$ rpki-client -vvf rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft File: u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft (raw, json) Hash identifier: wdf+cOG/05jWY+MWqbK2mbn9RBzjwJDx2p3AzaxH+KQ= Subject key identifier: C2:43:1F:F9:96:DF:F9:33:3F:59:2A:58:1F:33:29:3B:A4:F5:7A:E4 Authority key identifier: BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7 Certificate issuer: /CN=A919E3E3/serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7 Certificate serial: 06A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft Manifest number: 06A1 Signing time: Wed 02 Jul 2025 22:27:42 +0000 Manifest this update: Wed 02 Jul 2025 22:27:42 +0000 Manifest next update: Wed 09 Jul 2025 22:27:42 +0000 Files and hashes: 1: u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl (hash: 9hTnpfualm7B+1W0vdKJI+Nk8Pc7V70Y9L5FWUFXKS4=) 2: 58B04DD46F3C11EB924C4E2AC4F9AE02.roa (hash: hT6PiTq4VuebMVKql1Edg2h7UOqDcrvg8gjAvmzNu5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1702 (0x6a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E3E3, serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7 Validity Not Before: Jul 2 22:27:42 2025 GMT Not After : Jul 9 22:27:42 2025 GMT Subject: CN=6865b25e-7814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:12:54:1e:88:c4:69:d3:f6:49:95:42:dd:05: b4:37:2e:b6:79:46:42:ff:69:37:ae:3d:89:57:15: eb:58:08:27:bd:e5:b7:ed:d4:8e:5b:a4:c8:e7:34: 94:24:84:7e:16:04:bb:a5:23:4d:09:e5:15:37:05: ef:5b:b4:37:81:17:0e:0f:ec:53:4c:4a:e5:96:51: ef:9b:c6:00:20:ae:11:7b:1c:33:e1:99:ba:9d:32: cd:a3:fb:e6:07:3c:ae:03:85:6c:71:c7:93:14:c4: a8:88:29:1c:a0:09:e3:5b:76:a9:4f:10:34:cf:d5: a6:77:a7:80:cb:00:36:ac:28:35:d8:0d:41:01:e8: 5f:5f:22:49:50:5f:c6:75:fc:41:30:3d:a7:e6:59: c8:1f:f6:c8:d1:82:f4:12:3a:c7:f3:6d:b9:71:5c: 79:cf:7d:09:80:ff:3d:f2:a4:24:02:c6:89:c9:63: cb:31:4a:0a:01:f9:d7:4c:43:26:86:2f:49:42:8d: 31:31:88:c7:a8:17:f3:d7:ac:7a:0d:35:91:50:d7: 41:b5:95:45:b3:e5:b5:5d:00:de:e4:10:0f:85:7d: 50:4e:bd:4e:d3:2e:59:65:c3:1a:b8:5d:9d:10:b8: 1d:41:73:be:b3:cd:7a:7b:1b:9f:e2:bc:9a:7b:0a: 14:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:43:1F:F9:96:DF:F9:33:3F:59:2A:58:1F:33:29:3B:A4:F5:7A:E4 X509v3 Authority Key Identifier: keyid:BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:4f:ed:0d:45:09:87:22:41:23:ac:b2:d3:7f:4a:76:79:82: 5c:b1:e1:eb:7c:01:db:4c:c5:be:7c:f3:5e:1e:a3:ba:48:05: 21:4b:f5:48:7f:f3:87:5d:31:d5:a1:59:a5:3c:2e:8a:60:84: e2:9f:c0:0b:df:87:e3:73:b9:46:f5:d7:2a:c5:c0:a4:39:c5: 09:de:66:2c:96:94:be:88:c1:cd:e7:b5:fc:8c:ff:3f:ea:8d: 52:5a:3e:20:70:40:84:b3:42:3a:1a:5b:96:3f:de:3e:f6:ef: a8:89:10:ad:90:38:d3:f0:2e:71:c6:e3:80:9e:fd:61:f4:dd: 5c:50:26:d0:8f:6e:96:22:fc:a4:23:e0:7a:2c:07:56:59:58: 82:15:9a:dd:d0:81:63:85:72:9b:91:67:49:8f:d2:e8:9d:3f: 8e:67:37:1f:d9:1e:a4:e3:3d:45:1c:b2:9a:77:eb:42:35:b2: 2c:d2:7e:5a:8e:84:b3:f7:c1:fb:5a:40:e1:b3:0a:ca:41:04: 5b:b0:91:c0:43:c2:be:b8:80:fe:7f:08:bb:ec:a4:fd:77:b9: 31:af:3b:e4:35:15:6b:65:b8:cb:6b:71:d8:5a:1d:f4:62:89: c1:05:f1:07:1a:57:12:63:c4:ed:44:e5:39:de:f9:5b:66:fa: 8d:f6:04:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUzRTMxMTAvBgNVBAUTKEJCQ0M3NjBBRkUzRTlGMEE5Qjg4QzhFQzdBNDlFRDdD REQwMzk2RjcwHhcNMjUwNzAyMjIyNzQyWhcNMjUwNzA5MjIyNzQyWjAYMRYwFAYD VQQDEw02ODY1YjI1ZS03ODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRJUHojEadP2SZVC3QW0Ny62eUZC/2k3rj2JVxXrWAgnveW37dSOW6TI5zSU JIR+FgS7pSNNCeUVNwXvW7Q3gRcOD+xTTErlllHvm8YAIK4Rexwz4Zm6nTLNo/vm BzyuA4VscceTFMSoiCkcoAnjW3apTxA0z9Wmd6eAywA2rCg12A1BAehfXyJJUF/G dfxBMD2n5lnIH/bI0YL0EjrH8225cVx5z30JgP898qQkAsaJyWPLMUoKAfnXTEMm hi9JQo0xMYjHqBfz16x6DTWRUNdBtZVFs+W1XQDe5BAPhX1QTr1O0y5ZZcMauF2d ELgdQXO+s816exuf4ryaewoUWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJDH/mW 3/kzP1kqWB8zKTuk9XrkMB8GA1UdIwQYMBaAFLvMdgr+Pp8Km4jI7HpJ7XzdA5b3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTNFMy8wOEI4RDBEMjZG M0ExMUVCQjExMzM5N0VDNEY5QUUwMi91OHgyQ3Y0LW53cWJpTWpzZWtudGZOMERs dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U4eDJDdjQtbndxYmlNanNla250Zk4wRGx2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTNFMy8wOEI4RDBEMjZGM0ExMUVCQjExMzM5N0VDNEY5QUUwMi91OHgyQ3Y0LW53 cWJpTWpzZWtudGZOMERsdmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7T+0NRQmHIkEjrLLTf0p2eYJcseHrfAHbTMW+fPNeHqO6SAUhS/VI f/OHXTHVoVmlPC6KYITin8AL34fjc7lG9dcqxcCkOcUJ3mYslpS+iMHN57X8jP8/ 6o1SWj4gcECEs0I6GluWP94+9u+oiRCtkDjT8C5xxuOAnv1h9N1cUCbQj26WIvyk I+B6LAdWWViCFZrd0IFjhXKbkWdJj9LonT+OZzcf2R6k4z1FHLKad+tCNbIs0n5a joSz98H7WkDhswrKQQRbsJHAQ8K+uID+fwi77KT9d7kxrzvkNRVrZbjLa3HYWh30 YonBBfEHGlcSY8TtROU53vlbZvqN9gTg -----END CERTIFICATE-----Generated at Thu Jul 3 13:44:03 2025 by rpki-client