$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft File: uG8rXtaXoSH08p1YIDcs8UBVEgs.mft (raw, json) Hash identifier: FJnUdxpj4ZUI9Bw5FDzqoHYoyg1FYRT88zyn7T69J2k= Subject key identifier: 73:A9:8C:C8:58:1F:74:B8:CC:52:F2:C5:B3:F3:94:69:37:EE:8B:4E Authority key identifier: B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B Certificate issuer: /CN=A91AF0C6/serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft Manifest number: 015F Signing time: Tue 01 Jul 2025 04:28:26 +0000 Manifest this update: Tue 01 Jul 2025 04:28:26 +0000 Manifest next update: Tue 08 Jul 2025 04:28:26 +0000 Files and hashes: 1: uG8rXtaXoSH08p1YIDcs8UBVEgs.crl (hash: x2B/RwtmT0TPJv9G6VaFHHNsqvuwKLrhN0gELomiJoE=) 2: A915A3543FEC11EE99AC0F43C4F9AE02.roa (hash: go8uCjvo0RCrR73Y9GSlxE8uDTmJOu4MaZ77GeOcrFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0C6, serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B Validity Not Before: Jul 1 04:28:26 2025 GMT Not After : Jul 8 04:28:26 2025 GMT Subject: CN=686363ea-5e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:84:5b:cf:80:bf:06:85:15:f6:35:e9:69:e0: 34:52:ef:4d:b3:2b:cf:55:c8:dc:e5:c1:27:8a:5f: 8f:8c:09:1f:ba:47:dc:58:4e:ab:1c:1f:c6:a4:3f: 51:33:04:73:30:92:4a:06:e4:ff:72:29:0d:d8:49: 0f:a2:6e:7a:94:5c:9d:b5:7d:35:5a:9b:f5:ea:69: d0:1f:dc:97:5b:05:30:b9:14:8f:83:58:55:3d:5c: a9:98:99:ee:41:1c:d6:94:b9:79:af:69:ef:bc:40: 2d:48:a9:94:a7:ba:42:ee:64:e0:84:74:47:a8:e1: 0d:a4:98:82:37:ad:29:1d:a5:57:a6:c6:76:fc:5a: b7:0b:40:6e:ca:a5:31:86:f3:ce:b5:4e:12:d9:47: f7:a6:c8:05:85:6e:7e:96:dd:8e:b3:d7:23:47:37: c6:9e:67:6a:73:04:13:62:53:7c:a4:65:a5:ec:f7: b9:1a:22:4e:78:26:ac:a9:8e:ac:04:04:6d:8a:21: 97:6e:1e:ee:cc:ff:d9:e1:b7:3e:b7:95:df:75:be: ba:5d:9a:b5:ce:f4:80:39:32:0a:78:28:fe:62:05: a8:75:88:6c:e6:7e:8f:ad:d7:ee:bd:fa:08:93:f4: ff:d2:43:bc:f2:7a:11:3b:f3:8a:45:09:22:a2:51: aa:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A9:8C:C8:58:1F:74:B8:CC:52:F2:C5:B3:F3:94:69:37:EE:8B:4E X509v3 Authority Key Identifier: keyid:B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:42:92:b2:1c:20:09:8e:37:d3:37:05:e5:b9:f5:44:4c:0f: 42:be:d0:bd:68:6b:4a:6f:eb:43:f8:1d:34:b2:36:73:b1:73: aa:2c:33:43:69:80:33:28:c9:dd:48:12:ba:28:14:ca:92:bb: e0:d2:4c:46:4b:ac:59:42:9e:a9:49:5e:00:0c:c6:6b:db:12: d6:9b:77:8d:33:0d:81:2c:c1:96:7c:91:8d:ae:3b:86:46:a9: d8:f1:52:f5:85:f9:93:44:b5:e2:32:8a:05:7a:63:dd:9a:b2: 88:46:e9:e8:fb:0b:51:77:96:28:62:3b:e4:00:e8:ae:30:3e: 64:39:cf:a2:27:d3:de:14:ef:9c:26:9e:db:2e:d2:8f:4c:26: 3c:05:7b:3c:f3:ae:e2:84:86:75:7a:a9:b1:ee:cd:2f:13:bf: 6e:18:14:16:ee:5c:6d:32:82:0f:b8:0d:78:88:bc:cb:1f:f8: e7:27:66:98:ed:04:47:50:0d:db:06:62:64:c5:33:c9:12:77: 78:88:6f:7b:de:a6:ac:8a:4e:30:7d:a8:b1:29:eb:a3:f5:a9: 0c:8c:16:b9:7e:e5:1b:91:17:1a:67:ad:a7:e3:cd:c9:a6:3e: bf:98:36:dc:a9:1e:08:f2:4b:25:8f:60:9c:b7:4b:7f:e0:6c: 60:7d:02:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQzYxMTAvBgNVBAUTKEI4NkYyQjVFRDY5N0ExMjFGNEYyOUQ1ODIwMzcyQ0Yx NDA1NTEyMEIwHhcNMjUwNzAxMDQyODI2WhcNMjUwNzA4MDQyODI2WjAYMRYwFAYD VQQDEw02ODYzNjNlYS01ZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4Rbz4C/BoUV9jXpaeA0Uu9NsyvPVcjc5cEnil+PjAkfukfcWE6rHB/GpD9R MwRzMJJKBuT/cikN2EkPom56lFydtX01Wpv16mnQH9yXWwUwuRSPg1hVPVypmJnu QRzWlLl5r2nvvEAtSKmUp7pC7mTghHRHqOENpJiCN60pHaVXpsZ2/Fq3C0BuyqUx hvPOtU4S2Uf3psgFhW5+lt2Os9cjRzfGnmdqcwQTYlN8pGWl7Pe5GiJOeCasqY6s BARtiiGXbh7uzP/Z4bc+t5Xfdb66XZq1zvSAOTIKeCj+YgWodYhs5n6PrdfuvfoI k/T/0kO88noRO/OKRQkiolGqGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOpjMhY H3S4zFLyxbPzlGk37otOMB8GA1UdIwQYMBaAFLhvK17Wl6Eh9PKdWCA3LPFAVRIL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBDNi8zRkNFQkQyMjNG RUMxMUVFQURGNUQzMzhDNEY5QUUwMi91RzhyWHRhWG9TSDA4cDFZSURjczhVQlZF Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VHOHJYdGFYb1NIMDhwMVlJRGNzOFVCVkVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBDNi8zRkNFQkQyMjNGRUMxMUVFQURGNUQzMzhDNEY5QUUwMi91RzhyWHRhWG9T SDA4cDFZSURjczhVQlZFZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBQpKyHCAJjjfTNwXlufVETA9CvtC9aGtKb+tD+B00sjZzsXOqLDND aYAzKMndSBK6KBTKkrvg0kxGS6xZQp6pSV4ADMZr2xLWm3eNMw2BLMGWfJGNrjuG RqnY8VL1hfmTRLXiMooFemPdmrKIRuno+wtRd5YoYjvkAOiuMD5kOc+iJ9PeFO+c Jp7bLtKPTCY8BXs8867ihIZ1eqmx7s0vE79uGBQW7lxtMoIPuA14iLzLH/jnJ2aY 7QRHUA3bBmJkxTPJEnd4iG973qasik4wfaixKeuj9akMjBa5fuUbkRcaZ62n483J pj6/mDbcqR4I8kslj2Cct0t/4GxgfQLy -----END CERTIFICATE-----Generated at Wed Jul 2 15:54:13 2025 by rpki-client