$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft File: mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft (raw, json) Hash identifier: SHRs5QuAOkUAqBio6JaCmphEDO6lqx6YtYT6mdZHYac= Subject key identifier: A7:2A:5E:E8:15:25:41:F7:74:B0:93:93:52:23:A4:4F:8C:68:57:A4 Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 Certificate issuer: /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Certificate serial: 0647 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft Manifest number: 0640 Signing time: Mon 30 Jun 2025 23:00:13 +0000 Manifest this update: Mon 30 Jun 2025 23:00:13 +0000 Manifest next update: Mon 07 Jul 2025 23:00:13 +0000 Files and hashes: 1: mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl (hash: hNu9AkDw7OVVjXYVm1pEbOZEV4qee5fLgNhLMofCjXU=) 2: 1B4DA20CD46711ECA1A27035C4F9AE02.roa (hash: ztzKFXpjSxYM8wd4nThJ1BsK2ipsW271bSfHzk4YREM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1607 (0x647) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EA9, serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Validity Not Before: Jun 30 23:00:13 2025 GMT Not After : Jul 7 23:00:13 2025 GMT Subject: CN=686316fd-5885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e5:62:bd:3c:6d:71:99:a2:88:e7:2b:f6:c1: dd:fd:cb:bd:18:62:6c:b8:e6:94:40:7e:7e:4a:dd: cf:07:76:7c:cb:e4:fa:e9:70:bb:46:74:a2:e5:f9: b7:91:3c:cf:79:61:9a:df:e6:2d:11:6d:c1:1d:72: 61:83:61:3e:e2:95:f0:fb:02:70:65:3a:a6:52:88: ba:63:9f:d6:8d:f7:d4:de:4f:47:69:ce:15:cf:92: 51:10:43:0a:bf:87:4d:c8:da:c8:f0:c6:7b:86:c4: 69:fc:c2:b4:97:71:da:d5:49:c9:1b:95:50:78:d6: 59:8b:9a:5d:5b:c9:48:a0:11:6d:0b:d6:56:b7:77: 43:ea:a6:35:4d:36:f2:67:82:c1:5a:a7:d2:4d:37: 74:22:c6:90:d8:c7:9d:84:30:63:a7:fe:6e:64:95: 31:8f:dd:0e:00:a3:a1:bf:02:c3:90:66:6f:d6:d3: d1:c0:70:68:66:63:fb:79:6b:66:b0:f0:b8:bc:10: 3f:e1:21:32:f6:ac:5a:e6:91:52:51:53:8d:e0:c1: db:d2:86:32:af:94:fa:ee:35:5d:e9:6a:38:e1:e6: ea:36:f2:8e:e6:c5:42:30:fe:e7:a7:22:07:c2:b5: e6:18:29:63:e1:70:b7:39:62:ba:67:ad:33:94:4a: d5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2A:5E:E8:15:25:41:F7:74:B0:93:93:52:23:A4:4F:8C:68:57:A4 X509v3 Authority Key Identifier: keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:ba:4b:5a:d6:ee:4c:ef:fe:11:cc:17:d0:8b:8e:42:ef:86: e8:ed:a3:b4:dd:6a:6e:2c:17:db:76:f5:b4:23:5d:11:da:67: 12:08:15:f1:d1:e2:18:6d:b9:3d:17:cb:36:2e:71:7a:a0:1b: 36:07:d2:88:1d:b3:a6:4a:69:c5:35:f9:44:b7:2a:ee:b2:a7: 65:c1:37:a9:04:fc:c1:54:55:36:4f:9b:0f:9a:c5:11:07:16: d2:e8:44:6b:d7:ea:56:b7:f6:0e:2a:f3:27:6a:57:fe:de:90: 01:84:e3:4b:b6:f1:a8:3f:88:ed:8d:cf:e1:0f:7a:11:ce:b1: 69:f3:fe:e3:21:ed:3d:ad:41:14:0d:a3:0c:5f:13:02:60:0f: 8d:db:3c:c6:67:7f:af:76:6f:cc:42:90:18:4e:13:45:f3:33: 21:90:69:d5:73:7a:4e:1b:ea:ef:c2:5d:94:ee:20:7b:71:ac: a5:cd:b7:ea:9d:b8:0c:3a:fb:07:69:88:c3:b3:b4:95:0a:bf: 94:71:53:7b:93:ad:3d:27:ea:a6:af:3b:73:6c:c8:08:77:eb: 9a:93:43:eb:0a:82:ce:36:94:82:56:e2:4a:1e:cb:04:d7:47: 59:0b:8c:3d:de:e9:ac:8d:46:03:3e:4c:ba:da:e8:f3:44:60: ea:a0:8a:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQTkxMTAvBgNVBAUTKDk5NEQ5QjJEOTdDQkNDQjVENTI0NERFMEE3RTUzOTc0 MUY4ODhBMjMwHhcNMjUwNjMwMjMwMDEzWhcNMjUwNzA3MjMwMDEzWjAYMRYwFAYD VQQDEw02ODYzMTZmZC01ODg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuVivTxtcZmiiOcr9sHd/cu9GGJsuOaUQH5+St3PB3Z8y+T66XC7RnSi5fm3 kTzPeWGa3+YtEW3BHXJhg2E+4pXw+wJwZTqmUoi6Y5/WjffU3k9Hac4Vz5JREEMK v4dNyNrI8MZ7hsRp/MK0l3Ha1UnJG5VQeNZZi5pdW8lIoBFtC9ZWt3dD6qY1TTby Z4LBWqfSTTd0IsaQ2MedhDBjp/5uZJUxj90OAKOhvwLDkGZv1tPRwHBoZmP7eWtm sPC4vBA/4SEy9qxa5pFSUVON4MHb0oYyr5T67jVd6Wo44ebqNvKO5sVCMP7npyIH wrXmGClj4XC3OWK6Z60zlErVVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcqXugV JUH3dLCTk1IjpE+MaFekMB8GA1UdIwQYMBaAFJlNmy2Xy8y11SRN4KflOXQfiIoj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVBOS9FNjQ2QkYxRTk2 ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpMWFZKRTNncC1VNWRCLUlp aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21VMmJMWmZMekxYVkpFM2dwLVU1ZEItSWlpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVBOS9FNjQ2QkYxRTk2ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpM WFZKRTNncC1VNWRCLUlpaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABukta1u5M7/4RzBfQi45C74bo7aO03WpuLBfbdvW0I10R2mcSCBXx 0eIYbbk9F8s2LnF6oBs2B9KIHbOmSmnFNflEtyrusqdlwTepBPzBVFU2T5sPmsUR BxbS6ERr1+pWt/YOKvMnalf+3pABhONLtvGoP4jtjc/hD3oRzrFp8/7jIe09rUEU DaMMXxMCYA+N2zzGZ3+vdm/MQpAYThNF8zMhkGnVc3pOG+rvwl2U7iB7caylzbfq nbgMOvsHaYjDs7SVCr+UcVN7k609J+qmrztzbMgId+uak0PrCoLONpSCVuJKHssE 10dZC4w93umsjUYDPky62ujzRGDqoIo7 -----END CERTIFICATE-----Generated at Tue Jul 1 13:19:04 2025 by rpki-client