$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft File: lUpwG6oMkx0BduSFt6KHwTFlJg4.mft (raw, json) Hash identifier: I9tZBWOPH4orAsxOpHHnGb/MbAU2DXr/29bLbre3oWA= Subject key identifier: 22:90:85:73:01:63:5D:7D:A4:67:55:1D:9B:55:F2:5C:C5:06:1B:F0 Authority key identifier: 95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E Certificate issuer: /CN=A9185CED/serialNumber=954A701BAA0C931D0176E485B7A287C13165260E Certificate serial: 0649 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft Manifest number: 0647 Signing time: Wed 02 Jul 2025 22:54:56 +0000 Manifest this update: Wed 02 Jul 2025 22:54:56 +0000 Manifest next update: Wed 09 Jul 2025 22:54:56 +0000 Files and hashes: 1: lUpwG6oMkx0BduSFt6KHwTFlJg4.crl (hash: BwovxQQVB7Y60WVK8G/K0V5hVwOgCmdxOsgXc1N0yZY=) 2: 3A84DC2C44E411EFB0C1A135C4F9AE02.roa (hash: JGxMB26ttBekYTYeINbF/ZGgUOz7c1MGNzdVG0LlGY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1609 (0x649) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185CED, serialNumber=954A701BAA0C931D0176E485B7A287C13165260E Validity Not Before: Jul 2 22:54:56 2025 GMT Not After : Jul 9 22:54:56 2025 GMT Subject: CN=6865b8c0-6611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cc:bd:4e:49:49:89:44:42:6a:ee:f3:26:2b: a1:bb:96:0e:28:43:f7:c8:1e:00:2f:47:b7:3b:48: 7a:9d:88:4f:63:57:b0:51:7f:04:e5:14:fb:79:63: f1:28:b9:46:6c:2d:41:b2:30:d4:8f:17:45:36:cb: ff:97:db:ec:67:65:12:07:4d:ed:67:63:b1:99:87: 37:4e:4b:2a:c8:26:d6:b7:af:a7:47:1a:2d:5f:0c: 29:8f:7f:33:8e:f3:1b:7d:a0:9b:7b:34:c6:e0:48: 3f:2e:ac:30:3b:0c:07:cb:6f:b0:1f:78:ec:05:3f: 4c:71:a4:e6:5c:63:a6:1f:8e:57:76:3c:93:67:88: a9:75:61:5c:28:a6:92:0b:07:dc:f9:35:ce:72:f2: c6:5d:a6:e8:5c:dc:60:08:a9:42:ee:a4:03:f2:ad: c6:55:11:3b:c9:23:7a:46:c1:a0:49:9f:96:41:0e: 9f:4e:5c:e9:70:e3:12:93:3c:66:ce:9e:55:d6:c6: be:54:22:b4:40:0e:91:db:a5:fe:74:8d:3f:2d:9c: 9b:ed:a0:9b:1e:bd:56:e2:e2:af:c3:c0:24:29:e7: 00:57:18:a4:d0:f5:33:9a:d8:25:d0:4a:62:a8:2b: cd:5e:43:8f:b4:31:be:62:85:01:66:5a:60:f5:f2: b5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:90:85:73:01:63:5D:7D:A4:67:55:1D:9B:55:F2:5C:C5:06:1B:F0 X509v3 Authority Key Identifier: keyid:95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:17:d7:bb:5b:68:68:a2:87:7e:3d:b4:a3:13:84:64:81:15: 05:d0:19:e2:81:16:c4:a0:fd:f1:ce:9d:b3:73:fb:d8:4c:b4: 04:1c:95:9d:55:29:64:8f:97:0c:34:c4:d1:7e:05:70:de:66: 99:05:72:e6:fb:c2:72:ff:ef:9f:33:77:02:60:8d:1a:07:d6: d7:70:6e:56:37:59:4d:15:08:82:b8:04:16:0a:48:5b:9b:b5: 62:42:19:a3:b4:62:4a:d1:f0:ba:d3:22:bb:17:5d:70:37:ac: d6:73:3e:0a:42:fd:79:93:76:f4:12:09:f5:92:47:d9:03:f6: 8f:76:e7:03:3c:8c:41:23:37:39:67:79:20:01:01:03:63:7d: 26:da:49:c6:31:69:68:ca:fb:b6:68:b2:fc:9d:d2:89:c7:6e: 55:0a:16:ba:33:03:e6:c7:7f:3d:64:54:5d:dc:a7:cc:7e:c0: a1:54:0a:3b:76:7f:43:80:e1:89:19:07:a2:c1:fb:9a:36:63: f8:4a:b7:9e:66:44:52:6c:16:a5:7b:f1:03:41:00:3a:c4:16: 7f:5c:63:70:8a:fe:4b:8d:45:5d:fc:12:93:98:01:b5:a5:18: a6:83:28:22:59:e0:af:89:e8:03:10:5d:6e:c9:f3:42:59:90: db:8f:fc:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVDRUQxMTAvBgNVBAUTKDk1NEE3MDFCQUEwQzkzMUQwMTc2RTQ4NUI3QTI4N0Mx MzE2NTI2MEUwHhcNMjUwNzAyMjI1NDU2WhcNMjUwNzA5MjI1NDU2WjAYMRYwFAYD VQQDEw02ODY1YjhjMC02NjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcy9TklJiURCau7zJiuhu5YOKEP3yB4AL0e3O0h6nYhPY1ewUX8E5RT7eWPx KLlGbC1BsjDUjxdFNsv/l9vsZ2USB03tZ2OxmYc3TksqyCbWt6+nRxotXwwpj38z jvMbfaCbezTG4Eg/LqwwOwwHy2+wH3jsBT9McaTmXGOmH45XdjyTZ4ipdWFcKKaS Cwfc+TXOcvLGXaboXNxgCKlC7qQD8q3GVRE7ySN6RsGgSZ+WQQ6fTlzpcOMSkzxm zp5V1sa+VCK0QA6R26X+dI0/LZyb7aCbHr1W4uKvw8AkKecAVxik0PUzmtgl0Epi qCvNXkOPtDG+YoUBZlpg9fK1OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKQhXMB Y119pGdVHZtV8lzFBhvwMB8GA1UdIwQYMBaAFJVKcBuqDJMdAXbkhbeih8ExZSYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUNFRC8xQUFGN0Q5NDky MjcxMUVCQkU3MzRGNDBDNEY5QUUwMi9sVXB3RzZvTWt4MEJkdVNGdDZLSHdURmxK ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xVcHdHNm9Na3gwQmR1U0Z0NktId1RGbEpnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUNFRC8xQUFGN0Q5NDkyMjcxMUVCQkU3MzRGNDBDNEY5QUUwMi9sVXB3RzZvTWt4 MEJkdVNGdDZLSHdURmxKZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqF9e7W2hoood+PbSjE4RkgRUF0BnigRbEoP3xzp2zc/vYTLQEHJWd VSlkj5cMNMTRfgVw3maZBXLm+8Jy/++fM3cCYI0aB9bXcG5WN1lNFQiCuAQWCkhb m7ViQhmjtGJK0fC60yK7F11wN6zWcz4KQv15k3b0Egn1kkfZA/aPducDPIxBIzc5 Z3kgAQEDY30m2knGMWloyvu2aLL8ndKJx25VCha6MwPmx389ZFRd3KfMfsChVAo7 dn9DgOGJGQeiwfuaNmP4SreeZkRSbBale/EDQQA6xBZ/XGNwiv5LjUVd/BKTmAG1 pRimgygiWeCviegDEF1uyfNCWZDbj/wX -----END CERTIFICATE-----Generated at Thu Jul 3 10:15:10 2025 by rpki-client