$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json) Hash identifier: k4A+8IPYYGdBYKN7kh1sYGjI/zgdc0jNNdP+oqk38w8= Subject key identifier: 8D:4D:A5:F9:93:6D:D2:7A:AA:C1:BC:50:D4:0C:52:D8:69:A6:42:83 Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Certificate serial: 0617 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft Manifest number: 05F5 Signing time: Wed 02 Jul 2025 23:18:23 +0000 Manifest this update: Wed 02 Jul 2025 23:18:22 +0000 Manifest next update: Wed 09 Jul 2025 23:18:22 +0000 Files and hashes: 1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: zZQCtKliyoCV+dfJQuMad+cYk89R0BPdpcID9qSa/iw=) 2: C9BA671C3A2611F0908A2B20C4F9AE02.roa (hash: hAsOFqLGhlXPlJQqq8o+TJ1lqU96PHU1fRQ8ll9kM1c=) 3: F44E1EECCD8411EF88CD1464C4F9AE02.roa (hash: RAzhHtW1VH/eUjgZQiEsm0Ej6j+0F6PlwpjTpjOi8Jo=) 4: F4C73FCACD8411EF88CD1464C4F9AE02.roa (hash: EkzwfsPvhq1FP6pm5CT4LDCnqWr4szU6ESASOp0o6DU=) 5: 3FE8CD1051B111F0932E1173C4F9AE02.roa (hash: RB6HB76Hd37I1Qyua/UNLhe473Y5QaFhWKPCNvGT+Jc=) 6: DBF856463A3011F0B0C6F437C4F9AE02.roa (hash: 3y3NqdGA4Yb7KDxIbZnutCZORNmNgdB027E2G7UT98A=) 7: F559B7E2CD8411EF88CD1464C4F9AE02.roa (hash: 1YFs0Zqq59OdTTfQ9TRBhg+ye+627iyYVeuBlex3Kfk=) 8: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: ehyJGIeBDK390bSFLx2HamOEcgKmw6zu6VhcLaVRD/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1559 (0x617) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Validity Not Before: Jul 2 23:18:22 2025 GMT Not After : Jul 9 23:18:22 2025 GMT Subject: CN=6865be3e-3a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:36:26:ae:da:db:41:7a:70:66:4d:f9:c1:38: 15:1f:4d:d4:df:fc:57:65:3a:5e:ea:b6:ae:23:a5: 3c:0d:d0:00:dc:92:ea:93:ae:c6:59:a2:a2:38:d1: 66:70:05:69:56:a2:87:7b:b8:88:3a:d2:dd:28:0a: c3:16:2a:c9:2c:3f:55:a8:93:ab:15:d3:d6:36:b6: cd:86:31:da:cd:dc:8a:c5:3e:b9:84:c3:ac:0d:15: 26:4f:ab:de:8e:9c:04:b1:b0:6b:ea:c2:6e:a3:2c: a6:6b:ca:43:e7:0c:8f:6c:0b:b1:b1:8d:8b:fa:57: c5:94:04:85:c5:eb:c3:4d:03:ff:85:4f:73:f8:3c: ac:b4:a6:72:1f:40:1b:9e:25:fb:be:51:bd:72:aa: f1:eb:6b:e7:e2:5f:6b:63:26:ce:2d:46:98:4c:60: 71:7c:c8:41:17:14:e9:a3:c1:f2:2a:23:cb:fc:7a: 03:6f:a3:44:cc:89:31:47:ce:ac:2c:c4:cb:f5:a8: 37:d3:67:74:45:09:51:08:d9:93:d4:aa:b4:9d:3d: ae:fd:bf:fd:6e:84:5b:bf:83:bf:40:1f:4a:9c:38: c0:2a:66:5b:01:19:20:47:80:3d:d8:ca:fe:7f:4d: ab:6d:6f:18:88:5f:70:a8:90:c5:d4:18:1a:99:28: 2e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4D:A5:F9:93:6D:D2:7A:AA:C1:BC:50:D4:0C:52:D8:69:A6:42:83 X509v3 Authority Key Identifier: keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:12:7d:39:b6:45:0f:e2:68:94:eb:55:7b:e7:fd:ed:d7:82: 36:fe:26:3b:3c:bb:5c:3c:2f:bc:46:40:e1:85:f7:80:82:4e: d1:21:41:6c:94:77:08:31:f9:39:02:df:01:02:b2:de:82:cc: 9a:65:00:c2:39:41:91:f0:aa:36:b1:56:a7:4b:85:57:82:dd: 40:ab:32:48:08:6d:fa:7c:45:06:a1:86:85:cb:a3:14:2c:59: bd:00:c2:70:c3:74:16:31:56:25:91:fd:4c:57:9c:71:0d:12: 2c:5b:15:f1:61:25:bf:09:b3:9b:ae:16:d3:90:d4:9b:e7:26: 52:16:39:27:59:ac:04:61:c5:5c:2b:b3:e1:1d:6a:dc:16:82: 8d:fc:ef:b9:9c:f4:71:46:c5:96:f6:e9:3c:12:e0:1b:cc:31: 1b:d5:25:c5:04:9f:53:f5:1c:ed:1f:85:70:b8:7e:52:2a:8b: 66:00:de:e4:b5:8d:a2:59:ab:9b:89:5a:f8:26:ef:e3:3a:d3: c4:c1:94:9f:af:a3:84:fe:7b:00:47:ca:40:7e:82:c3:3d:b3: 69:2a:b5:c6:f0:b9:dd:c7:8a:2c:14:0d:53:e8:2e:06:69:ac: 29:8c:86:5e:70:13:8f:ab:b6:47:c1:38:b4:33:27:95:9b:f6: cf:53:7a:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc3NjExMTAvBgNVBAUTKDUxRDVDQzJENUU0MjhGQzk1NTE0OUY1NzYyMTE5MDRG MDVCQUYyMTEwHhcNMjUwNzAyMjMxODIyWhcNMjUwNzA5MjMxODIyWjAYMRYwFAYD VQQDEw02ODY1YmUzZS0zYTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjYmrtrbQXpwZk35wTgVH03U3/xXZTpe6rauI6U8DdAA3JLqk67GWaKiONFm cAVpVqKHe7iIOtLdKArDFirJLD9VqJOrFdPWNrbNhjHazdyKxT65hMOsDRUmT6ve jpwEsbBr6sJuoyyma8pD5wyPbAuxsY2L+lfFlASFxevDTQP/hU9z+DystKZyH0Ab niX7vlG9cqrx62vn4l9rYybOLUaYTGBxfMhBFxTpo8HyKiPL/HoDb6NEzIkxR86s LMTL9ag302d0RQlRCNmT1Kq0nT2u/b/9boRbv4O/QB9KnDjAKmZbARkgR4A92Mr+ f02rbW8YiF9wqJDF1BgamSgujwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1NpfmT bdJ6qsG8UNQMUthppkKDMB8GA1UdIwQYMBaAFFHVzC1eQo/JVRSfV2IRkE8FuvIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzc2MS8wRTRCOTE2OEJE MzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4bFZGSjlYWWhHUVR3VzY4 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkWE1MVjVDajhsVkZKOVhZaEdRVHdXNjhoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzc2MS8wRTRCOTE2OEJEMzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4 bFZGSjlYWWhHUVR3VzY4aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6En05tkUP4miU61V75/3t14I2/iY7PLtcPC+8RkDhhfeAgk7RIUFs lHcIMfk5At8BArLegsyaZQDCOUGR8Ko2sVanS4VXgt1AqzJICG36fEUGoYaFy6MU LFm9AMJww3QWMVYlkf1MV5xxDRIsWxXxYSW/CbObrhbTkNSb5yZSFjknWawEYcVc K7PhHWrcFoKN/O+5nPRxRsWW9uk8EuAbzDEb1SXFBJ9T9RztH4VwuH5SKotmAN7k tY2iWaubiVr4Ju/jOtPEwZSfr6OE/nsAR8pAfoLDPbNpKrXG8Lndx4osFA1T6C4G aawpjIZecBOPq7ZHwTi0MyeVm/bPU3q6 -----END CERTIFICATE-----Generated at Fri Jul 4 08:03:13 2025 by rpki-client