$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft File: uoXZHSSsqengMR5VLb83WXY6Yro.mft (raw, json) Hash identifier: Q0POBTre3rafUkVn0FiqQbmH2PlgrqVPCWWLKywYab4= Subject key identifier: 50:6A:3D:D7:81:C6:82:DC:35:17:31:76:20:C4:42:B8:0D:A3:7D:5D Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA Certificate issuer: /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft Manifest number: B4 Signing time: Thu 03 Jul 2025 06:10:29 +0000 Manifest this update: Thu 03 Jul 2025 06:10:28 +0000 Manifest next update: Thu 10 Jul 2025 06:10:28 +0000 Files and hashes: 1: uoXZHSSsqengMR5VLb83WXY6Yro.crl (hash: ryJcLWfsM58JDTbSL5t/Fql4KHHRFL9h9kLEK/jv9PE=) 2: C57D59A8457011EFA624C172C4F9AE02.roa (hash: ID73Pz3s55NAjs8USBhRX9L9yvmp5FUr9fdsYXFscuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B391F, serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA Validity Not Before: Jul 3 06:10:28 2025 GMT Not After : Jul 10 06:10:28 2025 GMT Subject: CN=68661ed4-e735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:d6:de:a9:c2:b9:1e:22:f5:2c:d3:f7:3a: a7:14:24:3a:2e:a6:88:d6:2f:0b:41:68:58:ff:89: 4c:b6:4a:88:64:6f:96:34:de:c6:d7:d2:1e:ca:aa: 65:1d:d2:41:cf:5b:23:cb:34:32:99:20:90:05:f2: bf:ba:10:68:1d:dd:6d:f9:e9:90:7a:31:77:e2:90: 30:5c:6d:5e:8b:4a:f2:ec:dd:d6:7b:48:41:8c:46: f7:0f:63:06:c5:d1:ba:0b:b6:77:2c:ac:3a:70:34: 45:d7:55:5f:a8:6e:13:ca:cf:10:32:97:eb:3e:0e: 20:07:b0:c9:ec:92:3d:d0:76:80:08:3c:24:41:a0: 40:e6:7b:0b:13:5b:86:9e:9e:04:2f:c5:c1:dc:2e: d0:0d:01:51:9f:a9:80:dc:35:96:6b:53:fe:09:f1: a1:0c:01:d2:76:05:f2:80:a8:44:43:ae:6b:8f:cb: ad:f3:f3:e4:cc:46:8a:36:ce:f5:70:65:d8:1d:4f: 40:f9:ab:c7:cd:66:45:e1:aa:26:d8:16:fa:5c:13: 78:d5:51:12:7f:19:24:24:69:19:4b:7d:92:c7:98: fe:5d:a0:6b:64:8c:bc:e1:97:d0:61:08:94:4a:83: 63:e6:77:4a:f0:9c:23:26:bc:c0:75:ad:08:b5:e9: ac:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6A:3D:D7:81:C6:82:DC:35:17:31:76:20:C4:42:B8:0D:A3:7D:5D X509v3 Authority Key Identifier: keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:87:f8:2c:ac:39:f7:fc:0f:6f:05:01:75:55:7a:94:86:8d: 06:da:d0:a9:7e:85:d2:e2:16:22:13:07:77:08:21:7a:d3:29: 0a:ea:1f:b9:0a:76:a8:e5:83:20:0e:ea:e3:1a:46:6e:99:f0: 8d:75:03:1b:15:31:34:28:9a:bb:75:6b:6c:dc:75:1c:ec:c9: 4f:69:02:98:c6:58:a3:05:2a:0d:e5:74:2a:e8:d3:32:c3:1c: fd:ba:15:a7:b9:f1:dd:0a:a2:b5:0f:ff:3e:df:ee:89:d9:20: a7:9b:ca:ff:27:12:66:82:7b:0e:e4:e7:e6:f6:89:70:82:c9: a1:e5:26:62:d4:1e:e7:84:40:7d:c1:90:52:13:59:3e:f8:28: e1:fd:23:86:f4:cd:79:03:62:87:72:a4:36:63:cb:e5:cb:5b: 89:6b:4f:94:46:6f:e5:fc:6f:bd:ac:29:f1:d9:90:dc:aa:49: a5:4b:ac:08:37:8c:3f:b4:1d:25:d2:9e:f8:0f:f8:a7:92:98: 05:8e:65:79:ff:5a:5f:00:a3:9d:5b:28:4d:02:63:40:a5:8d: 97:56:5a:a4:69:da:43:c7:fb:7d:29:52:44:31:d5:31:f1:e3: f4:c2:41:ff:77:c0:b0:79:19:cd:51:62:cd:80:9c:5b:12:48: a7:c1:02:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM5MUYxMTAvBgNVBAUTKEJBODVEOTFEMjRBQ0E5RTlFMDMxMUU1NTJEQkYzNzU5 NzYzQTYyQkEwHhcNMjUwNzAzMDYxMDI4WhcNMjUwNzEwMDYxMDI4WjAYMRYwFAYD VQQDEw02ODY2MWVkNC1lNzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzrW3qnCuR4i9SzT9zqnFCQ6LqaI1i8LQWhY/4lMtkqIZG+WNN7G19Ieyqpl HdJBz1sjyzQymSCQBfK/uhBoHd1t+emQejF34pAwXG1ei0ry7N3We0hBjEb3D2MG xdG6C7Z3LKw6cDRF11VfqG4Tys8QMpfrPg4gB7DJ7JI90HaACDwkQaBA5nsLE1uG np4EL8XB3C7QDQFRn6mA3DWWa1P+CfGhDAHSdgXygKhEQ65rj8ut8/PkzEaKNs71 cGXYHU9A+avHzWZF4aom2Bb6XBN41VESfxkkJGkZS32Sx5j+XaBrZIy84ZfQYQiU SoNj5ndK8JwjJrzAda0Items3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBqPdeB xoLcNRcxdiDEQrgNo31dMB8GA1UdIwQYMBaAFLqF2R0krKnp4DEeVS2/N1l2OmK6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzkxRi81MDgzNUU2ODQ1 NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi91b1haSFNTc3FlbmdNUjVWTGI4M1dYWTZZ cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VvWFpIU1NzcWVuZ01SNVZMYjgzV1hZNllyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzkxRi81MDgzNUU2ODQ1NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi91b1haSFNTc3Fl bmdNUjVWTGI4M1dYWTZZcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKh/gsrDn3/A9vBQF1VXqUho0G2tCpfoXS4hYiEwd3CCF60ykK6h+5 Cnao5YMgDurjGkZumfCNdQMbFTE0KJq7dWts3HUc7MlPaQKYxlijBSoN5XQq6NMy wxz9uhWnufHdCqK1D/8+3+6J2SCnm8r/JxJmgnsO5Ofm9olwgsmh5SZi1B7nhEB9 wZBSE1k++Cjh/SOG9M15A2KHcqQ2Y8vly1uJa0+URm/l/G+9rCnx2ZDcqkmlS6wI N4w/tB0l0p74D/inkpgFjmV5/1pfAKOdWyhNAmNApY2XVlqkadpDx/t9KVJEMdUx 8eP0wkH/d8CweRnNUWLNgJxbEkinwQJr -----END CERTIFICATE-----Generated at Thu Jul 3 10:05:15 2025 by rpki-client