$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft File: uLVa9atmqP-naRykPaKmtJuiRUA.mft (raw, json) Hash identifier: yn48dhpKDk0w9UNPo3ynpGg4IiNeLpMt/frab+y+Pi8= Subject key identifier: FF:BD:07:8A:71:80:7F:89:4F:1E:92:84:3B:F6:94:DC:EC:4B:3E:06 Authority key identifier: B8:B5:5A:F5:AB:66:A8:FF:A7:69:1C:A4:3D:A2:A6:B4:9B:A2:45:40 Certificate issuer: /CN=A91C5778/serialNumber=B8B55AF5AB66A8FFA7691CA43DA2A6B49BA24540 Certificate serial: 0C09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft Manifest number: 0C02 Signing time: Wed 02 Jul 2025 18:58:30 +0000 Manifest this update: Wed 02 Jul 2025 18:58:30 +0000 Manifest next update: Wed 09 Jul 2025 18:58:30 +0000 Files and hashes: 1: uLVa9atmqP-naRykPaKmtJuiRUA.crl (hash: av/yFGrVzeRL1uqu794vxqH39W9lKUncTn6l5xCWaT0=) 2: B3E5DF2A14ED11EAACAB5E5DC4F9AE02.roa (hash: cmHL+jcXVZxk1ExKQVL6FlfnXQXFN7c8jdKbgylZ/70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.crl rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3081 (0xc09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5778, serialNumber=B8B55AF5AB66A8FFA7691CA43DA2A6B49BA24540 Validity Not Before: Jul 2 18:58:30 2025 GMT Not After : Jul 9 18:58:30 2025 GMT Subject: CN=68658156-3865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:01:25:e1:1a:d2:6c:5e:82:fe:c2:4e:09:ea: ad:51:9e:70:cc:6f:0a:0c:00:b0:ff:70:bb:2c:33: 59:de:2b:43:60:e7:86:cc:7d:a3:a0:7a:0c:aa:c5: 33:4c:08:bb:e9:d3:13:17:c0:f1:80:07:2c:dc:1b: 69:37:a9:8d:1c:04:cc:79:96:9f:e9:33:0e:81:bb: 7b:1a:d3:79:3c:e6:36:58:4f:d7:4f:2a:47:c2:88: b0:52:42:d9:da:a8:62:09:12:1c:a2:2d:ed:50:39: d6:2b:36:e3:a6:02:7e:da:87:83:97:cb:67:3b:ea: 9d:22:4f:45:94:92:86:cf:2f:44:93:89:a2:93:3b: 55:b3:85:4d:d1:00:1e:ca:1e:56:a7:3b:45:0b:fd: 4b:b8:62:e0:cc:83:e8:a9:54:32:51:f1:01:a8:14: b7:4c:91:8c:9d:35:54:cc:9f:04:a2:58:7b:13:23: 4e:4e:8b:06:05:bc:4d:5b:16:e8:64:08:cb:de:2d: 91:ee:02:70:4b:04:e1:20:75:64:d7:93:e4:9d:06: b0:e3:60:85:a1:c1:14:60:fb:18:ff:b7:04:01:52: 09:a2:e6:d4:73:e1:f2:9e:63:b4:ca:08:8d:fb:a7: a8:cf:fa:a0:03:ee:49:bd:b8:18:23:8f:92:bc:db: b0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BD:07:8A:71:80:7F:89:4F:1E:92:84:3B:F6:94:DC:EC:4B:3E:06 X509v3 Authority Key Identifier: keyid:B8:B5:5A:F5:AB:66:A8:FF:A7:69:1C:A4:3D:A2:A6:B4:9B:A2:45:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:99:59:70:e2:70:c2:f1:8a:e6:0e:e7:89:bc:a2:bf:17:bb: 05:b9:cf:a2:81:9c:09:44:7f:33:b9:e7:2e:a7:6f:7a:de:eb: 48:1b:b6:71:f2:fa:bd:a0:71:01:df:7c:7d:16:f5:5c:3d:e3: 83:a4:74:1e:37:93:4a:bb:85:c5:30:22:69:2e:b9:ec:73:6f: e6:4a:32:f7:2f:a5:67:77:db:81:e0:1f:d3:c7:05:03:d8:f5: 2a:34:af:cf:56:13:9b:cb:37:5e:f2:09:94:55:bb:4a:f1:38: 10:5c:2c:b0:63:78:c4:97:90:5d:2f:83:21:9a:7c:ef:7a:57: 25:18:6c:59:8c:fc:17:c2:b6:e8:7a:a8:bf:d7:4b:e4:36:ff: 19:24:1d:3b:e6:e5:5c:03:4c:5d:62:84:bb:67:f0:5c:3c:18: 21:a0:30:1d:1d:13:d5:ac:db:aa:84:0c:3f:f2:3c:78:fa:72: 73:2d:40:cb:92:07:8e:6c:f8:56:dd:13:31:97:0c:f6:ae:1c: 5b:30:8f:04:6f:f0:6b:93:ff:b4:d8:2d:5d:5b:23:6c:9a:b8: 21:07:77:f7:92:43:65:6e:c4:95:a0:4b:5e:39:25:c2:75:65: 6b:c4:93:2e:2a:4e:cb:7f:56:bd:7b:6c:4c:4b:54:d3:34:b6: 11:e2:0d:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3NzgxMTAvBgNVBAUTKEI4QjU1QUY1QUI2NkE4RkZBNzY5MUNBNDNEQTJBNkI0 OUJBMjQ1NDAwHhcNMjUwNzAyMTg1ODMwWhcNMjUwNzA5MTg1ODMwWjAYMRYwFAYD VQQDEw02ODY1ODE1Ni0zODY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgEl4RrSbF6C/sJOCeqtUZ5wzG8KDACw/3C7LDNZ3itDYOeGzH2joHoMqsUz TAi76dMTF8DxgAcs3BtpN6mNHATMeZaf6TMOgbt7GtN5POY2WE/XTypHwoiwUkLZ 2qhiCRIcoi3tUDnWKzbjpgJ+2oeDl8tnO+qdIk9FlJKGzy9Ek4mikztVs4VN0QAe yh5WpztFC/1LuGLgzIPoqVQyUfEBqBS3TJGMnTVUzJ8Eolh7EyNOTosGBbxNWxbo ZAjL3i2R7gJwSwThIHVk15PknQaw42CFocEUYPsY/7cEAVIJoubUc+HynmO0ygiN +6eoz/qgA+5JvbgYI4+SvNuw/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+9B4px gH+JTx6ShDv2lNzsSz4GMB8GA1UdIwQYMBaAFLi1WvWrZqj/p2kcpD2iprSbokVA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTc3OC8zRERDMUFDMDE0 RUMxMUVBQThCQUFFNUFDNEY5QUUwMi91TFZhOWF0bXFQLW5hUnlrUGFLbXRKdWlS VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VMVmE5YXRtcVAtbmFSeWtQYUttdEp1aVJVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTc3OC8zRERDMUFDMDE0RUMxMUVBQThCQUFFNUFDNEY5QUUwMi91TFZhOWF0bXFQ LW5hUnlrUGFLbXRKdWlSVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/mVlw4nDC8YrmDueJvKK/F7sFuc+igZwJRH8zuecup2963utIG7Zx 8vq9oHEB33x9FvVcPeODpHQeN5NKu4XFMCJpLrnsc2/mSjL3L6Vnd9uB4B/TxwUD 2PUqNK/PVhObyzde8gmUVbtK8TgQXCywY3jEl5BdL4MhmnzvelclGGxZjPwXwrbo eqi/10vkNv8ZJB075uVcA0xdYoS7Z/BcPBghoDAdHRPVrNuqhAw/8jx4+nJzLUDL kgeObPhW3RMxlwz2rhxbMI8Eb/Brk/+02C1dWyNsmrghB3f3kkNlbsSVoEteOSXC dWVrxJMuKk7Lf1a9e2xMS1TTNLYR4g0g -----END CERTIFICATE-----Generated at Thu Jul 3 03:59:40 2025 by rpki-client