$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft File: uesVSGZ3c32yc5_WVGKu55BhaMI.mft (raw, json) Hash identifier: /v8yD/QlWkwMcbkZF1TuqiI18reS69ExQZdC8FqMDC8= Subject key identifier: 55:76:B5:04:55:76:6C:27:3E:08:6E:33:80:6B:80:A9:1A:B2:26:51 Authority key identifier: B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2 Certificate issuer: /CN=A91DA649/serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2 Certificate serial: 0C2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft Manifest number: 0C22 Signing time: Fri 04 Jul 2025 18:59:04 +0000 Manifest this update: Fri 04 Jul 2025 18:59:03 +0000 Manifest next update: Fri 11 Jul 2025 18:59:03 +0000 Files and hashes: 1: uesVSGZ3c32yc5_WVGKu55BhaMI.crl (hash: FR/6m4OjDkCzKN/L3sigyNHdea1EKcQya45KpO2ILGU=) 2: C4391160305611EABE7DF272C4F9AE02.roa (hash: 3CS63lxTVcr1lDEM5PMs5CO7XzdKCmryVXHiyIzoBgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3114 (0xc2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA649, serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2 Validity Not Before: Jul 4 18:59:03 2025 GMT Not After : Jul 11 18:59:03 2025 GMT Subject: CN=68682477-30de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a9:ce:48:27:03:68:20:be:19:c0:f0:76:c1: 83:59:34:87:c7:8f:d5:68:64:90:ae:54:91:30:75: cf:6a:b9:61:4f:02:16:02:48:bc:5d:81:1c:8b:25: c3:eb:76:b7:ad:15:a9:fc:39:c4:6a:7d:94:c6:ee: 8b:53:2e:8f:ce:83:b4:e3:72:2d:00:1c:5b:d4:a1: 05:91:1d:5a:9e:46:85:dc:22:d9:13:2a:9e:92:17: 56:b8:56:1c:7e:48:33:c9:48:5a:e0:56:c9:b1:94: 9c:d9:2c:f3:21:67:d4:26:34:a2:fa:7f:18:20:a5: 6f:91:6b:1d:b9:b8:61:1a:0a:7f:ba:3d:43:90:72: e1:a4:2e:d2:9b:70:46:1f:4d:26:1f:d6:0a:99:ce: d8:92:bb:a5:fc:b9:e2:63:ac:37:89:c2:86:59:9e: 8a:9a:c8:e0:74:ab:06:74:74:48:78:c4:28:6b:d9: 23:46:48:ee:13:d4:57:b4:0e:0c:cb:48:85:43:53: a4:39:23:e0:71:61:af:71:84:33:cc:63:d5:f0:cf: b5:e2:17:c3:76:40:51:76:8e:21:12:d0:1e:81:5e: c2:27:4d:35:d2:d6:8d:b9:e2:43:ba:58:1a:71:f6: 10:23:24:0f:8f:ec:75:7e:fb:55:dd:3f:4f:ed:10: 26:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:76:B5:04:55:76:6C:27:3E:08:6E:33:80:6B:80:A9:1A:B2:26:51 X509v3 Authority Key Identifier: keyid:B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d0:13:b0:f1:7e:ad:17:9f:3e:c6:82:51:56:a2:cb:08:3b: 8d:37:1c:e0:59:49:6f:75:b1:fd:e8:26:38:76:72:ed:5d:f8: 5f:0c:e0:92:4b:45:98:aa:20:f5:6e:b6:5c:ca:5d:36:e1:65: 61:02:77:f1:fc:16:b6:c8:ed:46:ac:93:40:77:2e:fc:8e:85: 52:7a:94:e0:63:2f:a1:c2:48:43:c2:66:26:79:86:ac:bd:62: 8f:b8:c5:ab:9a:ba:7c:8d:1b:b4:d1:27:db:e6:43:2a:f9:8c: 4a:99:5c:41:47:2f:4c:d4:5c:f2:ab:d6:c9:10:3b:8d:a5:ac: 3b:80:05:f3:da:1f:e0:2d:e9:31:32:31:1b:91:12:98:48:3f: 3e:b5:b6:20:75:74:9e:d2:dc:44:c3:bf:64:b0:69:cb:b9:fe: c0:06:2d:75:97:4a:11:6b:6f:08:98:c0:29:f3:3d:00:fc:90: 42:11:70:d2:fa:d6:3b:03:19:4a:de:50:de:54:59:9f:26:4b: 22:f7:cb:82:15:5c:a2:92:3f:bf:86:02:75:41:04:51:ce:31: 76:6c:03:81:72:f8:75:bd:af:9e:35:19:ae:40:97:6d:e0:13: b4:60:31:46:5d:2d:81:68:f7:54:58:b6:b9:11:c2:ef:06:32: 1a:65:cb:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE2NDkxMTAvBgNVBAUTKEI5RUIxNTQ4NjY3NzczN0RCMjczOUZENjU0NjJBRUU3 OTA2MTY4QzIwHhcNMjUwNzA0MTg1OTAzWhcNMjUwNzExMTg1OTAzWjAYMRYwFAYD VQQDEw02ODY4MjQ3Ny0zMGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqanOSCcDaCC+GcDwdsGDWTSHx4/VaGSQrlSRMHXParlhTwIWAki8XYEciyXD 63a3rRWp/DnEan2Uxu6LUy6PzoO043ItABxb1KEFkR1ankaF3CLZEyqekhdWuFYc fkgzyUha4FbJsZSc2SzzIWfUJjSi+n8YIKVvkWsdubhhGgp/uj1DkHLhpC7Sm3BG H00mH9YKmc7Ykrul/LniY6w3icKGWZ6KmsjgdKsGdHRIeMQoa9kjRkjuE9RXtA4M y0iFQ1OkOSPgcWGvcYQzzGPV8M+14hfDdkBRdo4hEtAegV7CJ0010taNueJDulga cfYQIyQPj+x1fvtV3T9P7RAmkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFV2tQRV dmwnPghuM4BrgKkasiZRMB8GA1UdIwQYMBaAFLnrFUhmd3N9snOf1lRirueQYWjC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTY0OS81RDk3Nzc0QzBG NTExMUVBOEM0QTVDMEFDNEY5QUUwMi91ZXNWU0daM2MzMnljNV9XVkdLdTU1Qmhh TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vlc1ZTR1ozYzMyeWM1X1dWR0t1NTVCaGFNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTY0OS81RDk3Nzc0QzBGNTExMUVBOEM0QTVDMEFDNEY5QUUwMi91ZXNWU0daM2Mz MnljNV9XVkdLdTU1QmhhTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq0BOw8X6tF58+xoJRVqLLCDuNNxzgWUlvdbH96CY4dnLtXfhfDOCS S0WYqiD1brZcyl024WVhAnfx/Ba2yO1GrJNAdy78joVSepTgYy+hwkhDwmYmeYas vWKPuMWrmrp8jRu00Sfb5kMq+YxKmVxBRy9M1Fzyq9bJEDuNpaw7gAXz2h/gLekx MjEbkRKYSD8+tbYgdXSe0txEw79ksGnLuf7ABi11l0oRa28ImMAp8z0A/JBCEXDS +tY7AxlK3lDeVFmfJksi98uCFVyikj+/hgJ1QQRRzjF2bAOBcvh1va+eNRmuQJdt 4BO0YDFGXS2BaPdUWLa5EcLvBjIaZcsa -----END CERTIFICATE-----Generated at Fri Jul 4 21:51:43 2025 by rpki-client