$ rpki-client -vvf rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft File: uttpn6AqlXLm70n0-Rof4Kc8LI0.mft (raw, json) Hash identifier: icQfowb3xMZsFnkRuBzdqOS0qtfee2d+HVuCclwGVUU= Subject key identifier: CC:36:6F:A7:80:A0:A5:72:C7:02:81:CB:64:9B:1A:78:05:39:DE:60 Authority key identifier: BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D Certificate issuer: /CN=A91E27B9/serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D Certificate serial: 081B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft Manifest number: 0806 Signing time: Wed 02 Jul 2025 21:15:15 +0000 Manifest this update: Wed 02 Jul 2025 21:15:15 +0000 Manifest next update: Wed 09 Jul 2025 21:15:15 +0000 Files and hashes: 1: uttpn6AqlXLm70n0-Rof4Kc8LI0.crl (hash: W3VYC8pxzWYsPRiXKuG4caM3ZqhnGWfNN8ElROef1Kk=) 2: C8BD376C3ADF11EC85EB255FC4F9AE02.roa (hash: wZOUAFh3yH4xpJik8Ps1Fk72+HENAnV8sf4x6n94egk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2075 (0x81b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E27B9, serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D Validity Not Before: Jul 2 21:15:15 2025 GMT Not After : Jul 9 21:15:15 2025 GMT Subject: CN=6865a163-85ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0e:c3:16:29:75:4d:ef:34:bd:89:9f:fd:4b: 73:15:af:63:75:7f:4c:eb:26:63:8f:7c:fa:a0:52: 0d:36:fb:38:aa:c5:d2:06:2b:8a:d6:f3:53:ae:1c: b2:93:98:d1:a1:83:10:a4:c2:a3:ea:ca:11:e9:6e: 7d:c0:37:bd:1c:4f:e5:ff:29:81:d0:8a:f8:c8:8a: 50:f2:af:c0:58:91:40:f6:b1:61:ff:2c:8b:5e:80: d2:8b:26:d5:0b:4f:d3:b6:00:28:d9:13:9e:78:b2: ba:55:b5:e8:46:c2:74:2b:b0:b9:77:f3:b8:01:07: 64:51:09:5a:68:06:c4:f6:60:46:87:f3:39:38:d2: 24:a6:63:e5:05:e8:b4:64:af:3a:47:b8:ed:d2:d0: b1:b9:0c:28:6a:ad:0e:a9:16:eb:f3:84:28:cb:2e: 71:72:f2:60:e8:5e:35:0c:08:4e:98:c3:fc:5e:09: cc:f0:82:db:f5:47:75:20:cb:f9:8e:70:7f:d5:4a: 3f:45:67:c1:a4:fd:4c:f7:82:8c:72:54:64:0d:27: 45:5a:09:61:41:b1:f8:e0:1e:37:1f:14:12:61:70: cf:ea:9f:a3:9a:28:10:69:86:ef:5b:91:47:4b:fb: 58:1e:33:db:4c:48:1e:c6:21:d0:99:aa:b7:1d:0a: fa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:36:6F:A7:80:A0:A5:72:C7:02:81:CB:64:9B:1A:78:05:39:DE:60 X509v3 Authority Key Identifier: keyid:BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:e4:86:89:c4:5c:bb:e7:1c:1f:4c:9b:2a:e1:a8:e9:56:03: 42:09:89:93:8c:b2:b2:4b:c4:7c:63:0d:75:9a:18:17:4d:64: fb:bb:d7:79:ff:f2:77:44:32:0c:ae:5b:d7:a8:33:a9:fa:32: b7:f6:e3:ba:06:9f:df:90:e0:ac:cd:d3:7f:20:bb:06:39:4f: 65:80:84:59:ba:a9:82:bd:05:31:89:1a:b8:e6:21:9a:b4:06: 7c:ea:ca:00:7d:40:1c:15:be:a5:7e:08:11:30:96:08:b7:08: 6c:5f:f8:e3:a8:9b:a6:0a:7e:f4:36:d0:3f:c1:f0:de:c2:91: d0:e0:a3:e5:72:95:37:53:9f:80:c2:28:cf:1a:d4:1b:d9:6d: bb:c3:f1:62:24:f4:55:d9:aa:d9:e1:a3:77:b3:3a:db:34:1d: 8a:f0:14:42:f9:40:5b:9b:4a:b0:6f:b7:5c:2f:94:a5:22:c6: 62:b8:5d:1e:c5:c3:e4:2d:8f:a2:41:17:75:09:15:29:c9:f1: a8:77:6d:14:ef:fa:f8:46:ac:ba:59:ec:84:47:02:fa:69:b6: d7:44:fa:16:35:e7:12:75:e7:96:77:09:9f:37:87:dc:e9:c4: 4c:4f:c9:99:57:37:31:00:42:55:39:ea:30:55:c4:3b:4f:eb: 3a:0c:1f:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3QjkxMTAvBgNVBAUTKEJBREI2OTlGQTAyQTk1NzJFNkVGNDlGNEY5MUExRkUw QTczQzJDOEQwHhcNMjUwNzAyMjExNTE1WhcNMjUwNzA5MjExNTE1WjAYMRYwFAYD VQQDEw02ODY1YTE2My04NWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtg7DFil1Te80vYmf/UtzFa9jdX9M6yZjj3z6oFINNvs4qsXSBiuK1vNTrhyy k5jRoYMQpMKj6soR6W59wDe9HE/l/ymB0Ir4yIpQ8q/AWJFA9rFh/yyLXoDSiybV C0/TtgAo2ROeeLK6VbXoRsJ0K7C5d/O4AQdkUQlaaAbE9mBGh/M5ONIkpmPlBei0 ZK86R7jt0tCxuQwoaq0OqRbr84Qoyy5xcvJg6F41DAhOmMP8XgnM8ILb9Ud1IMv5 jnB/1Uo/RWfBpP1M94KMclRkDSdFWglhQbH44B43HxQSYXDP6p+jmigQaYbvW5FH S/tYHjPbTEgexiHQmaq3HQr6PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMw2b6eA oKVyxwKBy2SbGngFOd5gMB8GA1UdIwQYMBaAFLrbaZ+gKpVy5u9J9PkaH+CnPCyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjdCOS84NEJBNzQ4MkYw Q0UxMUVBODkxQjJDNzZDNEY5QUUwMi91dHRwbjZBcWxYTG03MG4wLVJvZjRLYzhM STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V0dHBuNkFxbFhMbTcwbjAtUm9mNEtjOExJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjdCOS84NEJBNzQ4MkYwQ0UxMUVBODkxQjJDNzZDNEY5QUUwMi91dHRwbjZBcWxY TG03MG4wLVJvZjRLYzhMSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA5IaJxFy75xwfTJsq4ajpVgNCCYmTjLKyS8R8Yw11mhgXTWT7u9d5 //J3RDIMrlvXqDOp+jK39uO6Bp/fkOCszdN/ILsGOU9lgIRZuqmCvQUxiRq45iGa tAZ86soAfUAcFb6lfggRMJYItwhsX/jjqJumCn70NtA/wfDewpHQ4KPlcpU3U5+A wijPGtQb2W27w/FiJPRV2arZ4aN3szrbNB2K8BRC+UBbm0qwb7dcL5SlIsZiuF0e xcPkLY+iQRd1CRUpyfGod20U7/r4Rqy6WeyERwL6abbXRPoWNecSdeeWdwmfN4fc 6cRMT8mZVzcxAEJVOeowVcQ7T+s6DB/p -----END CERTIFICATE-----Generated at Thu Jul 3 05:02:51 2025 by rpki-client