$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft File: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft (raw, json) Hash identifier: JIGHyqXn+/3C9QfVhEpxZz4uAh2mccwzG5T9xxPO5sU= Subject key identifier: 57:4A:CF:17:6E:84:63:C1:3E:19:CC:EF:17:D7:3A:3B:BF:44:D8:3E Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 Certificate issuer: /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft Manifest number: ED Signing time: Tue 01 Jul 2025 05:52:40 +0000 Manifest this update: Tue 01 Jul 2025 05:52:39 +0000 Manifest next update: Tue 08 Jul 2025 05:52:39 +0000 Files and hashes: 1: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl (hash: Cmhx+7HxAtbVrmtchgHheINvVEBlQpRKcGZm5Du7zdo=) 2: 99244E94FE0211EEB1F40344C4F9AE02.roa (hash: ryfpBDCWcmiRZYqeao/rsVyXOOOGDWQajzrZGBcgq+0=) 3: 03BA6992ED7711EE9998FC11C4F9AE02.roa (hash: NecAjd+CZeOPqXXjjBIs9rEIjFJr1slo8jl+q1zHuq8=) 4: 38556AC6ED7711EEA7B2AF12C4F9AE02.roa (hash: x08O0LKYaX3hn9bkCscla0qFn3NKZcPh8LO75bK0AIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE959, serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Validity Not Before: Jul 1 05:52:39 2025 GMT Not After : Jul 8 05:52:39 2025 GMT Subject: CN=686377a7-9234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1f:f9:0d:27:6d:aa:f5:35:69:ce:77:0c:d6: 6a:6e:b2:bb:36:9c:a1:26:8c:85:2c:f9:2b:d0:3d: c2:25:58:06:d0:1a:a1:5e:6a:67:e7:73:e9:a2:21: 3f:55:bc:41:18:0e:38:9a:06:e0:45:20:0d:07:94: ea:2c:17:69:1e:ff:1f:8b:9e:cf:77:7b:f8:40:70: 33:70:ca:11:3d:46:b3:69:71:c0:5a:d9:0e:53:0f: 66:0d:d4:af:14:c4:60:cf:81:76:52:71:8e:0a:a7: 50:21:64:92:0f:04:af:57:71:e3:d2:9b:35:30:fc: 2c:b3:bb:99:ed:0c:2d:41:c1:01:19:83:1c:3b:90: 29:27:4f:8c:bf:74:26:07:eb:c3:fd:c3:09:6b:a7: 9c:1b:af:ea:9b:9a:a9:7d:7c:b3:b4:5d:e7:d8:b8: 03:15:f5:80:c6:c1:79:f9:1e:c2:77:8a:ee:9c:21: 05:e7:1c:32:80:be:0a:da:51:13:d0:63:6f:2b:a2: 26:1d:92:a7:95:94:de:c4:a7:7e:b8:81:69:56:a5: 43:7a:53:f0:3e:08:41:73:e1:6a:0c:34:c7:97:21: 99:0f:af:5a:c3:f8:ac:e0:f9:fd:91:fd:e1:46:ae: ab:5c:b4:f2:86:33:3b:15:c5:11:d1:22:95:a6:b1: 1a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4A:CF:17:6E:84:63:C1:3E:19:CC:EF:17:D7:3A:3B:BF:44:D8:3E X509v3 Authority Key Identifier: keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:a7:e6:e6:90:3f:6e:66:34:d6:dc:b7:86:6d:cc:84:f9:58: 3b:0e:b5:1a:27:af:b5:42:51:73:ef:86:66:af:8c:6d:63:f2: d0:b3:1c:9c:23:0e:08:d5:cf:c8:51:bc:13:fe:3b:2b:10:f8: 65:1c:5f:6d:0f:7a:d2:96:59:cb:11:ef:86:84:b7:64:29:3e: e4:fe:4a:8f:c8:fc:41:31:50:e7:6e:79:87:e4:4a:c4:b0:71: 26:b8:aa:b4:d6:46:5b:52:12:cf:12:4a:57:ab:85:c9:49:da: 61:61:58:a5:1e:9f:9e:89:68:b7:6f:66:97:de:80:58:05:15: a3:9e:a1:53:fe:7f:5b:7b:5f:26:88:a6:12:5b:68:95:8c:22: 62:a9:26:fb:59:08:3a:f3:93:fa:10:71:ca:4f:ad:d6:90:d2: f8:5a:ec:fa:1a:01:41:d1:12:8f:9e:f6:c4:56:33:7b:d4:81: b6:4e:96:ac:c2:f3:d6:b4:0a:74:e9:fd:8b:06:fb:eb:8a:00: ac:22:1c:8a:e2:f6:d0:69:70:c7:7e:92:66:24:d6:dc:ae:11: 6e:82:26:c3:2b:e2:01:31:30:f0:55:37:7b:ac:2c:25:c8:ac: 52:9a:4b:42:ba:9e:28:a7:70:a4:f7:35:e2:76:ee:90:cb:5b: a8:fa:91:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NTkxMTAvBgNVBAUTKEQ2RUMyMkE3M0E1OUQyQUE5NTU5OTc0NzAyNzlDNjYy RDExMDg4RjIwHhcNMjUwNzAxMDU1MjM5WhcNMjUwNzA4MDU1MjM5WjAYMRYwFAYD VQQDEw02ODYzNzdhNy05MjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxR/5DSdtqvU1ac53DNZqbrK7NpyhJoyFLPkr0D3CJVgG0BqhXmpn53PpoiE/ VbxBGA44mgbgRSANB5TqLBdpHv8fi57Pd3v4QHAzcMoRPUazaXHAWtkOUw9mDdSv FMRgz4F2UnGOCqdQIWSSDwSvV3Hj0ps1MPwss7uZ7QwtQcEBGYMcO5ApJ0+Mv3Qm B+vD/cMJa6ecG6/qm5qpfXyztF3n2LgDFfWAxsF5+R7Cd4runCEF5xwygL4K2lET 0GNvK6ImHZKnlZTexKd+uIFpVqVDelPwPghBc+FqDDTHlyGZD69aw/is4Pn9kf3h Rq6rXLTyhjM7FcUR0SKVprEaCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdKzxdu hGPBPhnM7xfXOju/RNg+MB8GA1UdIwQYMBaAFNbsIqc6WdKqlVmXRwJ5xmLREIjy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk1OS9BQTRDNzdFQ0VE NzYxMUVFQUQ4NzFBMTFDNEY5QUUwMi8xdXdpcHpwWjBxcVZXWmRIQW5uR1l0RVFp UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF1d2lwenBaMHFxVldaZEhBbm5HWXRFUWlQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTk1OS9BQTRDNzdFQ0VENzYxMUVFQUQ4NzFBMTFDNEY5QUUwMi8xdXdpcHpwWjBx cVZXWmRIQW5uR1l0RVFpUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUp+bmkD9uZjTW3LeGbcyE+Vg7DrUaJ6+1QlFz74Zmr4xtY/LQsxyc Iw4I1c/IUbwT/jsrEPhlHF9tD3rSllnLEe+GhLdkKT7k/kqPyPxBMVDnbnmH5ErE sHEmuKq01kZbUhLPEkpXq4XJSdphYVilHp+eiWi3b2aX3oBYBRWjnqFT/n9be18m iKYSW2iVjCJiqSb7WQg685P6EHHKT63WkNL4Wuz6GgFB0RKPnvbEVjN71IG2Tpas wvPWtAp06f2LBvvrigCsIhyK4vbQaXDHfpJmJNbcrhFugibDK+IBMTDwVTd7rCwl yKxSmktCup4op3Ck9zXidu6Qy1uo+pEI -----END CERTIFICATE-----Generated at Thu Jul 3 00:53:06 2025 by rpki-client