$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft File: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft (raw, json) Hash identifier: jn01Fg8uRLmEvJv4I9eSsauaMGAgWh1O+FQ1Y19VaNw= Subject key identifier: D3:2B:A3:4C:7C:8C:F8:68:2E:4F:81:E0:31:2C:A9:93:F7:9C:71:E0 Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF Certificate issuer: /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Certificate serial: 18A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft Manifest number: 189C Signing time: Wed 02 Jul 2025 15:55:23 +0000 Manifest this update: Wed 02 Jul 2025 15:55:22 +0000 Manifest next update: Wed 09 Jul 2025 15:55:22 +0000 Files and hashes: 1: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl (hash: 24tni+MjnzDM0YosktDHD1yVBRHkj29W1XAOBjRsReo=) 2: AE21A9C6818911EA81577016C4F9AE02.roa (hash: 7SxWILLdTrzJpYEt8Y/6XTCMP3sdZqZUyA4GDfqu88g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6306 (0x18a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Validity Not Before: Jul 2 15:55:22 2025 GMT Not After : Jul 9 15:55:22 2025 GMT Subject: CN=6865566a-fdb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:40:23:66:7a:30:7d:bd:51:bc:fa:36:73:f5: 72:cb:1b:24:4d:08:4d:15:3b:fa:fb:86:e7:e5:97: bd:9a:6f:9e:a9:58:6d:d2:05:1f:d0:e4:b8:e0:f7: b0:c4:85:6c:d6:1f:44:f1:31:63:49:15:54:df:04: 2e:e8:42:23:a2:32:85:bf:41:dc:67:7d:b2:5e:bd: eb:bd:6b:b2:28:c9:51:fd:85:e9:28:a1:e0:2a:89: 21:2b:7a:df:dc:a5:f9:1e:e7:e5:85:4b:ba:e0:0a: 9b:32:7c:d9:8d:71:90:a5:ed:da:59:19:4b:20:ba: 7b:b7:ef:68:db:fe:64:0b:4f:c0:c1:24:77:0a:e4: 6c:c8:01:33:e9:2e:22:c8:28:f3:2b:6b:68:89:6c: 7a:0a:ba:5f:e1:47:b8:0c:c5:fc:32:c2:d6:13:3e: 0f:a5:41:2f:67:bd:6f:7a:95:d4:a0:08:c5:ba:ff: 6d:02:ba:c8:b2:19:07:d6:48:60:19:d9:00:f8:53: c0:1b:c8:e0:3e:02:39:6b:01:19:39:1f:65:d9:7e: cd:1b:1b:a0:7e:e5:1d:9b:9e:28:9c:51:e0:a6:fb: a3:e8:e7:8a:24:9f:8d:e6:59:2e:49:c1:02:f9:79: 16:41:17:f3:55:89:bc:31:f4:f0:da:74:7d:b9:6a: c9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2B:A3:4C:7C:8C:F8:68:2E:4F:81:E0:31:2C:A9:93:F7:9C:71:E0 X509v3 Authority Key Identifier: keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4c:9e:9d:6b:98:96:61:74:f5:06:0f:f1:d3:1a:59:0b:89: e8:b5:ae:6f:e0:05:a0:8f:2e:88:9d:fa:58:32:d2:6d:e1:f0: 57:49:d0:91:60:eb:ec:7d:0b:82:9e:64:8b:0b:99:8c:2b:08: 59:eb:d5:e2:ae:33:4d:6d:3a:0a:5b:4b:2e:76:1f:fc:96:07: cf:b2:58:d3:92:7f:3d:c7:0c:fc:2f:dd:d8:a9:5b:f5:f6:a8: b1:9f:50:5f:c1:ea:56:1e:34:a3:fa:db:6d:71:8f:92:f7:08: cb:d1:87:3a:ee:e6:a0:a8:75:bb:4f:8e:dd:c0:0b:f1:97:24: 8c:dc:ac:97:67:1d:6d:17:35:9c:0b:18:1e:b2:cd:16:bc:d2: 6a:cf:bd:8d:1f:35:0c:81:f4:fd:22:a0:1b:eb:ca:74:50:f5: 74:2a:6d:f2:4e:db:a2:83:57:02:84:b5:4a:18:ee:0a:d9:51: 45:f9:36:e8:29:5f:16:5f:ac:b8:4d:ac:9a:43:b8:e5:be:21: 92:80:ce:d6:d8:b1:6d:62:60:e4:d3:1a:d9:b1:b8:fb:4e:b9: 70:0c:91:94:08:19:ab:65:5d:85:e1:38:f7:ee:eb:e8:b9:26: c4:3e:b3:6c:81:c8:3f:91:e6:35:e9:ec:a9:b5:21:0b:04:9c: 30:54:af:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKEQxNDc5RUY2MDM0MUUzOUVDQTE3MkU0Mzc2NDQzQTQ3 MTk3NUNCRUYwHhcNMjUwNzAyMTU1NTIyWhcNMjUwNzA5MTU1NTIyWjAYMRYwFAYD VQQDEw02ODY1NTY2YS1mZGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUAjZnowfb1RvPo2c/VyyxskTQhNFTv6+4bn5Ze9mm+eqVht0gUf0OS44Pew xIVs1h9E8TFjSRVU3wQu6EIjojKFv0HcZ32yXr3rvWuyKMlR/YXpKKHgKokhK3rf 3KX5HuflhUu64AqbMnzZjXGQpe3aWRlLILp7t+9o2/5kC0/AwSR3CuRsyAEz6S4i yCjzK2toiWx6Crpf4Ue4DMX8MsLWEz4PpUEvZ71vepXUoAjFuv9tArrIshkH1khg GdkA+FPAG8jgPgI5awEZOR9l2X7NGxugfuUdm54onFHgpvuj6OeKJJ+N5lkuScEC +XkWQRfzVYm8MfTw2nR9uWrJKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMro0x8 jPhoLk+B4DEsqZP3nHHgMB8GA1UdIwQYMBaAFNFHnvYDQeOeyhcuQ3ZEOkcZdcvv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS80ODJCQTE3MjlE MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1N0tGeTVEZGtRNlJ4bDF5 LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBVZWU5Z05CNDU3S0Z5NURka1E2UnhsMXktOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS80ODJCQTE3MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1 N0tGeTVEZGtRNlJ4bDF5LTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqTJ6da5iWYXT1Bg/x0xpZC4nota5v4AWgjy6InfpYMtJt4fBXSdCR YOvsfQuCnmSLC5mMKwhZ69XirjNNbToKW0sudh/8lgfPsljTkn89xwz8L93YqVv1 9qixn1BfwepWHjSj+tttcY+S9wjL0Yc67uagqHW7T47dwAvxlySM3KyXZx1tFzWc Cxgess0WvNJqz72NHzUMgfT9IqAb68p0UPV0Km3yTtuig1cChLVKGO4K2VFF+Tbo KV8WX6y4TayaQ7jlviGSgM7W2LFtYmDk0xrZsbj7TrlwDJGUCBmrZV2F4Tj37uvo uSbEPrNsgcg/keY16eyptSELBJwwVK/R -----END CERTIFICATE-----Generated at Thu Jul 3 23:58:41 2025 by rpki-client