$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft File: uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft (raw, json) Hash identifier: LqQCiHMsblsI+BIkPX23x8pr4RABO8yD7uzR0jYF5d4= Subject key identifier: 45:4E:80:C0:99:EC:35:4C:CF:06:B7:B1:2F:6A:83:BA:7C:C5:6E:DB Authority key identifier: B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D Certificate issuer: /CN=A911F2DF/serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft Manifest number: C8 Signing time: Thu 19 Jun 2025 05:09:30 +0000 Manifest this update: Thu 19 Jun 2025 05:09:30 +0000 Manifest next update: Thu 26 Jun 2025 05:09:30 +0000 Files and hashes: 1: uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl (hash: /Bh4r3rYDEeRUT2wG8+awItSVJBur370x2TQB4pYCrI=) 2: 92E390AC958E11EF87A4040BC4F9AE02.roa (hash: ziX6uRrjdN8XtvPVmk67ZGOFErPjsTpewvnUOr01Tm8=) 3: 7FAE29E8958E11EF9CC0DD0AC4F9AE02.roa (hash: 3kGsoUmf1FpifCPtPS1E6u6lzuQTEBurC189TVcNMdw=) 4: 659B37E4958E11EFAFF1870AC4F9AE02.roa (hash: XEN2blQh3Cs+gyEWpdkV0R6BegNBQ93goCybhrow5bM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF, serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D Validity Not Before: Jun 19 05:09:30 2025 GMT Not After : Jun 26 05:09:30 2025 GMT Subject: CN=68539b8a-4dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:46:1f:4b:99:26:4b:3a:9f:b7:77:31:10:b7: a2:9c:6f:97:c5:f7:f3:aa:31:15:5e:00:b7:44:38: 69:3e:10:7c:92:29:f0:bd:67:ea:00:93:6e:93:e4: 70:f0:b3:ce:0f:18:f2:5b:7b:be:cb:7a:8e:c5:3b: dc:59:c9:fa:48:6c:7d:e7:55:2a:2c:c0:3c:88:5a: d1:4a:26:92:e6:85:45:4f:59:6e:e9:48:66:a6:4b: 00:51:67:df:c3:91:d0:4d:1b:4a:95:b3:76:4e:bf: 90:01:af:5c:a6:49:fc:51:d6:a7:d7:c1:bf:b7:4c: d2:07:93:15:03:78:d8:26:3e:64:5d:35:cb:57:25: ca:80:9b:8e:d3:1f:40:90:2b:68:96:d9:64:26:2e: 55:34:cb:5e:d8:e6:0a:56:35:da:24:59:ff:0c:d3: a4:50:5d:e9:ef:56:01:d7:33:e4:79:13:b8:6b:f9: 8f:ce:61:8d:8f:9e:55:3b:f6:00:e3:1f:3f:56:5c: 8f:44:19:f3:06:06:27:4e:f3:3f:c5:03:c7:7c:3f: 6e:f9:9b:74:f0:04:b6:5b:17:30:0e:3a:d1:df:fb: 8c:da:14:f8:c7:61:c0:2e:13:e5:f9:d7:cc:b3:0e: c5:9d:7a:00:b4:02:ac:06:72:c2:cd:0a:f6:f5:8f: fd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4E:80:C0:99:EC:35:4C:CF:06:B7:B1:2F:6A:83:BA:7C:C5:6E:DB X509v3 Authority Key Identifier: keyid:B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:f2:60:fb:d5:14:b9:fd:db:cd:01:0f:7a:4c:ca:d5:79:a7: f8:b3:dd:0a:96:83:8d:40:02:ac:2a:36:ba:5d:2e:ed:b7:21: 97:23:ba:73:c2:e4:f7:f9:dc:9e:87:ef:a8:4f:6d:54:7f:6c: 02:f6:94:ee:64:88:47:c4:14:09:b1:13:9a:13:8c:e8:dc:bd: e2:96:75:1a:a3:e7:24:f2:3a:0c:7e:06:cb:75:8f:17:b9:29: 99:a1:ee:2f:9c:f3:b5:cf:d7:24:c9:29:bc:e1:e9:ba:da:62: c1:b4:cc:84:67:c0:75:b2:07:4a:47:e5:07:a8:22:38:f3:0c: aa:6d:3a:f9:59:03:4d:3b:17:c6:51:6c:00:0b:7c:ca:a8:54: b5:37:6e:ef:ef:a1:d0:2d:88:cd:3d:37:f0:6a:a0:b9:a8:2b: 3f:8b:b2:a3:5f:ac:1b:36:a3:b3:ef:37:92:6f:59:df:bd:47: 46:f7:48:fe:79:7f:78:8b:1f:a5:d2:9d:77:7f:0e:ed:fa:13: f0:ae:9a:a4:97:47:fb:bd:5d:e5:72:0f:d6:68:27:51:19:f4: 51:4e:79:b5:ec:c2:f4:a2:73:8d:71:a8:c0:76:91:3c:26:ed: e8:77:d2:57:1e:8d:a8:78:3c:50:98:ea:1f:ea:8f:c0:48:e2: cf:1b:83:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKEI4NEMyMzk2OUVENzlDMEUzMUMxM0MxNDUwMDEyRTIy NDZEM0Y5NEQwHhcNMjUwNjE5MDUwOTMwWhcNMjUwNjI2MDUwOTMwWjAYMRYwFAYD VQQDEw02ODUzOWI4YS00ZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUYfS5kmSzqft3cxELeinG+XxffzqjEVXgC3RDhpPhB8kinwvWfqAJNuk+Rw 8LPODxjyW3u+y3qOxTvcWcn6SGx951UqLMA8iFrRSiaS5oVFT1lu6UhmpksAUWff w5HQTRtKlbN2Tr+QAa9cpkn8Udan18G/t0zSB5MVA3jYJj5kXTXLVyXKgJuO0x9A kCtoltlkJi5VNMte2OYKVjXaJFn/DNOkUF3p71YB1zPkeRO4a/mPzmGNj55VO/YA 4x8/VlyPRBnzBgYnTvM/xQPHfD9u+Zt08AS2WxcwDjrR3/uM2hT4x2HALhPl+dfM sw7FnXoAtAKsBnLCzQr29Y/94wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVOgMCZ 7DVMzwa3sS9qg7p8xW7bMB8GA1UdIwQYMBaAFLhMI5ae15wOMcE8FFABLiJG0/lN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wMDUwMUZEMjIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi91RXdqbHA3WG5BNHh3VHdVVUFFdUlrYlQt VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VFd2pscDdYbkE0eHdUd1VVQUV1SWtiVC1VMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wMDUwMUZEMjIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi91RXdqbHA3WG5B NHh3VHdVVUFFdUlrYlQtVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ8mD71RS5/dvNAQ96TMrVeaf4s90KloONQAKsKja6XS7ttyGXI7pz wuT3+dyeh++oT21Uf2wC9pTuZIhHxBQJsROaE4zo3L3ilnUao+ck8joMfgbLdY8X uSmZoe4vnPO1z9ckySm84em62mLBtMyEZ8B1sgdKR+UHqCI48wyqbTr5WQNNOxfG UWwAC3zKqFS1N27v76HQLYjNPTfwaqC5qCs/i7KjX6wbNqOz7zeSb1nfvUdG90j+ eX94ix+l0p13fw7t+hPwrpqkl0f7vV3lcg/WaCdRGfRRTnm17ML0onONcajAdpE8 Ju3od9JXHo2oeDxQmOof6o/ASOLPG4O2 -----END CERTIFICATE-----Generated at Thu Jun 19 12:11:44 2025 by rpki-client