$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft File: uf67oJzxCyh-7SzlZyKzyaDvEv8.mft (raw, json) Hash identifier: T+HxvMoUj10t57SZGVtGatZ7RRihAy2rBuwmGZHk+J0= Subject key identifier: 2C:BE:C7:82:F4:23:1D:EF:DF:9C:16:54:D7:2A:D1:28:C1:A7:F7:C9 Authority key identifier: B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF Certificate issuer: /CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Certificate serial: 0997 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft Manifest number: 0991 Signing time: Wed 02 Jul 2025 20:19:59 +0000 Manifest this update: Wed 02 Jul 2025 20:19:58 +0000 Manifest next update: Wed 09 Jul 2025 20:19:58 +0000 Files and hashes: 1: uf67oJzxCyh-7SzlZyKzyaDvEv8.crl (hash: qP+KiQd0TngTsCNbGFnZlHcRM8v7/z7q6MRdgvAtKhQ=) 2: 27030ADA8EB211EA9D09090FC4F9AE02.roa (hash: KzsEqYZi4RymBpkz6QVCB3ieArM+VhARkW/2ksmdU8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2455 (0x997) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB7A, serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Validity Not Before: Jul 2 20:19:58 2025 GMT Not After : Jul 9 20:19:58 2025 GMT Subject: CN=6865946e-34a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b9:9f:91:43:fc:81:4d:43:c0:fd:81:94:d3: 0a:43:6c:d0:29:5d:2a:8d:8a:b1:15:f7:ec:25:09: 24:53:c6:95:de:ee:63:b9:9f:32:49:a6:d4:72:63: 7b:85:be:83:68:02:5a:f8:25:f9:a2:84:eb:37:6f: 84:43:a2:5a:90:7a:03:a3:fa:a3:a7:ba:73:ac:2f: 3f:25:98:77:aa:6c:7d:51:7e:77:40:d8:c6:74:88: fb:af:49:74:56:66:0d:70:f2:88:e9:85:56:10:bd: 22:cb:a1:bd:91:49:93:b6:cf:d6:ca:c1:28:fb:a1: 4f:81:d0:fa:b6:3b:f2:e4:c2:ce:d5:10:02:1b:53: bc:ec:c2:86:3e:63:46:b0:3a:d4:da:7a:de:7d:1e: 16:f1:21:9d:ef:ba:c7:d8:7b:d3:50:1f:0d:94:95: 6c:dd:d9:e9:21:d6:e3:76:37:eb:ab:63:91:d0:e0: 7d:b3:a7:02:46:a5:24:15:21:53:3f:62:5b:47:39: 13:f7:b6:54:fb:a6:a9:e7:04:fd:07:65:1c:ab:35: 4f:04:4b:1e:be:e2:98:17:c4:42:6f:d6:45:b0:ff: fd:54:51:4c:66:dc:03:3a:09:45:9f:0b:6a:4f:de: f1:06:6b:a0:43:9e:4d:05:60:f3:31:86:b9:57:f9: b8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BE:C7:82:F4:23:1D:EF:DF:9C:16:54:D7:2A:D1:28:C1:A7:F7:C9 X509v3 Authority Key Identifier: keyid:B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:5a:49:a4:09:4d:4a:9c:0e:37:50:95:6b:b4:a8:f2:e3:94: 06:90:38:18:2e:cb:cf:77:b1:a1:15:92:60:c7:cf:b5:b3:c0: 18:b2:cd:b4:0c:62:9d:b8:3d:06:37:c6:bd:8b:af:75:ad:e3: c3:03:93:6a:cc:84:90:8f:d7:7e:dc:24:98:f9:87:77:0d:f9: ed:79:b7:f5:0f:cd:9a:c9:c5:c0:78:0a:84:77:bb:01:40:43: b8:e4:59:85:3e:bd:ff:12:c1:19:63:8f:75:87:6d:32:d8:3d: 0d:ec:4f:76:0d:67:5d:34:b4:48:68:24:ae:c5:3b:6d:29:24: 2d:00:0b:1d:9d:08:50:e6:6e:ab:29:05:7c:9a:22:a6:e4:48: 1f:b8:18:a5:f8:8f:49:c3:e5:ec:1b:8d:9c:36:b0:41:cc:5c: 98:49:70:58:c6:f7:fd:7a:9c:0f:06:5f:8b:d2:75:a1:a6:61: 2c:93:c4:b1:ad:03:25:15:9b:73:48:11:a0:75:01:e7:76:df: 96:dc:b7:5d:49:06:eb:19:10:fb:fb:58:60:90:14:09:e1:fc: 3c:eb:ab:e9:07:77:2a:fc:71:93:d0:6a:b6:17:65:73:7d:4b: f1:8b:53:6d:23:04:bc:f6:42:4d:76:3e:9b:58:58:74:80:63: e0:c1:36:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCN0ExMTAvBgNVBAUTKEI5RkVCQkEwOUNGMTBCMjg3RUVEMkNFNTY3MjJCM0M5 QTBFRjEyRkYwHhcNMjUwNzAyMjAxOTU4WhcNMjUwNzA5MjAxOTU4WjAYMRYwFAYD VQQDEw02ODY1OTQ2ZS0zNGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bmfkUP8gU1DwP2BlNMKQ2zQKV0qjYqxFffsJQkkU8aV3u5juZ8ySabUcmN7 hb6DaAJa+CX5ooTrN2+EQ6JakHoDo/qjp7pzrC8/JZh3qmx9UX53QNjGdIj7r0l0 VmYNcPKI6YVWEL0iy6G9kUmTts/WysEo+6FPgdD6tjvy5MLO1RACG1O87MKGPmNG sDrU2nrefR4W8SGd77rH2HvTUB8NlJVs3dnpIdbjdjfrq2OR0OB9s6cCRqUkFSFT P2JbRzkT97ZU+6ap5wT9B2UcqzVPBEsevuKYF8RCb9ZFsP/9VFFMZtwDOglFnwtq T97xBmugQ55NBWDzMYa5V/m4WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCy+x4L0 Ix3v35wWVNcq0SjBp/fJMB8GA1UdIwQYMBaAFLn+u6Cc8Qsofu0s5Wcis8mg7xL/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI3QS81RDIxMTg0QzhF QjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5aC03U3psWnlLenlhRHZF djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmNjdvSnp4Q3loLTdTemxaeUt6eWFEdkV2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkI3QS81RDIxMTg0QzhFQjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5 aC03U3psWnlLenlhRHZFdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRWkmkCU1KnA43UJVrtKjy45QGkDgYLsvPd7GhFZJgx8+1s8AYss20 DGKduD0GN8a9i691rePDA5NqzISQj9d+3CSY+Yd3Dfntebf1D82aycXAeAqEd7sB QEO45FmFPr3/EsEZY491h20y2D0N7E92DWddNLRIaCSuxTttKSQtAAsdnQhQ5m6r KQV8miKm5EgfuBil+I9Jw+XsG42cNrBBzFyYSXBYxvf9epwPBl+L0nWhpmEsk8Sx rQMlFZtzSBGgdQHndt+W3LddSQbrGRD7+1hgkBQJ4fw866vpB3cq/HGT0Gq2F2Vz fUvxi1NtIwS89kJNdj6bWFh0gGPgwTYO -----END CERTIFICATE-----Generated at Thu Jul 3 15:04:02 2025 by rpki-client