$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft File: ux3tVEsnoTcZtI-wA3PNSeDehRc.mft (raw, json) Hash identifier: dAUiiv2I9Qo8cObfLVlt/wO2jx9iwydaNicbJRj8LE0= Subject key identifier: DE:96:A7:45:D2:EF:BC:32:E2:98:8C:01:30:ED:EE:C0:A6:44:95:35 Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Certificate serial: 08D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft Manifest number: 08CD Signing time: Wed 02 Jul 2025 20:42:40 +0000 Manifest this update: Wed 02 Jul 2025 20:42:40 +0000 Manifest next update: Wed 09 Jul 2025 20:42:40 +0000 Files and hashes: 1: ux3tVEsnoTcZtI-wA3PNSeDehRc.crl (hash: s79REyQvGJD0Dsufw2/cGWQKqE2ar4uRDX89x0NxVE4=) 2: 2B7215E2B54B11EA85EE266DC4F9AE02.roa (hash: HHCFckY7O591LILqzlA5i+TVYe0u7mT2Ya4XZsY3L5w=) 3: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (hash: vv1GYbA2AyqRD7ZSBeebG8Ws0r4NHNq0J0Vkh/R0ypw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2265 (0x8d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919123C, serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Validity Not Before: Jul 2 20:42:40 2025 GMT Not After : Jul 9 20:42:40 2025 GMT Subject: CN=686599c0-7175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c3:f1:70:a1:48:cd:6d:2c:25:08:e1:2f:9e: c5:c0:a1:fc:71:a7:87:8d:f3:40:e3:df:e8:3e:c9: 71:4a:ec:93:32:75:12:88:c3:29:9a:97:1a:fd:b4: 51:c9:e1:b2:3d:a6:a9:7f:5a:16:cd:ce:9c:f3:18: 19:21:8d:ab:a0:46:1b:61:f1:c6:29:2e:23:96:7f: 4b:42:a8:db:09:28:bd:cb:c5:9f:6d:c0:96:a5:29: dd:72:94:40:2c:57:e1:e3:a7:ff:31:f6:b5:fc:59: b1:73:55:af:9f:a1:b0:35:b3:21:4b:d8:d3:0e:a0: ba:5c:c6:6b:99:dd:3e:5b:7b:f1:b4:6f:02:d3:d4: 73:ca:b0:44:02:17:e3:42:8a:da:68:31:0f:0c:b0: af:40:25:8b:a8:0a:12:44:e8:21:e5:68:ef:38:82: fd:41:f9:35:83:b8:9e:1a:a7:6a:f0:0d:a9:17:a7: 72:1b:10:3b:a5:d7:71:a3:cd:33:72:16:68:63:d8: 87:97:ae:9a:7b:5d:8c:56:5e:3f:55:21:14:83:97: da:dd:a6:5a:b1:23:c2:0a:4e:b4:88:22:7b:a6:c2: 2c:af:9e:31:96:7e:47:e3:1d:0e:2c:86:3f:52:f4: 99:c6:80:58:3e:f6:68:a7:9c:72:61:60:ee:32:de: 53:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:96:A7:45:D2:EF:BC:32:E2:98:8C:01:30:ED:EE:C0:A6:44:95:35 X509v3 Authority Key Identifier: keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:44:3a:52:82:1e:17:d8:19:b2:fc:92:6a:a9:b5:9a:7e:9b: e5:f1:33:3e:b8:90:75:37:dc:25:61:40:bc:bf:c8:65:4c:c2: f3:ed:db:d8:75:6d:a8:1b:58:30:20:90:b2:b1:0f:0d:7a:10: ea:33:0b:58:d2:a4:66:2a:69:08:f7:22:3e:d7:44:82:8d:5d: 6e:c7:bf:1d:3d:ae:ca:de:cd:bd:57:f2:b8:4a:3d:f2:b1:f9: 20:95:95:d7:5b:c7:ca:ac:0c:fd:e7:8f:2b:78:03:87:66:29: d0:a6:2c:b7:00:de:ae:57:c7:f2:6c:ab:33:10:33:1c:b0:59: 72:17:da:53:45:1c:d1:96:dc:46:8f:02:4f:2e:f1:52:a6:b1: 3e:59:18:c0:fc:e8:e5:30:a1:c8:48:e7:50:ff:c0:26:b5:b3: 85:1a:ae:1a:30:fb:4c:1a:18:c1:e3:8d:06:1a:98:60:8e:c9: a9:86:b5:60:70:c9:ee:f4:4c:e6:9d:4b:65:93:63:55:6c:5b: d3:37:dd:49:ce:75:08:e8:8a:7f:24:5b:d9:c5:f8:61:71:42: 44:40:df:42:84:cf:f9:ed:38:f8:89:01:59:67:18:54:4d:e2: 30:79:cb:99:44:4e:59:f7:5a:eb:ae:80:28:7a:b7:d2:b2:a7: fb:e5:ea:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyM0MxMTAvBgNVBAUTKEJCMURFRDU0NEIyN0ExMzcxOUI0OEZCMDAzNzNDRDQ5 RTBERTg1MTcwHhcNMjUwNzAyMjA0MjQwWhcNMjUwNzA5MjA0MjQwWjAYMRYwFAYD VQQDEw02ODY1OTljMC03MTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cPxcKFIzW0sJQjhL57FwKH8caeHjfNA49/oPslxSuyTMnUSiMMpmpca/bRR yeGyPaapf1oWzc6c8xgZIY2roEYbYfHGKS4jln9LQqjbCSi9y8WfbcCWpSndcpRA LFfh46f/Mfa1/Fmxc1Wvn6GwNbMhS9jTDqC6XMZrmd0+W3vxtG8C09RzyrBEAhfj QoraaDEPDLCvQCWLqAoSROgh5WjvOIL9Qfk1g7ieGqdq8A2pF6dyGxA7pddxo80z chZoY9iHl66ae12MVl4/VSEUg5fa3aZasSPCCk60iCJ7psIsr54xln5H4x0OLIY/ UvSZxoBYPvZop5xyYWDuMt5TrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6Wp0XS 77wy4piMATDt7sCmRJU1MB8GA1UdIwQYMBaAFLsd7VRLJ6E3GbSPsANzzUng3oUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTIzQy9FNTYyMUE2OEI1 NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9UY1p0SS13QTNQTlNlRGVo UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V4M3RWRXNub1RjWnRJLXdBM1BOU2VEZWhSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTIzQy9FNTYyMUE2OEI1NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9U Y1p0SS13QTNQTlNlRGVoUmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbRDpSgh4X2Bmy/JJqqbWafpvl8TM+uJB1N9wlYUC8v8hlTMLz7dvY dW2oG1gwIJCysQ8NehDqMwtY0qRmKmkI9yI+10SCjV1ux78dPa7K3s29V/K4Sj3y sfkglZXXW8fKrAz9548reAOHZinQpiy3AN6uV8fybKszEDMcsFlyF9pTRRzRltxG jwJPLvFSprE+WRjA/OjlMKHISOdQ/8AmtbOFGq4aMPtMGhjB440GGphgjsmphrVg cMnu9EzmnUtlk2NVbFvTN91JznUI6Ip/JFvZxfhhcUJEQN9ChM/57Tj4iQFZZxhU TeIwecuZRE5Z91rrroAoerfSsqf75eoR -----END CERTIFICATE-----Generated at Thu Jul 3 15:06:31 2025 by rpki-client