$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft File: uhYFabkV4kxq5sJIlNBPnUo5FpI.mft (raw, json) Hash identifier: 71rCrwxFVaFOPDNgrUDhKfrM2OPnvDFO3LV5W9hN8B0= Subject key identifier: 11:0E:44:76:E1:36:E6:42:5D:BA:A2:8A:0D:58:07:EF:76:52:F9:43 Authority key identifier: BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92 Certificate issuer: /CN=A912CDCB/serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692 Certificate serial: 04D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft Manifest number: 04D5 Signing time: Thu 12 Jun 2025 23:22:11 +0000 Manifest this update: Thu 12 Jun 2025 23:22:10 +0000 Manifest next update: Thu 19 Jun 2025 23:22:10 +0000 Files and hashes: 1: uhYFabkV4kxq5sJIlNBPnUo5FpI.crl (hash: vI1OCBmaq/AiuPgozFpiMJFUr2hkUBXZ4EShKdKKjG8=) 2: DAF98AAA20F111EC89E7D668C4F9AE02.roa (hash: LH3JZfkASioifJ898UuwmPenAKd90H/13hB5MxOGBgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1241 (0x4d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDCB, serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692 Validity Not Before: Jun 12 23:22:10 2025 GMT Not After : Jun 19 23:22:10 2025 GMT Subject: CN=684b6122-d606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d4:7e:db:4b:76:b8:d2:20:4b:00:0c:de:af: da:6f:e7:db:02:4c:08:0f:d5:24:7c:7b:03:49:df: d5:aa:1f:13:19:d5:73:30:dd:cb:29:ed:91:54:17: 64:d0:70:9a:a7:b5:35:8e:65:34:e2:fe:4a:67:c0: 2d:54:da:b9:df:3f:c7:1f:a4:82:47:c9:ec:65:93: b5:81:75:89:10:0c:7f:f1:43:ad:64:85:fc:0d:70: 1c:11:ba:8a:a7:50:fd:a7:aa:9e:d3:3c:3b:88:74: 71:e3:37:c8:43:c3:9d:91:03:b4:0b:8e:50:8e:3b: e4:8b:5e:fe:af:4b:8a:f3:87:14:30:4c:e9:bf:2f: bb:6a:8d:62:2b:58:40:2b:74:ed:3c:c7:d8:4d:05: 0f:a8:3c:c4:dc:7d:e1:c1:60:0b:62:4d:8b:48:88: 34:07:5a:8d:20:69:f7:d7:7c:fd:2a:cd:08:4b:a2: a3:1c:68:d3:cf:19:ee:a6:32:5b:7d:0c:80:96:45: 8d:b6:6a:e2:3d:15:08:95:c0:d7:71:f0:f0:5e:de: 82:6e:9c:d9:5d:ac:0f:45:99:63:ab:7d:04:b8:4b: 95:9d:31:87:8a:bd:bf:0f:e3:ce:8c:8f:7f:ba:73: 4b:19:93:7a:f5:94:46:93:22:13:0b:a9:ec:8a:bf: 29:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0E:44:76:E1:36:E6:42:5D:BA:A2:8A:0D:58:07:EF:76:52:F9:43 X509v3 Authority Key Identifier: keyid:BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:2d:8d:2d:c0:eb:d5:f1:b3:03:4e:7b:39:01:5f:0c:0b:ce: 13:d0:bb:1f:8b:88:75:5d:88:26:eb:9f:81:9a:77:bc:73:65: 7b:5d:38:8a:28:e2:b6:7c:0a:83:92:d7:b3:2c:db:80:5c:0c: c6:34:7f:c1:9a:27:71:2d:00:cb:b9:40:16:61:cc:95:f8:d2: 99:f9:48:5e:55:56:16:7b:fd:3a:00:40:19:c8:c1:25:a8:4d: 7e:01:5e:8d:02:71:69:f0:1e:75:80:41:66:79:e0:f5:ac:e6: 1c:92:01:be:24:35:fa:b1:d1:3c:1f:88:cb:2a:ef:2c:78:95: 2c:b5:fc:7b:4e:25:56:65:f8:78:bc:2a:75:b3:fb:d2:dc:8c: 25:5a:55:07:14:11:c2:c2:68:88:75:fb:be:0c:76:11:a1:9b: 86:20:78:07:4f:1f:15:8e:c5:c8:c5:aa:76:2b:4a:32:80:15: 24:d0:7f:16:e7:3b:bb:24:32:47:db:b5:50:9a:ad:f0:ff:62: 80:38:ea:17:72:a1:2f:f0:0f:92:e9:68:d9:b4:ea:97:e6:1b: e2:04:44:65:64:73:2a:5d:f7:77:a3:c5:38:22:7c:d0:01:6f: 10:e3:6a:2e:5d:26:4d:67:8a:bf:99:87:e4:b9:f3:a6:f8:00: 00:81:9b:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQ0IxMTAvBgNVBAUTKEJBMTYwNTY5QjkxNUUyNEM2QUU2QzI0ODk0RDA0RjlE NEEzOTE2OTIwHhcNMjUwNjEyMjMyMjEwWhcNMjUwNjE5MjMyMjEwWjAYMRYwFAYD VQQDEw02ODRiNjEyMi1kNjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtR+20t2uNIgSwAM3q/ab+fbAkwID9UkfHsDSd/Vqh8TGdVzMN3LKe2RVBdk 0HCap7U1jmU04v5KZ8AtVNq53z/HH6SCR8nsZZO1gXWJEAx/8UOtZIX8DXAcEbqK p1D9p6qe0zw7iHRx4zfIQ8OdkQO0C45Qjjvki17+r0uK84cUMEzpvy+7ao1iK1hA K3TtPMfYTQUPqDzE3H3hwWALYk2LSIg0B1qNIGn313z9Ks0IS6KjHGjTzxnupjJb fQyAlkWNtmriPRUIlcDXcfDwXt6CbpzZXawPRZljq30EuEuVnTGHir2/D+POjI9/ unNLGZN69ZRGkyITC6nsir8plwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEORHbh NuZCXbqiig1YB+92UvlDMB8GA1UdIwQYMBaAFLoWBWm5FeJMaubCSJTQT51KORaS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDQi84QTgyMDk0NDIw RUMxMUVDOUQ1RDMxM0JDNEY5QUUwMi91aFlGYWJrVjRreHE1c0pJbE5CUG5VbzVG cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VoWUZhYmtWNGt4cTVzSklsTkJQblVvNUZwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDQi84QTgyMDk0NDIwRUMxMUVDOUQ1RDMxM0JDNEY5QUUwMi91aFlGYWJrVjRr eHE1c0pJbE5CUG5VbzVGcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQLY0twOvV8bMDTns5AV8MC84T0Lsfi4h1XYgm65+Bmne8c2V7XTiK KOK2fAqDktezLNuAXAzGNH/BmidxLQDLuUAWYcyV+NKZ+UheVVYWe/06AEAZyMEl qE1+AV6NAnFp8B51gEFmeeD1rOYckgG+JDX6sdE8H4jLKu8seJUstfx7TiVWZfh4 vCp1s/vS3IwlWlUHFBHCwmiIdfu+DHYRoZuGIHgHTx8VjsXIxap2K0oygBUk0H8W 5zu7JDJH27VQmq3w/2KAOOoXcqEv8A+S6WjZtOqX5hviBERlZHMqXfd3o8U4InzQ AW8Q42ouXSZNZ4q/mYfkufOm+AAAgZsa -----END CERTIFICATE-----Generated at Sat Jun 14 19:31:38 2025 by rpki-client