$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft File: Ut5nj6808fJ7_XLOdS9c1X6ME84.mft (raw, json) Hash identifier: skzQsiJ6Jg5mw9V7+1pcB+6xXs1c4dVTJnl53eXLwRg= Subject key identifier: 05:10:A3:DC:D5:DC:96:27:98:A3:31:0B:6A:F0:D4:F8:34:34:13:5E Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE Certificate issuer: /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft Manifest number: 01D9 Signing time: Tue 01 Jul 2025 03:10:03 +0000 Manifest this update: Tue 01 Jul 2025 03:10:03 +0000 Manifest next update: Tue 08 Jul 2025 03:10:03 +0000 Files and hashes: 1: Ut5nj6808fJ7_XLOdS9c1X6ME84.crl (hash: ZaQPA67G+1xy/AKd/nyzWxE61QzOvQpzsqHAWqhdU+k=) 2: F5D6B6B8810811ED9EA03683C4F9AE02.roa (hash: O+0diP1NN2sNjxwB1I26KY0g98dCGDnYbn9P30v6lyY=) 3: F69540BA810811ED9EA03683C4F9AE02.roa (hash: AmVibyk3kyTCjjmayzEhVr/vWHjKhAHUPjsO+1Nf/Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91781C0, serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Validity Not Before: Jul 1 03:10:03 2025 GMT Not After : Jul 8 03:10:03 2025 GMT Subject: CN=6863518b-be3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:02:cd:6e:14:03:22:77:af:b6:87:aa:0d:fe: 40:e4:d8:59:86:02:a6:3b:62:42:9a:54:6c:67:85: 7b:76:a5:75:f9:71:26:3c:05:50:d2:c7:12:08:66: 93:d2:fe:5a:a9:4d:e3:99:1a:0a:3a:81:ff:6b:d1: 02:f7:27:92:70:40:99:0f:46:9a:3b:ee:d9:31:ee: 52:1b:35:1e:74:d1:65:d9:b2:1f:ca:89:2c:be:91: d3:f7:b4:ef:65:ac:86:af:d5:4c:56:e1:ba:dd:6a: 15:6e:a8:5e:9d:5d:a6:78:36:2b:3b:18:8b:28:f3: d4:33:e5:68:8e:d2:0f:01:a3:13:82:fe:fa:a1:bb: cf:d0:7a:41:eb:b0:c6:25:e5:ec:d1:d0:45:01:1a: 2f:1e:39:11:5b:10:f0:29:4b:43:4e:56:5f:fb:d9: dd:d6:a6:18:90:d2:03:26:c5:ba:10:be:f6:d4:0e: ce:25:c5:9c:f4:10:c7:e6:c1:38:d2:f4:89:2c:73: fa:34:2c:18:f9:bb:41:12:ea:81:e1:7f:cc:9b:59: bf:d6:cb:e7:b6:58:98:a6:bf:9d:b4:bf:05:70:b7: 89:8a:14:e9:d7:80:0c:c4:9d:46:df:7f:7c:bf:8d: dd:81:9f:2f:95:4d:5c:a0:2d:91:5b:6a:ae:8c:ba: ce:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:10:A3:DC:D5:DC:96:27:98:A3:31:0B:6A:F0:D4:F8:34:34:13:5E X509v3 Authority Key Identifier: keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d4:cc:0b:2d:bb:17:30:d5:18:be:86:f5:b4:12:f0:1e:5f: 54:32:18:90:c0:8a:82:7c:4b:ba:f6:15:8a:fd:ea:4b:22:d1: a3:cd:c6:e7:bf:8b:c3:44:bd:68:4a:71:49:b1:2e:90:f7:b6: 66:88:8f:2e:68:fd:f8:48:1e:b2:9d:62:39:13:79:7b:8c:6a: b4:6b:8a:bb:24:d1:c7:ee:54:d9:79:e5:9f:aa:b0:7d:79:28: e1:2f:68:b1:71:3b:06:9f:aa:e9:0a:3c:d5:4f:f4:83:66:3f: b2:ef:92:3b:d5:f0:e2:95:7f:43:21:b3:74:06:32:09:06:5f: 46:c9:44:f2:26:4e:ce:49:b5:b1:e9:35:70:d4:46:57:b0:f0: 3c:64:ef:43:7b:4a:79:e7:bc:b3:6a:55:b2:17:9f:1a:60:f7: 6d:27:c3:25:0c:fe:ab:c4:7c:08:9d:02:61:a4:86:11:ff:00: 4d:80:f3:86:3a:da:1e:9f:d5:c0:fa:36:f1:23:7a:bd:6f:0d: 7b:1c:42:39:8a:4b:d7:2a:33:ec:5a:d1:6d:cb:84:43:d0:d0: 69:ff:e5:6f:b6:66:a8:ac:07:21:16:13:c6:85:61:b7:1e:b3: 89:4f:56:3e:bd:d1:da:a6:f7:48:ad:eb:db:2f:c0:aa:87:28: 38:52:90:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzgxQzAxMTAvBgNVBAUTKDUyREU2NzhGQUYzNEYxRjI3QkZENzJDRTc1MkY1Q0Q1 N0U4QzEzQ0UwHhcNMjUwNzAxMDMxMDAzWhcNMjUwNzA4MDMxMDAzWjAYMRYwFAYD VQQDEw02ODYzNTE4Yi1iZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ALNbhQDInevtoeqDf5A5NhZhgKmO2JCmlRsZ4V7dqV1+XEmPAVQ0scSCGaT 0v5aqU3jmRoKOoH/a9EC9yeScECZD0aaO+7ZMe5SGzUedNFl2bIfyoksvpHT97Tv ZayGr9VMVuG63WoVbqhenV2meDYrOxiLKPPUM+VojtIPAaMTgv76obvP0HpB67DG JeXs0dBFARovHjkRWxDwKUtDTlZf+9nd1qYYkNIDJsW6EL721A7OJcWc9BDH5sE4 0vSJLHP6NCwY+btBEuqB4X/Mm1m/1svntliYpr+dtL8FcLeJihTp14AMxJ1G3398 v43dgZ8vlU1coC2RW2qujLrOxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUQo9zV 3JYnmKMxC2rw1Pg0NBNeMB8GA1UdIwQYMBaAFFLeZ4+vNPHye/1yznUvXNV+jBPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODFDMC8yRjI4OUVENjgx MDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhmSjdfWExPZFM5YzFYNk1F ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V0NW5qNjgwOGZKN19YTE9kUzljMVg2TUU4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODFDMC8yRjI4OUVENjgxMDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhm SjdfWExPZFM5YzFYNk1FODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO1MwLLbsXMNUYvob1tBLwHl9UMhiQwIqCfEu69hWK/epLItGjzcbn v4vDRL1oSnFJsS6Q97ZmiI8uaP34SB6ynWI5E3l7jGq0a4q7JNHH7lTZeeWfqrB9 eSjhL2ixcTsGn6rpCjzVT/SDZj+y75I71fDilX9DIbN0BjIJBl9GyUTyJk7OSbWx 6TVw1EZXsPA8ZO9De0p557yzalWyF58aYPdtJ8MlDP6rxHwInQJhpIYR/wBNgPOG Otoen9XA+jbxI3q9bw17HEI5ikvXKjPsWtFty4RD0NBp/+VvtmaorAchFhPGhWG3 HrOJT1Y+vdHapvdIrevbL8Cqhyg4UpCF -----END CERTIFICATE-----Generated at Tue Jul 1 09:21:07 2025 by rpki-client