$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft File: 9UFCkkKfU9qxhrQuVkFJWagL6gg.mft (raw, json) Hash identifier: 38Uo8TYPTO9vcw95FaScCCCj4rLeTL69KDxxgVG32MA= Subject key identifier: 1D:74:2F:88:C8:EF:C4:7E:30:9B:AD:CE:AD:3A:46:8F:7D:A4:A3:A1 Authority key identifier: F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08 Certificate issuer: /CN=A91FB92B/serialNumber=F5414292429F53DAB186B42E56414959A80BEA08 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft Manifest number: 0152 Signing time: Thu 03 Jul 2025 04:16:05 +0000 Manifest this update: Thu 03 Jul 2025 04:16:05 +0000 Manifest next update: Thu 10 Jul 2025 04:16:05 +0000 Files and hashes: 1: 9UFCkkKfU9qxhrQuVkFJWagL6gg.crl (hash: Xiw/VnrsfTCA7QpD/gEK/d7kqICJokqaMJEgQVr11IQ=) 2: 25B9F9C454BE11EE810E4C27C4F9AE02.roa (hash: vLaYuuYnarn+LGPGR9ZLrnHgOaNMvO/0VgOiG0azlng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB92B, serialNumber=F5414292429F53DAB186B42E56414959A80BEA08 Validity Not Before: Jul 3 04:16:05 2025 GMT Not After : Jul 10 04:16:05 2025 GMT Subject: CN=68660405-d44e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d6:48:23:59:06:d3:0e:fc:0e:53:39:ca:bd: 3f:ed:f5:fb:fc:1a:4e:ea:eb:86:b2:c0:0a:24:5a: d6:57:71:78:d0:cc:d9:63:e3:9c:10:08:09:c4:ce: fb:95:14:b8:7a:92:4f:14:b3:2d:5e:04:d8:fc:51: 9b:cc:20:1c:9b:9e:38:74:9b:61:c3:4e:a0:37:a1: 01:a5:99:17:b9:be:eb:30:1f:fa:31:cc:48:68:e9: 85:91:40:01:39:df:83:25:73:16:f4:0e:56:dd:0f: 68:15:5b:20:24:0d:e5:98:2b:f9:86:ed:e1:e4:ba: 4e:5c:66:4f:9d:ca:ed:31:79:28:06:fe:fe:82:42: 60:3e:fa:64:58:7d:89:96:a0:69:8b:8f:4e:f3:d3: 14:f9:6d:92:61:48:89:9a:26:39:3d:ff:79:62:e2: a2:a9:10:3d:94:17:a0:17:c4:0d:74:12:6e:d1:22: 09:d7:00:e2:13:ad:0b:f1:0f:78:72:cb:ed:c1:9c: a0:ef:c9:ff:4b:4a:85:dd:9a:f8:d0:0a:1a:8c:12: aa:e6:3a:14:c9:0c:fa:8d:d0:dd:47:0a:5c:32:91: 4f:d7:ab:18:d3:0d:c7:3f:e5:e6:ec:56:6a:cd:c3: 0b:a1:ee:6c:82:91:4b:a0:f8:0e:f3:62:d3:c1:85: 7c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:74:2F:88:C8:EF:C4:7E:30:9B:AD:CE:AD:3A:46:8F:7D:A4:A3:A1 X509v3 Authority Key Identifier: keyid:F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:8c:6b:a0:61:62:01:a4:81:7b:49:32:00:98:e1:81:f4:38: 33:1f:12:cc:7d:b1:18:af:d9:b4:67:6f:51:f0:61:57:9c:9c: 04:74:f4:a5:1e:53:a3:cc:83:1d:15:f7:14:d1:a4:bc:61:58: fd:87:db:a5:39:b6:79:b4:00:cb:68:ce:f2:2d:5c:c8:90:6d: 86:4f:f7:5d:f4:21:29:79:7b:c0:91:cb:d9:79:c9:38:19:b3: eb:4f:26:62:bc:f0:88:f2:4d:e0:ec:de:51:5b:5b:bb:22:9c: c0:33:d1:1f:43:20:9a:c5:bf:6e:ab:09:db:7f:46:c8:ae:f8: 63:19:b3:7b:11:4a:a6:d2:8c:d7:ff:3e:c6:cc:99:1a:9f:3b: 7a:ef:31:5a:e3:15:23:78:11:cf:00:3c:c9:9a:b3:6d:70:ff: 1c:d3:af:34:db:f4:97:04:be:e6:0b:cd:5e:f8:77:f0:f7:60: 38:e2:c6:28:4d:94:8e:e6:8d:25:16:af:0f:f1:88:46:c9:68: 20:de:99:67:35:58:aa:01:ad:22:ce:0d:dc:26:43:8f:8f:04: 2f:d1:21:b2:fd:f6:a7:7c:02:cd:94:b6:e9:c8:c8:24:59:b2: 4d:e7:ab:f0:2c:bb:ed:d1:99:45:7e:76:14:0a:eb:85:fd:3c: 51:31:6a:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI5MkIxMTAvBgNVBAUTKEY1NDE0MjkyNDI5RjUzREFCMTg2QjQyRTU2NDE0OTU5 QTgwQkVBMDgwHhcNMjUwNzAzMDQxNjA1WhcNMjUwNzEwMDQxNjA1WjAYMRYwFAYD VQQDEw02ODY2MDQwNS1kNDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtZII1kG0w78DlM5yr0/7fX7/BpO6uuGssAKJFrWV3F40MzZY+OcEAgJxM77 lRS4epJPFLMtXgTY/FGbzCAcm544dJthw06gN6EBpZkXub7rMB/6McxIaOmFkUAB Od+DJXMW9A5W3Q9oFVsgJA3lmCv5hu3h5LpOXGZPncrtMXkoBv7+gkJgPvpkWH2J lqBpi49O89MU+W2SYUiJmiY5Pf95YuKiqRA9lBegF8QNdBJu0SIJ1wDiE60L8Q94 csvtwZyg78n/S0qF3Zr40AoajBKq5joUyQz6jdDdRwpcMpFP16sY0w3HP+Xm7FZq zcMLoe5sgpFLoPgO82LTwYV8uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB10L4jI 78R+MJutzq06Ro99pKOhMB8GA1UdIwQYMBaAFPVBQpJCn1PasYa0LlZBSVmoC+oI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyQi9DNDYwODFGMjU0 QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5cXhoclF1VmtGSldhZ0w2 Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVRkNra0tmVTlxeGhyUXVWa0ZKV2FnTDZnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjkyQi9DNDYwODFGMjU0QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5 cXhoclF1VmtGSldhZ0w2Z2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEjGugYWIBpIF7STIAmOGB9DgzHxLMfbEYr9m0Z29R8GFXnJwEdPSl HlOjzIMdFfcU0aS8YVj9h9ulObZ5tADLaM7yLVzIkG2GT/dd9CEpeXvAkcvZeck4 GbPrTyZivPCI8k3g7N5RW1u7IpzAM9EfQyCaxb9uqwnbf0bIrvhjGbN7EUqm0ozX /z7GzJkanzt67zFa4xUjeBHPADzJmrNtcP8c06802/SXBL7mC81e+Hfw92A44sYo TZSO5o0lFq8P8YhGyWgg3plnNViqAa0izg3cJkOPjwQv0SGy/fanfALNlLbpyMgk WbJN56vwLLvt0ZlFfnYUCuuF/TxRMWqZ -----END CERTIFICATE-----Generated at Sat Jul 5 05:08:13 2025 by rpki-client