$ rpki-client -vvf rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft File: U1n0WpMqsOo84GFn1fzHBltN2IU.mft (raw, json) Hash identifier: qatXmm83/4Qf/6D5Ka4hZNXVwzQSrYpJgyKBiAB7JII= Subject key identifier: 5A:8C:9C:FE:36:26:69:E3:CF:FA:6F:1D:B7:31:9F:AE:94:5F:E6:7F Authority key identifier: 53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85 Certificate issuer: /CN=A911367F/serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885 Certificate serial: 0C60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft Manifest number: 0C54 Signing time: Sat 14 Jun 2025 18:15:43 +0000 Manifest this update: Sat 14 Jun 2025 18:15:43 +0000 Manifest next update: Sat 21 Jun 2025 18:15:43 +0000 Files and hashes: 1: U1n0WpMqsOo84GFn1fzHBltN2IU.crl (hash: KvSWvxQWtsBOWfEbdoyaPv24ThtioLB5871wXl3mz80=) 2: 6751E26C415511ECA2FD715CC4F9AE02.roa (hash: NWXl0/HloQJgP5iTbQs1BacGndGc9HtR4LlBAy7UnRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3168 (0xc60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911367F, serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885 Validity Not Before: Jun 14 18:15:43 2025 GMT Not After : Jun 21 18:15:43 2025 GMT Subject: CN=684dbc4f-f430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b7:54:8e:7c:36:90:05:5c:9a:53:04:e6:ce: 84:c8:f3:6e:65:66:2c:6b:eb:de:6b:fa:a5:6e:bd: 2d:ab:71:04:8a:b6:e9:1f:03:a3:d7:27:dc:06:6c: 40:20:69:30:91:b0:fb:25:c6:5b:ae:be:1b:72:29: 71:8b:07:54:b3:d1:d5:8e:9c:c7:98:97:1a:68:5b: 3c:c7:07:4d:3d:71:b8:8d:6a:0a:48:d4:ca:0c:49: 64:25:0c:b3:27:9b:22:a5:9c:c9:fb:e9:ad:88:00: 87:bc:58:1d:6b:ed:53:6d:6a:33:c5:cb:2d:58:0e: 0c:89:b2:6b:52:82:b1:95:fe:e3:2f:25:f6:5a:13: 0a:d0:7c:a9:6f:13:31:d8:21:ed:c9:01:72:d2:b0: bb:73:29:96:67:9d:18:57:a5:2e:d9:ff:3b:ff:73: 67:d5:f3:2a:7f:b8:d1:d3:fd:3c:3f:ed:6a:f4:e7: f1:97:b7:fc:75:b7:eb:8f:cf:86:6b:45:d4:e9:b1: d0:ba:11:25:6f:71:cc:69:b8:3f:87:50:85:ab:03: 39:48:b6:3d:fd:74:67:25:cd:48:7b:51:6b:d6:a9: 91:c3:ee:c1:f2:c1:f3:db:ed:ea:8a:cf:fe:43:23: b5:05:b9:48:24:a1:80:5a:56:af:0f:99:4f:5b:4c: d1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8C:9C:FE:36:26:69:E3:CF:FA:6F:1D:B7:31:9F:AE:94:5F:E6:7F X509v3 Authority Key Identifier: keyid:53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:07:9d:cd:91:d8:04:5c:09:07:6c:a0:b8:ed:75:4a:09:bf: e7:79:1e:b8:ff:3c:d8:93:fd:9d:df:22:c7:af:f6:eb:87:f7: 55:1d:85:c3:34:06:85:c2:7e:0b:f5:4c:24:25:22:e3:54:61: 29:19:a1:3d:87:28:e0:0e:b1:2d:e9:42:84:c5:3c:37:74:86: 47:ac:07:81:b8:63:d4:86:10:bf:7b:23:76:84:97:7a:ae:9b: 83:63:92:91:98:aa:52:3e:ea:39:41:f3:3c:a8:2e:a4:0f:bf: 00:62:06:df:a4:5d:30:9f:f0:b3:4a:82:3a:4f:06:c9:10:6b: b3:8d:c3:2e:0c:36:28:af:ab:b8:bd:df:41:5c:4e:56:0f:40: 7c:f7:fe:e7:a0:33:82:57:7d:3a:73:50:1f:4c:39:f2:91:cd: 17:be:9e:1b:87:8c:d5:f0:af:79:f7:8f:e7:26:ce:be:60:95: 5f:a4:dc:42:f7:92:34:2e:e5:d8:f4:9f:8a:f7:a8:12:93:b9: a7:92:c9:c8:ec:f2:69:11:3d:57:e1:b0:3a:44:54:b7:15:81: 73:c9:9f:39:6c:0d:d0:45:de:c3:dc:a1:9a:7a:e2:ad:e5:73: c8:b5:21:c8:99:3e:66:9b:fe:a8:ae:b9:25:5b:8b:18:e3:9b: a7:22:e8:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM2N0YxMTAvBgNVBAUTKDUzNTlGNDVBOTMyQUIwRUEzQ0UwNjE2N0Q1RkNDNzA2 NUI0REQ4ODUwHhcNMjUwNjE0MTgxNTQzWhcNMjUwNjIxMTgxNTQzWjAYMRYwFAYD VQQDEw02ODRkYmM0Zi1mNDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57dUjnw2kAVcmlME5s6EyPNuZWYsa+vea/qlbr0tq3EEirbpHwOj1yfcBmxA IGkwkbD7JcZbrr4bcilxiwdUs9HVjpzHmJcaaFs8xwdNPXG4jWoKSNTKDElkJQyz J5sipZzJ++mtiACHvFgda+1TbWozxcstWA4MibJrUoKxlf7jLyX2WhMK0HypbxMx 2CHtyQFy0rC7cymWZ50YV6Uu2f87/3Nn1fMqf7jR0/08P+1q9Ofxl7f8dbfrj8+G a0XU6bHQuhElb3HMabg/h1CFqwM5SLY9/XRnJc1Ie1Fr1qmRw+7B8sHz2+3qis/+ QyO1BblIJKGAWlavD5lPW0zRdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqMnP42 Jmnjz/pvHbcxn66UX+Z/MB8GA1UdIwQYMBaAFFNZ9FqTKrDqPOBhZ9X8xwZbTdiF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzY3Ri83QTk0RDEyODA0 NjExMUVBOUYwRjQwNDJDNEY5QUUwMi9VMW4wV3BNcXNPbzg0R0ZuMWZ6SEJsdE4y SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UxbjBXcE1xc09vODRHRm4xZnpIQmx0TjJJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzY3Ri83QTk0RDEyODA0NjExMUVBOUYwRjQwNDJDNEY5QUUwMi9VMW4wV3BNcXNP bzg0R0ZuMWZ6SEJsdE4ySVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTB53NkdgEXAkHbKC47XVKCb/neR64/zzYk/2d3yLHr/brh/dVHYXD NAaFwn4L9UwkJSLjVGEpGaE9hyjgDrEt6UKExTw3dIZHrAeBuGPUhhC/eyN2hJd6 rpuDY5KRmKpSPuo5QfM8qC6kD78AYgbfpF0wn/CzSoI6TwbJEGuzjcMuDDYor6u4 vd9BXE5WD0B89/7noDOCV306c1AfTDnykc0Xvp4bh4zV8K9594/nJs6+YJVfpNxC 95I0LuXY9J+K96gSk7mnksnI7PJpET1X4bA6RFS3FYFzyZ85bA3QRd7D3KGaeuKt 5XPItSHImT5mm/6orrklW4sY45unIuj4 -----END CERTIFICATE-----Generated at Sun Jun 15 08:47:59 2025 by rpki-client