$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft File: Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft (raw, json) Hash identifier: mb5rYl6YYG0wfdunv0IsGaopJN1BJfn1QOFEAHVUuXI= Subject key identifier: B8:08:41:D5:1C:34:1D:49:8E:9F:03:33:69:E7:E8:9E:66:F4:5F:C3 Authority key identifier: 52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B Certificate issuer: /CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B Certificate serial: 0BC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft Manifest number: 0BBE Signing time: Wed 02 Jul 2025 19:08:57 +0000 Manifest this update: Wed 02 Jul 2025 19:08:57 +0000 Manifest next update: Wed 09 Jul 2025 19:08:57 +0000 Files and hashes: 1: Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl (hash: XNxCIu1mc1K6TlvMfV/YQPAjb0qGZuDMgZnytaK0Ofg=) 2: C7F8C83C217311EA93A29F82C4F9AE02.roa (hash: r5uWTU+sYs/vGgm5oMxXApeoTDyzrDhvLimJL0rhlzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3012 (0xbc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C95, serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B Validity Not Before: Jul 2 19:08:57 2025 GMT Not After : Jul 9 19:08:57 2025 GMT Subject: CN=686583c9-c7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:89:1b:f3:13:08:f9:64:ec:9c:61:6d:e9:1d: 38:7f:6b:cb:53:ea:0f:5c:32:b8:04:b6:bc:3f:75: 51:95:53:15:4a:2f:5d:e3:5e:7a:82:08:43:6d:48: 12:37:b9:bc:77:bc:f0:15:95:c2:f9:13:47:34:42: 3f:ca:cb:1f:cd:89:a3:16:64:f8:f1:72:90:6b:a5: 74:3c:1d:51:85:5d:38:b0:bf:75:20:93:32:b2:b6: e0:2b:f1:c3:87:0c:17:57:e1:23:d4:fe:2b:7c:33: 39:fc:bc:53:d6:58:1e:e2:e6:89:3a:0e:4c:c9:f7: 09:7d:11:59:f7:e6:2d:68:c4:cd:5d:10:74:bf:75: c7:17:ec:a3:4f:52:65:9d:7d:49:d1:f7:d8:d2:e9: d7:b4:00:a2:b7:2b:6f:f0:01:cb:d8:02:b1:9d:8d: 65:9e:2f:52:4e:94:9a:a4:33:eb:e4:80:99:a2:43: 22:df:86:02:a1:12:a9:03:2e:b7:2b:06:4a:87:bc: 62:09:10:02:43:1c:bd:e6:78:ac:d2:e9:36:36:35: cc:fb:e2:5c:23:5c:19:78:a6:0a:f6:d4:0d:80:9e: 01:57:66:d4:87:93:25:ce:f9:f8:5e:4a:49:3c:2f: 6c:db:cd:1f:5f:14:8a:16:c0:9a:ce:49:44:48:7f: 7b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:08:41:D5:1C:34:1D:49:8E:9F:03:33:69:E7:E8:9E:66:F4:5F:C3 X509v3 Authority Key Identifier: keyid:52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:21:e2:b0:bd:20:05:3c:9d:20:1b:32:16:c0:d4:18:cc:44: cb:91:2a:8e:98:87:9f:07:9e:d6:20:25:73:f4:c5:be:dc:2b: 9b:c9:06:89:c1:dd:ad:26:30:1e:ce:6b:ba:70:cf:e4:b2:5c: 1d:f0:ee:4e:03:fc:b6:ad:d7:60:3b:d3:00:ae:7f:a4:ec:80: 25:73:a8:3f:a1:b3:f4:e0:0e:57:a5:d5:3a:15:60:a2:e9:bf: 5c:e2:1d:08:bc:ab:1e:36:bb:49:da:37:90:c2:4a:1e:0e:8d: e2:79:e0:1a:d2:ad:57:ad:8d:1f:9e:ed:c8:73:12:68:c8:cd: 97:75:a2:6a:c8:d4:01:43:3a:b4:cb:82:56:96:87:03:b3:0e: 8c:71:fd:e4:87:99:68:ab:0b:27:cd:57:13:25:d1:92:ec:87: dc:f5:7b:ef:75:b7:c8:f8:7a:82:36:87:68:4a:fb:98:fa:2d: 82:7b:c2:43:41:bd:22:be:aa:56:e6:ea:48:25:63:9c:4e:4d: 82:b7:25:ce:ae:41:15:0e:08:5a:37:41:52:b3:44:ad:bc:e7: 87:0a:12:82:f0:c5:c6:a5:65:5f:07:5a:db:ba:96:ff:ec:f5: 65:9e:b3:de:31:ad:5f:48:14:f5:92:59:59:f7:61:3d:fc:41: 0a:86:a1:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDOTUxMTAvBgNVBAUTKDUyQkY2RjYyRUJDQTI2QjFEQzQyN0ZCRUFGRTcyMEZC QjA5N0MyMUIwHhcNMjUwNzAyMTkwODU3WhcNMjUwNzA5MTkwODU3WjAYMRYwFAYD VQQDEw02ODY1ODNjOS1jN2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxokb8xMI+WTsnGFt6R04f2vLU+oPXDK4BLa8P3VRlVMVSi9d4156gghDbUgS N7m8d7zwFZXC+RNHNEI/yssfzYmjFmT48XKQa6V0PB1RhV04sL91IJMysrbgK/HD hwwXV+Ej1P4rfDM5/LxT1lge4uaJOg5MyfcJfRFZ9+YtaMTNXRB0v3XHF+yjT1Jl nX1J0ffY0unXtACitytv8AHL2AKxnY1lni9STpSapDPr5ICZokMi34YCoRKpAy63 KwZKh7xiCRACQxy95nis0uk2NjXM++JcI1wZeKYK9tQNgJ4BV2bUh5Mlzvn4XkpJ PC9s280fXxSKFsCazklESH97twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgIQdUc NB1Jjp8DM2nn6J5m9F/DMB8GA1UdIwQYMBaAFFK/b2Lryiax3EJ/vq/nIPuwl8Ib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM5NS9CQTNFQzg2RTIx NzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0pySGNRbi0tci1jZy03Q1h3 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyOXZZdXZLSnJIY1FuLS1yLWNnLTdDWHdocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM5NS9CQTNFQzg2RTIxNzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0py SGNRbi0tci1jZy03Q1h3aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2IeKwvSAFPJ0gGzIWwNQYzETLkSqOmIefB57WICVz9MW+3CubyQaJ wd2tJjAezmu6cM/kslwd8O5OA/y2rddgO9MArn+k7IAlc6g/obP04A5XpdU6FWCi 6b9c4h0IvKseNrtJ2jeQwkoeDo3ieeAa0q1XrY0fnu3IcxJoyM2XdaJqyNQBQzq0 y4JWlocDsw6Mcf3kh5loqwsnzVcTJdGS7Ifc9XvvdbfI+HqCNodoSvuY+i2Ce8JD Qb0ivqpW5upIJWOcTk2CtyXOrkEVDghaN0FSs0StvOeHChKC8MXGpWVfB1rbupb/ 7PVlnrPeMa1fSBT1kllZ92E9/EEKhqHX -----END CERTIFICATE-----Generated at Thu Jul 3 08:07:42 2025 by rpki-client