$ rpki-client -vvf rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft File: U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft (raw, json) Hash identifier: N8vv+1sw9cdUlWVd4/5YEjQ0LhumTu7NoR/NSv3tpcM= Subject key identifier: DE:52:C0:91:9E:EF:B4:0D:8F:82:D4:A2:D1:D4:67:C6:4B:D7:DE:DE Authority key identifier: 53:EC:8F:4F:10:A9:40:64:46:28:23:AA:29:9B:B2:86:60:0E:DF:09 Certificate issuer: /CN=A9180838/serialNumber=53EC8F4F10A94064462823AA299BB286600EDF09 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft Manifest number: 4D Signing time: Tue 01 Jul 2025 08:06:14 +0000 Manifest this update: Tue 01 Jul 2025 08:06:13 +0000 Manifest next update: Tue 08 Jul 2025 08:06:13 +0000 Files and hashes: 1: U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl (hash: jbt8LInvi/0IbSJpOyoq88paCEadbIj/WBxnYSEHMso=) 2: 30CC092AE53011EFA140503EC4F9AE02.roa (hash: +368O4g5op3NFEyPxMy/g2aKCfQYvcEtTWG1Z/mxGSQ=) 3: DB1C7FA0E52F11EF8A7DB63DC4F9AE02.roa (hash: zY2HFqsbJ8/jLQBMjPpHRfGu9g3E8mXkzh/HPX8tacQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180838, serialNumber=53EC8F4F10A94064462823AA299BB286600EDF09 Validity Not Before: Jul 1 08:06:13 2025 GMT Not After : Jul 8 08:06:13 2025 GMT Subject: CN=686396f6-4983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f9:34:cf:c3:b0:7d:f4:5d:a1:92:b0:ba:e7: 96:35:26:af:60:42:e0:a2:4a:cd:d9:c8:93:ff:71: 3d:62:9c:67:44:60:06:18:f0:04:b4:f2:43:98:2d: b2:76:47:39:d7:a0:fa:1b:cc:66:74:47:46:62:ab: f3:71:2b:38:06:c6:bc:f1:c9:65:55:da:90:40:af: 11:4a:56:d1:6a:b5:38:88:16:c3:3b:7a:50:5a:44: 60:4c:7d:80:4c:b4:e8:5e:f5:05:20:c7:35:b1:d4: da:72:0f:18:61:f7:52:6e:99:e2:4c:83:4b:7a:41: 12:26:c7:1a:32:cb:ec:26:e4:9d:ba:5a:16:9e:01: 1c:ab:2f:20:9a:76:4c:a3:ca:d4:75:9a:1c:83:f0: 5a:23:46:f1:31:e5:86:4a:d7:9a:ff:83:82:32:36: fe:37:c6:97:1b:8c:db:a5:fc:bd:12:2f:fd:23:3c: a6:a2:e8:ad:1d:8a:1a:f2:a1:48:fa:ca:24:63:6c: c8:b5:20:b8:db:6c:27:1e:97:e4:99:06:25:19:a7: 20:c3:57:c0:8f:2b:59:41:38:8c:86:b6:e0:32:d3: 1e:73:cb:60:5e:0f:ce:54:f1:a0:92:86:d0:da:a4: ef:bb:23:15:83:1f:c4:23:f2:18:17:2d:95:a1:a6: dc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:52:C0:91:9E:EF:B4:0D:8F:82:D4:A2:D1:D4:67:C6:4B:D7:DE:DE X509v3 Authority Key Identifier: keyid:53:EC:8F:4F:10:A9:40:64:46:28:23:AA:29:9B:B2:86:60:0E:DF:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:11:61:3a:48:08:f1:3f:88:2d:ef:31:d1:94:34:bf:b3:83: 91:55:74:32:5f:5c:ed:05:d4:da:55:4a:14:45:ef:ef:55:ee: 43:4a:15:01:d6:84:b9:e8:3e:10:6a:d7:ac:52:f9:b6:c0:c8: a9:6c:6f:cd:39:4e:b6:4b:da:4c:ad:c3:ff:e7:10:dc:53:c0: 09:31:2d:1c:c3:3a:e2:3a:44:d6:9b:07:6d:a7:b6:40:68:7c: c0:8f:1e:e6:32:67:d0:b3:1d:0a:16:af:29:52:ad:c9:16:62: 3c:9d:fc:f1:56:07:c7:67:3e:4f:72:ed:29:c8:e9:2a:37:37: 9b:a2:17:43:ad:1f:30:1b:0d:35:2c:95:75:94:76:59:ae:02: 3b:32:64:59:f8:04:84:f3:0b:b3:2d:69:9c:9d:27:e6:21:c7: d1:37:6c:a1:f7:d6:4d:6e:f8:c6:4f:48:ba:38:5e:c5:99:55: b3:21:1c:00:e3:5d:0d:0b:20:88:b4:79:a0:ce:67:44:01:44: 99:24:6b:a9:9a:08:c0:b8:74:ca:b3:f7:c1:a9:a2:f3:f2:5d: be:a3:4d:4d:da:40:eb:ff:53:25:90:71:99:16:ae:d0:05:be: aa:f4:74:e8:63:c1:2f:5e:48:76:18:3f:f2:53:50:a7:89:44: 49:48:fa:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MDgzODExMC8GA1UEBRMoNTNFQzhGNEYxMEE5NDA2NDQ2MjgyM0FBMjk5QkIyODY2 MDBFREYwOTAeFw0yNTA3MDEwODA2MTNaFw0yNTA3MDgwODA2MTNaMBgxFjAUBgNV BAMTDTY4NjM5NmY2LTQ5ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF+TTPw7B99F2hkrC655Y1Jq9gQuCiSs3ZyJP/cT1inGdEYAYY8AS08kOYLbJ2 RznXoPobzGZ0R0Ziq/NxKzgGxrzxyWVV2pBArxFKVtFqtTiIFsM7elBaRGBMfYBM tOhe9QUgxzWx1NpyDxhh91JumeJMg0t6QRImxxoyy+wm5J26WhaeARyrLyCadkyj ytR1mhyD8FojRvEx5YZK15r/g4IyNv43xpcbjNul/L0SL/0jPKai6K0dihryoUj6 yiRjbMi1ILjbbCcel+SZBiUZpyDDV8CPK1lBOIyGtuAy0x5zy2BeD85U8aCShtDa pO+7IxWDH8Qj8hgXLZWhptwXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3lLAkZ7v tA2PgtSi0dRnxkvX3t4wHwYDVR0jBBgwFoAUU+yPTxCpQGRGKCOqKZuyhmAO3wkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwODM4LzBEMTk5NTdBRTUy QTExRUY4RjRBREYxOUM0RjlBRTAyL1UteVBUeENwUUdSR0tDT3FLWnV5aG1BTzN3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVS15UFR4Q3BRR1JHS0NPcUtadXlobUFPM3drLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw ODM4LzBEMTk5NTdBRTUyQTExRUY4RjRBREYxOUM0RjlBRTAyL1UteVBUeENwUUdS R0tDT3FLWnV5aG1BTzN3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG8RYTpICPE/iC3vMdGUNL+zg5FVdDJfXO0F1NpVShRF7+9V7kNKFQHW hLnoPhBq16xS+bbAyKlsb805TrZL2kytw//nENxTwAkxLRzDOuI6RNabB22ntkBo fMCPHuYyZ9CzHQoWrylSrckWYjyd/PFWB8dnPk9y7SnI6So3N5uiF0OtHzAbDTUs lXWUdlmuAjsyZFn4BITzC7MtaZydJ+Yhx9E3bKH31k1u+MZPSLo4XsWZVbMhHADj XQ0LIIi0eaDOZ0QBRJkka6maCMC4dMqz98GpovPyXb6jTU3aQOv/UyWQcZkWrtAF vqr0dOhjwS9eSHYYP/JTUKeJRElI+mY= -----END CERTIFICATE-----Generated at Thu Jul 3 06:09:06 2025 by rpki-client