$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft File: ujgt6jovW4xMIgXskp9gG-NP538.mft (raw, json) Hash identifier: w1yvnj+RVs19OUdQJ/dItCgGRBWkKA0OUbo6pEBNgJE= Subject key identifier: AC:FB:38:E6:FF:04:26:2F:CD:50:F7:B1:D6:38:D0:A2:D7:90:92:E2 Authority key identifier: BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F Certificate issuer: /CN=A91B7B34/serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F Certificate serial: 0C59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft Manifest number: 0C4F Signing time: Fri 04 Jul 2025 18:47:32 +0000 Manifest this update: Fri 04 Jul 2025 18:47:32 +0000 Manifest next update: Fri 11 Jul 2025 18:47:32 +0000 Files and hashes: 1: ujgt6jovW4xMIgXskp9gG-NP538.crl (hash: GjZpWezlY3DenwjP56RdcrCU7GMeQs9ckOy3hkILVC4=) 2: 52E56FA806C711EA84978821C4F9AE02.roa (hash: pC6YASmlOW3gbC5Njuzzo1yhASqi/WroinaiHpfVYXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3161 (0xc59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B34, serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F Validity Not Before: Jul 4 18:47:32 2025 GMT Not After : Jul 11 18:47:32 2025 GMT Subject: CN=686821c4-06cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a8:4c:58:fa:3b:30:ff:f9:f2:e4:65:8f:7b: 9f:b2:16:74:c9:3a:60:0a:09:db:8c:29:5a:10:3f: 68:98:ab:ba:8b:24:64:70:de:42:56:06:08:73:eb: a5:fd:1a:59:90:20:d3:50:c6:95:d4:0a:b7:8f:83: e6:80:5c:32:23:db:0b:58:71:56:08:70:ad:6a:f9: b6:16:06:12:ab:89:25:aa:c4:5d:b2:0d:ae:79:7f: ea:1e:fc:fc:95:89:ed:53:1c:7b:45:9e:0b:6f:bb: 62:33:c3:7a:e3:a7:8d:fb:64:99:18:cd:c4:a9:30: 63:f6:e1:62:52:6c:16:43:67:19:ca:ec:e0:e1:6b: b2:92:ed:21:b5:ba:11:cf:30:26:f2:a8:c5:87:28: 00:bc:ca:f9:d9:cb:27:c9:da:a7:ce:11:ce:8c:81: 24:0a:79:32:ac:a1:9d:f4:86:4c:d4:e5:87:0c:cc: ff:06:55:36:30:7a:08:d1:db:81:38:eb:e4:a9:0a: b5:a5:2b:d4:f2:3c:33:23:bf:e6:5f:02:fe:68:a0: 30:5c:15:e2:82:39:f1:3e:d6:e3:c5:4f:9b:83:e9: 8a:de:a9:d8:bf:04:af:f4:c5:96:41:31:c5:94:84: 81:04:64:2b:11:01:24:83:72:72:3f:6d:97:59:e8: 25:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FB:38:E6:FF:04:26:2F:CD:50:F7:B1:D6:38:D0:A2:D7:90:92:E2 X509v3 Authority Key Identifier: keyid:BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f7:c8:a0:53:21:01:38:20:62:e9:73:41:7e:ac:5f:97:51: a8:bc:c0:18:e1:52:91:57:28:14:da:74:03:ba:fa:b2:f8:ac: f6:c6:25:c7:29:f7:90:79:e3:5d:2e:42:71:86:87:2c:7c:9d: 0b:f9:dd:8f:b0:cf:80:80:5b:93:bc:9a:04:36:02:6a:fa:7b: 00:a3:6f:8e:c7:c3:a6:3e:54:27:68:79:8b:6b:92:3f:9a:09: 8c:01:97:17:81:48:cc:50:02:32:a3:21:e3:d0:36:81:06:24: 03:ae:d2:fc:42:89:96:87:2f:d2:de:ba:0d:53:4d:07:cd:49: 38:84:1d:b9:73:f8:6a:f8:a3:3d:d0:4e:a8:c7:de:e2:02:6f: d0:e5:99:48:ea:d0:80:1c:b4:bd:23:50:7d:7b:15:a1:e7:3f: 7e:52:81:02:a3:d6:7c:64:c7:cb:37:8e:22:f3:94:8a:34:3b: 00:e4:c8:c6:e5:80:07:12:ed:53:cf:0d:e0:32:1a:ad:55:2d: f1:8e:7f:39:65:cd:ba:49:4c:f3:82:fe:92:36:85:48:b0:1a: cf:5e:3a:06:09:d0:1a:d5:ca:b8:a3:00:1c:26:28:4d:32:fa: 2b:f5:b7:2b:dc:9f:e2:1d:41:ff:41:4a:00:a4:80:57:58:52: 2b:9a:ba:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMzQxMTAvBgNVBAUTKEJBMzgyREVBM0EyRjVCOEM0QzIyMDVFQzkyOUY2MDFC RTM0RkU3N0YwHhcNMjUwNzA0MTg0NzMyWhcNMjUwNzExMTg0NzMyWjAYMRYwFAYD VQQDEw02ODY4MjFjNC0wNmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9qhMWPo7MP/58uRlj3ufshZ0yTpgCgnbjClaED9omKu6iyRkcN5CVgYIc+ul /RpZkCDTUMaV1Aq3j4PmgFwyI9sLWHFWCHCtavm2FgYSq4klqsRdsg2ueX/qHvz8 lYntUxx7RZ4Lb7tiM8N646eN+2SZGM3EqTBj9uFiUmwWQ2cZyuzg4Wuyku0htboR zzAm8qjFhygAvMr52csnydqnzhHOjIEkCnkyrKGd9IZM1OWHDMz/BlU2MHoI0duB OOvkqQq1pSvU8jwzI7/mXwL+aKAwXBXigjnxPtbjxU+bg+mK3qnYvwSv9MWWQTHF lISBBGQrEQEkg3JyP22XWegl8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKz7OOb/ BCYvzVD3sdY40KLXkJLiMB8GA1UdIwQYMBaAFLo4Leo6L1uMTCIF7JKfYBvjT+d/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IzNC9ERUNFM0VCQTA2 QzYxMUVBQTUxQTYwMjFDNEY5QUUwMi91amd0Nmpvdlc0eE1JZ1hza3A5Z0ctTlA1 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VqZ3Q2am92VzR4TUlnWHNrcDlnRy1OUDUzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IzNC9ERUNFM0VCQTA2QzYxMUVBQTUxQTYwMjFDNEY5QUUwMi91amd0Nmpvdlc0 eE1JZ1hza3A5Z0ctTlA1MzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl98igUyEBOCBi6XNBfqxfl1GovMAY4VKRVygU2nQDuvqy+Kz2xiXH KfeQeeNdLkJxhocsfJ0L+d2PsM+AgFuTvJoENgJq+nsAo2+Ox8OmPlQnaHmLa5I/ mgmMAZcXgUjMUAIyoyHj0DaBBiQDrtL8QomWhy/S3roNU00HzUk4hB25c/hq+KM9 0E6ox97iAm/Q5ZlI6tCAHLS9I1B9exWh5z9+UoECo9Z8ZMfLN44i85SKNDsA5MjG 5YAHEu1Tzw3gMhqtVS3xjn85Zc26SUzzgv6SNoVIsBrPXjoGCdAa1cq4owAcJihN Mvor9bcr3J/iHUH/QUoApIBXWFIrmrrU -----END CERTIFICATE-----Generated at Sun Jul 6 00:15:17 2025 by rpki-client