$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft File: UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft (raw, json) Hash identifier: aWKiTGpycXax01NOX674vQWy9zXBxoR1npaRsB8LLDc= Subject key identifier: 1A:7B:29:43:DA:A4:6C:2B:06:3F:23:76:84:F0:0D:97:CD:22:0C:09 Authority key identifier: 52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13 Certificate issuer: /CN=A91DD1CC/serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft Manifest number: 0B Signing time: Thu 03 Jul 2025 08:23:31 +0000 Manifest this update: Thu 03 Jul 2025 08:23:31 +0000 Manifest next update: Thu 10 Jul 2025 08:23:31 +0000 Files and hashes: 1: UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl (hash: TF9eewtAkpn0yTCTnVWfNGPu8Mdg1PYbekIAqqzVRlU=) 2: 0745DA884A3C11F0AFF98454C4F9AE02.roa (hash: aHkW6AI6M6GCpQTIMNKGhCjE+iAmC4ZK4etHz7DUzdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1CC, serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813 Validity Not Before: Jul 3 08:23:31 2025 GMT Not After : Jul 10 08:23:31 2025 GMT Subject: CN=68663e03-f7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6b:4e:91:51:b4:70:88:0e:5a:77:8a:65:6e: c9:6c:9a:ba:eb:70:17:8c:29:24:ed:92:33:11:06: 2c:bc:c5:a7:4b:ad:30:f9:ad:f8:2f:fd:e3:94:72: 67:44:b5:bc:26:15:8c:cd:9c:9a:c2:a5:96:c8:18: 53:60:ff:47:37:88:fb:78:42:1e:34:03:cc:c0:23: 5c:9c:c4:46:1a:8e:aa:dc:52:e1:b4:f2:0d:6e:28: 0d:8c:eb:ad:75:83:c3:3f:69:98:4e:45:d3:cc:ac: 3b:15:53:ba:00:f0:c7:ea:6a:25:17:c3:e9:4e:9d: b1:5c:1e:ae:74:84:3e:5d:25:19:9e:1d:7c:b9:87: b6:0f:6e:71:20:2d:ab:70:e1:8b:07:de:90:de:50: 65:03:71:3a:0d:3c:73:ba:15:0a:b0:d5:2c:d4:cf: 6f:52:e2:12:80:e9:42:82:8a:65:f5:9f:be:57:7b: c9:4f:a9:ad:d7:08:e6:6e:43:53:57:ad:97:36:9e: 50:db:bc:f8:30:3e:fd:c0:5a:f5:2c:03:5d:3b:4e: d1:26:02:d6:9f:c7:d2:c0:85:71:45:87:f5:5c:50: 69:f0:81:d3:74:6f:2e:7e:74:80:13:12:f4:d4:15: b6:09:42:a9:ef:b4:53:56:0f:96:45:fb:94:26:b1: df:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7B:29:43:DA:A4:6C:2B:06:3F:23:76:84:F0:0D:97:CD:22:0C:09 X509v3 Authority Key Identifier: keyid:52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f4:29:38:ee:65:55:91:72:9e:bc:7a:d1:a9:58:9f:dd:dd: c9:8f:d4:de:e6:5e:a7:8d:af:67:56:27:8d:d5:5c:53:e9:64: b4:22:c3:24:f8:f3:f0:b2:13:65:9b:ef:c7:55:b0:36:85:fe: 94:b5:1d:b0:3a:23:90:3b:ec:b1:b0:5d:15:af:50:84:00:95: 00:7d:d4:6b:a2:47:20:2b:b5:8f:be:df:7f:11:fb:4f:94:86: 10:da:16:b5:33:da:8f:08:18:70:4c:b3:7e:c2:e7:d5:32:64: 6a:42:7b:e6:44:69:5d:d5:44:03:6d:61:c0:c8:30:9d:03:43: f6:b0:eb:57:8f:8b:f8:8f:f8:a7:03:f9:04:f6:91:bf:84:53: 67:2d:c8:77:59:87:00:9a:7c:77:78:8b:8b:c2:05:48:9c:d4: 94:92:81:f8:d8:00:bd:ec:04:75:7c:07:3c:c9:6d:a1:e5:63: 89:dd:0d:d8:46:5f:15:7d:c6:4b:71:5e:b0:d9:15:0c:5a:53: be:7f:4a:ff:05:00:c8:74:58:40:ed:34:25:22:20:90:a2:d9: 98:b6:15:1f:08:d1:b2:a4:a6:e3:2a:3e:70:18:6b:6c:44:d5: f3:df:22:3d:e4:d7:8d:60:4b:06:03:27:f4:a0:5a:c8:82:09: 51:0a:de:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDFDQzExMC8GA1UEBRMoNTIzMUM0NTc0MTNCOUM3OUNENUIzMDBEODRBNDNCMDAz OUJCNjgxMzAeFw0yNTA3MDMwODIzMzFaFw0yNTA3MTAwODIzMzFaMBgxFjAUBgNV BAMTDTY4NjYzZTAzLWY3YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/a06RUbRwiA5ad4plbslsmrrrcBeMKSTtkjMRBiy8xadLrTD5rfgv/eOUcmdE tbwmFYzNnJrCpZbIGFNg/0c3iPt4Qh40A8zAI1ycxEYajqrcUuG08g1uKA2M6611 g8M/aZhORdPMrDsVU7oA8MfqaiUXw+lOnbFcHq50hD5dJRmeHXy5h7YPbnEgLatw 4YsH3pDeUGUDcToNPHO6FQqw1SzUz29S4hKA6UKCimX1n75Xe8lPqa3XCOZuQ1NX rZc2nlDbvPgwPv3AWvUsA107TtEmAtafx9LAhXFFh/VcUGnwgdN0by5+dIATEvTU FbYJQqnvtFNWD5ZF+5Qmsd8HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGnspQ9qk bCsGPyN2hPANl80iDAkwHwYDVR0jBBgwFoAUUjHEV0E7nHnNWzANhKQ7ADm7aBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMUNDLzczOTA2ODBFNEEz QTExRjBCRDVDMUI0RkM0RjlBRTAyL1VqSEVWMEU3bkhuTld6QU5oS1E3QURtN2FC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVWpIRVYwRTduSG5OV3pBTmhLUTdBRG03YUJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MUNDLzczOTA2ODBFNEEzQTExRjBCRDVDMUI0RkM0RjlBRTAyL1VqSEVWMEU3bkhu Tld6QU5oS1E3QURtN2FCTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEr0KTjuZVWRcp68etGpWJ/d3cmP1N7mXqeNr2dWJ43VXFPpZLQiwyT4 8/CyE2Wb78dVsDaF/pS1HbA6I5A77LGwXRWvUIQAlQB91GuiRyArtY++338R+0+U hhDaFrUz2o8IGHBMs37C59UyZGpCe+ZEaV3VRANtYcDIMJ0DQ/aw61ePi/iP+KcD +QT2kb+EU2ctyHdZhwCafHd4i4vCBUic1JSSgfjYAL3sBHV8BzzJbaHlY4ndDdhG XxV9xktxXrDZFQxaU75/Sv8FAMh0WEDtNCUiIJCi2Zi2FR8I0bKkpuMqPnAYa2xE 1fPfIj3k141gSwYDJ/SgWsiCCVEK3kk= -----END CERTIFICATE-----Generated at Thu Jul 3 23:45:57 2025 by rpki-client