$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft File: UT8gd9itkRrHe1tcWbPiFMeLAjs.mft (raw, json) Hash identifier: JinshtJpw7TlyyMbIIJ/qhHJFcjjUP02SqBpT2oYKUU= Subject key identifier: 7C:81:F5:48:34:16:79:5B:E6:D8:62:A3:DA:F6:F2:C3:67:74:52:78 Authority key identifier: 51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B Certificate issuer: /CN=A917E1B9/serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B Certificate serial: 05C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft Manifest number: 05C0 Signing time: Sat 28 Jun 2025 22:41:48 +0000 Manifest this update: Sat 28 Jun 2025 22:41:48 +0000 Manifest next update: Sat 05 Jul 2025 22:41:48 +0000 Files and hashes: 1: UT8gd9itkRrHe1tcWbPiFMeLAjs.crl (hash: y/5gdlphd1AIjtZUcKvM/yHUMZee2/Oj86ey5GGNhiE=) 2: 7F27A9D6C88211EBB7A6F948C4F9AE02.roa (hash: mwVl4hNEaIqbBNWJudlbCJK/THwSQhv97GiC3rtYAeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 22:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1478 (0x5c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1B9, serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B Validity Not Before: Jun 28 22:41:48 2025 GMT Not After : Jul 5 22:41:48 2025 GMT Subject: CN=68606fac-a83e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a2:74:1d:19:8d:0e:e8:5c:8c:9f:d4:fc:d5: 55:92:25:8e:7d:e6:3e:4b:57:c7:57:42:51:ff:fb: ec:7e:fa:c3:6c:ef:d4:ec:5b:98:9a:37:15:72:3f: 61:9c:31:df:18:b4:1a:38:fc:1d:5e:1e:7a:e5:c6: 71:df:9f:d1:58:e3:57:2f:ff:27:71:5e:98:ac:65: 2f:f0:1a:42:46:5c:a5:d5:7d:4e:78:23:73:ed:63: 65:4f:38:f3:97:8b:ed:fe:7c:5c:c9:3c:d4:fd:89: 6f:c0:09:56:d6:05:09:7d:7b:e6:a4:c7:95:79:9c: 56:43:90:71:e7:64:7c:a5:9e:a3:24:53:36:a6:c5: 72:94:0b:d4:52:a5:77:9d:2f:3f:ca:b7:b2:d4:c1: 45:ab:7c:44:38:bc:03:1f:92:ac:f7:c8:6f:9d:4a: 9d:f3:94:e0:7f:6a:3a:e5:2b:44:69:23:25:22:1c: 55:33:62:fc:64:9b:d4:30:39:61:4b:e7:4d:c7:3b: 74:23:a3:4b:2a:c9:33:1e:10:b6:71:0c:bc:52:ea: 79:0b:e7:5c:f2:3c:2a:a7:1d:69:27:38:68:a1:4f: 46:1a:81:92:93:67:3c:61:8c:86:e6:c4:59:d7:81: 88:66:86:f4:d1:cc:b3:cb:ce:dd:31:95:20:28:7b: b5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:81:F5:48:34:16:79:5B:E6:D8:62:A3:DA:F6:F2:C3:67:74:52:78 X509v3 Authority Key Identifier: keyid:51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:51:49:a2:3a:57:d4:0b:7c:f9:6a:8e:78:a7:cd:34:8e:55: 4e:87:4a:29:41:83:c7:dd:ba:fa:8d:1a:9c:f0:b7:c6:d8:55: 96:28:37:f5:fa:f3:74:7c:39:11:f1:24:9c:9c:79:34:17:07: cd:5c:93:84:30:8e:8a:c7:ce:58:0b:df:a4:f9:dd:2d:51:6a: 41:62:fc:e7:9d:d1:33:69:7b:1f:15:9e:b9:73:81:c2:ab:46: ca:10:3c:d1:9e:8a:44:fb:25:77:27:65:a7:af:78:df:48:da: 59:55:89:cd:8a:e0:7b:e2:28:f8:74:f8:3a:73:d6:02:5f:58: 14:e5:0b:05:66:b6:82:ae:6b:4f:16:b0:55:a3:ad:5e:93:b5: 77:db:20:37:2d:c9:0f:5b:bf:77:57:ac:c8:27:f5:c7:63:ef: 14:73:8f:eb:9b:18:ae:f2:0f:ee:81:66:c5:ad:74:36:44:e4: 5b:95:75:47:b4:ed:cd:2f:30:ae:d1:27:40:a1:c9:a8:95:63: 04:79:5e:1d:43:8b:4e:6c:92:37:29:74:81:35:75:79:6b:36: 4c:b1:33:61:1c:a4:a8:d5:93:61:88:d3:a9:dd:59:4b:b3:f7: b4:25:1f:04:b6:43:83:2a:79:ea:c5:c0:c9:d9:96:b2:f8:23: 57:77:6d:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxQjkxMTAvBgNVBAUTKDUxM0YyMDc3RDhBRDkxMUFDNzdCNUI1QzU5QjNFMjE0 Qzc4QjAyM0IwHhcNMjUwNjI4MjI0MTQ4WhcNMjUwNzA1MjI0MTQ4WjAYMRYwFAYD VQQDEw02ODYwNmZhYy1hODNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaJ0HRmNDuhcjJ/U/NVVkiWOfeY+S1fHV0JR//vsfvrDbO/U7FuYmjcVcj9h nDHfGLQaOPwdXh565cZx35/RWONXL/8ncV6YrGUv8BpCRlyl1X1OeCNz7WNlTzjz l4vt/nxcyTzU/YlvwAlW1gUJfXvmpMeVeZxWQ5Bx52R8pZ6jJFM2psVylAvUUqV3 nS8/yrey1MFFq3xEOLwDH5Ks98hvnUqd85Tgf2o65StEaSMlIhxVM2L8ZJvUMDlh S+dNxzt0I6NLKskzHhC2cQy8Uup5C+dc8jwqpx1pJzhooU9GGoGSk2c8YYyG5sRZ 14GIZob00cyzy87dMZUgKHu1UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyB9Ug0 Fnlb5thio9r28sNndFJ4MB8GA1UdIwQYMBaAFFE/IHfYrZEax3tbXFmz4hTHiwI7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFCOS9DREI3MDJGNkM4 N0IxMUVCQUZBNjk1M0JDNEY5QUUwMi9VVDhnZDlpdGtSckhlMXRjV2JQaUZNZUxB anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VUOGdkOWl0a1JySGUxdGNXYlBpRk1lTEFqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTFCOS9DREI3MDJGNkM4N0IxMUVCQUZBNjk1M0JDNEY5QUUwMi9VVDhnZDlpdGtS ckhlMXRjV2JQaUZNZUxBanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0UUmiOlfUC3z5ao54p800jlVOh0opQYPH3br6jRqc8LfG2FWWKDf1 +vN0fDkR8SScnHk0FwfNXJOEMI6Kx85YC9+k+d0tUWpBYvznndEzaXsfFZ65c4HC q0bKEDzRnopE+yV3J2Wnr3jfSNpZVYnNiuB74ij4dPg6c9YCX1gU5QsFZraCrmtP FrBVo61ek7V32yA3LckPW793V6zIJ/XHY+8Uc4/rmxiu8g/ugWbFrXQ2RORblXVH tO3NLzCu0SdAocmolWMEeV4dQ4tObJI3KXSBNXV5azZMsTNhHKSo1ZNhiNOp3VlL s/e0JR8EtkODKnnqxcDJ2Zay+CNXd22K -----END CERTIFICATE-----Generated at Sun Jun 29 20:21:29 2025 by rpki-client