$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft File: UTbgDQPR84UAq2cpty7T1yzWoQU.mft (raw, json) Hash identifier: KL7TmNLXXzxcnOdB1ruRiKHKsZCKIBZVVFgwi9DEk5M= Subject key identifier: 10:A7:A5:BF:11:88:88:9C:17:0C:35:C1:93:DC:27:38:8B:FA:23:6E Authority key identifier: 51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05 Certificate issuer: /CN=A919B3BC/serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105 Certificate serial: 1E22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft Manifest number: 1E0D Signing time: Wed 02 Jul 2025 16:13:23 +0000 Manifest this update: Wed 02 Jul 2025 16:13:22 +0000 Manifest next update: Wed 09 Jul 2025 16:13:22 +0000 Files and hashes: 1: UTbgDQPR84UAq2cpty7T1yzWoQU.crl (hash: rCIZ2HVOcFr2x3Kr9q3rMfttON4FSq/OHi9rz2v8PLo=) 2: 03D29A521AD611F0BC67FC1CC4F9AE02.roa (hash: rt/eyNRwh3HSmHt+oMSmnpP/31deXcLSwt8yukP8jbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7714 (0x1e22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B3BC, serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105 Validity Not Before: Jul 2 16:13:22 2025 GMT Not After : Jul 9 16:13:22 2025 GMT Subject: CN=68655aa2-1a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:63:e0:da:0b:d5:52:0f:50:16:ff:aa:c5:48: 91:7a:5b:b2:2c:ed:0c:aa:84:ee:3a:0c:45:23:35: d3:eb:04:74:45:87:6f:6c:00:51:46:75:5e:ee:d9: fd:de:5d:88:4f:e2:99:a1:d2:74:5a:0a:39:4b:87: 4a:fa:38:5c:af:29:4f:6c:c2:02:7c:d8:f8:4f:42: 7b:93:61:5c:6a:97:d4:99:1c:aa:5f:ff:03:7c:73: 25:d9:45:fe:e0:8d:13:50:db:9a:80:2a:e9:68:ae: 4b:7e:4f:43:41:f7:8d:11:37:3a:29:d2:4e:3d:3e: c3:64:72:48:39:a4:82:7d:ea:cd:c3:93:f6:1f:af: 0f:ba:b5:a9:6c:14:02:78:83:52:5a:a5:0e:86:b8: eb:16:af:ca:eb:44:09:f3:69:7f:21:be:9b:a2:d8: d4:f0:6d:b4:14:21:47:08:6b:dc:29:c5:b2:4d:ab: 3e:28:19:49:46:f7:9c:95:57:04:01:99:9f:b7:02: 60:a8:ef:c4:60:0d:47:cf:9e:11:fa:48:22:b2:90: 33:20:30:d6:07:2e:05:b9:29:fc:af:95:60:90:49: fc:ef:32:40:e6:eb:23:7a:9d:16:d1:cc:1b:00:ab: d5:f7:63:6d:45:bc:fd:ba:ad:66:94:b1:c2:5d:53: 39:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A7:A5:BF:11:88:88:9C:17:0C:35:C1:93:DC:27:38:8B:FA:23:6E X509v3 Authority Key Identifier: keyid:51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b3:53:a3:a9:e7:4d:36:50:04:47:b4:ed:12:82:93:12:04: 16:61:fb:75:90:f6:b7:2b:1b:86:b2:18:78:d1:b7:c3:41:35: 9c:5a:61:96:5f:2d:06:b2:d6:01:b4:d1:25:62:59:1a:e5:ca: f3:c7:83:bf:fa:d2:c2:f0:7a:17:ad:46:9e:8f:18:7b:69:db: 4b:0d:0a:19:3b:3a:9d:1c:97:f5:9f:97:f5:6c:fc:51:55:a9: 89:27:08:9d:2f:9c:d6:a2:94:0d:c5:0f:ab:be:80:ac:70:9b: da:2a:66:8a:b0:ed:78:01:ae:b9:bd:ce:a8:a9:c0:fd:9f:4a: 8e:00:b4:5b:71:15:b7:40:44:62:f2:21:43:e2:df:36:f6:0a: f2:39:1f:ab:a8:f5:a2:3b:ce:48:1b:98:88:5e:53:ce:da:6b: 80:0b:a1:0e:4e:84:59:4f:ec:8b:1d:43:a7:2b:67:9c:06:22: 67:fb:31:d8:4f:7b:4d:9d:f0:07:98:50:f1:e5:14:c1:a7:5c: 69:e9:b5:95:01:4c:88:fb:b5:87:4e:6f:0a:ee:73:2c:b1:16: ff:af:8a:96:56:05:0f:8f:f2:ec:69:c4:7f:59:4f:6c:77:10: 4d:98:86:a0:58:fc:84:3a:59:3c:51:bd:8b:b4:99:90:f9:91: 81:c4:0f:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIzQkMxMTAvBgNVBAUTKDUxMzZFMDBEMDNEMUYzODUwMEFCNjcyOUI3MkVEM0Q3 MkNENkExMDUwHhcNMjUwNzAyMTYxMzIyWhcNMjUwNzA5MTYxMzIyWjAYMRYwFAYD VQQDEw02ODY1NWFhMi0xYTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGPg2gvVUg9QFv+qxUiReluyLO0MqoTuOgxFIzXT6wR0RYdvbABRRnVe7tn9 3l2IT+KZodJ0Wgo5S4dK+jhcrylPbMICfNj4T0J7k2FcapfUmRyqX/8DfHMl2UX+ 4I0TUNuagCrpaK5Lfk9DQfeNETc6KdJOPT7DZHJIOaSCferNw5P2H68PurWpbBQC eINSWqUOhrjrFq/K60QJ82l/Ib6botjU8G20FCFHCGvcKcWyTas+KBlJRveclVcE AZmftwJgqO/EYA1Hz54R+kgispAzIDDWBy4FuSn8r5VgkEn87zJA5usjep0W0cwb AKvV92NtRbz9uq1mlLHCXVM5KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCnpb8R iIicFww1wZPcJziL+iNuMB8GA1UdIwQYMBaAFFE24A0D0fOFAKtnKbcu09cs1qEF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjNCQy8zMDQxOTdFODhG OUIxMUU2QkVDNUNCMjVDNEY5QUUwMi9VVGJnRFFQUjg0VUFxMmNwdHk3VDF5eldv UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VUYmdEUVBSODRVQXEyY3B0eTdUMXl6V29RVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjNCQy8zMDQxOTdFODhGOUIxMUU2QkVDNUNCMjVDNEY5QUUwMi9VVGJnRFFQUjg0 VUFxMmNwdHk3VDF5eldvUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfs1OjqedNNlAER7TtEoKTEgQWYft1kPa3KxuGshh40bfDQTWcWmGW Xy0GstYBtNElYlka5crzx4O/+tLC8HoXrUaejxh7adtLDQoZOzqdHJf1n5f1bPxR VamJJwidL5zWopQNxQ+rvoCscJvaKmaKsO14Aa65vc6oqcD9n0qOALRbcRW3QERi 8iFD4t829gryOR+rqPWiO85IG5iIXlPO2muAC6EOToRZT+yLHUOnK2ecBiJn+zHY T3tNnfAHmFDx5RTBp1xp6bWVAUyI+7WHTm8K7nMssRb/r4qWVgUPj/LsacR/WU9s dxBNmIagWPyEOlk8Ub2LtJmQ+ZGBxA/t -----END CERTIFICATE-----Generated at Fri Jul 4 04:04:50 2025 by rpki-client