$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft File: uKIid-zGsQo9ICqjkMyn-7kqRuA.mft (raw, json) Hash identifier: 6Gk7OnKZASYEkHDRJ40HkBj39KJeUWh0vRLCeKrPSLo= Subject key identifier: 83:F7:6F:41:72:1D:A4:73:CE:4E:C8:91:2B:10:37:66:EB:A1:25:53 Authority key identifier: B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0 Certificate issuer: /CN=A91975CC/serialNumber=B8A22277ECC6B10A3D202AA390CCA7FBB92A46E0 Certificate serial: 037C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft Manifest number: 0378 Signing time: Thu 03 Jul 2025 01:14:54 +0000 Manifest this update: Thu 03 Jul 2025 01:14:53 +0000 Manifest next update: Thu 10 Jul 2025 01:14:53 +0000 Files and hashes: 1: uKIid-zGsQo9ICqjkMyn-7kqRuA.crl (hash: urfTNbxdS/qGzTOJr+POefP/bsxLof8m1hQzuSFZLLM=) 2: AF08CB4CC77511EC81DCA645C4F9AE02.roa (hash: fCg3LsUh16wFnDfXkxVhThF2ZOUkgckgr+TaTcI9RIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.crl rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 892 (0x37c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91975CC, serialNumber=B8A22277ECC6B10A3D202AA390CCA7FBB92A46E0 Validity Not Before: Jul 3 01:14:53 2025 GMT Not After : Jul 10 01:14:53 2025 GMT Subject: CN=6865d98e-b05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:50:5f:7d:db:38:ef:cc:60:ac:0d:76:54:da: 6e:05:48:6d:29:85:95:7a:a2:4e:b3:15:5b:ad:37: 06:04:2b:9a:41:7b:4f:d2:67:aa:07:f8:bd:61:36: df:cc:6f:68:88:8b:d1:ca:56:64:a7:dc:a1:56:4e: 8b:7b:c5:58:fd:c4:28:86:6b:db:22:30:54:a6:62: c4:a7:32:f4:87:c9:d7:79:8f:da:f9:08:e4:df:8e: e8:23:96:f1:80:14:ab:32:b3:71:61:f1:7c:59:51: 0d:8b:97:30:f1:06:88:d8:12:f8:6b:dd:e0:dc:44: e3:a2:a2:51:a0:80:a8:78:50:01:f5:f9:55:bf:88: 99:f1:64:72:1c:cf:82:1d:ff:9a:c9:36:07:12:11: d8:1a:10:4a:30:29:dc:1e:a1:86:62:55:4f:c2:c0: 88:c4:9d:b6:93:3a:0e:5a:fc:41:03:b2:c1:2a:be: d4:25:8d:96:aa:90:8f:f2:3f:07:84:66:3d:59:da: 23:22:aa:1e:75:5f:fc:a2:5e:d0:7d:6e:71:b4:f6: 64:29:57:d5:ce:2f:87:5b:97:9f:eb:53:08:41:b8: d8:c8:13:17:9d:e8:e6:0e:95:f6:87:29:75:7a:e9: 3c:ea:a0:f4:c5:8e:5d:5f:56:e2:0b:a8:0e:71:52: 26:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F7:6F:41:72:1D:A4:73:CE:4E:C8:91:2B:10:37:66:EB:A1:25:53 X509v3 Authority Key Identifier: keyid:B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ff:ab:17:9a:39:5e:93:79:91:be:af:f1:4f:bb:9d:ff:b2: c2:b0:91:c7:19:66:ab:97:31:1a:42:59:9d:db:38:d3:72:54: d6:fd:91:a1:05:ba:35:47:b1:92:d3:df:e0:b2:cd:a8:b6:c6: 64:b8:27:50:29:f9:b8:81:e7:c9:f6:c0:03:ad:05:17:49:34: 7e:b9:a1:d1:f3:59:81:1d:25:9a:e6:8d:f2:6e:ce:35:dc:a3: a6:ad:f8:c9:31:ac:66:19:60:ce:4b:72:54:35:ad:7c:0c:55: 11:27:0d:32:b9:be:61:39:96:2c:87:36:b9:d9:45:df:c5:07: f0:66:8b:92:4d:ae:ab:98:fb:91:d6:43:e1:a0:83:ea:18:36: 88:5d:3d:6c:e0:9e:14:33:13:34:a9:ad:c8:46:eb:2a:7d:2a: c1:ac:12:9a:6d:33:f4:30:55:f4:a2:77:db:ca:96:a4:4a:45: bf:65:18:b2:1a:c5:28:83:a4:35:57:24:47:32:6a:f8:a9:da: d9:5d:0e:cf:c9:57:15:8c:69:23:49:7a:8b:b0:83:cb:12:5d: 56:66:0b:9d:41:b0:f0:b3:be:55:7f:0e:58:59:8f:a1:e3:56: 76:5d:66:f3:93:aa:e3:90:d5:c5:9e:26:2f:ae:02:e7:1f:16: 1a:78:00:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc1Q0MxMTAvBgNVBAUTKEI4QTIyMjc3RUNDNkIxMEEzRDIwMkFBMzkwQ0NBN0ZC QjkyQTQ2RTAwHhcNMjUwNzAzMDExNDUzWhcNMjUwNzEwMDExNDUzWjAYMRYwFAYD VQQDEw02ODY1ZDk4ZS1iMDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1Bffds478xgrA12VNpuBUhtKYWVeqJOsxVbrTcGBCuaQXtP0meqB/i9YTbf zG9oiIvRylZkp9yhVk6Le8VY/cQohmvbIjBUpmLEpzL0h8nXeY/a+Qjk347oI5bx gBSrMrNxYfF8WVENi5cw8QaI2BL4a93g3ETjoqJRoICoeFAB9flVv4iZ8WRyHM+C Hf+ayTYHEhHYGhBKMCncHqGGYlVPwsCIxJ22kzoOWvxBA7LBKr7UJY2WqpCP8j8H hGY9WdojIqoedV/8ol7QfW5xtPZkKVfVzi+HW5ef61MIQbjYyBMXnejmDpX2hyl1 euk86qD0xY5dX1biC6gOcVImXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIP3b0Fy HaRzzk7IkSsQN2broSVTMB8GA1UdIwQYMBaAFLiiInfsxrEKPSAqo5DMp/u5Kkbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzVDQy8xM0U3RDcyRUFG RTMxMUVDQTJDQjA2NkRDNEY5QUUwMi91S0lpZC16R3NRbzlJQ3Fqa015bi03a3FS dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3VLSWlkLXpHc1FvOUlDcWprTXluLTdrcVJ1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzVDQy8xM0U3RDcyRUFGRTMxMUVDQTJDQjA2NkRDNEY5QUUwMi91S0lpZC16R3NR bzlJQ3Fqa015bi03a3FSdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB//6sXmjlek3mRvq/xT7ud/7LCsJHHGWarlzEaQlmd2zjTclTW/ZGh Bbo1R7GS09/gss2otsZkuCdQKfm4gefJ9sADrQUXSTR+uaHR81mBHSWa5o3ybs41 3KOmrfjJMaxmGWDOS3JUNa18DFURJw0yub5hOZYshza52UXfxQfwZouSTa6rmPuR 1kPhoIPqGDaIXT1s4J4UMxM0qa3IRusqfSrBrBKabTP0MFX0onfbypakSkW/ZRiy GsUog6Q1VyRHMmr4qdrZXQ7PyVcVjGkjSXqLsIPLEl1WZgudQbDws75Vfw5YWY+h 41Z2XWbzk6rjkNXFniYvrgLnHxYaeAAS -----END CERTIFICATE-----Generated at Fri Jul 4 08:19:44 2025 by rpki-client