$ rpki-client -vvf rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft File: uD4K6Pgr-gYejEvHvnPpuANUDWM.mft (raw, json) Hash identifier: 6PetzJilgtf0yzC4vHgb/OJBp9oqVBUpKK3Zv4Vs724= Subject key identifier: F5:6C:8E:7A:B7:C3:F1:D5:7D:C3:37:94:28:16:45:FE:77:49:7A:E1 Authority key identifier: B8:3E:0A:E8:F8:2B:FA:06:1E:8C:4B:C7:BE:73:E9:B8:03:54:0D:63 Certificate issuer: /CN=A9180386/serialNumber=B83E0AE8F82BFA061E8C4BC7BE73E9B803540D63 Certificate serial: 033A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft Manifest number: 0331 Signing time: Thu 03 Jul 2025 01:27:57 +0000 Manifest this update: Thu 03 Jul 2025 01:27:57 +0000 Manifest next update: Thu 10 Jul 2025 01:27:57 +0000 Files and hashes: 1: uD4K6Pgr-gYejEvHvnPpuANUDWM.crl (hash: Ix7GlaJs0dzZqyeJRyBojvffZyHMRTCrZUaSUcFlKxo=) 2: 2EBCD6C6CCF311EC86719729C4F9AE02.roa (hash: erIavO1BEA6yuxW1Ddxiq0YuolkG7uHYxff0nzGvNyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.crl rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 826 (0x33a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180386, serialNumber=B83E0AE8F82BFA061E8C4BC7BE73E9B803540D63 Validity Not Before: Jul 3 01:27:57 2025 GMT Not After : Jul 10 01:27:57 2025 GMT Subject: CN=6865dc9d-0230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ac:b5:66:cd:26:1b:b7:20:b4:03:a3:d3:97: d5:d9:a5:2b:dc:34:a0:4e:31:e5:ca:76:28:96:04: 21:d1:73:73:3b:8b:66:26:7e:58:08:32:bb:c3:0b: fd:3d:98:54:f6:b5:a8:03:a9:23:5b:0e:7b:65:a2: 5e:85:e2:52:b2:26:f5:50:86:e4:e7:7d:57:74:61: 8a:4d:49:fc:ad:21:c5:d7:75:3b:60:6f:86:f2:55: 47:da:1e:cb:46:8c:55:99:c2:72:5f:03:c8:02:89: 3c:c0:03:e2:22:b2:91:1a:e0:b6:ee:db:0b:aa:f8: 0d:53:2f:45:8c:77:5d:6d:bc:60:58:bc:a3:2a:e8: 87:d1:fe:b9:5c:d2:23:ad:29:6a:38:3f:66:d6:a2: f1:fe:be:5a:d2:cc:4c:3f:ca:6c:c0:33:62:7b:40: db:bb:db:3b:b7:51:81:4c:44:c1:53:e2:e5:f6:b3: a6:33:ca:eb:b0:6d:1a:00:3a:3f:07:31:34:af:fc: 4c:0e:df:de:a6:3d:db:e3:10:97:68:c0:99:78:d1: f8:03:25:5e:8c:e4:05:79:32:ad:3b:35:93:16:43: 61:7a:19:15:0b:52:af:c8:0f:a5:3f:db:5c:e3:1c: c4:92:f6:25:c2:03:7e:4c:a8:19:91:c3:93:4e:2a: e1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6C:8E:7A:B7:C3:F1:D5:7D:C3:37:94:28:16:45:FE:77:49:7A:E1 X509v3 Authority Key Identifier: keyid:B8:3E:0A:E8:F8:2B:FA:06:1E:8C:4B:C7:BE:73:E9:B8:03:54:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:9f:8b:bc:15:76:69:0d:41:98:0b:4e:b2:66:4d:e7:7c:14: 2e:00:fc:9d:0e:ca:d6:8b:2e:06:2b:45:f6:bb:72:78:56:d1: 9f:c2:b7:0d:85:9b:f7:46:08:65:15:9b:ed:cf:0a:2a:cc:93: dd:b8:14:7c:14:49:3e:9a:f4:da:ec:87:03:5c:81:53:e7:d5: 6b:2d:b1:44:30:c0:c4:da:9a:3a:82:c1:5c:63:58:e0:b2:12: 08:21:f1:7c:e0:49:85:d9:8b:34:c2:56:50:f2:4a:68:1b:79: 39:f1:e3:95:5c:4d:7a:30:b2:64:a6:2e:1b:c5:dc:27:de:4b: 8e:11:cb:bd:44:24:f1:e6:22:f7:dd:0f:26:2f:e6:42:94:3c: 28:28:a7:e5:07:0a:4a:d8:0e:7d:cb:f6:53:f0:69:90:3a:b8: 61:8c:56:2e:fe:9e:e6:94:7c:23:a8:38:0e:d7:e9:4a:3a:ec: 76:18:b0:ec:ff:5d:76:ca:e9:96:96:f5:0a:25:63:56:0b:ba: ea:4b:26:15:90:61:88:68:93:90:ca:a7:d0:2e:35:e9:ac:3c: 29:c6:ac:07:29:f8:e6:46:36:fb:7f:5d:d1:36:a2:d9:e4:49: 8c:cd:dd:32:34:9a:86:b2:47:3f:6c:69:e9:c4:a0:a2:14:06: 9a:59:2b:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzODYxMTAvBgNVBAUTKEI4M0UwQUU4RjgyQkZBMDYxRThDNEJDN0JFNzNFOUI4 MDM1NDBENjMwHhcNMjUwNzAzMDEyNzU3WhcNMjUwNzEwMDEyNzU3WjAYMRYwFAYD VQQDEw02ODY1ZGM5ZC0wMjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6y1Zs0mG7cgtAOj05fV2aUr3DSgTjHlynYolgQh0XNzO4tmJn5YCDK7wwv9 PZhU9rWoA6kjWw57ZaJeheJSsib1UIbk531XdGGKTUn8rSHF13U7YG+G8lVH2h7L RoxVmcJyXwPIAok8wAPiIrKRGuC27tsLqvgNUy9FjHddbbxgWLyjKuiH0f65XNIj rSlqOD9m1qLx/r5a0sxMP8pswDNie0Dbu9s7t1GBTETBU+Ll9rOmM8rrsG0aADo/ BzE0r/xMDt/epj3b4xCXaMCZeNH4AyVejOQFeTKtOzWTFkNhehkVC1KvyA+lP9tc 4xzEkvYlwgN+TKgZkcOTTirhTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVsjnq3 w/HVfcM3lCgWRf53SXrhMB8GA1UdIwQYMBaAFLg+Cuj4K/oGHoxLx75z6bgDVA1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDM4Ni8wNkY4NDA4Q0ND RjExMUVDQkVBOTZGMjlDNEY5QUUwMi91RDRLNlBnci1nWWVqRXZIdm5QcHVBTlVE V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VENEs2UGdyLWdZZWpFdkh2blBwdUFOVURXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDM4Ni8wNkY4NDA4Q0NDRjExMUVDQkVBOTZGMjlDNEY5QUUwMi91RDRLNlBnci1n WWVqRXZIdm5QcHVBTlVEV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+n4u8FXZpDUGYC06yZk3nfBQuAPydDsrWiy4GK0X2u3J4VtGfwrcN hZv3RghlFZvtzwoqzJPduBR8FEk+mvTa7IcDXIFT59VrLbFEMMDE2po6gsFcY1jg shIIIfF84EmF2Ys0wlZQ8kpoG3k58eOVXE16MLJkpi4bxdwn3kuOEcu9RCTx5iL3 3Q8mL+ZClDwoKKflBwpK2A59y/ZT8GmQOrhhjFYu/p7mlHwjqDgO1+lKOux2GLDs /112yumWlvUKJWNWC7rqSyYVkGGIaJOQyqfQLjXprDwpxqwHKfjmRjb7f13RNqLZ 5EmMzd0yNJqGskc/bGnpxKCiFAaaWSuj -----END CERTIFICATE-----Generated at Thu Jul 3 06:04:26 2025 by rpki-client