$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft File: uOpx0E7INugYCHPJ6dQM0uNVNwE.mft (raw, json) Hash identifier: RpWngj7XNbf241q6d+unOjZGfYC2kRC5OZJ+0PpUWPM= Subject key identifier: BD:78:67:CC:DA:44:6C:01:72:10:66:33:81:61:29:35:98:36:98:57 Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 Certificate issuer: /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft Manifest number: 01F4 Signing time: Tue 01 Jul 2025 02:53:56 +0000 Manifest this update: Tue 01 Jul 2025 02:53:56 +0000 Manifest next update: Tue 08 Jul 2025 02:53:56 +0000 Files and hashes: 1: uOpx0E7INugYCHPJ6dQM0uNVNwE.crl (hash: ZMr1cywc5gfnmtUeUtkMw+MVoqdrvSil4kocL3KY8pk=) 2: CC74271E8A8711ED98572D26C4F9AE02.roa (hash: rGioCcK4Zr+knzNA5J2qJp6M9oaPBmCCilGkVDkio+Y=) 3: C9E35E848A8711ED98572D26C4F9AE02.roa (hash: eHox8CScwy17I91npttE3xAPIO9P1S6yAPyglPvKM8k=) 4: 4865D4707C3111EFBD9FF572C4F9AE02.roa (hash: nGayQSIhHNj55hF0Vf/Lo4S3bo5wcu1gOdllnD1y6Pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:53:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCF10, serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Validity Not Before: Jul 1 02:53:56 2025 GMT Not After : Jul 8 02:53:56 2025 GMT Subject: CN=68634dc4-e987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:83:08:7c:b2:ca:50:3c:71:31:89:8b:42:79: 1e:76:73:f7:75:9a:87:2f:ea:d1:51:df:10:f6:f2: 82:ac:91:2e:0d:15:46:77:7c:d3:c1:05:06:69:bf: cb:cf:ab:a4:da:27:9a:51:08:3d:83:7c:a4:d0:6b: 10:31:16:f0:97:81:c8:36:66:4e:2f:6b:84:68:a9: 29:7d:8d:70:24:d7:9d:69:cc:4f:e4:5d:e3:72:94: 70:21:aa:a2:fd:ac:47:a3:a2:a9:94:6d:db:b9:35: 28:8d:ae:69:06:b3:48:94:2e:34:c6:7b:b0:53:ab: d7:ac:a4:9c:fc:f5:52:83:77:73:24:32:5c:f3:87: 1b:c3:f7:e6:55:c4:a6:b4:af:3d:1c:fd:7b:19:24: 19:fd:73:72:67:ba:07:33:a9:0e:79:1a:80:6b:c1: cc:63:36:9f:5a:56:83:68:e0:34:18:a7:5c:1f:d7: d7:af:51:bd:50:f3:20:4c:a8:7e:16:86:8c:b7:3f: 3f:0b:66:90:cf:77:30:2b:5d:08:4b:37:26:17:f5: 23:09:e7:89:29:61:25:18:a0:46:dd:75:10:aa:4c: b7:c3:55:69:20:d3:3a:b1:69:ea:ce:0e:39:02:78: e2:f9:de:db:7a:69:67:95:2a:12:e5:4b:44:73:5d: 1c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:78:67:CC:DA:44:6C:01:72:10:66:33:81:61:29:35:98:36:98:57 X509v3 Authority Key Identifier: keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:b0:48:ee:3c:c2:a3:41:e7:ab:1d:e3:f7:ef:58:f1:6a:6a: 36:86:03:15:e9:20:70:25:dd:74:35:a9:ea:38:a2:9e:f6:f0: 7c:4c:9a:58:d4:d9:78:42:78:8c:19:80:c8:ac:40:c9:35:8d: cb:4c:81:ad:cb:0b:df:2d:b0:a3:b2:49:6d:f4:5b:cc:c6:95: b3:da:d2:ee:d0:9c:48:59:55:6c:92:83:60:aa:1d:ab:b8:30: c4:36:8b:4b:47:a5:0f:ed:23:83:3d:f2:93:4b:df:cc:3c:00: 7b:40:c1:da:d7:8a:b7:11:66:d4:b8:5a:68:49:8f:02:0f:3d: 6d:3c:8a:a2:81:2e:f1:ba:14:d3:30:ba:8b:eb:82:e6:99:08: 42:8f:af:4d:dc:56:e9:4d:64:95:d0:68:f1:5e:f3:df:be:08: 9b:76:c4:a3:88:cb:5a:1a:76:35:7a:a2:ad:27:8b:9b:4a:80: 32:8d:09:68:82:7a:a4:02:98:05:a7:e5:d4:4d:08:16:bf:df: 64:54:9a:32:b9:fb:60:e6:6e:cc:76:7a:5d:5a:f8:8e:60:c3: 57:5c:bc:fc:ea:e6:b8:6d:f0:65:63:a5:31:5a:d2:55:fb:89: bd:3a:0b:d7:07:a6:7c:66:4f:68:fd:fa:93:0d:82:8a:9c:e2: a2:ec:9c:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NGMTAxMTAvBgNVBAUTKEI4RUE3MUQwNEVDODM2RTgxODA4NzNDOUU5RDQwQ0Qy RTM1NTM3MDEwHhcNMjUwNzAxMDI1MzU2WhcNMjUwNzA4MDI1MzU2WjAYMRYwFAYD VQQDEw02ODYzNGRjNC1lOTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24MIfLLKUDxxMYmLQnkednP3dZqHL+rRUd8Q9vKCrJEuDRVGd3zTwQUGab/L z6uk2ieaUQg9g3yk0GsQMRbwl4HINmZOL2uEaKkpfY1wJNedacxP5F3jcpRwIaqi /axHo6KplG3buTUoja5pBrNIlC40xnuwU6vXrKSc/PVSg3dzJDJc84cbw/fmVcSm tK89HP17GSQZ/XNyZ7oHM6kOeRqAa8HMYzafWlaDaOA0GKdcH9fXr1G9UPMgTKh+ FoaMtz8/C2aQz3cwK10ISzcmF/UjCeeJKWElGKBG3XUQqky3w1VpINM6sWnqzg45 Anji+d7bemlnlSoS5UtEc10cEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL14Z8za RGwBchBmM4FhKTWYNphXMB8GA1UdIwQYMBaAFLjqcdBOyDboGAhzyenUDNLjVTcB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0YxMC9FQzY3MzMzRTYw OTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51Z1lDSFBKNmRRTTB1TlZO d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPcHgwRTdJTnVnWUNIUEo2ZFFNMHVOVk53RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0YxMC9FQzY3MzMzRTYwOTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51 Z1lDSFBKNmRRTTB1TlZOd0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0sEjuPMKjQeerHeP371jxamo2hgMV6SBwJd10NanqOKKe9vB8TJpY 1Nl4QniMGYDIrEDJNY3LTIGtywvfLbCjsklt9FvMxpWz2tLu0JxIWVVskoNgqh2r uDDENotLR6UP7SODPfKTS9/MPAB7QMHa14q3EWbUuFpoSY8CDz1tPIqigS7xuhTT MLqL64LmmQhCj69N3FbpTWSV0GjxXvPfvgibdsSjiMtaGnY1eqKtJ4ubSoAyjQlo gnqkApgFp+XUTQgWv99kVJoyuftg5m7MdnpdWviOYMNXXLz86ua4bfBlY6UxWtJV +4m9OgvXB6Z8Zk9o/fqTDYKKnOKi7Jxy -----END CERTIFICATE-----Generated at Wed Jul 2 15:35:30 2025 by rpki-client