$ rpki-client -vvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft File: 0uwHkLxOvTQHyVB05rVrQAA4Eto.mft (raw, json) Hash identifier: JUxXzfzUlV/xdVs4xBa2sPQce6NNefXWlD0VtkDiwk4= Subject key identifier: 1D:A6:B2:E0:3D:F2:EA:05:08:CD:92:02:D7:FE:5B:E8:51:27:92:D7 Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA Certificate issuer: /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Certificate serial: 0ADF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft Manifest number: 0AD7 Signing time: Wed 02 Jul 2025 19:39:08 +0000 Manifest this update: Wed 02 Jul 2025 19:39:08 +0000 Manifest next update: Wed 09 Jul 2025 19:39:08 +0000 Files and hashes: 1: 0uwHkLxOvTQHyVB05rVrQAA4Eto.crl (hash: /lqJS1DBz7QXKluQ/8Zozfc9i+vIErhSv9iIB4Bh9WM=) 2: 5E2A4C584ED911EAA7F1A521C4F9AE02.roa (hash: QAE/MC+xtHDwjDC4We28f6uqNECigc7G6Vc7+DGOZ34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2783 (0xadf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D87CF, serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Validity Not Before: Jul 2 19:39:08 2025 GMT Not After : Jul 9 19:39:08 2025 GMT Subject: CN=68658adc-27c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:27:52:08:e2:08:cc:b9:54:07:f2:ae:f7:1a: e9:a9:0a:00:d0:ae:59:db:51:5c:28:84:6b:22:83: d9:f5:f6:0b:e8:44:b3:2d:d1:72:93:ab:2f:e8:11: 39:5e:55:61:9a:29:ce:74:b9:1a:e5:41:8b:67:dc: c6:7d:d3:c5:a8:e8:35:6c:3a:ed:3e:1f:25:eb:cb: f6:28:72:72:28:73:ba:c3:9e:44:da:38:18:7c:e5: f0:99:bb:51:19:84:5a:89:c3:4a:f6:52:b7:b4:f2: 96:d3:e5:fb:65:d1:ce:fd:c8:12:95:80:2a:88:7d: 31:e1:fb:04:e2:b4:a4:6a:9e:d9:e9:94:ae:26:65: 47:8b:ac:96:57:f0:b3:cd:5a:c7:72:88:c9:f0:d4: ed:64:5b:e2:39:05:f7:9a:25:17:4d:0b:bc:7a:22: 00:72:e3:23:15:25:82:eb:b8:36:42:c4:45:d0:a5: 22:09:13:89:cb:cd:0b:77:52:a3:4e:d6:f5:bc:f6: 22:25:9f:32:1e:2b:b9:95:77:ee:99:57:d0:e5:91: 01:a9:a5:55:5c:40:9e:09:11:98:72:93:87:b9:68: f3:4a:e9:00:bf:4e:ce:24:40:b6:0e:3b:97:e7:7d: 34:90:5f:8d:2a:f8:3d:7b:39:f9:cd:96:60:2e:98: ae:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A6:B2:E0:3D:F2:EA:05:08:CD:92:02:D7:FE:5B:E8:51:27:92:D7 X509v3 Authority Key Identifier: keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:6c:60:69:6d:dc:83:24:61:39:b4:b6:6d:dd:14:78:1a:53: 47:61:d7:b5:f9:67:0f:df:d1:a6:44:98:ac:22:b2:6f:49:83: e6:48:9f:0d:e9:a6:ba:0e:e6:b2:d3:25:0f:8a:e6:be:be:91: a5:93:dc:df:fb:cb:95:5f:f7:8a:ac:27:65:49:8f:e7:57:a6: b8:f6:03:99:1b:50:34:ca:d4:30:c7:19:06:8e:e8:f8:47:22: a7:a0:44:ad:5f:b5:09:59:89:2a:92:e0:44:f3:8c:f4:0d:43: e1:c4:4b:b3:af:82:aa:66:e5:7e:9f:b0:b0:0c:0e:f7:22:69: 5f:76:ff:f3:e1:4e:b3:58:25:cc:d2:61:6f:89:70:ae:36:83: 42:0d:6b:a4:c6:89:9a:80:df:5d:30:31:e7:fb:a0:6f:f9:0e: 31:ff:3b:66:4a:f6:69:63:31:a6:e7:5d:12:f5:4e:ca:15:12: 07:85:2e:cc:55:ff:8e:d8:79:f7:59:ed:3f:d5:31:5d:b2:97: 88:dc:c4:66:f5:d5:ec:fc:03:94:23:5a:d4:d9:65:c3:cb:88: eb:ae:cf:55:1c:a3:b7:3e:d6:d5:ed:76:89:54:a7:24:80:c0: 8e:72:fe:47:27:7d:d7:02:ae:29:79:f2:10:ba:99:1f:e2:2f: 1e:c0:6e:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3Q0YxMTAvBgNVBAUTKEQyRUMwNzkwQkM0RUJEMzQwN0M5NTA3NEU2QjU2QjQw MDAzODEyREEwHhcNMjUwNzAyMTkzOTA4WhcNMjUwNzA5MTkzOTA4WjAYMRYwFAYD VQQDEw02ODY1OGFkYy0yN2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqydSCOIIzLlUB/Ku9xrpqQoA0K5Z21FcKIRrIoPZ9fYL6ESzLdFyk6sv6BE5 XlVhminOdLka5UGLZ9zGfdPFqOg1bDrtPh8l68v2KHJyKHO6w55E2jgYfOXwmbtR GYRaicNK9lK3tPKW0+X7ZdHO/cgSlYAqiH0x4fsE4rSkap7Z6ZSuJmVHi6yWV/Cz zVrHcojJ8NTtZFviOQX3miUXTQu8eiIAcuMjFSWC67g2QsRF0KUiCROJy80Ld1Kj Ttb1vPYiJZ8yHiu5lXfumVfQ5ZEBqaVVXECeCRGYcpOHuWjzSukAv07OJEC2DjuX 5300kF+NKvg9ezn5zZZgLpiu1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2msuA9 8uoFCM2SAtf+W+hRJ5LXMB8GA1UdIwQYMBaAFNLsB5C8Tr00B8lQdOa1a0AAOBLa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODdDRi9FNjg1QjEyQTRF RDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZUUUh5VkIwNXJWclFBQTRF dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB1d0hrTHhPdlRRSHlWQjA1clZyUUFBNEV0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODdDRi9FNjg1QjEyQTRFRDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZU UUh5VkIwNXJWclFBQTRFdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTbGBpbdyDJGE5tLZt3RR4GlNHYde1+WcP39GmRJisIrJvSYPmSJ8N 6aa6Duay0yUPiua+vpGlk9zf+8uVX/eKrCdlSY/nV6a49gOZG1A0ytQwxxkGjuj4 RyKnoEStX7UJWYkqkuBE84z0DUPhxEuzr4KqZuV+n7CwDA73Imlfdv/z4U6zWCXM 0mFviXCuNoNCDWukxomagN9dMDHn+6Bv+Q4x/ztmSvZpYzGm510S9U7KFRIHhS7M Vf+O2Hn3We0/1TFdspeI3MRm9dXs/AOUI1rU2WXDy4jrrs9VHKO3PtbV7XaJVKck gMCOcv5HJ33XAq4pefIQupkf4i8ewG5H -----END CERTIFICATE-----Generated at Thu Jul 3 06:10:05 2025 by rpki-client