$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft File: pUy3dCqrz05Y5dTB87nRLa2RtAY.mft (raw, json) Hash identifier: ySc0qTAB/Y0MkIWRvj3gVVhTv0/RJmQi6ObQj1kh0Ew= Subject key identifier: 23:72:03:09:C3:A5:C6:38:2B:AA:8A:4E:4A:3C:44:A3:18:72:45:BB Authority key identifier: A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06 Certificate issuer: /CN=A9190D72/serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft Manifest number: FF Signing time: Thu 03 Jul 2025 05:19:43 +0000 Manifest this update: Thu 03 Jul 2025 05:19:43 +0000 Manifest next update: Thu 10 Jul 2025 05:19:42 +0000 Files and hashes: 1: pUy3dCqrz05Y5dTB87nRLa2RtAY.crl (hash: zJT/xBXzTQ0MgsloDGWrWOE+z3yM0iUjIV5orA0ZHNY=) 2: 35D2294C4AB511EF87AB161BC4F9AE02.roa (hash: ojSPB0ISIGRw3cOfBtrECwI7sYrCbgl9SiZcYTomn1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406 Validity Not Before: Jul 3 05:19:43 2025 GMT Not After : Jul 10 05:19:42 2025 GMT Subject: CN=686612ef-636d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ad:69:91:b1:b7:f6:6b:21:a4:87:a3:0c:8e: a4:c8:bc:37:17:e8:b7:8e:65:53:b6:93:47:0c:a7: c5:33:84:d8:0f:8c:52:d7:a6:18:33:db:ba:3d:3a: f1:c5:03:54:47:ea:bd:10:b1:b0:09:f5:3e:0e:b9: 01:ac:f6:bb:c3:1e:34:9b:9e:9f:02:12:0d:96:fe: 07:84:28:d5:6a:85:13:7a:e1:ea:74:8c:c3:79:aa: 1d:dc:17:79:cb:3a:61:b5:9c:47:18:fe:a0:78:4a: 96:7e:b9:02:3b:58:d5:a3:64:c0:f5:c7:1d:fd:1b: db:a3:d7:35:7f:73:63:45:6a:22:59:be:83:58:5b: dc:8d:21:58:e3:06:cc:82:29:2e:6a:1a:03:a9:31: bb:68:61:57:f7:72:30:6d:0c:c0:25:ef:07:cd:0a: 78:3c:19:02:24:24:d4:4b:d4:cd:3b:15:65:ff:61: 5d:66:1e:b9:75:e6:4a:84:ab:ad:a6:b3:2d:0d:48: b6:66:47:44:b7:13:1c:e7:2a:f0:df:82:41:3b:d5: 32:f5:42:2d:f9:7a:bf:df:f3:a9:3f:70:5b:02:54: 83:8f:7d:8e:81:30:72:e3:bc:22:5a:77:b8:67:cb: 32:42:b5:57:1a:64:88:ca:f1:7c:d3:21:eb:9e:4b: 99:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:72:03:09:C3:A5:C6:38:2B:AA:8A:4E:4A:3C:44:A3:18:72:45:BB X509v3 Authority Key Identifier: keyid:A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:5d:99:55:f4:3f:2c:c2:54:79:de:50:ba:76:ab:4c:7a:a0: 79:fb:4a:9e:ea:64:dc:d7:4b:13:e4:1a:b6:17:b2:24:b8:04: f3:a1:d8:12:f6:8f:1e:5a:01:0f:7b:f3:0b:f7:23:e2:5d:b9: f0:8c:fb:c8:70:61:74:b5:42:e5:f7:ac:19:9f:b7:ac:c0:a0: 06:ae:22:af:96:d0:e2:86:70:6c:91:ca:03:b0:c1:b7:1c:ae: e1:1f:c9:2f:3e:ef:cd:cd:60:61:22:f3:c0:49:47:59:c9:1d: c5:5c:f4:2a:d9:be:29:ae:31:d2:17:de:95:96:41:57:ad:b6: 9a:08:a3:fb:df:19:76:60:c2:68:b7:31:14:b7:bf:cd:fe:1c: 55:e2:6b:82:df:57:72:ed:74:ca:d1:71:fd:c3:4e:67:1e:18: 8b:ab:a6:e7:99:6c:04:0c:1c:13:2e:5f:33:02:3b:0f:5b:38: cf:59:8a:96:c3:e1:e9:81:d2:e9:9d:95:67:f5:ba:60:e0:14: 9c:59:49:cb:f3:21:28:f8:5b:ae:ea:91:9b:28:ec:03:57:69: af:17:ec:13:a2:53:b8:ab:98:1c:3e:5d:aa:28:c6:16:70:ed: dc:e0:0d:ce:92:b7:2c:4b:55:b5:a3:e4:56:e1:6b:2b:d2:ac: 1a:e8:28:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKEE1NENCNzc0MkFBQkNGNEU1OEU1RDRDMUYzQjlEMTJE QUQ5MUI0MDYwHhcNMjUwNzAzMDUxOTQzWhcNMjUwNzEwMDUxOTQyWjAYMRYwFAYD VQQDEw02ODY2MTJlZi02MzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9q1pkbG39mshpIejDI6kyLw3F+i3jmVTtpNHDKfFM4TYD4xS16YYM9u6PTrx xQNUR+q9ELGwCfU+DrkBrPa7wx40m56fAhINlv4HhCjVaoUTeuHqdIzDeaod3Bd5 yzphtZxHGP6geEqWfrkCO1jVo2TA9ccd/Rvbo9c1f3NjRWoiWb6DWFvcjSFY4wbM gikuahoDqTG7aGFX93IwbQzAJe8HzQp4PBkCJCTUS9TNOxVl/2FdZh65deZKhKut prMtDUi2ZkdEtxMc5yrw34JBO9Uy9UIt+Xq/3/OpP3BbAlSDj32OgTBy47wiWne4 Z8syQrVXGmSIyvF80yHrnkuZBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNyAwnD pcY4K6qKTko8RKMYckW7MB8GA1UdIwQYMBaAFKVMt3Qqq89OWOXUwfO50S2tkbQG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi82QUM5ODlGMEQ0 ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnowNVk1ZFRCODduUkxhMlJ0 QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BVeTNkQ3FyejA1WTVkVEI4N25STGEyUnRBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQ3Mi82QUM5ODlGMEQ0ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnow NVk1ZFRCODduUkxhMlJ0QVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnXZlV9D8swlR53lC6dqtMeqB5+0qe6mTc10sT5Bq2F7IkuATzodgS 9o8eWgEPe/ML9yPiXbnwjPvIcGF0tULl96wZn7eswKAGriKvltDihnBskcoDsMG3 HK7hH8kvPu/NzWBhIvPASUdZyR3FXPQq2b4prjHSF96VlkFXrbaaCKP73xl2YMJo tzEUt7/N/hxV4muC31dy7XTK0XH9w05nHhiLq6bnmWwEDBwTLl8zAjsPWzjPWYqW w+HpgdLpnZVn9bpg4BScWUnL8yEo+Fuu6pGbKOwDV2mvF+wTolO4q5gcPl2qKMYW cO3c4A3OkrcsS1W1o+RW4Wsr0qwa6Civ -----END CERTIFICATE-----Generated at Fri Jul 4 07:47:30 2025 by rpki-client