$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft File: UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft (raw, json) Hash identifier: qnAQ3gY7C9vqZkvGMRR73AIicdC8EknSYTWj0yNc0ak= Subject key identifier: 3B:22:B7:A3:CB:D6:32:44:58:57:0E:8F:4A:CC:61:4F:F3:CB:96:20 Authority key identifier: 51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB Certificate issuer: /CN=A91EBA1C/serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB Certificate serial: 2293 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft Manifest number: 224B Signing time: Fri 04 Jul 2025 16:06:22 +0000 Manifest this update: Fri 04 Jul 2025 16:06:21 +0000 Manifest next update: Fri 11 Jul 2025 16:06:21 +0000 Files and hashes: 1: UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl (hash: CL8pU20PFwEr4JiJGgp1V8Nz88WYRAw7OfciJILjS+I=) 2: A26279A6554811F09953D277C4F9AE02.roa (hash: sj3O91kFt3I5IX+0ZdRFVomJgjM0KzoA4Aln/zpmrv8=) 3: 8D93B9E0D8E911EE85D9881FC4F9AE02.roa (hash: V9x6bpv8xEZtOf/5cMvsByj+Mn6sg05mBQ57/CBIKNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8851 (0x2293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA1C, serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB Validity Not Before: Jul 4 16:06:21 2025 GMT Not After : Jul 11 16:06:21 2025 GMT Subject: CN=6867fbfd-1f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:a6:f2:6e:27:42:6c:37:b2:ab:72:f0:ea:b4: 95:a8:16:b6:dd:7b:fe:76:b8:95:cc:8c:14:f2:b6: 85:fe:4e:27:4c:d1:9f:b4:12:11:f2:ac:9b:fd:76: 67:ef:92:19:3d:6c:35:73:77:a2:b5:2e:48:3e:2e: 28:d6:90:f8:0d:73:29:02:3b:eb:26:8b:37:db:7f: 72:f4:0a:bd:57:f3:9f:22:f4:7a:14:65:3e:22:fb: e6:10:ad:f4:6d:d2:6a:75:ea:cf:04:ab:cd:29:8a: 27:bb:3a:dc:c0:66:c9:8c:98:30:63:42:e1:9f:01: 83:21:18:73:e9:b5:f6:7b:61:91:fd:91:71:54:7c: ec:91:b9:f4:64:a1:cf:c2:0e:29:af:99:a4:f1:24: 97:61:df:e1:8c:9b:1d:22:c5:65:42:05:9f:1f:c1: f3:5e:a0:43:9c:e3:eb:81:64:fa:af:41:0f:e4:49: db:de:ca:ed:62:ea:29:97:f3:b7:cd:52:56:93:ac: 5c:47:0a:41:f7:cc:14:f4:8d:7f:41:a7:87:5d:23: dc:2d:8b:08:ca:9a:a6:28:3a:97:c5:22:8c:f5:90: af:61:61:d8:e7:22:86:7d:b8:c1:ce:35:49:95:12: 07:53:57:2d:cf:58:6e:d3:4a:62:f6:2b:7a:84:6b: d4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:22:B7:A3:CB:D6:32:44:58:57:0E:8F:4A:CC:61:4F:F3:CB:96:20 X509v3 Authority Key Identifier: keyid:51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:42:d4:2c:53:a6:a5:bf:b8:94:27:5a:4c:ce:0a:8b:69:32: 60:98:03:d9:57:e4:d9:37:ba:31:f3:be:06:78:16:47:a1:e6: 03:94:5d:dd:c0:2e:2a:2c:d7:93:3e:a4:da:5f:2c:55:ed:06: 05:59:ff:bd:56:bc:f1:50:9a:84:52:07:e0:2a:df:8d:bc:44: 1d:43:d6:cc:45:a7:00:5e:37:e1:5d:f0:a5:a7:c1:1a:b5:a3: 24:81:25:4b:d8:73:44:5c:2c:ee:07:d0:0d:f1:82:9c:4d:1a: 8e:18:2d:13:e6:dc:66:8e:ad:f6:42:15:f6:e9:1c:28:00:aa: 00:a3:ad:dc:2d:db:8c:b4:b1:cc:11:04:44:d8:66:78:0b:2c: 6c:45:e9:05:f8:06:96:81:f8:a0:dc:31:7a:fd:67:be:09:1b: 3e:08:7e:43:2b:72:0c:c7:c8:4f:11:f3:49:ac:0f:fe:05:cf: 36:3a:b4:7f:aa:35:08:f2:c5:0a:3c:6c:7f:4f:73:a5:21:7e: e0:15:5d:bb:3a:3d:c0:94:fa:84:82:87:3e:18:d0:90:2e:f2: 17:af:f2:47:25:b8:0f:68:17:54:1f:2d:d8:3c:fe:8b:ac:91: e0:80:7d:b7:ba:1d:1c:12:46:65:2f:fc:fc:ad:9b:62:68:21: 92:20:0a:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBMUMxMTAvBgNVBAUTKDUxQzI2MTFCNDYxREQ1MTE4MzVBNTE0MUY4QUVFNTAy RDNBMzlBRUIwHhcNMjUwNzA0MTYwNjIxWhcNMjUwNzExMTYwNjIxWjAYMRYwFAYD VQQDEw02ODY3ZmJmZC0xZjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+qbybidCbDeyq3Lw6rSVqBa23Xv+driVzIwU8raF/k4nTNGftBIR8qyb/XZn 75IZPWw1c3eitS5IPi4o1pD4DXMpAjvrJos3239y9Aq9V/OfIvR6FGU+IvvmEK30 bdJqderPBKvNKYonuzrcwGbJjJgwY0LhnwGDIRhz6bX2e2GR/ZFxVHzskbn0ZKHP wg4pr5mk8SSXYd/hjJsdIsVlQgWfH8HzXqBDnOPrgWT6r0EP5Enb3srtYuopl/O3 zVJWk6xcRwpB98wU9I1/QaeHXSPcLYsIypqmKDqXxSKM9ZCvYWHY5yKGfbjBzjVJ lRIHU1ctz1hu00pi9it6hGvUBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsit6PL 1jJEWFcOj0rMYU/zy5YgMB8GA1UdIwQYMBaAFFHCYRtGHdURg1pRQfiu5QLTo5rr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkExQy82M0IyMTRBMkM4 MTUxMUU1ODFEMjA4ODRDNEY5QUUwMi9VY0poRzBZZDFSR0RXbEZCLUs3bEF0T2pt dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VjSmhHMFlkMVJHRFdsRkItSzdsQXRPam11cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkExQy82M0IyMTRBMkM4MTUxMUU1ODFEMjA4ODRDNEY5QUUwMi9VY0poRzBZZDFS R0RXbEZCLUs3bEF0T2ptdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgQtQsU6alv7iUJ1pMzgqLaTJgmAPZV+TZN7ox874GeBZHoeYDlF3d wC4qLNeTPqTaXyxV7QYFWf+9VrzxUJqEUgfgKt+NvEQdQ9bMRacAXjfhXfClp8Ea taMkgSVL2HNEXCzuB9AN8YKcTRqOGC0T5txmjq32QhX26RwoAKoAo63cLduMtLHM EQRE2GZ4CyxsRekF+AaWgfig3DF6/We+CRs+CH5DK3IMx8hPEfNJrA/+Bc82OrR/ qjUI8sUKPGx/T3OlIX7gFV27Oj3AlPqEgoc+GNCQLvIXr/JHJbgPaBdUHy3YPP6L rJHggH23uh0cEkZlL/z8rZtiaCGSIAoM -----END CERTIFICATE-----Generated at Sun Jul 6 00:41:45 2025 by rpki-client