$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft File: Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft (raw, json) Hash identifier: stN9dEjB8lpN22iPHArPQ36sbH75uvUYdrMc4WkX39w= Subject key identifier: CC:F9:47:FA:D2:4A:5F:63:24:02:5F:47:C6:26:54:B4:EE:86:4D:06 Authority key identifier: 52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94 Certificate issuer: /CN=A91AFA16/serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894 Certificate serial: 0B61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft Manifest number: 0B59 Signing time: Mon 30 Jun 2025 19:15:35 +0000 Manifest this update: Mon 30 Jun 2025 19:15:34 +0000 Manifest next update: Mon 07 Jul 2025 19:15:34 +0000 Files and hashes: 1: Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl (hash: dLvyakN0Zn0/QHvb+G7wmcmZCvo/xyLVzRfLIQHzxHo=) 2: 11DB043CF61E11EEB39BD261C4F9AE02.roa (hash: e4wDPqjhV3r7vEA4MsvAFc5ifRump5FxJZTH+nviBcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2913 (0xb61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFA16, serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894 Validity Not Before: Jun 30 19:15:34 2025 GMT Not After : Jul 7 19:15:34 2025 GMT Subject: CN=6862e256-21f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a6:80:7c:ee:64:ec:8e:3b:d8:90:92:61:42: 13:25:36:18:bf:31:88:ab:19:a6:fe:39:c8:fa:a5: ee:29:23:10:a7:e2:14:bf:ca:ff:e5:d4:54:6e:71: 75:b6:09:47:23:92:a3:a2:60:36:83:be:03:54:36: b3:48:0f:b3:e7:55:25:fc:c8:62:6e:f2:56:34:96: bd:d8:e7:78:d9:9c:e1:bf:41:12:b5:3a:70:30:36: 16:6a:bc:e1:a9:65:f3:36:2d:34:b8:a6:17:88:7e: 2b:f4:d8:e3:0c:7f:8a:ea:d5:d6:59:a7:f5:7c:2d: e7:87:eb:af:16:01:44:12:28:d2:4c:64:eb:bc:f5: 79:38:b5:84:54:36:f4:a6:a6:7f:1f:a1:f4:3c:86: 7b:89:4d:73:72:2b:06:5d:04:28:a5:c7:e1:1f:4b: e6:c7:02:ed:78:92:1e:b5:db:bd:3c:ed:c9:1a:e5: 75:35:63:46:cd:e5:8b:5f:48:98:94:4e:eb:29:7b: 80:64:c8:37:1f:07:71:d7:ba:11:5a:f9:42:dc:bb: 79:3c:3d:ff:f7:95:ca:c1:46:36:ec:37:57:94:fd: a1:80:7d:92:98:67:42:e7:38:ba:8f:33:33:cc:dd: 74:09:56:13:39:d1:9f:a3:69:0d:66:4e:0c:e9:58: bc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F9:47:FA:D2:4A:5F:63:24:02:5F:47:C6:26:54:B4:EE:86:4D:06 X509v3 Authority Key Identifier: keyid:52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:c6:f3:fa:a3:57:f7:c9:6d:e4:8f:32:03:31:1a:31:0e:0e: f8:54:f3:9d:a5:75:bc:1e:9b:b1:c3:49:18:49:30:4c:a7:e6: ba:af:22:5c:ac:8c:62:42:bc:45:4e:2e:41:67:29:30:a7:bb: f3:99:b3:39:36:6c:36:18:13:89:8b:20:2b:57:7a:1a:e1:b9: b7:9a:0e:7a:b5:f7:c2:da:95:dc:9e:7a:f4:05:54:9e:40:f8: f1:8b:04:87:ff:67:7e:c6:63:e3:c2:9b:a0:b5:77:d8:c0:a3: ec:b0:34:79:5c:42:ee:9d:57:5c:b3:7d:4e:27:d7:6a:11:c9: ad:de:c4:14:2c:45:61:06:f4:34:1b:31:0f:bd:af:a5:41:fc: 9a:1e:a8:11:4b:09:b4:ae:38:0b:16:58:71:ff:81:c8:ca:f4: 66:1b:ee:7f:92:7b:aa:cd:61:ba:82:44:3a:84:81:aa:91:73: 2e:8b:ea:ea:d0:9f:2c:42:19:d7:f8:40:55:ed:06:a9:08:6f: 7b:08:e6:f8:32:e7:e4:97:b7:eb:03:e1:ce:13:e8:67:50:f3: 45:05:6a:75:8b:d8:bc:d7:25:c7:99:60:ee:33:37:c3:4f:f4: 82:a5:96:89:df:8b:24:b4:dd:ae:4e:cf:9e:ac:98:e6:51:72: 49:2e:74:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZBMTYxMTAvBgNVBAUTKDUyRkQxREUyNERBRjhERDVGQzNBQTAwNzhCMDc3MzJG QzI3NDc4OTQwHhcNMjUwNjMwMTkxNTM0WhcNMjUwNzA3MTkxNTM0WjAYMRYwFAYD VQQDEw02ODYyZTI1Ni0yMWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKaAfO5k7I472JCSYUITJTYYvzGIqxmm/jnI+qXuKSMQp+IUv8r/5dRUbnF1 tglHI5KjomA2g74DVDazSA+z51Ul/MhibvJWNJa92Od42Zzhv0EStTpwMDYWarzh qWXzNi00uKYXiH4r9NjjDH+K6tXWWaf1fC3nh+uvFgFEEijSTGTrvPV5OLWEVDb0 pqZ/H6H0PIZ7iU1zcisGXQQopcfhH0vmxwLteJIetdu9PO3JGuV1NWNGzeWLX0iY lE7rKXuAZMg3Hwdx17oRWvlC3Lt5PD3/95XKwUY27DdXlP2hgH2SmGdC5zi6jzMz zN10CVYTOdGfo2kNZk4M6Vi8qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMz5R/rS Sl9jJAJfR8YmVLTuhk0GMB8GA1UdIwQYMBaAFFL9HeJNr43V/DqgB4sHcy/CdHiU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkExNi9DNTU0MjA4MDM1 QzkxMUVBQjRBRkNCMTVDNEY5QUUwMi9VdjBkNGsydmpkWDhPcUFIaXdkekw4SjBl SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V2MGQ0azJ2amRYOE9xQUhpd2R6TDhKMGVKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkExNi9DNTU0MjA4MDM1QzkxMUVBQjRBRkNCMTVDNEY5QUUwMi9VdjBkNGsydmpk WDhPcUFIaXdkekw4SjBlSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5xvP6o1f3yW3kjzIDMRoxDg74VPOdpXW8Hpuxw0kYSTBMp+a6ryJc rIxiQrxFTi5BZykwp7vzmbM5Nmw2GBOJiyArV3oa4bm3mg56tffC2pXcnnr0BVSe QPjxiwSH/2d+xmPjwpugtXfYwKPssDR5XELunVdcs31OJ9dqEcmt3sQULEVhBvQ0 GzEPva+lQfyaHqgRSwm0rjgLFlhx/4HIyvRmG+5/knuqzWG6gkQ6hIGqkXMui+rq 0J8sQhnX+EBV7QapCG97COb4Mufkl7frA+HOE+hnUPNFBWp1i9i81yXHmWDuMzfD T/SCpZaJ34sktN2uTs+erJjmUXJJLnS9 -----END CERTIFICATE-----Generated at Tue Jul 1 18:31:27 2025 by rpki-client