$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft File: UtXW_72oj1ReUbr5n32s4ZPAblc.mft (raw, json) Hash identifier: qyPrXFNy+6DwtScjC0dr9MWW9m5Nu/s7fM4Nl8K/LnI= Subject key identifier: 50:F0:F5:DF:EB:B0:53:0B:DD:22:BF:EA:78:69:17:46:74:47:DB:5C Authority key identifier: 52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57 Certificate issuer: /CN=A91F17F6/serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57 Certificate serial: 07E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft Manifest number: 07E1 Signing time: Mon 30 Jun 2025 21:14:35 +0000 Manifest this update: Mon 30 Jun 2025 21:14:35 +0000 Manifest next update: Mon 07 Jul 2025 21:14:35 +0000 Files and hashes: 1: UtXW_72oj1ReUbr5n32s4ZPAblc.crl (hash: A24b4PPeVDMJ2OwOSOSX1lxUQ7JAoDvmv7T/N3JeW6o=) 2: AF95E6D8F2B711EAA1C01744C4F9AE02.roa (hash: X3Zxmzy65RFAr4wRuSkQChvufHFA8zifcOkEqKI8dKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2024 (0x7e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17F6, serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57 Validity Not Before: Jun 30 21:14:35 2025 GMT Not After : Jul 7 21:14:35 2025 GMT Subject: CN=6862fe3b-54e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9f:57:c3:62:99:66:91:4d:e9:de:93:4e:b7: ff:1f:89:75:73:a9:c9:d8:c1:82:d4:ab:84:a7:25: e6:2a:32:16:f5:c0:cb:d2:88:2c:30:fc:38:88:df: 39:b5:af:41:3c:16:6f:5a:f3:bf:de:ae:32:09:ea: 90:5c:0c:fa:f1:e7:fb:85:60:9d:4b:bf:98:ea:f9: e5:5e:67:22:d9:cd:f7:38:56:ef:49:e1:2b:c3:d5: d6:d9:d1:af:21:5e:68:32:27:6b:de:35:12:e4:0a: 2e:e0:a1:e7:29:22:2b:40:c5:b6:02:db:11:92:14: 25:6a:64:35:55:b0:de:32:40:f1:89:3e:04:d8:8a: 0a:78:9f:f1:2e:dc:f6:1b:70:25:a1:c7:21:af:57: 78:97:9c:50:97:eb:0f:e2:db:f0:b1:d6:bd:2f:8e: 83:19:f5:9a:59:2a:a9:f0:b0:df:f5:66:93:bc:8d: ac:e9:25:cd:b4:e6:76:c6:42:8f:d3:85:29:94:1d: 7e:33:58:e7:d7:69:61:a2:88:6e:16:34:15:ae:51: 1a:4c:62:05:a8:85:44:c9:d5:d5:3e:02:68:f9:3d: 57:c1:3f:43:64:b1:92:3c:40:27:7b:d4:87:90:64: f5:19:e4:a2:33:bd:0d:8a:b2:02:c9:92:15:f6:ab: 2c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F0:F5:DF:EB:B0:53:0B:DD:22:BF:EA:78:69:17:46:74:47:DB:5C X509v3 Authority Key Identifier: keyid:52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:02:0e:89:7e:a6:3e:84:01:18:73:84:27:5b:44:b4:94:2b: 62:53:58:75:e5:ed:a7:89:44:f4:45:a1:80:31:91:1c:d9:ed: 81:3b:d1:26:2d:0a:60:a8:68:d4:19:2f:10:f1:81:5c:27:85: 52:da:55:02:15:e4:d0:51:9b:42:47:7c:cc:a1:29:4e:64:6c: 2b:12:1a:ab:db:67:50:b8:13:64:d9:4d:30:28:2d:6e:d6:14: 97:2d:8a:bc:0e:19:eb:4b:97:0d:d4:4b:19:47:13:c7:23:1f: 62:06:7f:d0:b1:2f:24:7e:ea:39:9d:bf:9b:f1:f7:99:d6:2c: 70:24:f3:8d:89:91:19:ce:90:72:1e:96:e8:f3:5a:7e:46:74: ed:85:48:64:00:0b:c2:76:12:ec:61:78:a6:be:b0:7d:70:2a: 37:ca:e3:91:f8:41:29:77:98:5f:7b:69:d5:1c:d6:9a:9e:d1: 95:96:0a:28:84:e1:97:f4:38:45:c1:83:2d:dc:13:ae:85:55: 37:97:34:4a:90:cb:99:e8:ae:9f:42:45:bf:3a:2d:9f:ee:28: 67:a5:78:b2:d1:16:f5:8b:f8:83:d0:f2:43:b4:82:1c:ec:72: a9:a1:8d:77:4e:a8:00:fa:be:60:34:57:ae:19:ab:62:b1:ac: dc:8b:78:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3RjYxMTAvBgNVBAUTKDUyRDVENkZGQkRBODhGNTQ1RTUxQkFGOTlGN0RBQ0Ux OTNDMDZFNTcwHhcNMjUwNjMwMjExNDM1WhcNMjUwNzA3MjExNDM1WjAYMRYwFAYD VQQDEw02ODYyZmUzYi01NGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp59Xw2KZZpFN6d6TTrf/H4l1c6nJ2MGC1KuEpyXmKjIW9cDL0ogsMPw4iN85 ta9BPBZvWvO/3q4yCeqQXAz68ef7hWCdS7+Y6vnlXmci2c33OFbvSeErw9XW2dGv IV5oMidr3jUS5Aou4KHnKSIrQMW2AtsRkhQlamQ1VbDeMkDxiT4E2IoKeJ/xLtz2 G3Alocchr1d4l5xQl+sP4tvwsda9L46DGfWaWSqp8LDf9WaTvI2s6SXNtOZ2xkKP 04UplB1+M1jn12lhoohuFjQVrlEaTGIFqIVEydXVPgJo+T1XwT9DZLGSPEAne9SH kGT1GeSiM70NirICyZIV9qss7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDw9d/r sFML3SK/6nhpF0Z0R9tcMB8GA1UdIwQYMBaAFFLV1v+9qI9UXlG6+Z99rOGTwG5X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdGNi9FRDkzQ0VFOEYy QjUxMUVBOUEzRjYzNDFDNEY5QUUwMi9VdFhXXzcyb2oxUmVVYnI1bjMyczRaUEFi bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V0WFdfNzJvajFSZVVicjVuMzJzNFpQQWJsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdGNi9FRDkzQ0VFOEYyQjUxMUVBOUEzRjYzNDFDNEY5QUUwMi9VdFhXXzcyb2ox UmVVYnI1bjMyczRaUEFibGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHAg6JfqY+hAEYc4QnW0S0lCtiU1h15e2niUT0RaGAMZEc2e2BO9Em LQpgqGjUGS8Q8YFcJ4VS2lUCFeTQUZtCR3zMoSlOZGwrEhqr22dQuBNk2U0wKC1u 1hSXLYq8DhnrS5cN1EsZRxPHIx9iBn/QsS8kfuo5nb+b8feZ1ixwJPONiZEZzpBy Hpbo81p+RnTthUhkAAvCdhLsYXimvrB9cCo3yuOR+EEpd5hfe2nVHNaantGVlgoo hOGX9DhFwYMt3BOuhVU3lzRKkMuZ6K6fQkW/Oi2f7ihnpXiy0Rb1i/iD0PJDtIIc 7HKpoY13TqgA+r5gNFeuGatisazci3jf -----END CERTIFICATE-----Generated at Tue Jul 1 18:05:38 2025 by rpki-client