$ rpki-client -vvf rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft File: UhRr8Q81lfF6kjn1NmTdbAE-L58.mft (raw, json) Hash identifier: Thipy4d4Qjxi7tf+nMCRgs9o8diRe5RiyGCWxIRD9Zk= Subject key identifier: 05:39:C7:5F:E1:FC:48:0F:53:3A:48:E2:CE:A9:C5:B6:F9:09:9D:AE Authority key identifier: 52:14:6B:F1:0F:35:95:F1:7A:92:39:F5:36:64:DD:6C:01:3E:2F:9F Certificate issuer: /CN=A912B8A1/serialNumber=52146BF10F3595F17A9239F53664DD6C013E2F9F Certificate serial: 02FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft Manifest number: 02FB Signing time: Fri 13 Jun 2025 00:48:17 +0000 Manifest this update: Fri 13 Jun 2025 00:48:17 +0000 Manifest next update: Fri 20 Jun 2025 00:48:17 +0000 Files and hashes: 1: UhRr8Q81lfF6kjn1NmTdbAE-L58.crl (hash: G4vp6ZtAMvigoQla/3Jj8FZvPk1fTphE/yPSf4SfPN4=) 2: 1A922B26DCD711EC87E30728C4F9AE02.roa (hash: XEGSj7dQ6VTCZmneur6OMrLP6cXWkey7miJkuempT94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.crl rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 767 (0x2ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B8A1, serialNumber=52146BF10F3595F17A9239F53664DD6C013E2F9F Validity Not Before: Jun 13 00:48:17 2025 GMT Not After : Jun 20 00:48:17 2025 GMT Subject: CN=684b7551-6226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:39:81:77:79:74:69:9f:c3:41:c4:6f:4a:ce: d8:9e:4c:2d:b6:f3:da:ff:63:71:1e:e0:a8:2e:aa: f8:3c:0f:2c:32:60:8d:ed:e8:a7:6d:d9:a5:92:2d: 8a:ad:11:95:e9:28:13:09:1b:a3:7b:f2:bb:77:5e: d6:50:9d:34:6b:1d:d1:35:81:56:4f:bc:32:ce:53: 68:a2:e1:b1:e6:4b:cd:9a:08:f2:a0:1e:a6:5f:52: 39:a7:b1:36:da:c9:c8:ac:c7:61:ef:34:80:e1:fc: 0e:ef:b7:ff:10:12:44:ec:9b:cf:a3:02:59:b8:f5: e5:38:69:84:3e:26:9c:43:c7:4e:05:26:7a:e9:e6: df:d7:3a:4c:9c:77:3e:89:44:dc:24:3c:89:75:d8: 33:4c:50:0e:bb:e3:91:16:9f:92:cf:fc:3f:cd:69: 52:0b:d4:46:71:a3:e5:06:5c:da:e2:5a:48:f3:2f: b7:c0:1e:c6:2a:90:27:3c:56:22:ec:36:63:4b:94: 88:8c:90:1e:99:97:2c:08:23:aa:fa:53:98:86:de: 64:95:39:bf:47:30:3a:da:57:53:67:c3:86:94:82: 65:f2:c0:a0:c6:bf:b9:f0:50:5a:8d:82:d5:6d:6b: ce:d4:83:11:fc:ad:ea:37:e9:e2:67:e7:9e:1a:be: cb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:39:C7:5F:E1:FC:48:0F:53:3A:48:E2:CE:A9:C5:B6:F9:09:9D:AE X509v3 Authority Key Identifier: keyid:52:14:6B:F1:0F:35:95:F1:7A:92:39:F5:36:64:DD:6C:01:3E:2F:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:e7:17:ca:0f:f4:8a:77:b6:df:32:df:76:37:24:ec:c0:c5: 41:d1:b6:37:9e:07:40:11:c6:d3:ba:74:b7:46:8f:7c:22:f9: f9:50:d6:50:0d:5b:90:6d:c7:85:d8:2c:ed:77:ca:25:c5:a1: 6e:3a:22:75:bc:c0:d6:87:41:b5:79:e5:f3:5f:f5:d6:ed:22: c0:61:ff:66:e3:89:e0:00:e0:a0:ff:4c:7f:e1:33:3a:89:cb: b6:4b:6e:98:4b:a8:37:b4:f9:75:7f:0e:e1:a6:9d:f2:0f:54: d0:c0:b4:bb:50:4b:eb:89:8e:22:49:01:0d:d2:86:be:3a:ce: 98:65:0d:ff:89:21:31:75:00:19:ac:0d:54:a7:4c:95:1a:72: a9:7e:87:0b:b8:01:22:1c:e6:fb:12:9d:36:6d:4e:0d:17:3b: 43:1d:ce:99:da:b3:12:2a:88:dc:26:7e:89:9a:76:57:c8:9f: ab:fa:56:a7:d2:4c:91:79:b6:70:97:3c:c6:fa:b2:62:05:ff: 86:de:3b:5b:26:99:23:c1:a6:d4:c2:87:8b:99:c1:b3:83:29: ea:dd:04:eb:84:b1:db:d7:98:fb:b5:87:fd:ed:38:61:44:b1: 5e:ac:f3:70:18:f4:91:35:30:86:e3:d5:42:31:73:4d:86:68: d7:f4:6d:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI4QTExMTAvBgNVBAUTKDUyMTQ2QkYxMEYzNTk1RjE3QTkyMzlGNTM2NjRERDZD MDEzRTJGOUYwHhcNMjUwNjEzMDA0ODE3WhcNMjUwNjIwMDA0ODE3WjAYMRYwFAYD VQQDEw02ODRiNzU1MS02MjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DmBd3l0aZ/DQcRvSs7YnkwttvPa/2NxHuCoLqr4PA8sMmCN7einbdmlki2K rRGV6SgTCRuje/K7d17WUJ00ax3RNYFWT7wyzlNoouGx5kvNmgjyoB6mX1I5p7E2 2snIrMdh7zSA4fwO77f/EBJE7JvPowJZuPXlOGmEPiacQ8dOBSZ66ebf1zpMnHc+ iUTcJDyJddgzTFAOu+ORFp+Sz/w/zWlSC9RGcaPlBlza4lpI8y+3wB7GKpAnPFYi 7DZjS5SIjJAemZcsCCOq+lOYht5klTm/RzA62ldTZ8OGlIJl8sCgxr+58FBajYLV bWvO1IMR/K3qN+niZ+eeGr7LvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAU5x1/h /EgPUzpI4s6pxbb5CZ2uMB8GA1UdIwQYMBaAFFIUa/EPNZXxepI59TZk3WwBPi+f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjhBMS9BMTExOUNBMERD RDExMUVDQkE2NkQ2MzdDNEY5QUUwMi9VaFJyOFE4MWxmRjZram4xTm1UZGJBRS1M NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VoUnI4UTgxbGZGNmtqbjFObVRkYkFFLUw1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjhBMS9BMTExOUNBMERDRDExMUVDQkE2NkQ2MzdDNEY5QUUwMi9VaFJyOFE4MWxm RjZram4xTm1UZGJBRS1MNTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ5xfKD/SKd7bfMt92NyTswMVB0bY3ngdAEcbTunS3Ro98Ivn5UNZQ DVuQbceF2Cztd8olxaFuOiJ1vMDWh0G1eeXzX/XW7SLAYf9m44ngAOCg/0x/4TM6 icu2S26YS6g3tPl1fw7hpp3yD1TQwLS7UEvriY4iSQEN0oa+Os6YZQ3/iSExdQAZ rA1Up0yVGnKpfocLuAEiHOb7Ep02bU4NFztDHc6Z2rMSKojcJn6JmnZXyJ+r+lan 0kyRebZwlzzG+rJiBf+G3jtbJpkjwabUwoeLmcGzgynq3QTrhLHb15j7tYf97Thh RLFerPNwGPSRNTCG49VCMXNNhmjX9G0v -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:44 2025 by rpki-client