$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft File: S-UGizexYyUw_1Ijhue3-wGI6eo.mft (raw, json) Hash identifier: 0CDHBtx2HAPfiNTE9CQobgAGrm6LYEabFiQVKOs7VkQ= Subject key identifier: 78:6C:E0:B8:3E:86:FF:EC:ED:A1:67:20:81:83:5D:8D:BA:5B:EE:70 Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA Certificate issuer: /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft Manifest number: 011B Signing time: Thu 03 Jul 2025 05:03:33 +0000 Manifest this update: Thu 03 Jul 2025 05:03:33 +0000 Manifest next update: Thu 10 Jul 2025 05:03:33 +0000 Files and hashes: 1: S-UGizexYyUw_1Ijhue3-wGI6eo.crl (hash: MhPRUNSLoShg0AcriJ9Lr0fyjKxz+/KicqlVATQt0T0=) 2: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (hash: PrkTvOXkxIIDm1NyNDWg8hQLP2IiT8tO2SVVH/dIBvI=) 3: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (hash: s22fNuehfcR8cdi3cFR8Z1yPLk8LwMQLolDpdzgZgc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Validity Not Before: Jul 3 05:03:33 2025 GMT Not After : Jul 10 05:03:33 2025 GMT Subject: CN=68660f25-2a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:99:ad:66:37:e2:2e:ed:2d:d1:92:9d:73: f1:d5:e3:ae:08:ab:0e:a0:a3:61:6a:37:db:fb:7a: 76:97:30:de:59:ce:86:d0:79:fa:2f:84:b2:80:0d: e7:7b:1c:19:e4:3c:34:38:ac:66:0b:a7:29:a2:f8: f1:66:3f:32:93:9f:4a:e7:8d:b6:8c:3b:ce:7e:f9: 91:47:71:a3:82:1c:c2:cd:14:60:92:4b:69:07:d7: e0:6a:1e:fb:9a:d7:0f:a0:7c:fc:ae:e4:6a:d3:74: 72:bd:20:54:85:ba:d3:a6:b5:08:39:97:09:a7:9f: a3:f1:85:48:8d:24:3e:17:5c:ff:32:71:19:90:39: 5f:77:9d:ef:0c:25:6d:3a:b0:4a:a6:00:7d:f2:95: da:85:bb:d0:39:06:c4:9a:e3:70:34:22:65:e1:48: e1:37:45:ce:8a:87:5a:99:03:d5:22:cd:a9:0e:ca: 44:c1:bb:17:e2:3b:7c:10:c7:78:d0:92:3e:76:f5: 73:4c:bc:18:0e:b6:71:5c:92:6a:83:27:31:d6:51: fd:e4:51:a6:2d:c5:0b:c5:fe:aa:f6:ff:e5:22:04: 46:fd:19:f7:c8:2f:e0:50:90:07:63:c5:e8:d2:65: 2f:6e:55:d3:9e:c6:ca:4b:68:20:09:2a:04:54:0f: a3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6C:E0:B8:3E:86:FF:EC:ED:A1:67:20:81:83:5D:8D:BA:5B:EE:70 X509v3 Authority Key Identifier: keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:a4:69:b6:a6:8a:6b:d5:ce:53:58:b3:18:d9:6d:45:c3:64: 22:a0:ad:c7:c7:12:a1:17:92:a9:e1:d8:15:bf:ae:f8:6a:03: ec:cc:6c:c0:89:d4:87:1f:d7:63:19:ad:00:ce:8b:33:5f:5e: 0d:dd:50:66:88:73:86:5b:d6:1f:ca:94:1f:42:b0:8b:5f:83: c8:59:1d:5d:fd:c3:21:fe:e6:a9:fc:eb:f9:4f:9e:48:62:ba: 2d:76:94:fd:23:d9:2a:28:85:91:63:b5:a0:6a:7f:95:ba:1a: 6a:2d:92:5e:af:9e:7e:10:e3:d5:1f:22:cf:a0:a9:4a:15:11: 7b:9b:c8:2a:81:20:75:58:96:e5:2e:ed:40:70:76:04:14:9c: d6:2d:a8:d8:bd:96:76:74:b8:ca:4c:0d:a9:77:e3:fc:0a:75: ed:9b:32:3a:3d:92:13:01:bb:ed:95:d1:d3:32:42:e3:33:d6: e0:91:93:75:37:5e:57:f0:19:d8:99:9e:74:74:f7:d2:89:0a: 42:a3:97:b9:f0:ae:ad:26:74:da:47:63:6d:28:ad:5c:20:0c: 37:55:b2:81:5e:3c:94:3d:00:70:df:2c:fb:b2:41:f8:36:3d: ed:e2:00:e7:06:f4:55:31:2b:1d:d6:ce:5e:c0:7f:e2:c6:95: 4b:f0:3d:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDRCRTUwNjhCMzdCMTYzMjUzMEZGNTIyMzg2RTdCN0ZC MDE4OEU5RUEwHhcNMjUwNzAzMDUwMzMzWhcNMjUwNzEwMDUwMzMzWjAYMRYwFAYD VQQDEw02ODY2MGYyNS0yYTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrCZrWY34i7tLdGSnXPx1eOuCKsOoKNhajfb+3p2lzDeWc6G0Hn6L4SygA3n exwZ5Dw0OKxmC6cpovjxZj8yk59K5422jDvOfvmRR3GjghzCzRRgkktpB9fgah77 mtcPoHz8ruRq03RyvSBUhbrTprUIOZcJp5+j8YVIjSQ+F1z/MnEZkDlfd53vDCVt OrBKpgB98pXahbvQOQbEmuNwNCJl4UjhN0XOiodamQPVIs2pDspEwbsX4jt8EMd4 0JI+dvVzTLwYDrZxXJJqgycx1lH95FGmLcULxf6q9v/lIgRG/Rn3yC/gUJAHY8Xo 0mUvblXTnsbKS2ggCSoEVA+jYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhs4Lg+ hv/s7aFnIIGDXY26W+5wMB8GA1UdIwQYMBaAFEvlBos3sWMlMP9SI4bnt/sBiOnq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy9FODBGMTM3Q0I5 OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5VXdfMUlqaHVlMy13R0k2 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1MtVUdpemV4WXlVd18xSWpodWUzLXdHSTZlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy9FODBGMTM3Q0I5OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5 VXdfMUlqaHVlMy13R0k2ZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAopGm2popr1c5TWLMY2W1Fw2QioK3HxxKhF5Kp4dgVv674agPszGzA idSHH9djGa0AzoszX14N3VBmiHOGW9YfypQfQrCLX4PIWR1d/cMh/uap/Ov5T55I YrotdpT9I9kqKIWRY7Wgan+VuhpqLZJer55+EOPVHyLPoKlKFRF7m8gqgSB1WJbl Lu1AcHYEFJzWLajYvZZ2dLjKTA2pd+P8CnXtmzI6PZITAbvtldHTMkLjM9bgkZN1 N15X8BnYmZ50dPfSiQpCo5e58K6tJnTaR2NtKK1cIAw3VbKBXjyUPQBw3yz7skH4 Nj3t4gDnBvRVMSsd1s5ewH/ixpVL8D22 -----END CERTIFICATE-----Generated at Thu Jul 3 10:05:22 2025 by rpki-client