$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft File: Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft (raw, json) Hash identifier: M4PZYdnVyx3Yi5OIrW2CxQx8WC0kW3MslM52jjTQf1k= Subject key identifier: 22:69:A5:64:30:24:61:28:5E:E1:AA:62:D5:24:66:4A:52:5C:0D:13 Authority key identifier: 51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98 Certificate issuer: /CN=A9183B33/serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798 Certificate serial: 0660 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft Manifest number: 0657 Signing time: Fri 04 Jul 2025 23:00:28 +0000 Manifest this update: Fri 04 Jul 2025 23:00:27 +0000 Manifest next update: Fri 11 Jul 2025 23:00:27 +0000 Files and hashes: 1: Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl (hash: W8PLfKuqx/IoxjHtCoKw4CN0lwNs32IEhmVfmuA8ZE8=) 2: 59018DEE340611ED9C72786AC4F9AE02.roa (hash: rP6Pu7EfL4ZTfd4hkNZXRMND1x04kCFhfmQKKfFcDnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1632 (0x660) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B33, serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798 Validity Not Before: Jul 4 23:00:27 2025 GMT Not After : Jul 11 23:00:27 2025 GMT Subject: CN=68685d0b-7ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:7a:fa:50:a5:2a:5d:9a:76:59:5e:cf:78: 15:0a:c9:c1:64:1e:ce:aa:33:79:3a:dd:24:aa:fb: 07:d4:f3:de:34:e9:e6:2e:b1:74:58:43:92:9c:1a: fa:30:70:24:e7:93:ef:8a:ea:1c:b2:74:36:69:e4: dc:05:b2:5b:94:79:95:cb:c8:31:f2:3b:0d:27:d0: de:a6:ad:75:79:4c:80:67:52:40:45:ba:46:f7:de: c1:e5:d2:06:64:50:21:7c:f2:88:b4:e8:23:d5:9d: cf:0b:7e:a1:c8:87:90:64:1a:87:b6:14:4c:94:9e: d3:40:32:07:e2:4e:34:91:a3:b3:50:b4:f1:9b:89: 4c:23:97:94:a6:05:34:c1:ef:1b:24:6a:b8:67:b5: ff:48:26:49:b8:4d:d3:cd:70:a0:2e:15:62:19:69: e5:ec:df:5d:b9:56:79:54:5c:93:39:48:93:af:4e: 5e:92:58:22:bc:a8:3a:d9:dc:5e:73:3a:ab:4f:c7: 80:70:b2:f7:03:18:64:ff:c7:ff:55:65:e9:34:38: 56:23:90:f7:7e:5e:eb:82:63:bc:25:1b:e8:e9:d1: e5:95:40:91:b7:52:d9:28:c9:85:9c:43:19:7b:4a: 6c:d5:70:40:88:62:9f:92:a1:e7:34:82:40:cf:fb: 25:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:69:A5:64:30:24:61:28:5E:E1:AA:62:D5:24:66:4A:52:5C:0D:13 X509v3 Authority Key Identifier: keyid:51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:ca:f6:82:73:40:a0:5a:fd:ad:20:61:4a:03:24:04:2b:13: ad:f0:68:7d:43:a3:af:25:f1:5f:f4:96:4a:35:14:9e:45:16: bd:f4:dd:dc:a6:f8:c3:d1:69:cd:96:70:79:92:18:72:34:a3: 85:30:95:e0:97:e9:c1:f7:af:b9:48:81:a3:5b:74:c0:c8:a0: 3d:10:85:f1:01:34:d9:11:e6:69:ba:ae:59:40:87:0c:5a:15: a7:44:0f:30:26:33:7d:6a:0f:bf:a8:20:0b:2a:7e:2b:24:94: f8:98:11:32:b8:42:54:93:89:38:cc:d3:9d:6f:e9:25:a0:8d: 59:8c:7c:10:23:01:43:a5:3f:a6:ab:63:52:29:a2:19:86:b7: e8:c3:74:37:d4:16:ec:5f:7d:a1:ff:05:9e:8e:11:9b:a4:00: 2a:55:a5:a8:24:75:aa:cd:c4:9b:37:a3:10:f3:b6:df:c7:9d: b9:82:4e:c3:50:2c:92:be:ca:84:75:5d:1a:7a:29:3d:cc:3b: 06:de:b2:3c:3e:75:69:57:7f:b6:98:91:9e:5d:15:30:82:d9: 93:9b:2a:7c:a2:23:1e:f6:3b:56:f5:11:98:91:43:d2:d8:6a: 3c:a5:35:22:96:d4:6a:83:07:aa:c7:09:b1:8c:18:c3:41:8c: 17:d6:7f:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCMzMxMTAvBgNVBAUTKDUxQUVCQTIzRkI3NDVBNTUzQTVFNDk5NkRGMUM4MTcz NDczRjE3OTgwHhcNMjUwNzA0MjMwMDI3WhcNMjUwNzExMjMwMDI3WjAYMRYwFAYD VQQDEw02ODY4NWQwYi03ZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTV6+lClKl2adllez3gVCsnBZB7OqjN5Ot0kqvsH1PPeNOnmLrF0WEOSnBr6 MHAk55PviuocsnQ2aeTcBbJblHmVy8gx8jsNJ9Depq11eUyAZ1JARbpG997B5dIG ZFAhfPKItOgj1Z3PC36hyIeQZBqHthRMlJ7TQDIH4k40kaOzULTxm4lMI5eUpgU0 we8bJGq4Z7X/SCZJuE3TzXCgLhViGWnl7N9duVZ5VFyTOUiTr05eklgivKg62dxe czqrT8eAcLL3Axhk/8f/VWXpNDhWI5D3fl7rgmO8JRvo6dHllUCRt1LZKMmFnEMZ e0ps1XBAiGKfkqHnNIJAz/slUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJppWQw JGEoXuGqYtUkZkpSXA0TMB8GA1UdIwQYMBaAFFGuuiP7dFpVOl5Jlt8cgXNHPxeY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0IzMy9DRDM1REIxQTkx MjQxMUVCOUI3MjkwM0FDNEY5QUUwMi9VYTY2SV90MFdsVTZYa21XM3h5QmMwY19G NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VhNjZJX3QwV2xVNlhrbVczeHlCYzBjX0Y1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0IzMy9DRDM1REIxQTkxMjQxMUVCOUI3MjkwM0FDNEY5QUUwMi9VYTY2SV90MFds VTZYa21XM3h5QmMwY19GNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUyvaCc0CgWv2tIGFKAyQEKxOt8Gh9Q6OvJfFf9JZKNRSeRRa99N3c pvjD0WnNlnB5khhyNKOFMJXgl+nB96+5SIGjW3TAyKA9EIXxATTZEeZpuq5ZQIcM WhWnRA8wJjN9ag+/qCALKn4rJJT4mBEyuEJUk4k4zNOdb+kloI1ZjHwQIwFDpT+m q2NSKaIZhrfow3Q31BbsX32h/wWejhGbpAAqVaWoJHWqzcSbN6MQ87bfx525gk7D UCySvsqEdV0aeik9zDsG3rI8PnVpV3+2mJGeXRUwgtmTmyp8oiMe9jtW9RGYkUPS 2Go8pTUiltRqgweqxwmxjBjDQYwX1n/1 -----END CERTIFICATE-----Generated at Sat Jul 5 11:44:14 2025 by rpki-client