$ rpki-client -vvf rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft File: u4lwRaiPyB_M_jjl92FYT9y6zoU.mft (raw, json) Hash identifier: MPHln2lCJNyYWxexHUCo7KgCKn8GJp9s9j4jOZIO9os= Subject key identifier: 2F:D1:C8:19:DC:CD:A8:B6:61:EB:2C:5E:7A:83:9D:37:EA:9D:C6:A8 Authority key identifier: BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85 Certificate issuer: /CN=A9128553/serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85 Certificate serial: 02DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft Manifest number: 02D9 Signing time: Sun 15 Jun 2025 01:02:51 +0000 Manifest this update: Sun 15 Jun 2025 01:02:50 +0000 Manifest next update: Sun 22 Jun 2025 01:02:50 +0000 Files and hashes: 1: u4lwRaiPyB_M_jjl92FYT9y6zoU.crl (hash: j8VtIwVPRJoL7UPkz+TrODSwo7S84OlFrd+Iu0aQxnM=) 2: 6C113EF8EB1211ECB34A394DC4F9AE02.roa (hash: WvT7aspKo+sHWby0nr7AYPsexTa44Dr6ROlq3v6GSX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 733 (0x2dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128553, serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85 Validity Not Before: Jun 15 01:02:50 2025 GMT Not After : Jun 22 01:02:50 2025 GMT Subject: CN=684e1bba-82c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:40:11:93:90:ef:6b:05:c6:7e:be:32:1f:50: 55:99:0c:a6:8f:4b:0e:0f:54:f1:5d:c4:b5:a0:46: 50:31:5e:03:a5:d0:21:a5:47:4f:93:39:b4:a2:33: fa:dd:55:73:b9:20:89:58:13:65:9c:7c:d6:4f:ee: 97:21:96:47:a9:39:fb:fa:ed:09:fb:f0:22:fb:1e: ce:61:51:03:92:d7:fe:88:68:b8:6d:94:ad:08:5d: f6:b4:7d:35:fa:fd:aa:b0:e8:02:b0:18:2e:cd:7c: 8b:da:df:90:10:14:e5:a2:0a:5c:64:5b:6d:85:a9: a6:4e:eb:29:29:a2:3e:c5:f6:a2:77:e6:1b:c0:93: c2:c8:02:7c:a6:ab:40:94:ff:6c:e3:aa:5a:ae:dd: 34:0f:87:46:81:13:59:7c:00:fa:b2:91:f2:a5:de: 17:1a:ad:20:d6:68:c2:54:c0:00:2f:71:af:78:cd: 30:6b:2a:2a:c7:71:6a:e1:2b:80:fc:89:7a:8f:34: a1:9d:0b:07:d9:c9:64:4e:05:85:5a:20:fb:85:fe: bc:24:48:40:0d:0b:31:47:35:d3:99:d5:c2:3d:6e: 3f:2b:42:4a:e8:3e:25:d7:e6:55:10:8e:76:c2:0f: 38:74:49:0e:7e:ba:9b:71:3c:19:17:8f:e9:4d:c4: a8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D1:C8:19:DC:CD:A8:B6:61:EB:2C:5E:7A:83:9D:37:EA:9D:C6:A8 X509v3 Authority Key Identifier: keyid:BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:32:7b:e5:ee:01:3c:06:45:51:bd:bb:ce:b0:e6:4a:ef:14: 6d:11:dd:80:fb:7b:3e:02:9a:ee:cf:24:57:57:e4:3e:7d:66: 74:c1:06:35:fa:d3:61:6a:ff:51:92:65:2a:e9:20:72:1f:ca: 6d:ab:02:dc:68:e6:87:a2:c7:bb:42:08:80:cd:20:f9:45:5b: d6:fc:41:fa:b9:e7:97:1b:ea:14:bd:92:39:66:fb:3e:da:fb: 00:06:fa:1c:96:4b:b2:f1:21:c2:23:5b:ed:2f:75:8e:89:c4: 0d:39:03:5c:89:2d:1c:1d:2c:9d:0d:f5:0c:09:bf:a4:11:cf: b7:bb:9c:17:dd:43:d2:e7:d3:65:84:29:b1:c4:33:e8:21:e2: 63:98:36:ca:47:1f:32:e1:c7:11:c6:1f:d9:b9:7e:74:40:c4: 46:f1:d4:2c:bb:6c:06:e2:0f:0b:02:08:e6:0b:13:b2:3f:b7: 46:01:d1:cd:a2:1b:f7:09:fa:3c:41:87:4c:8b:29:2b:a1:2b: df:4b:43:e5:3e:3e:90:0e:6a:f0:e4:58:3f:63:83:d4:7b:58: 6d:e4:8e:7b:37:c0:c2:0e:2e:34:a7:26:82:cd:27:ca:fa:a2: 0d:5e:e4:32:c8:fa:d2:d7:7d:b8:7d:db:d4:e3:39:e1:f6:54: 1f:82:25:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1NTMxMTAvBgNVBAUTKEJCODk3MDQ1QTg4RkM4MUZDQ0ZFMzhFNUY3NjE1ODRG RENCQUNFODUwHhcNMjUwNjE1MDEwMjUwWhcNMjUwNjIyMDEwMjUwWjAYMRYwFAYD VQQDEw02ODRlMWJiYS04MmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0ARk5DvawXGfr4yH1BVmQymj0sOD1TxXcS1oEZQMV4DpdAhpUdPkzm0ojP6 3VVzuSCJWBNlnHzWT+6XIZZHqTn7+u0J+/Ai+x7OYVEDktf+iGi4bZStCF32tH01 +v2qsOgCsBguzXyL2t+QEBTlogpcZFtthammTuspKaI+xfaid+YbwJPCyAJ8pqtA lP9s46part00D4dGgRNZfAD6spHypd4XGq0g1mjCVMAAL3GveM0wayoqx3Fq4SuA /Il6jzShnQsH2clkTgWFWiD7hf68JEhADQsxRzXTmdXCPW4/K0JK6D4l1+ZVEI52 wg84dEkOfrqbcTwZF4/pTcSoKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/RyBnc zai2YessXnqDnTfqncaoMB8GA1UdIwQYMBaAFLuJcEWoj8gfzP445fdhWE/cus6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU1My8xNjRBQkVDNEVC MEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlCX01fampsOTJGWVQ5eTZ6 b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U0bHdSYWlQeUJfTV9qamw5MkZZVDl5NnpvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU1My8xNjRBQkVDNEVCMEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlC X01fampsOTJGWVQ5eTZ6b1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAMnvl7gE8BkVRvbvOsOZK7xRtEd2A+3s+ApruzyRXV+Q+fWZ0wQY1 +tNhav9RkmUq6SByH8ptqwLcaOaHose7QgiAzSD5RVvW/EH6ueeXG+oUvZI5Zvs+ 2vsABvoclkuy8SHCI1vtL3WOicQNOQNciS0cHSydDfUMCb+kEc+3u5wX3UPS59Nl hCmxxDPoIeJjmDbKRx8y4ccRxh/ZuX50QMRG8dQsu2wG4g8LAgjmCxOyP7dGAdHN ohv3Cfo8QYdMiykroSvfS0PlPj6QDmrw5Fg/Y4PUe1ht5I57N8DCDi40pyaCzSfK +qINXuQyyPrS1324fdvU4znh9lQfgiUl -----END CERTIFICATE-----Generated at Sun Jun 15 08:38:29 2025 by rpki-client