$ rpki-client -vvf rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft File: UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft (raw, json) Hash identifier: 59VbzcQnOg1A+H8WEKpXO4rXUXwmuTk9wfoFrUHzguQ= Subject key identifier: 30:B3:3C:AF:11:1C:41:1F:0A:88:0D:6C:B2:45:7C:CD:94:73:FD:3E Authority key identifier: 51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2 Certificate issuer: /CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft Manifest number: B8 Signing time: Sun 15 Jun 2025 05:04:02 +0000 Manifest this update: Sun 15 Jun 2025 05:04:01 +0000 Manifest next update: Sun 22 Jun 2025 05:04:01 +0000 Files and hashes: 1: UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl (hash: rwzPxVDqBs+p+oc23LbIcosNGtGhcCsMjiZ0aKSbEtE=) 2: 8B584EC2337D11EF9D71B72DC4F9AE02.roa (hash: yZ1LidZrlFrNTxapIhIsCTEZZK7lTYC0s/4RKHkPEsg=) 3: AE977DF8337E11EFB3CCD72FC4F9AE02.roa (hash: OJdZE6RjgM3Hz2T07Mg2BJv0nC0BL01Q/08oABlyEMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139A90, serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2 Validity Not Before: Jun 15 05:04:01 2025 GMT Not After : Jun 22 05:04:01 2025 GMT Subject: CN=684e5441-86ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5a:97:c9:bf:ca:ef:25:eb:3a:63:8a:f8:aa: 86:5a:a0:4c:11:c6:f4:53:b7:31:93:01:71:5a:47: 8b:2f:a5:e4:5d:ed:1a:c4:25:f4:e3:23:69:67:2f: 84:80:10:07:70:19:c3:3e:c5:e8:35:4b:45:17:46: 93:99:7e:2b:f1:78:a3:a9:fd:d8:84:b8:fe:56:69: d1:51:6f:ac:65:d8:43:73:aa:d3:2f:9a:57:62:dc: 30:78:a8:8a:24:03:85:2d:6a:87:5c:d5:9e:d3:e2: d0:f9:55:05:57:cc:d3:aa:08:7b:84:08:53:b6:a7: 87:5b:3c:cf:74:dc:cf:81:58:18:ea:f6:f1:ef:00: a5:a1:9b:b5:4e:61:aa:18:3a:e3:02:b3:67:f3:86: 4e:c5:9d:5f:0d:46:7c:16:57:b4:ed:f3:90:93:72: 9d:0b:12:b6:39:9e:a3:1d:20:31:e8:db:51:0d:26: 51:03:04:06:4e:05:f0:e6:12:eb:c8:c5:94:55:9f: fd:3d:9a:e6:d9:ea:b1:02:38:9a:29:c2:49:74:bf: 98:1a:8a:39:e8:e4:09:c3:e7:07:0e:db:5a:ba:3d: b2:a9:25:49:81:4f:16:38:5f:e8:e0:1e:c6:55:12: 58:94:0e:df:80:89:e0:79:86:a0:7b:a6:98:24:24: 9e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B3:3C:AF:11:1C:41:1F:0A:88:0D:6C:B2:45:7C:CD:94:73:FD:3E X509v3 Authority Key Identifier: keyid:51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:02:8a:05:f7:22:e9:98:3f:d0:ee:93:4a:b6:2c:26:30:c5: 2f:1b:91:7a:d0:48:78:47:60:9f:ae:f8:5f:20:5a:dc:95:f7: 54:27:38:04:85:35:bf:23:d3:93:21:42:69:a6:28:86:79:ce: eb:78:e6:4b:62:bd:7e:a3:4d:89:9e:e8:79:db:7c:6c:fd:63: 96:06:91:73:c8:33:e5:bd:2b:49:6c:94:74:41:25:27:54:cc: f9:04:16:aa:64:89:ee:53:c6:9b:a9:d8:e8:97:a8:85:0b:5a: 5c:f4:54:cc:14:31:d8:2b:36:0d:74:3f:e6:b6:05:ef:f5:3e: bd:34:01:da:1b:b1:66:11:71:13:04:46:26:25:71:18:74:f3: 81:b2:73:f3:e9:20:73:e2:2a:3b:23:d8:e5:9e:b3:49:0d:43: 29:2b:9a:1b:1c:5c:f2:ba:12:10:e7:54:ba:74:16:93:8b:68: ba:37:ab:a2:33:76:e7:3d:5d:66:7d:f9:62:58:ea:a5:4f:f7: 5d:99:25:7d:d0:cf:76:04:e6:83:7a:5f:6e:eb:4b:89:c8:5a: 60:a4:58:2d:c6:46:c6:41:da:59:bb:57:bf:e9:cf:29:13:91: 9a:11:46:dc:7e:8c:a9:f7:87:38:25:be:93:7c:63:88:d6:14: 77:da:51:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlBOTAxMTAvBgNVBAUTKDUxODkyQkU1QjBCNEFCQzYwMjU0NDVGNDAzOUZDNzk1 RDhCQTU4RTIwHhcNMjUwNjE1MDUwNDAxWhcNMjUwNjIyMDUwNDAxWjAYMRYwFAYD VQQDEw02ODRlNTQ0MS04NmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FqXyb/K7yXrOmOK+KqGWqBMEcb0U7cxkwFxWkeLL6XkXe0axCX04yNpZy+E gBAHcBnDPsXoNUtFF0aTmX4r8Xijqf3YhLj+VmnRUW+sZdhDc6rTL5pXYtwweKiK JAOFLWqHXNWe0+LQ+VUFV8zTqgh7hAhTtqeHWzzPdNzPgVgY6vbx7wCloZu1TmGq GDrjArNn84ZOxZ1fDUZ8Fle07fOQk3KdCxK2OZ6jHSAx6NtRDSZRAwQGTgXw5hLr yMWUVZ/9PZrm2eqxAjiaKcJJdL+YGoo56OQJw+cHDttauj2yqSVJgU8WOF/o4B7G VRJYlA7fgIngeYage6aYJCSe/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCzPK8R HEEfCogNbLJFfM2Uc/0+MB8GA1UdIwQYMBaAFFGJK+WwtKvGAlRF9AOfx5XYulji MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUE5MC8xRkU4NEVEMjMz NzYxMUVGOTkzRTQ2NzNDNEY5QUUwMi9VWWtyNWJDMHE4WUNWRVgwQTVfSGxkaTZX T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VZa3I1YkMwcThZQ1ZFWDBBNV9IbGRpNldPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OUE5MC8xRkU4NEVEMjMzNzYxMUVGOTkzRTQ2NzNDNEY5QUUwMi9VWWtyNWJDMHE4 WUNWRVgwQTVfSGxkaTZXT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTAooF9yLpmD/Q7pNKtiwmMMUvG5F60Eh4R2CfrvhfIFrclfdUJzgE hTW/I9OTIUJppiiGec7reOZLYr1+o02Jnuh523xs/WOWBpFzyDPlvStJbJR0QSUn VMz5BBaqZInuU8abqdjol6iFC1pc9FTMFDHYKzYNdD/mtgXv9T69NAHaG7FmEXET BEYmJXEYdPOBsnPz6SBz4io7I9jlnrNJDUMpK5obHFzyuhIQ51S6dBaTi2i6N6ui M3bnPV1mffliWOqlT/ddmSV90M92BOaDel9u60uJyFpgpFgtxkbGQdpZu1e/6c8p E5GaEUbcfoyp94c4Jb6TfGOI1hR32lGm -----END CERTIFICATE-----Generated at Sun Jun 15 10:05:57 2025 by rpki-client