$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft File: u4g-aByWIiVDBg6XnT6Chuq2iok.mft (raw, json) Hash identifier: jIew9I0jMqoOMHLE15Xh52JXz8ZfECDYNOLurCEUFYU= Subject key identifier: EA:97:BF:FF:1B:F0:9F:1C:AF:2C:DD:1F:D9:FA:B3:D9:5B:3E:74:81 Authority key identifier: BB:88:3E:68:1C:96:22:25:43:06:0E:97:9D:3E:82:86:EA:B6:8A:89 Certificate issuer: /CN=A91A4413/serialNumber=BB883E681C96222543060E979D3E8286EAB68A89 Certificate serial: 0254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4g-aByWIiVDBg6XnT6Chuq2iok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft Manifest number: 0250 Signing time: Thu 03 Jul 2025 02:12:58 +0000 Manifest this update: Thu 03 Jul 2025 02:12:58 +0000 Manifest next update: Thu 10 Jul 2025 02:12:58 +0000 Files and hashes: 1: u4g-aByWIiVDBg6XnT6Chuq2iok.crl (hash: RoDKPfuz+20/4b9AOpMRwA9bHYkyobxi42EZhaRL9gY=) 2: 3D3C7DC8236A11ED8018D62BC4F9AE02.roa (hash: ulvwJEE9TrSCR3alPiPFyCbLR3kKPVNTCzyUzxRhzpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.crl rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4g-aByWIiVDBg6XnT6Chuq2iok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4413, serialNumber=BB883E681C96222543060E979D3E8286EAB68A89 Validity Not Before: Jul 3 02:12:58 2025 GMT Not After : Jul 10 02:12:58 2025 GMT Subject: CN=6865e72a-22f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:39:09:96:c4:59:7d:25:d5:f7:db:37:41:52: dc:7a:24:74:3b:2c:6e:53:06:4f:8a:68:5e:e1:bc: 04:0f:14:62:0e:20:2b:43:83:6f:ba:4e:21:b6:65: f9:19:34:ec:8c:b0:32:df:96:de:b0:de:1b:af:13: d7:a5:8d:f6:2a:ae:b3:ca:94:04:93:7a:02:b8:db: 59:16:cd:df:34:5e:2a:ff:df:86:70:2d:d1:2c:f2: ef:e6:b5:39:5a:80:3e:a0:95:9c:61:83:6b:30:4d: 69:d2:83:04:af:19:e9:52:d5:ee:6d:07:bb:84:63: aa:d4:3e:42:6c:a9:4a:35:a5:2f:4f:62:ec:e0:ed: 37:64:7f:ff:ad:5d:4f:97:1b:81:ee:31:eb:d7:13: f2:77:a3:35:15:b2:86:cd:9b:81:ec:00:d5:5c:97: 82:0b:fd:8b:35:59:86:9f:3d:7a:86:49:b2:b7:a8: 64:db:6d:0d:44:55:e6:05:9a:1a:4a:34:1e:94:f4: 7d:4f:1a:c4:e5:38:82:3e:fc:70:89:60:6f:e9:35: 94:d1:fd:2c:17:79:e4:cb:d4:43:a1:6a:50:bc:66: 6d:5b:83:ba:b3:01:ab:ea:2e:0d:20:f0:47:fa:b7: d5:e8:7b:60:6f:0e:41:24:d5:c1:a3:52:3a:3a:29: 24:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:97:BF:FF:1B:F0:9F:1C:AF:2C:DD:1F:D9:FA:B3:D9:5B:3E:74:81 X509v3 Authority Key Identifier: keyid:BB:88:3E:68:1C:96:22:25:43:06:0E:97:9D:3E:82:86:EA:B6:8A:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4g-aByWIiVDBg6XnT6Chuq2iok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:cb:b8:da:cc:85:18:55:a3:e0:05:59:10:ee:34:4f:5b:3a: 78:90:c8:50:38:d5:ea:09:cd:d8:0e:a6:ab:23:14:71:79:da: f1:b9:81:5f:42:67:79:10:6d:43:12:48:75:48:4a:f2:d6:5b: 4f:7d:bc:05:36:c9:33:e3:72:62:98:c7:68:cf:b5:f6:89:d8: 43:bb:eb:a2:12:ec:e1:49:ab:e3:c8:0d:0b:a5:3d:20:ed:dc: 2b:29:70:92:89:e3:0c:73:82:9c:98:bc:e7:7d:b5:f9:12:2e: 5f:f7:fb:5e:b8:00:ca:68:5b:0c:f7:93:89:9c:f5:94:20:20: dc:4d:29:0f:03:09:2c:eb:41:f5:d9:34:aa:42:df:1b:0f:be: 0c:20:e2:b8:59:72:60:35:7f:3a:f8:ef:6c:b7:9a:3c:fb:f4: f3:f6:2c:cc:67:32:76:28:0f:d7:4a:69:82:68:38:b5:31:fc: a8:80:d4:d0:bf:8a:13:ee:46:c7:67:35:13:cf:70:d0:a2:97: de:09:58:3a:de:17:5e:6a:7f:33:3b:c0:f7:78:4a:f6:cf:3f: 3d:05:d0:23:fc:da:54:88:bd:07:27:cf:17:86:35:4b:42:52: 62:2f:18:67:83:4e:fb:7f:f2:c9:95:47:21:a9:3a:91:74:08: 50:63:c7:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MTMxMTAvBgNVBAUTKEJCODgzRTY4MUM5NjIyMjU0MzA2MEU5NzlEM0U4Mjg2 RUFCNjhBODkwHhcNMjUwNzAzMDIxMjU4WhcNMjUwNzEwMDIxMjU4WjAYMRYwFAYD VQQDEw02ODY1ZTcyYS0yMmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTkJlsRZfSXV99s3QVLceiR0OyxuUwZPimhe4bwEDxRiDiArQ4Nvuk4htmX5 GTTsjLAy35besN4brxPXpY32Kq6zypQEk3oCuNtZFs3fNF4q/9+GcC3RLPLv5rU5 WoA+oJWcYYNrME1p0oMErxnpUtXubQe7hGOq1D5CbKlKNaUvT2Ls4O03ZH//rV1P lxuB7jHr1xPyd6M1FbKGzZuB7ADVXJeCC/2LNVmGnz16hkmyt6hk220NRFXmBZoa SjQelPR9TxrE5TiCPvxwiWBv6TWU0f0sF3nky9RDoWpQvGZtW4O6swGr6i4NIPBH +rfV6Htgbw5BJNXBo1I6OikkQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqXv/8b 8J8cryzdH9n6s9lbPnSBMB8GA1UdIwQYMBaAFLuIPmgcliIlQwYOl50+gobqtoqJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQxMy8yMDAwMkMxMjIz NjcxMUVEOTdDMkVGMjdDNEY5QUUwMi91NGctYUJ5V0lpVkRCZzZYblQ2Q2h1cTJp b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U0Zy1hQnlXSWlWREJnNlhuVDZDaHVxMmlvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQxMy8yMDAwMkMxMjIzNjcxMUVEOTdDMkVGMjdDNEY5QUUwMi91NGctYUJ5V0lp VkRCZzZYblQ2Q2h1cTJpb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADy7jazIUYVaPgBVkQ7jRPWzp4kMhQONXqCc3YDqarIxRxedrxuYFf Qmd5EG1DEkh1SEry1ltPfbwFNskz43JimMdoz7X2idhDu+uiEuzhSavjyA0LpT0g 7dwrKXCSieMMc4KcmLznfbX5Ei5f9/teuADKaFsM95OJnPWUICDcTSkPAwks60H1 2TSqQt8bD74MIOK4WXJgNX86+O9st5o8+/Tz9izMZzJ2KA/XSmmCaDi1MfyogNTQ v4oT7kbHZzUTz3DQopfeCVg63hdean8zO8D3eEr2zz89BdAj/NpUiL0HJ88XhjVL QlJiLxhng077f/LJlUchqTqRdAhQY8dq -----END CERTIFICATE-----Generated at Fri Jul 4 18:37:09 2025 by rpki-client