu9aKHecfhMzCfKtu+ebgur Kctdcq6UUgEPueAjU0iMg+p2SFfvXIEH/nOrbIJwB4L29NO9nT6v3Cq4U6yGfp/W XXDbZaoB9gr8DoU0pAPjhhZnA5Ilj6dQdFlTjVdt4SzfgWLuX+TO9EDk3xhkTR5i Jl3zXxsDCoz3D2JqtdIdJuz/H5SyIAoKN5GAR2nGqJrevDmG77UtyQpBffnlcizW c48SkJQvn51MgEp6rKZ/6wT/8xZKFydS -----END CERTIFICATE-----Generated at Fri Jul 4 07:06:59 2025 by rpki-client