$ rpki-client -vvf rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft File: UnWd41wCZ5226TLqiGidwQ1czK4.mft (raw, json) Hash identifier: 8BQ/iqMA77FXuWePUA0wA5jLjz5jt7eS+PNA2cXDvjc= Subject key identifier: AB:EA:7E:4D:55:20:A6:04:B4:52:F7:7E:60:3C:44:44:D2:44:F4:56 Authority key identifier: 52:75:9D:E3:5C:02:67:9D:B6:E9:32:EA:88:68:9D:C1:0D:5C:CC:AE Certificate issuer: /CN=A919014C/serialNumber=52759DE35C02679DB6E932EA88689DC10D5CCCAE Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft Manifest number: 0151 Signing time: Thu 03 Jul 2025 04:15:41 +0000 Manifest this update: Thu 03 Jul 2025 04:15:40 +0000 Manifest next update: Thu 10 Jul 2025 04:15:40 +0000 Files and hashes: 1: UnWd41wCZ5226TLqiGidwQ1czK4.crl (hash: +OSR9YkvgC5qB9P21qAUMpxJKB7++KOn28ZR0Tpml4k=) 2: 503DC7FA547F11EE9512EE75C4F9AE02.roa (hash: 33db+G2HmqK4GM+/q2Pot6yftpHMysN5n0HwgMWkack=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.crl rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919014C, serialNumber=52759DE35C02679DB6E932EA88689DC10D5CCCAE Validity Not Before: Jul 3 04:15:40 2025 GMT Not After : Jul 10 04:15:40 2025 GMT Subject: CN=686603ec-fcd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3e:da:f4:c7:ce:a0:fd:2b:eb:2e:4a:c9:5f: af:2a:f5:ce:c9:57:32:95:be:57:02:8c:ec:84:c5: 21:08:b5:86:56:10:35:0a:96:42:ac:4c:a3:c9:b8: 14:95:22:4e:e0:f9:b5:47:68:e3:ee:c9:0f:c5:38: 5f:48:34:3b:cc:bf:3f:3d:60:81:07:dd:c7:a0:47: da:d4:46:6b:a7:9a:f7:8c:91:c6:22:ae:f4:75:a5: 23:fe:77:54:8e:32:fb:1f:4c:34:b0:dc:0e:69:4a: 03:d4:e1:f1:17:0c:63:31:34:b0:d0:41:2b:91:41: 71:2f:5d:ee:9e:a2:6c:47:ef:59:22:73:01:e1:5b: 84:a4:a5:b2:cc:20:82:00:42:b6:da:51:55:18:48: 5a:48:46:c6:1e:a1:a7:a4:ba:9e:a4:50:a3:6b:ea: ff:c0:8f:58:e6:77:12:41:a8:fc:81:f6:b6:08:44: 14:ab:c8:b7:f3:00:59:52:d0:b2:ed:68:8a:bb:8a: 05:f1:ad:46:52:d7:63:87:19:25:0c:f2:22:46:11: 9c:5d:fc:9a:64:e2:a4:46:b0:f9:cc:00:dc:6c:c6: 22:b6:98:11:e4:9e:56:db:e1:d8:12:b9:b4:77:30: 9f:fa:e5:b3:5f:d2:68:a4:93:1b:41:4a:10:4e:49: 21:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EA:7E:4D:55:20:A6:04:B4:52:F7:7E:60:3C:44:44:D2:44:F4:56 X509v3 Authority Key Identifier: keyid:52:75:9D:E3:5C:02:67:9D:B6:E9:32:EA:88:68:9D:C1:0D:5C:CC:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:8d:c4:dd:25:bc:4d:ac:65:70:aa:19:a7:5f:34:13:37:21: a1:ad:0b:c4:61:10:aa:7a:84:66:33:b8:1e:57:09:b0:60:ab: c5:69:fe:93:e3:d7:95:04:94:e7:75:33:15:1e:a4:09:ad:d7: c4:40:74:29:2e:43:3b:8d:4e:c3:9b:54:99:22:c9:4f:7d:1f: a0:d7:dc:78:cc:2e:af:e7:65:71:77:bb:28:7b:f6:e2:58:6c: 3f:bd:5b:99:a6:b9:70:a0:79:05:ea:ce:73:23:2b:5d:be:8c: a6:f6:a2:3e:13:95:5e:82:e8:f1:a2:59:04:94:61:a9:4e:9e: 14:1a:b7:4c:4f:e1:53:bc:6d:d0:e3:57:f9:62:a5:0d:d8:a1: a5:ae:23:71:13:ad:d4:14:c1:4a:84:2f:98:18:da:b0:b3:dd: ad:bb:c2:1d:f5:29:d5:51:1e:3e:65:10:c4:12:2d:a4:44:3b: 1c:de:37:86:3d:c0:c5:4a:38:8d:86:9b:b5:49:c7:33:f7:fe: f0:ed:ff:12:a0:19:9b:4c:f5:dc:27:0d:4e:22:5e:2f:6c:3f: ad:f5:16:49:f1:37:25:08:54:e7:83:24:87:9b:05:67:67:d4: 4f:40:8b:2e:20:46:01:c4:49:4a:ca:63:29:89:bf:ba:a2:96: 68:38:38:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTAxNEMxMTAvBgNVBAUTKDUyNzU5REUzNUMwMjY3OURCNkU5MzJFQTg4Njg5REMx MEQ1Q0NDQUUwHhcNMjUwNzAzMDQxNTQwWhcNMjUwNzEwMDQxNTQwWjAYMRYwFAYD VQQDEw02ODY2MDNlYy1mY2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyj7a9MfOoP0r6y5KyV+vKvXOyVcylb5XAozshMUhCLWGVhA1CpZCrEyjybgU lSJO4Pm1R2jj7skPxThfSDQ7zL8/PWCBB93HoEfa1EZrp5r3jJHGIq70daUj/ndU jjL7H0w0sNwOaUoD1OHxFwxjMTSw0EErkUFxL13unqJsR+9ZInMB4VuEpKWyzCCC AEK22lFVGEhaSEbGHqGnpLqepFCja+r/wI9Y5ncSQaj8gfa2CEQUq8i38wBZUtCy 7WiKu4oF8a1GUtdjhxklDPIiRhGcXfyaZOKkRrD5zADcbMYitpgR5J5W2+HYErm0 dzCf+uWzX9JopJMbQUoQTkkhQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvqfk1V IKYEtFL3fmA8RETSRPRWMB8GA1UdIwQYMBaAFFJ1neNcAmedtuky6ohoncENXMyu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDE0Qy8xNTRGQUMyQzU0 N0UxMUVFOEU3MTAwNzRDNEY5QUUwMi9VbldkNDF3Q1o1MjI2VExxaUdpZHdRMWN6 SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VuV2Q0MXdDWjUyMjZUTHFpR2lkd1ExY3pLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDE0Qy8xNTRGQUMyQzU0N0UxMUVFOEU3MTAwNzRDNEY5QUUwMi9VbldkNDF3Q1o1 MjI2VExxaUdpZHdRMWN6SzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrjcTdJbxNrGVwqhmnXzQTNyGhrQvEYRCqeoRmM7geVwmwYKvFaf6T 49eVBJTndTMVHqQJrdfEQHQpLkM7jU7Dm1SZIslPfR+g19x4zC6v52Vxd7soe/bi WGw/vVuZprlwoHkF6s5zIytdvoym9qI+E5VegujxolkElGGpTp4UGrdMT+FTvG3Q 41f5YqUN2KGlriNxE63UFMFKhC+YGNqws92tu8Id9SnVUR4+ZRDEEi2kRDsc3jeG PcDFSjiNhpu1Sccz9/7w7f8SoBmbTPXcJw1OIl4vbD+t9RZJ8TclCFTngySHmwVn Z9RPQIsuIEYBxElKymMpib+6opZoODjT -----END CERTIFICATE-----Generated at Thu Jul 3 18:17:56 2025 by rpki-client