$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft File: uo1v5dgowFOZs-GqZY_AWIYf3OA.mft (raw, json) Hash identifier: CKUVzbXhCBUla+wj9+oiqQBT2RJedHKedn0GWMFx20k= Subject key identifier: 65:5F:28:D1:AA:5B:46:CB:5F:89:A1:E1:E8:66:30:50:FF:B1:44:9D Authority key identifier: BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0 Certificate issuer: /CN=A91AAF02/serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0 Certificate serial: 0F3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft Manifest number: 0F33 Signing time: Sat 28 Jun 2025 17:25:46 +0000 Manifest this update: Sat 28 Jun 2025 17:25:45 +0000 Manifest next update: Sat 05 Jul 2025 17:25:45 +0000 Files and hashes: 1: uo1v5dgowFOZs-GqZY_AWIYf3OA.crl (hash: /hJUtbDKOex+tMN4rVbZtVx92PIncFmZBnrgNseCIXQ=) 2: 7EA856A6C3F511EEB2610F2FC4F9AE02.roa (hash: tn6ujwfx2fxOjVcWSqeXpg3bHl3JICdgt6OHucuWivU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 17:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3902 (0xf3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02, serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0 Validity Not Before: Jun 28 17:25:45 2025 GMT Not After : Jul 5 17:25:45 2025 GMT Subject: CN=6860259a-4b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:84:97:07:93:20:3a:f2:5c:4d:05:a2:70:6d: 26:b6:c2:03:21:1c:a6:50:8f:d0:f6:04:67:17:12: 68:89:45:32:4b:3b:47:54:05:56:47:51:79:c8:9f: c9:a1:0a:ac:68:ce:31:27:a3:76:d0:4e:84:37:4b: bd:ba:3c:c3:f1:c0:cd:c6:5d:ac:ed:c1:fc:80:ca: 1d:da:45:e8:ce:81:e5:e8:de:a5:8b:cc:02:05:b4: 7c:3e:06:0c:4d:ef:85:19:50:64:d7:59:5c:ef:0b: 89:16:f0:1b:fe:ae:50:3a:cc:97:cc:ac:a4:39:03: dc:c3:e3:f8:24:89:ec:c3:9e:41:a8:8f:4e:a6:71: a8:e4:5d:ce:b0:c4:30:87:d7:49:cb:ca:60:04:6c: 12:be:0a:e4:34:7c:45:f3:97:33:81:cf:2a:9a:cc: b1:a9:a8:86:5d:53:1e:9a:ab:d4:55:49:d2:93:31: 1e:c7:17:ba:41:3e:2e:19:5b:0d:8d:65:4f:35:26: 5d:ba:5c:e2:a8:52:b3:67:d8:ed:81:25:c3:8a:35: 57:04:d5:0b:1a:88:23:6f:39:10:30:40:b6:bd:69: db:4a:59:7f:97:65:d4:3b:2d:78:5a:5c:08:22:f4: 0b:2f:12:18:02:ba:70:9a:c6:b1:fa:b3:d5:0f:f9: c2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5F:28:D1:AA:5B:46:CB:5F:89:A1:E1:E8:66:30:50:FF:B1:44:9D X509v3 Authority Key Identifier: keyid:BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:83:eb:ce:12:14:69:14:5c:90:47:c0:3e:a9:9d:f4:65:81: e4:a7:c7:0a:10:2d:f1:cf:20:7c:0f:2d:b7:3b:af:92:fd:68: 24:17:35:7a:16:bb:04:74:42:57:7f:90:a4:41:ee:d0:97:b6: fe:b9:20:5f:37:c1:25:04:25:f7:65:93:05:ff:d6:8c:28:21: 23:21:22:df:67:7c:07:af:6a:c4:06:da:c1:71:ee:9c:11:6f: e7:a1:86:6d:81:7d:10:77:e2:ce:44:44:a0:5a:66:32:fc:2e: 1c:2b:94:24:ee:81:77:a3:af:06:85:e0:e5:a7:e4:fb:19:28: b6:36:eb:c2:82:96:53:f8:51:bd:41:41:70:f8:51:71:79:db: 38:6f:9d:7b:9c:6b:8c:4d:d7:47:06:2f:9b:7d:9a:6d:24:3d: 7f:9c:17:a6:b4:a3:f0:4e:53:d1:44:30:e2:05:45:f6:bd:1a: c6:fe:b5:2a:7e:7c:e6:db:a6:8b:e5:59:da:1e:e5:ed:0d:71: e6:bf:29:03:34:48:f5:8a:bd:36:58:2b:70:c7:ae:8d:09:2d: dc:16:aa:92:a8:78:9a:33:50:09:80:42:91:46:65:32:34:54: 70:13:86:de:62:37:0d:67:e6:32:e9:93:c7:fc:30:23:af:b2: 32:0f:b1:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKEJBOEQ2RkU1RDgyOEMwNTM5OUIzRTFBQTY1OEZDMDU4 ODYxRkRDRTAwHhcNMjUwNjI4MTcyNTQ1WhcNMjUwNzA1MTcyNTQ1WjAYMRYwFAYD VQQDEw02ODYwMjU5YS00YjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4SXB5MgOvJcTQWicG0mtsIDIRymUI/Q9gRnFxJoiUUySztHVAVWR1F5yJ/J oQqsaM4xJ6N20E6EN0u9ujzD8cDNxl2s7cH8gMod2kXozoHl6N6li8wCBbR8PgYM Te+FGVBk11lc7wuJFvAb/q5QOsyXzKykOQPcw+P4JInsw55BqI9OpnGo5F3OsMQw h9dJy8pgBGwSvgrkNHxF85czgc8qmsyxqaiGXVMemqvUVUnSkzEexxe6QT4uGVsN jWVPNSZdulziqFKzZ9jtgSXDijVXBNULGogjbzkQMEC2vWnbSll/l2XUOy14WlwI IvQLLxIYArpwmsax+rPVD/nCUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVfKNGq W0bLX4mh4ehmMFD/sUSdMB8GA1UdIwQYMBaAFLqNb+XYKMBTmbPhqmWPwFiGH9zg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi9FQUNENDg3Njc2 NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dGT1pzLUdxWllfQVdJWWYz T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VvMXY1ZGdvd0ZPWnMtR3FaWV9BV0lZZjNPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUYwMi9FQUNENDg3Njc2NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dG T1pzLUdxWllfQVdJWWYzT0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2g+vOEhRpFFyQR8A+qZ30ZYHkp8cKEC3xzyB8Dy23O6+S/WgkFzV6 FrsEdEJXf5CkQe7Ql7b+uSBfN8ElBCX3ZZMF/9aMKCEjISLfZ3wHr2rEBtrBce6c EW/noYZtgX0Qd+LORESgWmYy/C4cK5Qk7oF3o68GheDlp+T7GSi2NuvCgpZT+FG9 QUFw+FFxeds4b517nGuMTddHBi+bfZptJD1/nBemtKPwTlPRRDDiBUX2vRrG/rUq fnzm26aL5VnaHuXtDXHmvykDNEj1ir02WCtwx66NCS3cFqqSqHiaM1AJgEKRRmUy NFRwE4beYjcNZ+Yy6ZPH/DAjr7IyD7E1 -----END CERTIFICATE-----Generated at Sun Jun 29 20:17:29 2025 by rpki-client