$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft File: u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft (raw, json) Hash identifier: 1fo/lebj718riTkiMS8zdB1FSvLwiytev9qBUlwzFlU= Subject key identifier: EB:35:02:E3:9C:B6:66:F1:62:BA:14:61:74:CE:E0:F9:99:39:02:7A Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 Certificate issuer: /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft Manifest number: 0151 Signing time: Tue 01 Jul 2025 04:35:50 +0000 Manifest this update: Tue 01 Jul 2025 04:35:50 +0000 Manifest next update: Tue 08 Jul 2025 04:35:50 +0000 Files and hashes: 1: u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl (hash: V3cwrmqsTFDqUu+j5o8TlwoY/1n/Fcv4X2QLRfMnCg4=) 2: 9F5C80A8F3EB11EFBAF62455C4F9AE02.roa (hash: j93vJ2NAnCNQy/x2PjU9v6iPhwn1QcPjRO5LSFsSwNE=) 3: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (hash: aCNtxlW0MshwMMlV+N563xkNmlCQdXbxR/lNk+drIlA=) 4: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (hash: rOkP4Vb8B8/6UrNv3XnkLOomlf0wseQaO6Jnqbw75S0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Validity Not Before: Jul 1 04:35:50 2025 GMT Not After : Jul 8 04:35:50 2025 GMT Subject: CN=686365a6-32ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c7:e7:8b:91:c6:c2:c6:54:9a:c1:6a:77:15: 26:42:d9:a7:19:1d:37:e7:92:be:c6:6b:76:65:9e: b1:b6:67:67:21:7c:82:2d:21:72:54:d5:6d:19:cf: bb:ad:75:e5:e7:b0:5a:67:ab:77:24:7e:ff:54:a9: f4:8e:01:19:9c:1c:6b:9f:fd:7d:8d:e0:cd:e8:41: 54:64:13:0d:9b:40:20:8e:4b:0c:14:8e:99:d6:77: e7:0c:4d:09:90:99:db:96:c6:70:4a:c1:ba:0b:90: 31:fe:78:34:8a:01:82:2e:d1:e9:d7:c3:4f:33:e2: 5c:67:3c:7f:f8:3a:7b:72:c3:85:73:80:68:4f:f7: a9:30:f5:11:7d:a6:8e:5d:00:0e:80:b4:51:7b:36: af:53:28:d8:94:00:3c:7a:ed:3e:3d:22:41:22:dd: ee:52:95:1d:68:58:94:bb:2c:d7:81:1b:8a:d6:d2: 97:3e:f4:7e:96:77:7e:9d:b0:ae:e4:10:ab:c0:45: f4:f7:33:72:9b:59:02:32:a8:5f:4d:58:cf:3d:9b: 1a:c7:d2:0e:e2:44:ce:73:e3:d3:94:e5:34:e3:d8: 35:4f:4e:0a:11:ba:8b:83:91:ab:79:a1:9e:60:d1: 12:f6:80:6f:39:44:99:a6:5c:0a:ee:c9:9b:06:c0: ac:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:35:02:E3:9C:B6:66:F1:62:BA:14:61:74:CE:E0:F9:99:39:02:7A X509v3 Authority Key Identifier: keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:48:89:cd:1e:f7:45:78:1a:47:45:45:5f:93:e0:7d:cc:cf: 71:5d:11:f8:7f:98:32:ef:10:5f:1e:f7:87:17:e6:41:bb:6f: 53:96:e4:1b:4b:01:d9:89:61:ea:5b:62:20:7e:34:c5:df:87: 09:ae:bc:38:76:13:8d:cc:c5:a4:76:d9:6a:8b:fa:14:4d:2e: 98:8b:71:99:93:40:61:81:5f:fd:8e:2d:91:4e:84:29:f9:6d: e5:73:12:89:d0:e9:99:45:0a:e4:07:6b:00:4f:51:35:fa:06: 00:bf:ca:50:44:3c:a1:55:e1:a1:0a:9d:72:f5:93:12:48:ea: 09:1f:26:db:a2:4b:7d:93:70:3f:81:f8:30:01:1e:4e:9a:41: 8d:25:e9:88:d0:43:13:a9:42:94:45:cc:15:ce:30:4a:ce:0b: bd:51:e5:bb:a4:9a:5c:be:88:bf:ad:f0:c1:50:84:f3:ed:64: 49:2d:4e:65:e6:06:5c:8a:81:ef:62:bf:4a:40:da:52:57:9d: 7d:06:5d:93:0e:18:a3:78:f2:fd:e3:b2:d7:a2:78:a5:aa:83: be:9f:09:ed:6b:8a:2d:2f:61:72:f1:20:01:bc:c7:9e:c0:65: cb:ea:c8:6c:99:7d:6b:0f:70:64:1b:62:ed:82:0e:a4:42:b5: 74:cd:12:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIyNjUxMTAvBgNVBAUTKEJCRUMyMTBFNzUyOUZEMzk3RjEzMzhGRkFDMURERDc4 M0MwRkFBMzIwHhcNMjUwNzAxMDQzNTUwWhcNMjUwNzA4MDQzNTUwWjAYMRYwFAYD VQQDEw02ODYzNjVhNi0zMmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8cfni5HGwsZUmsFqdxUmQtmnGR0355K+xmt2ZZ6xtmdnIXyCLSFyVNVtGc+7 rXXl57BaZ6t3JH7/VKn0jgEZnBxrn/19jeDN6EFUZBMNm0AgjksMFI6Z1nfnDE0J kJnblsZwSsG6C5Ax/ng0igGCLtHp18NPM+JcZzx/+Dp7csOFc4BoT/epMPURfaaO XQAOgLRRezavUyjYlAA8eu0+PSJBIt3uUpUdaFiUuyzXgRuK1tKXPvR+lnd+nbCu 5BCrwEX09zNym1kCMqhfTVjPPZsax9IO4kTOc+PTlOU049g1T04KEbqLg5GreaGe YNES9oBvOUSZplwK7smbBsCsDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOs1AuOc tmbxYroUYXTO4PmZOQJ6MB8GA1UdIwQYMBaAFLvsIQ51Kf05fxM4/6wd3Xg8D6oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjI2NS85QTY2QUFERTUw ODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9UbF9FempfckIzZGVEd1Bx akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Utd2hEblVwX1RsX0V6al9yQjNkZUR3UHFqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjI2NS85QTY2QUFERTUwODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9U bF9FempfckIzZGVEd1BxakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFSInNHvdFeBpHRUVfk+B9zM9xXRH4f5gy7xBfHveHF+ZBu29TluQb SwHZiWHqW2IgfjTF34cJrrw4dhONzMWkdtlqi/oUTS6Yi3GZk0BhgV/9ji2RToQp +W3lcxKJ0OmZRQrkB2sAT1E1+gYAv8pQRDyhVeGhCp1y9ZMSSOoJHybbokt9k3A/ gfgwAR5OmkGNJemI0EMTqUKURcwVzjBKzgu9UeW7pJpcvoi/rfDBUITz7WRJLU5l 5gZcioHvYr9KQNpSV519Bl2TDhijePL947LXonilqoO+nwnta4otL2Fy8SABvMee wGXL6shsmX1rD3BkG2Ltgg6kQrV0zRLH -----END CERTIFICATE-----Generated at Wed Jul 2 16:35:27 2025 by rpki-client