$ rpki-client -vvf rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft File: uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft (raw, json) Hash identifier: WgL0Ry2AVAedrsNReuDib9bTydLlUm6z3G7ER+mrzhE= Subject key identifier: 23:D4:E8:B9:F7:50:19:D5:EC:0A:61:BD:3C:98:E1:2B:FF:46:88:80 Authority key identifier: B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6 Certificate issuer: /CN=A919D72D/serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6 Certificate serial: 0646 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft Manifest number: 0640 Signing time: Wed 02 Jul 2025 22:57:36 +0000 Manifest this update: Wed 02 Jul 2025 22:57:35 +0000 Manifest next update: Wed 09 Jul 2025 22:57:35 +0000 Files and hashes: 1: uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl (hash: oWXARyvaMpSeF+xdD1oI84yhl0BnsO0tcJ0xMsLoTng=) 2: 00C79724968F11EB9A79630BC4F9AE02.roa (hash: Y2zv5qoN2STM8iOeHa24FYyQDvrtP06yfpXTjv2gJRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1606 (0x646) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D72D, serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6 Validity Not Before: Jul 2 22:57:35 2025 GMT Not After : Jul 9 22:57:35 2025 GMT Subject: CN=6865b960-129e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7d:76:6e:15:66:28:bb:f9:5b:65:a3:a7:d7: 5e:2f:5f:83:5f:25:f0:d9:73:89:82:8a:86:43:18: f3:7c:90:c9:ac:a9:6e:6c:d0:53:4d:08:b5:13:18: 14:2d:5f:7e:10:06:27:4d:5c:af:fc:db:9d:5f:18: 28:4f:ff:4d:90:20:6d:c4:35:24:8d:ff:e1:f3:98: 1a:3b:ac:21:c1:94:f3:f8:2b:22:df:d7:95:c9:dd: d6:2d:58:e3:f3:f4:a0:6f:1d:1f:c4:f6:2b:32:8c: cc:4d:67:9a:74:d8:a9:ab:e1:54:1e:f8:35:cb:dc: 43:a6:05:ba:0e:70:cd:25:ad:fe:0d:2d:59:cb:c5: 56:b9:73:39:1c:b1:6d:14:28:57:14:ab:bc:c4:f5: 71:07:c9:66:b4:d3:da:23:79:bd:bf:cd:f9:3d:e4: 50:88:21:0c:3b:8e:a1:f1:a3:b8:55:81:22:1b:a5: 3c:b7:37:a5:02:96:02:cd:ae:be:bd:5d:f2:1e:4a: b1:31:0f:ec:02:6f:b4:43:d0:3c:40:65:db:17:c8: f4:80:76:07:73:dd:94:0f:89:27:98:55:7f:3e:46: 44:37:14:4e:49:37:2d:41:4e:64:0b:14:79:5e:66: c2:fa:b9:54:b4:a4:6a:c8:e1:e0:34:47:d3:06:0e: b4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D4:E8:B9:F7:50:19:D5:EC:0A:61:BD:3C:98:E1:2B:FF:46:88:80 X509v3 Authority Key Identifier: keyid:B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:e5:00:33:b0:16:72:bd:2f:d3:4a:11:c5:2e:93:fd:d5:36: a2:bd:df:2b:1b:d5:d7:11:16:1c:99:e9:06:2f:ae:6e:3c:c4: 27:70:1e:22:dd:1f:24:07:bb:06:a9:0a:f4:19:9d:1c:1c:a0: 9e:ac:e4:0e:be:26:9f:e7:c9:86:b5:b1:38:f9:d9:2d:33:03: 21:03:25:a0:05:78:1a:8d:0d:42:29:66:8b:5f:7c:17:6e:77: 75:e0:e7:ee:ab:49:ce:45:c3:a8:a9:98:cf:93:27:6f:0f:24: 5f:c5:30:9c:bc:32:32:16:ac:c5:82:57:a1:91:53:d1:30:d6: 22:b1:50:8f:8a:4f:a6:34:df:c1:df:af:2a:95:87:86:d2:c6: 89:00:b9:3a:80:76:e6:8c:af:86:c7:ac:e1:e2:b5:fd:bc:7e: 17:ff:00:97:d7:4f:18:fb:c0:c4:c3:0a:3a:85:7c:6a:25:fc: 02:03:9b:38:11:74:e1:a0:94:5a:da:9a:92:1f:16:c7:2d:b6: 7e:bc:f0:de:29:94:ab:52:2d:02:c0:70:9f:77:0b:85:b7:5c: 1d:03:9b:0b:ed:a0:f5:8f:4d:0e:62:e5:b1:32:a6:a5:35:f4: 76:6c:30:4e:9f:a9:3b:f6:75:6b:be:26:54:bf:8b:98:46:c0: ef:42:11:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ3MkQxMTAvBgNVBAUTKEI4RjYxQ0FCQjkxMTlENkMzNzY4NUYwQUJFMzRBRUUy NkEwMjE3RTYwHhcNMjUwNzAyMjI1NzM1WhcNMjUwNzA5MjI1NzM1WjAYMRYwFAYD VQQDEw02ODY1Yjk2MC0xMjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq312bhVmKLv5W2Wjp9deL1+DXyXw2XOJgoqGQxjzfJDJrKlubNBTTQi1ExgU LV9+EAYnTVyv/NudXxgoT/9NkCBtxDUkjf/h85gaO6whwZTz+Csi39eVyd3WLVjj 8/Sgbx0fxPYrMozMTWeadNipq+FUHvg1y9xDpgW6DnDNJa3+DS1Zy8VWuXM5HLFt FChXFKu8xPVxB8lmtNPaI3m9v835PeRQiCEMO46h8aO4VYEiG6U8tzelApYCza6+ vV3yHkqxMQ/sAm+0Q9A8QGXbF8j0gHYHc92UD4knmFV/PkZENxROSTctQU5kCxR5 XmbC+rlUtKRqyOHgNEfTBg60gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPU6Ln3 UBnV7AphvTyY4Sv/RoiAMB8GA1UdIwQYMBaAFLj2HKu5EZ1sN2hfCr40ruJqAhfm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDcyRC85OEJBNDZCNDk2 OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5XdzNhRjhLdmpTdTRtb0NG LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQWWNxN2tSbld3M2FGOEt2alN1NG1vQ0YtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDcyRC85OEJBNDZCNDk2OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5X dzNhRjhLdmpTdTRtb0NGLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn5QAzsBZyvS/TShHFLpP91Taivd8rG9XXERYcmekGL65uPMQncB4i 3R8kB7sGqQr0GZ0cHKCerOQOviaf58mGtbE4+dktMwMhAyWgBXgajQ1CKWaLX3wX bnd14Ofuq0nORcOoqZjPkydvDyRfxTCcvDIyFqzFglehkVPRMNYisVCPik+mNN/B 368qlYeG0saJALk6gHbmjK+Gx6zh4rX9vH4X/wCX108Y+8DEwwo6hXxqJfwCA5s4 EXThoJRa2pqSHxbHLbZ+vPDeKZSrUi0CwHCfdwuFt1wdA5sL7aD1j00OYuWxMqal NfR2bDBOn6k79nVrviZUv4uYRsDvQhH5 -----END CERTIFICATE-----Generated at Fri Jul 4 14:29:26 2025 by rpki-client