$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft File: uokBTrxJS2f9iz-C6LOO9vbFck0.mft (raw, json) Hash identifier: JqvwL4IL+JltQ+293UfMOt5ex7Nu74AAkJJm6LynHhE= Subject key identifier: C9:DD:89:8D:79:2F:84:47:69:10:E5:39:03:99:74:D1:98:EA:7B:C8 Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D Certificate issuer: /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft Manifest number: 0111 Signing time: Sun 29 Jun 2025 04:06:21 +0000 Manifest this update: Sun 29 Jun 2025 04:06:20 +0000 Manifest next update: Sun 06 Jul 2025 04:06:20 +0000 Files and hashes: 1: uokBTrxJS2f9iz-C6LOO9vbFck0.crl (hash: 8AXDPH98bgLQ9akRGrp58byYFHsVlPYWeK8Jsxonebs=) 2: ED352AAEBFE511EEBB3B4D25C4F9AE02.roa (hash: Cg10Lh1/jWjaqO5EBHv5C6vMK3khuwZ/+iMJMpvh7AE=) 3: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (hash: lJjM0vXxFGkR8fpKRXKFywWPgH/0gbH+qkVNiWKRaAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4EC7, serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Validity Not Before: Jun 29 04:06:20 2025 GMT Not After : Jul 6 04:06:20 2025 GMT Subject: CN=6860bbbd-c133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9a:d9:5d:ce:2e:4a:3b:fc:c6:2e:99:0f:3d: 6d:b5:58:8c:ba:05:4d:07:b1:ad:d0:c3:6d:3e:65: 7d:c7:7b:0c:d4:c4:78:d6:bb:00:2e:8f:5a:3d:43: 1f:18:da:05:2f:c1:bf:6a:b6:c5:0f:75:49:63:7b: c5:fe:3d:49:9f:03:75:20:98:09:53:11:86:f5:ed: 86:7b:8b:4c:c8:04:06:3d:78:86:6f:fe:6c:15:6d: 3e:7c:58:a2:8d:35:2d:2a:61:ec:e3:82:31:91:cd: 9c:cb:e8:c7:63:60:a2:f7:39:42:61:d5:ca:d5:23: 62:b5:06:73:94:75:1e:21:cd:6e:30:52:fd:7e:b8: f5:93:4f:9c:ad:d4:77:b6:55:96:6d:7f:70:33:62: b5:ec:d1:43:a5:d2:bf:7f:6b:9f:da:e9:1e:d7:d2: eb:24:c8:b0:93:a9:bf:9f:ae:23:40:75:ac:d9:36: e4:ac:91:1b:04:b6:c5:1b:8f:90:3d:56:08:51:35: 0f:10:59:1c:e8:d9:4d:e0:da:eb:9c:fd:27:06:ef: 1f:1e:28:43:52:6a:65:2e:a1:39:b5:6e:07:63:c7: 17:85:7e:3f:ba:1a:08:9c:86:d0:77:18:94:b8:23: 6d:1e:db:0b:9c:54:60:41:63:07:ca:04:6e:39:90: b1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DD:89:8D:79:2F:84:47:69:10:E5:39:03:99:74:D1:98:EA:7B:C8 X509v3 Authority Key Identifier: keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:48:e1:e8:7a:4e:64:7f:3e:96:4e:20:87:2b:16:e3:4e:6b: 0f:c1:64:c9:c1:b8:41:9e:2b:8b:5b:d8:6b:04:78:2e:86:36: 88:b8:6a:a4:4a:d6:a7:c9:64:b4:42:33:88:08:a0:af:27:28: 44:79:9d:da:db:d1:95:47:6d:73:68:bd:66:a7:af:ed:0b:5c: 88:da:c5:0d:f1:cb:11:76:34:32:bf:92:45:e3:8c:fb:81:9e: 3d:4f:d6:49:0c:81:91:7e:bf:00:41:0a:79:fb:05:9d:d8:22: 92:c2:7b:7a:81:e4:c6:a2:8e:71:ac:74:ee:be:5d:6d:bb:a5: 31:56:1a:84:ef:79:c5:25:34:ce:e0:f0:f8:e2:bd:a1:ec:80: b0:bb:08:2f:3c:b1:62:77:a6:60:20:48:dd:55:ab:5c:f6:90: 92:ae:7f:bc:cb:bd:13:ab:f6:e6:ec:66:82:8a:55:42:ab:97: 93:34:38:e9:72:db:56:16:8f:76:67:93:b9:f5:e3:2b:34:19: d1:1b:63:88:7c:d1:71:d0:57:78:72:c9:8b:a0:fa:aa:8e:10: 5c:34:d8:16:ee:f0:a1:60:81:36:0a:f8:0a:54:89:7f:c9:31: a7:fd:8a:0d:63:b1:4a:b6:1d:6a:da:0f:c0:69:60:e4:79:fa: ea:9a:83:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFQzcxMTAvBgNVBAUTKEJBODkwMTRFQkM0OTRCNjdGRDhCM0Y4MkU4QjM4RUY2 RjZDNTcyNEQwHhcNMjUwNjI5MDQwNjIwWhcNMjUwNzA2MDQwNjIwWjAYMRYwFAYD VQQDEw02ODYwYmJiZC1jMTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JrZXc4uSjv8xi6ZDz1ttViMugVNB7Gt0MNtPmV9x3sM1MR41rsALo9aPUMf GNoFL8G/arbFD3VJY3vF/j1JnwN1IJgJUxGG9e2Ge4tMyAQGPXiGb/5sFW0+fFii jTUtKmHs44Ixkc2cy+jHY2Ci9zlCYdXK1SNitQZzlHUeIc1uMFL9frj1k0+crdR3 tlWWbX9wM2K17NFDpdK/f2uf2uke19LrJMiwk6m/n64jQHWs2TbkrJEbBLbFG4+Q PVYIUTUPEFkc6NlN4NrrnP0nBu8fHihDUmplLqE5tW4HY8cXhX4/uhoInIbQdxiU uCNtHtsLnFRgQWMHygRuOZCxuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMndiY15 L4RHaRDlOQOZdNGY6nvIMB8GA1UdIwQYMBaAFLqJAU68SUtn/Ys/guizjvb2xXJN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVDNy83NTc1Nzg3MEJG RTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMyZjlpei1DNkxPTzl2YkZj azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vva0JUcnhKUzJmOWl6LUM2TE9POXZiRmNrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEVDNy83NTc1Nzg3MEJGRTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMy Zjlpei1DNkxPTzl2YkZjazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiSOHoek5kfz6WTiCHKxbjTmsPwWTJwbhBniuLW9hrBHguhjaIuGqk StanyWS0QjOICKCvJyhEeZ3a29GVR21zaL1mp6/tC1yI2sUN8csRdjQyv5JF44z7 gZ49T9ZJDIGRfr8AQQp5+wWd2CKSwnt6geTGoo5xrHTuvl1tu6UxVhqE73nFJTTO 4PD44r2h7ICwuwgvPLFid6ZgIEjdVatc9pCSrn+8y70Tq/bm7GaCilVCq5eTNDjp cttWFo92Z5O59eMrNBnRG2OIfNFx0Fd4csmLoPqqjhBcNNgW7vChYIE2CvgKVIl/ yTGn/YoNY7FKth1q2g/AaWDkefrqmoPN -----END CERTIFICATE-----Generated at Sun Jun 29 19:10:46 2025 by rpki-client