$ rpki-client -vvf rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.mft File: 0ATM-ubwekS9796TeAatucMyn_o.mft (raw, json) Hash identifier: LFFTjIeoptjmGdvUIvbLPkrSYWFd5BOCeCxZjE3+hgc= Subject key identifier: 52:85:85:78:54:4E:01:90:72:06:81:5D:AC:BC:FD:85:CF:72:CE:80 Authority key identifier: D0:04:CC:FA:E6:F0:7A:44:BD:EF:DE:93:78:06:AD:B9:C3:32:9F:FA Certificate issuer: /CN=A91E116E/serialNumber=D004CCFAE6F07A44BDEFDE937806ADB9C3329FFA Certificate serial: 17E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ATM-ubwekS9796TeAatucMyn_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.mft Manifest number: 17D6 Signing time: Wed 02 Jul 2025 16:41:21 +0000 Manifest this update: Wed 02 Jul 2025 16:41:21 +0000 Manifest next update: Wed 09 Jul 2025 16:41:21 +0000 Files and hashes: 1: 0ATM-ubwekS9796TeAatucMyn_o.crl (hash: ssyuU5vw18zt/0X3ov0f9d08OPrFukFq5bPYDKQTqP4=) 2: A1021498C53311E7B0B0744BC4F9AE02.roa (hash: CJnMqYQU8gUfeRnUpkZiw2o/uqMdgxl50z9qK6F+HgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.crl rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ATM-ubwekS9796TeAatucMyn_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6115 (0x17e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E116E, serialNumber=D004CCFAE6F07A44BDEFDE937806ADB9C3329FFA Validity Not Before: Jul 2 16:41:21 2025 GMT Not After : Jul 9 16:41:21 2025 GMT Subject: CN=68656131-9a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:91:79:af:f4:cb:b8:03:69:6a:5e:2c:93:ce: 3a:e4:5a:e7:74:ab:45:90:05:3c:b1:4f:ab:20:57: 23:6a:32:2f:7a:96:e1:d9:0b:bc:11:39:a5:34:ee: 3e:bd:60:21:21:40:75:6f:92:35:d6:8c:bf:30:ce: 56:84:8e:e9:87:96:02:bc:60:fc:d5:c1:70:73:5b: f1:72:7c:84:c2:82:50:b9:8e:9e:8f:ef:8d:17:74: 40:10:03:6a:66:5c:76:c5:a4:ef:55:b0:a0:5b:ea: 1f:d7:ce:15:29:13:d5:03:ae:9b:0a:25:77:f2:37: 05:4f:af:12:5e:29:09:db:4b:43:37:29:a9:f7:c5: 33:52:75:14:53:d9:9d:34:40:ee:76:aa:c0:b5:5f: e4:38:f0:8a:6e:f9:3c:53:15:a6:f5:81:6e:4d:65: 79:96:82:7c:9e:f5:1a:00:41:26:aa:bc:c4:df:30: a0:e8:7f:7b:f0:0c:89:bc:88:f3:9a:74:5e:41:4b: 8f:51:33:9b:6b:57:a0:f0:be:2d:08:51:b6:ec:de: 14:22:86:34:ff:67:c0:be:86:d5:67:43:81:e4:aa: 30:df:0e:b2:3a:93:59:45:3f:1a:3c:5e:61:27:66: b8:47:8a:bb:3a:60:39:6d:87:e1:59:d6:78:bf:83: 6f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:85:85:78:54:4E:01:90:72:06:81:5D:AC:BC:FD:85:CF:72:CE:80 X509v3 Authority Key Identifier: keyid:D0:04:CC:FA:E6:F0:7A:44:BD:EF:DE:93:78:06:AD:B9:C3:32:9F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ATM-ubwekS9796TeAatucMyn_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f7:93:86:a2:c7:c0:17:61:1c:e2:e7:6a:5f:26:7a:bb:00: ac:9d:71:20:f5:f8:48:0f:f6:0b:ff:49:b2:ec:27:55:e5:8f: 61:e9:a3:8d:fe:d3:df:4e:36:32:c9:66:33:36:21:6b:e9:6f: e0:a4:8f:dc:52:27:e6:cb:fe:a8:9c:f8:57:37:9a:cc:5e:3b: 42:77:a0:5e:b1:6b:3b:c1:42:89:4b:d3:82:b2:28:73:43:e2: aa:85:a7:d1:fc:5c:4e:39:27:80:e3:05:52:17:7b:bc:46:02: ad:05:39:8b:4e:81:d0:3d:54:d8:b8:6b:b4:ee:d8:b9:1e:79: 8a:c4:1d:9c:00:32:8d:11:c0:f5:b9:ed:0c:d7:19:48:e3:0e: 9d:a7:21:05:d5:75:72:7a:7f:1d:29:07:3f:73:c6:af:6a:a2: 66:78:8e:33:89:4d:f9:fa:51:cc:7f:30:6b:c1:bf:67:a8:d3: c1:79:7d:0d:da:f5:5b:10:5a:a6:93:31:c4:0d:09:15:1c:19: 58:68:99:17:14:9a:31:97:a1:8b:57:72:b3:0f:cb:a3:77:55: e6:e1:a3:bd:3f:72:3c:13:1c:21:85:43:15:4f:21:e4:f3:db: c0:f5:ca:3c:df:b5:97:02:65:02:34:b6:54:b9:89:28:f1:80: 7e:ae:2b:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExNkUxMTAvBgNVBAUTKEQwMDRDQ0ZBRTZGMDdBNDRCREVGREU5Mzc4MDZBREI5 QzMzMjlGRkEwHhcNMjUwNzAyMTY0MTIxWhcNMjUwNzA5MTY0MTIxWjAYMRYwFAYD VQQDEw02ODY1NjEzMS05YTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ZF5r/TLuANpal4sk8465FrndKtFkAU8sU+rIFcjajIvepbh2Qu8ETmlNO4+ vWAhIUB1b5I11oy/MM5WhI7ph5YCvGD81cFwc1vxcnyEwoJQuY6ej++NF3RAEANq Zlx2xaTvVbCgW+of184VKRPVA66bCiV38jcFT68SXikJ20tDNymp98UzUnUUU9md NEDudqrAtV/kOPCKbvk8UxWm9YFuTWV5loJ8nvUaAEEmqrzE3zCg6H978AyJvIjz mnReQUuPUTOba1eg8L4tCFG27N4UIoY0/2fAvobVZ0OB5Kow3w6yOpNZRT8aPF5h J2a4R4q7OmA5bYfhWdZ4v4NvxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKFhXhU TgGQcgaBXay8/YXPcs6AMB8GA1UdIwQYMBaAFNAEzPrm8HpEve/ek3gGrbnDMp/6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTE2RS83NDU2Qzc1QUM1 MzIxMUU3OTIxRTNFNDlDNEY5QUUwMi8wQVRNLXVid2VrUzk3OTZUZUFhdHVjTXlu X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBVE0tdWJ3ZWtTOTc5NlRlQWF0dWNNeW5fby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTE2RS83NDU2Qzc1QUM1MzIxMUU3OTIxRTNFNDlDNEY5QUUwMi8wQVRNLXVid2Vr Uzk3OTZUZUFhdHVjTXluX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO95OGosfAF2Ec4udqXyZ6uwCsnXEg9fhID/YL/0my7CdV5Y9h6aON /tPfTjYyyWYzNiFr6W/gpI/cUifmy/6onPhXN5rMXjtCd6BesWs7wUKJS9OCsihz Q+KqhafR/FxOOSeA4wVSF3u8RgKtBTmLToHQPVTYuGu07ti5HnmKxB2cADKNEcD1 ue0M1xlI4w6dpyEF1XVyen8dKQc/c8avaqJmeI4ziU35+lHMfzBrwb9nqNPBeX0N 2vVbEFqmkzHEDQkVHBlYaJkXFJoxl6GLV3KzD8ujd1Xm4aO9P3I8ExwhhUMVTyHk 89vA9co837WXAmUCNLZUuYko8YB+ritL -----END CERTIFICATE-----Generated at Wed Jul 2 19:11:08 2025 by rpki-client