$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft File: UdUxrvegh8GOMB4OaixjcbJkw-g.mft (raw, json) Hash identifier: HRjXqQEJr56HmPchVKpoc31qKJhCb7nE6iboXzgWJDU= Subject key identifier: 19:C0:74:CB:23:65:5C:65:85:8D:D9:16:44:77:31:08:D2:7F:66:13 Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft Manifest number: 01C3 Signing time: Tue 01 Jul 2025 03:38:48 +0000 Manifest this update: Tue 01 Jul 2025 03:38:47 +0000 Manifest next update: Tue 08 Jul 2025 03:38:47 +0000 Files and hashes: 1: UdUxrvegh8GOMB4OaixjcbJkw-g.crl (hash: DRBGZcd7iGbNzuurjtNfGCR+06qKGDXhHfGyIRMClgg=) 2: 891E633CB7F111EFA500D67CC4F9AE02.roa (hash: O4FUSN5LS+aElz5VOCMijpDVd7ugBsWS/neaZYIhjDU=) 3: 7D215B2CC3C111EE8F83CE1AC4F9AE02.roa (hash: WiLdUkxZVUsyLYaXHR0WIvWbfxTpV9CYC+KkS9rRgFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Validity Not Before: Jul 1 03:38:47 2025 GMT Not After : Jul 8 03:38:47 2025 GMT Subject: CN=68635848-83dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:32:94:54:57:d0:e1:4b:87:7a:4d:9f:7c:a6: e1:b8:f5:81:1c:9d:c0:eb:d4:07:79:e9:f9:05:85: 03:36:98:7a:9b:1d:c3:2f:30:5d:0f:d5:90:66:d9: 83:27:e8:bf:fa:f8:71:ca:e2:fc:5f:d8:db:2c:67: d6:0e:20:e9:77:cb:50:b1:d7:89:20:d4:9d:80:10: ec:b3:2d:14:f7:37:22:35:e9:2a:08:de:02:07:34: dd:b4:7f:78:20:47:92:ff:3a:5d:64:d5:58:ac:fe: 79:af:99:01:80:4f:e0:f6:c3:d1:f0:cb:25:e0:1c: 75:15:6a:a0:e1:6e:61:fd:7f:0e:fe:8b:8e:2b:d7: a2:1b:d8:2b:f7:6d:c7:df:88:4c:a4:14:35:49:e7: 21:f5:c5:3a:3d:d8:8b:bf:c3:0a:47:c0:b7:b6:66: 90:d9:02:8c:6e:a6:e6:eb:55:1e:2c:c0:e1:f8:8f: 85:eb:dd:28:9b:53:ef:ff:6b:ba:4c:3c:3d:57:7e: 66:55:00:09:4e:21:ce:2e:ba:e9:82:a8:42:3f:61: 46:a6:6b:03:45:c4:69:e3:bd:98:25:94:1c:e1:7c: b8:7d:de:e5:c7:40:61:09:b4:88:7a:a8:4a:a1:99: 2a:e9:b9:e9:93:dc:4d:ae:61:19:18:ca:ec:2f:14: 68:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C0:74:CB:23:65:5C:65:85:8D:D9:16:44:77:31:08:D2:7F:66:13 X509v3 Authority Key Identifier: keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:f1:0f:a8:3c:ff:bf:45:ed:07:54:48:90:a6:f4:13:04:f2: 32:26:b6:2e:68:ff:5c:8e:d0:32:dd:bc:fb:ad:c7:26:5c:73: 7c:d8:ea:2c:bf:1c:b8:47:6d:19:e9:87:02:e1:10:44:6c:af: 8d:60:a8:06:e8:69:93:4d:be:e0:9f:4c:c8:62:57:ad:b2:c1: f5:b8:b4:84:6d:dd:b9:fe:f5:40:58:ec:99:b2:ef:36:90:21: e4:97:35:33:2d:7c:52:8b:ea:63:57:90:7b:e7:e4:c9:5b:5b: 09:27:be:0f:05:9d:a6:ee:94:eb:dd:60:1f:22:f4:b8:be:16: 2e:d3:76:9b:1e:f9:eb:19:11:c3:a2:a2:b1:d7:aa:88:4f:d5: ad:a8:74:1b:4d:44:7a:e6:0e:e9:fc:88:dd:e0:00:c3:29:09: 51:b0:44:06:7e:f9:b3:09:55:56:a0:d5:49:b9:69:af:92:55: dc:ff:7b:ee:6c:75:0b:08:1f:6a:d0:79:02:02:17:73:d7:a8: 8b:96:e5:7d:9e:47:2b:d6:30:8e:5a:e5:cc:78:68:c2:0b:dc: 7b:8d:cb:3e:8e:93:ed:91:68:b0:79:2b:28:6b:ce:9b:41:12: 42:22:81:83:59:76:7a:fe:9a:b1:20:1a:a9:05:41:6c:38:21: 3a:01:e7:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZBRkYxMTAvBgNVBAUTKDUxRDUzMUFFRjdBMDg3QzE4RTMwMUUwRTZBMkM2Mzcx QjI2NEMzRTgwHhcNMjUwNzAxMDMzODQ3WhcNMjUwNzA4MDMzODQ3WjAYMRYwFAYD VQQDEw02ODYzNTg0OC04M2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDKUVFfQ4UuHek2ffKbhuPWBHJ3A69QHeen5BYUDNph6mx3DLzBdD9WQZtmD J+i/+vhxyuL8X9jbLGfWDiDpd8tQsdeJINSdgBDssy0U9zciNekqCN4CBzTdtH94 IEeS/zpdZNVYrP55r5kBgE/g9sPR8Msl4Bx1FWqg4W5h/X8O/ouOK9eiG9gr923H 34hMpBQ1Sech9cU6PdiLv8MKR8C3tmaQ2QKMbqbm61UeLMDh+I+F690om1Pv/2u6 TDw9V35mVQAJTiHOLrrpgqhCP2FGpmsDRcRp472YJZQc4Xy4fd7lx0BhCbSIeqhK oZkq6bnpk9xNrmEZGMrsLxRo1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnAdMsj ZVxlhY3ZFkR3MQjSf2YTMB8GA1UdIwQYMBaAFFHVMa73oIfBjjAeDmosY3GyZMPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkFGRi9EMDYxMUYwNEND NDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4R09NQjRPYWl4amNiSmt3 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkVXhydmVnaDhHT01CNE9haXhqY2JKa3ctZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkFGRi9EMDYxMUYwNENDNDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4 R09NQjRPYWl4amNiSmt3LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH8Q+oPP+/Re0HVEiQpvQTBPIyJrYuaP9cjtAy3bz7rccmXHN82Oos vxy4R20Z6YcC4RBEbK+NYKgG6GmTTb7gn0zIYletssH1uLSEbd25/vVAWOyZsu82 kCHklzUzLXxSi+pjV5B75+TJW1sJJ74PBZ2m7pTr3WAfIvS4vhYu03abHvnrGRHD oqKx16qIT9WtqHQbTUR65g7p/Ijd4ADDKQlRsEQGfvmzCVVWoNVJuWmvklXc/3vu bHULCB9q0HkCAhdz16iLluV9nkcr1jCOWuXMeGjCC9x7jcs+jpPtkWiweSsoa86b QRJCIoGDWXZ6/pqxIBqpBUFsOCE6Aec8 -----END CERTIFICATE-----Generated at Thu Jul 3 01:12:50 2025 by rpki-client