$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft File: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft (raw, json) Hash identifier: xhNRFoxIHT777ZsQU09O6InXy3AuEWeJ6mTL9ad/0jY= Subject key identifier: 70:7F:EF:10:D2:5A:5B:07:83:69:33:1E:2A:78:6E:65:0E:C0:85:8C Authority key identifier: 52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24 Certificate issuer: /CN=A91774FB/serialNumber=5296BC801402C73909F591E19095F22465414324 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft Manifest number: C0 Signing time: Thu 03 Jul 2025 06:01:48 +0000 Manifest this update: Thu 03 Jul 2025 06:01:47 +0000 Manifest next update: Thu 10 Jul 2025 06:01:47 +0000 Files and hashes: 1: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl (hash: TG0IdNLmq6fH9Q1jykTyLX8lXgfr5G56mV3i9bD41zc=) 2: 24142938343C11EFA0165876C4F9AE02.roa (hash: n7AIK79a5+aPFKSTz88y32yhIzyT87IgTPflOpV9KLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91774FB, serialNumber=5296BC801402C73909F591E19095F22465414324 Validity Not Before: Jul 3 06:01:47 2025 GMT Not After : Jul 10 06:01:47 2025 GMT Subject: CN=68661ccc-4716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a4:5b:56:5b:06:fa:9e:c7:73:36:e4:02:af: f8:cb:86:74:7e:48:a7:f3:a6:4f:da:56:48:62:e4: db:68:f1:47:0d:19:db:04:85:a0:e6:fc:c0:ed:9b: 43:a1:b1:fb:69:f6:21:77:d6:05:a1:11:40:8a:c6: 81:25:94:cd:16:c9:70:c7:b1:f3:13:d9:c1:11:f5: 51:ee:29:70:f9:c5:c6:d4:7c:c4:95:cd:31:30:89: 18:1d:b3:d3:f7:ef:7d:52:7f:0b:56:8f:74:b1:a9: f0:2b:38:e4:e1:d9:37:b6:07:41:0c:3b:28:6c:2f: 1d:91:be:2a:62:a5:af:bf:e9:1e:59:61:88:ac:57: 96:e2:33:e4:d9:fe:e0:1d:3f:f1:e6:cb:a5:de:e8: 2e:c9:01:81:c6:3f:37:b5:89:d6:be:98:60:07:0a: e6:27:df:95:ff:ae:52:64:cd:37:de:38:01:65:c5: c5:58:dd:1f:6e:db:b6:1b:b8:88:fd:df:76:bb:c0: 67:48:1c:b6:5e:bc:45:8d:bb:77:c8:a6:59:24:9e: 1b:b1:31:c3:fc:b5:fe:d0:35:7f:8e:7a:41:9a:04: 71:85:b9:1e:23:96:28:67:a1:e0:05:3d:11:9d:35: 4d:82:a5:bd:ae:fa:a4:a7:79:75:f1:3d:ca:fc:44: b2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7F:EF:10:D2:5A:5B:07:83:69:33:1E:2A:78:6E:65:0E:C0:85:8C X509v3 Authority Key Identifier: keyid:52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:a3:15:42:65:ff:dd:a9:68:a9:5e:66:98:75:cc:43:4a:ab: d1:14:34:3e:ae:c3:09:20:60:c5:fc:9f:f7:4a:88:6f:2e:fa: 7b:ca:46:9c:db:5e:ae:71:52:db:44:58:af:56:42:1f:e8:65: 25:0e:3b:36:6f:2c:ab:d7:9d:b0:30:af:be:88:92:6d:8b:50: b4:98:82:5c:af:7b:e5:aa:3d:b8:89:a6:d0:d2:b5:6b:1d:0a: 18:38:2d:10:f2:aa:39:8a:7d:62:cf:28:27:e7:76:fd:f5:55: 6b:5c:b0:aa:30:4e:b9:a3:57:9f:42:59:a9:c3:01:a9:b1:c5: 9f:c7:a0:fa:6f:93:e8:33:d1:41:ed:79:4d:4c:6c:f5:54:3a: 9e:bc:d8:58:97:86:8e:6e:72:ee:26:ac:02:b7:e3:82:e6:c6: b8:43:bb:6a:c7:1b:e6:53:05:98:46:17:9c:b2:73:12:cf:de: 3f:08:7a:86:6e:5d:4a:86:c2:52:fa:a4:3c:08:2c:69:1b:ea: aa:6d:59:d9:9b:c0:fe:0f:94:cf:1c:de:16:22:d4:59:ba:b0: aa:b6:d0:51:0a:db:9b:26:64:9e:aa:c9:17:a2:1e:10:2a:d3: a2:5d:d7:3b:3a:27:67:c5:5c:8c:f5:0d:35:4f:d9:76:cd:ac: 89:04:ff:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0RkIxMTAvBgNVBAUTKDUyOTZCQzgwMTQwMkM3MzkwOUY1OTFFMTkwOTVGMjI0 NjU0MTQzMjQwHhcNMjUwNzAzMDYwMTQ3WhcNMjUwNzEwMDYwMTQ3WjAYMRYwFAYD VQQDEw02ODY2MWNjYy00NzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA66RbVlsG+p7HczbkAq/4y4Z0fkin86ZP2lZIYuTbaPFHDRnbBIWg5vzA7ZtD obH7afYhd9YFoRFAisaBJZTNFslwx7HzE9nBEfVR7ilw+cXG1HzElc0xMIkYHbPT 9+99Un8LVo90sanwKzjk4dk3tgdBDDsobC8dkb4qYqWvv+keWWGIrFeW4jPk2f7g HT/x5sul3uguyQGBxj83tYnWvphgBwrmJ9+V/65SZM033jgBZcXFWN0fbtu2G7iI /d92u8BnSBy2XrxFjbt3yKZZJJ4bsTHD/LX+0DV/jnpBmgRxhbkeI5YoZ6HgBT0R nTVNgqW9rvqkp3l18T3K/ESyCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHB/7xDS WlsHg2kzHip4bmUOwIWMMB8GA1UdIwQYMBaAFFKWvIAUAsc5CfWR4ZCV8iRlQUMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzRGQi83ODk3RjgxNjM0 MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9VcGE4Z0JRQ3h6a0o5Wkhoa0pYeUpHVkJR eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VwYThnQlFDeHprSjlaSGhrSlh5SkdWQlF5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzRGQi83ODk3RjgxNjM0MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9VcGE4Z0JRQ3h6 a0o5Wkhoa0pYeUpHVkJReVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyoxVCZf/dqWipXmaYdcxDSqvRFDQ+rsMJIGDF/J/3SohvLvp7ykac 216ucVLbRFivVkIf6GUlDjs2byyr152wMK++iJJti1C0mIJcr3vlqj24iabQ0rVr HQoYOC0Q8qo5in1izygn53b99VVrXLCqME65o1efQlmpwwGpscWfx6D6b5PoM9FB 7XlNTGz1VDqevNhYl4aObnLuJqwCt+OC5sa4Q7tqxxvmUwWYRhecsnMSz94/CHqG bl1KhsJS+qQ8CCxpG+qqbVnZm8D+D5TPHN4WItRZurCqttBRCtubJmSeqskXoh4Q KtOiXdc7OidnxVyM9Q01T9l2zayJBP/2 -----END CERTIFICATE-----Generated at Fri Jul 4 00:07:30 2025 by rpki-client