$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft File: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft (raw, json) Hash identifier: vWsb18g7CtNwMs1OCZvQcZYF02b7RW2MWMM6HbkJ7rc= Subject key identifier: 2D:A6:A9:2D:80:76:15:39:B1:DC:EF:64:48:FF:00:04:30:D4:97:3F Authority key identifier: B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 Certificate issuer: /CN=A91D1149/serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Certificate serial: 0E69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft Manifest number: 0E5F Signing time: Wed 02 Jul 2025 17:57:13 +0000 Manifest this update: Wed 02 Jul 2025 17:57:12 +0000 Manifest next update: Wed 09 Jul 2025 17:57:12 +0000 Files and hashes: 1: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl (hash: Q5ee493223+nYgnNVfpoAB5MIJ12XSK1iQo36WiPTtg=) 2: BD22841E9E4911E9A136D25AC4F9AE02.roa (hash: Gdmjy4eOm23bZo0u+QNI+KYIouesOlIiUyP5E+hvG08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3689 (0xe69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1149, serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Validity Not Before: Jul 2 17:57:12 2025 GMT Not After : Jul 9 17:57:12 2025 GMT Subject: CN=686572f8-ba74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:49:da:a0:dc:99:18:fd:51:5c:b7:72:ff:b4: 9b:59:83:6d:12:73:13:35:32:09:ef:ac:c9:07:a3: d3:d7:ab:43:d6:83:a4:46:44:64:4c:5b:17:61:38: 09:21:f1:14:34:a2:f5:f2:82:01:30:66:05:da:4a: 1c:d9:7c:15:6d:e5:67:d7:4e:8e:63:ae:21:95:85: 4f:b7:7b:a7:2f:e7:01:a6:a4:3f:c9:ae:b9:35:c1: de:28:82:de:bb:ef:2f:4d:8c:c8:10:f2:f3:13:86: 12:c5:6f:90:17:02:cb:31:b7:a6:1e:ff:39:58:6a: 27:03:f3:22:84:7c:48:a6:52:d9:e0:4e:9c:47:ac: 3d:5e:37:20:2b:e8:ca:7b:e8:a8:85:43:e7:07:ad: f6:9a:e8:c7:67:ee:48:6f:e9:16:90:00:de:bc:17: 68:73:96:0b:8f:c9:4b:3d:0a:f3:7a:10:6a:8a:51: df:75:1d:97:e4:11:19:dd:20:d2:b6:bc:44:3b:fd: dc:2f:1e:88:ac:f2:68:c4:41:a3:c9:98:49:8c:94: 80:93:17:64:6c:55:da:fa:c8:76:6d:2b:ba:e6:62: 0b:e9:5f:64:0c:d4:5e:f3:5f:70:89:80:92:2a:ef: 8c:50:b3:5a:2b:54:3a:59:0d:d5:d0:8f:18:7e:b1: c5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A6:A9:2D:80:76:15:39:B1:DC:EF:64:48:FF:00:04:30:D4:97:3F X509v3 Authority Key Identifier: keyid:B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:0e:d9:d8:ce:17:9d:f3:4e:d6:26:5e:9b:4e:f6:77:0c:00: 02:6d:13:ff:9e:32:b9:cc:3b:89:71:aa:04:f0:eb:7c:ed:c1: 9a:ba:71:2d:2c:1e:5a:cc:58:49:10:4e:2c:98:df:1e:f7:b3: 02:fa:9f:57:ef:5e:2a:05:bf:45:0c:91:05:47:cc:72:b3:35: a1:78:13:14:c7:3d:b3:bb:e0:40:50:5f:46:87:4d:fe:8b:d9: 2f:b5:3f:a4:c8:ed:92:ad:4d:56:de:bd:1c:16:ff:a5:af:32: e7:83:f4:05:ec:fe:43:c3:97:fa:89:c1:ca:ae:4f:07:82:9f: 94:1e:83:64:58:7f:ec:c3:ff:4b:d3:f1:b0:36:b3:de:65:52: b2:9b:48:4c:b8:b5:8c:0f:59:8f:ed:c2:f7:25:a2:d5:18:95: 60:be:b8:f9:13:31:79:91:c1:c8:3e:e9:c2:d6:15:8b:61:5b: 52:7a:b0:d2:75:b6:42:5a:7b:fb:02:87:9f:a9:9c:76:9a:be: 2e:4a:f1:1a:14:2d:4b:f9:3c:be:36:d7:52:61:6e:da:d1:3a: a5:39:19:44:d6:63:2c:29:4c:d6:06:e2:0c:63:3e:6c:63:27: 01:22:b4:4e:2e:d8:57:79:9a:b1:05:9f:97:9d:24:97:ec:15: 70:88:90:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExNDkxMTAvBgNVBAUTKEI4MzQwMUNGQkM0MDVDRkI1MkZEQTBGRUJENEEwMkI3 QjFDRTI3NjIwHhcNMjUwNzAyMTc1NzEyWhcNMjUwNzA5MTc1NzEyWjAYMRYwFAYD VQQDEw02ODY1NzJmOC1iYTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA80naoNyZGP1RXLdy/7SbWYNtEnMTNTIJ76zJB6PT16tD1oOkRkRkTFsXYTgJ IfEUNKL18oIBMGYF2koc2XwVbeVn106OY64hlYVPt3unL+cBpqQ/ya65NcHeKILe u+8vTYzIEPLzE4YSxW+QFwLLMbemHv85WGonA/MihHxIplLZ4E6cR6w9XjcgK+jK e+iohUPnB632mujHZ+5Ib+kWkADevBdoc5YLj8lLPQrzehBqilHfdR2X5BEZ3SDS trxEO/3cLx6IrPJoxEGjyZhJjJSAkxdkbFXa+sh2bSu65mIL6V9kDNRe819wiYCS Ku+MULNaK1Q6WQ3V0I8YfrHFhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2mqS2A dhU5sdzvZEj/AAQw1Jc/MB8GA1UdIwQYMBaAFLg0Ac+8QFz7Uv2g/r1KArexzidi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTE0OS8yNEJCMjRDRTlF NDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQdFNfYUQtdlVvQ3Q3SE9K MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VEUUJ6N3hBWFB0U19hRC12VW9DdDdIT0oySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTE0OS8yNEJCMjRDRTlFNDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQ dFNfYUQtdlVvQ3Q3SE9KMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgDtnYzhed807WJl6bTvZ3DAACbRP/njK5zDuJcaoE8Ot87cGaunEt LB5azFhJEE4smN8e97MC+p9X714qBb9FDJEFR8xyszWheBMUxz2zu+BAUF9Gh03+ i9kvtT+kyO2SrU1W3r0cFv+lrzLng/QF7P5Dw5f6icHKrk8Hgp+UHoNkWH/sw/9L 0/GwNrPeZVKym0hMuLWMD1mP7cL3JaLVGJVgvrj5EzF5kcHIPunC1hWLYVtSerDS dbZCWnv7AoefqZx2mr4uSvEaFC1L+Ty+NtdSYW7a0TqlORlE1mMsKUzWBuIMYz5s YycBIrROLthXeZqxBZ+XnSSX7BVwiJA7 -----END CERTIFICATE-----Generated at Thu Jul 3 06:11:05 2025 by rpki-client