$ rpki-client -vvf rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft File: uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft (raw, json) Hash identifier: iL96K99cQv889qWhOQoj5V9sC5PsmnG1jHZrYPOCTgk= Subject key identifier: DA:7A:8D:1C:64:E0:96:3D:77:5E:FD:B4:06:7C:0E:85:A0:84:AB:F5 Authority key identifier: BB:30:07:8C:F6:87:78:7D:3A:5B:3E:53:4C:08:97:16:A8:6B:13:BB Certificate issuer: /CN=A9113217/serialNumber=BB30078CF687787D3A5B3E534C089716A86B13BB Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft Manifest number: 016A Signing time: Fri 13 Jun 2025 02:53:28 +0000 Manifest this update: Fri 13 Jun 2025 02:53:28 +0000 Manifest next update: Fri 20 Jun 2025 02:53:28 +0000 Files and hashes: 1: uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl (hash: w7PYQbOI/v8DkJVTjqZb4BRRXIyTsjcPVX1M+eT3BIo=) 2: 859871F2215D11EE963E9A52C4F9AE02.roa (hash: HHHOwt/fdM7W7+F6fEKQDH5IL/vBD99o4H9HkpME2xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113217, serialNumber=BB30078CF687787D3A5B3E534C089716A86B13BB Validity Not Before: Jun 13 02:53:28 2025 GMT Not After : Jun 20 02:53:28 2025 GMT Subject: CN=684b92a8-72c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ed:d8:85:19:1c:33:fd:62:b9:fc:3b:de:75: 6a:f0:88:a6:d2:c3:71:d3:d8:c4:0e:5d:07:97:ae: a9:17:40:26:f2:a5:bb:1f:1a:28:33:15:46:af:98: f2:e0:d2:fd:17:1f:b5:0b:fa:1d:d4:5e:78:6c:36: 18:03:dc:38:bb:6b:6d:30:de:0a:19:57:4c:e6:68: 31:83:32:05:40:d7:96:b5:fd:aa:a3:47:58:cf:e9: a2:8a:6e:66:63:73:2d:12:4f:5e:7a:54:cb:5d:f7: bc:98:f9:fa:ec:56:b8:9a:cb:41:e2:4c:18:ec:84: 77:d8:8b:3e:d2:18:9f:21:0e:90:73:b6:01:8e:33: 84:53:8d:63:4d:54:8e:f7:fe:e1:17:b3:22:a9:d0: 4d:c2:fd:92:9f:46:09:a1:41:ee:c6:30:38:4a:ab: 9b:d1:d5:06:62:d6:d0:97:14:d1:ae:ea:25:98:ff: 8f:19:a8:d2:77:63:4a:4a:66:d7:89:ba:67:e8:db: 9b:b4:26:df:8b:df:56:c5:e9:b9:fe:2e:1f:e2:ab: 58:cd:e5:22:8a:86:2d:66:bc:99:3c:96:01:65:c9: 33:02:cd:70:e0:5b:25:01:61:43:fc:da:91:9a:42: 1c:56:45:2b:3d:69:fc:5a:ef:fb:63:12:54:2a:89: 49:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7A:8D:1C:64:E0:96:3D:77:5E:FD:B4:06:7C:0E:85:A0:84:AB:F5 X509v3 Authority Key Identifier: keyid:BB:30:07:8C:F6:87:78:7D:3A:5B:3E:53:4C:08:97:16:A8:6B:13:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:6f:b6:28:5b:8a:27:88:47:d1:92:86:a4:e9:0c:cf:1c:d9: 79:50:60:9f:a4:84:ee:2f:1e:47:77:a4:d4:b2:b5:15:8f:ad: 29:9d:3f:37:ec:a2:1a:fb:e0:df:bf:2e:f0:d2:5e:a9:87:5a: c8:aa:03:c6:2b:1b:81:bf:9f:fc:9c:e9:5b:a5:cf:b5:4e:55: 82:89:57:0b:af:24:b9:c1:dd:26:31:3b:19:3a:cc:0c:a4:ec: 01:a7:bc:f6:1d:22:c3:d9:31:dd:b9:84:0c:d0:3c:5e:32:44: b2:37:94:5e:67:5f:d2:f8:ef:db:50:6b:65:26:65:9d:01:56: 8f:98:81:d7:94:eb:91:71:b7:be:d5:b9:5a:fd:c1:cd:7f:34: fc:f9:1f:d1:54:a7:2d:2d:8c:00:2e:a2:1f:2d:a8:41:be:ac: 24:43:2d:a9:5f:ab:89:83:7f:ad:50:89:e5:11:bb:ca:c5:d3: c2:82:e4:48:6c:fe:f5:a0:cd:1d:63:88:fa:a9:d3:2e:1a:17: db:a8:65:4c:cc:46:d3:7d:59:30:e5:bb:02:91:5e:0d:bf:7c: d8:e8:78:06:46:3f:dc:32:fd:69:12:3b:8b:fa:36:c4:50:39: 41:8c:04:1a:f7:5f:02:38:22:9d:99:4b:14:60:8c:fa:c5:41: aa:69:2e:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTMyMTcxMTAvBgNVBAUTKEJCMzAwNzhDRjY4Nzc4N0QzQTVCM0U1MzRDMDg5NzE2 QTg2QjEzQkIwHhcNMjUwNjEzMDI1MzI4WhcNMjUwNjIwMDI1MzI4WjAYMRYwFAYD VQQDEw02ODRiOTJhOC03MmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+3YhRkcM/1iufw73nVq8Iim0sNx09jEDl0Hl66pF0Am8qW7HxooMxVGr5jy 4NL9Fx+1C/od1F54bDYYA9w4u2ttMN4KGVdM5mgxgzIFQNeWtf2qo0dYz+miim5m Y3MtEk9eelTLXfe8mPn67Fa4mstB4kwY7IR32Is+0hifIQ6Qc7YBjjOEU41jTVSO 9/7hF7MiqdBNwv2Sn0YJoUHuxjA4Squb0dUGYtbQlxTRruolmP+PGajSd2NKSmbX ibpn6NubtCbfi99Wxem5/i4f4qtYzeUiioYtZryZPJYBZckzAs1w4FslAWFD/NqR mkIcVkUrPWn8Wu/7YxJUKolJJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNp6jRxk 4JY9d179tAZ8DoWghKv1MB8GA1UdIwQYMBaAFLswB4z2h3h9Ols+U0wIlxaoaxO7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzIxNy9ENzIxOTZEMDIx NUMxMUVFQkNCNUIyNEVDNEY5QUUwMi91ekFIalBhSGVIMDZXejVUVEFpWEZxaHJF N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V6QUhqUGFIZUgwNld6NVRUQWlYRnFockU3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzIxNy9ENzIxOTZEMDIxNUMxMUVFQkNCNUIyNEVDNEY5QUUwMi91ekFIalBhSGVI MDZXejVUVEFpWEZxaHJFN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDb7YoW4oniEfRkoak6QzPHNl5UGCfpITuLx5Hd6TUsrUVj60pnT83 7KIa++Dfvy7w0l6ph1rIqgPGKxuBv5/8nOlbpc+1TlWCiVcLryS5wd0mMTsZOswM pOwBp7z2HSLD2THduYQM0DxeMkSyN5ReZ1/S+O/bUGtlJmWdAVaPmIHXlOuRcbe+ 1bla/cHNfzT8+R/RVKctLYwALqIfLahBvqwkQy2pX6uJg3+tUInlEbvKxdPCguRI bP71oM0dY4j6qdMuGhfbqGVMzEbTfVkw5bsCkV4Nv3zY6HgGRj/cMv1pEjuL+jbE UDlBjAQa918COCKdmUsUYIz6xUGqaS6k -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:57 2025 by rpki-client