$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft File: UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft (raw, json) Hash identifier: DlOu7Hd3TYXTg+eKZERYCJpUGsfoP7odAxJZiQ8pFUc= Subject key identifier: DB:C8:B7:42:03:6F:D0:7C:BC:A2:BC:88:0D:DA:19:71:F4:27:7E:7B Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F Certificate issuer: /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F Certificate serial: 3086 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft Manifest number: 3078 Signing time: Fri 20 Jun 2025 15:28:31 +0000 Manifest this update: Fri 20 Jun 2025 15:28:30 +0000 Manifest next update: Fri 27 Jun 2025 15:28:30 +0000 Files and hashes: 1: UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl (hash: hrfj3JNV8yYJdZ0sqPg6MIYvEFjdliFGhun05/D68Is=) 2: E5DB5238DFBD11EC8E203126C4F9AE02.roa (hash: 8yPXIp2srpOMXwXrVDBAhf+m6VYRXr2aEaNExsEirN4=) 3: B8B02658C16B11EEA7D01A7DC4F9AE02.roa (hash: WamiUU84cAcc5WGx4lslvANbP3TtO/lIaFT/y7zUmEY=) 4: 446A425EA6BB11ED9D458785C4F9AE02.roa (hash: WhKdctnJM8x/P3lLuqtSYgwShQQZa8r7EVnRQb0csbo=) 5: 43DADDD0A6BB11ED9D458785C4F9AE02.roa (hash: T37Xr3jND0OgDmWZSLZeRiJ8MSQ6+oBhyzh33K0Hddg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 15:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12422 (0x3086) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F Validity Not Before: Jun 20 15:28:30 2025 GMT Not After : Jun 27 15:28:30 2025 GMT Subject: CN=68557e1e-e3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0b:c0:c9:ff:d9:92:28:43:82:01:d2:d1:07: 81:85:bf:60:21:3f:f4:5d:46:66:e1:83:9a:0e:3d: e0:63:78:65:56:96:51:c4:20:a3:93:6a:0a:3c:d8: be:fb:10:ed:db:6b:99:d2:db:bd:53:7e:05:c5:46: e7:57:a3:ad:29:2b:1f:db:e1:4f:52:a5:2a:19:ae: 94:a2:f4:7b:fb:2a:26:b4:87:97:de:89:ba:3b:8f: a0:c6:e7:96:36:6c:e8:30:9e:c1:3a:32:7a:55:a3: e2:e1:0e:d6:e2:bb:2a:1d:a6:36:2a:78:35:7e:0a: db:b3:43:7f:b3:69:32:4d:26:f4:d0:c0:ed:6d:1e: 45:74:21:e4:c2:98:c3:6a:14:93:20:5e:18:10:ca: 4e:1b:cc:2c:de:1c:86:76:92:25:8b:85:3c:44:c8: 54:4d:63:5a:9e:7f:05:df:3c:27:7b:90:df:33:27: 8e:0d:dd:a6:22:20:a4:02:0c:85:9c:1a:a4:89:1d: f2:0b:b9:24:ae:70:cc:14:b0:d6:00:49:36:59:b3: ef:5c:58:3f:b4:ed:f8:a5:a9:74:09:e4:9c:97:73: 17:dd:26:dc:0e:6c:9e:25:f2:26:29:81:ff:35:2f: 7a:e4:46:00:ec:f1:b2:72:04:43:05:f5:d8:72:4e: ea:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C8:B7:42:03:6F:D0:7C:BC:A2:BC:88:0D:DA:19:71:F4:27:7E:7B X509v3 Authority Key Identifier: keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:46:51:ec:d7:90:76:48:f7:de:24:93:d5:43:45:43:6b:ae: 15:6c:a9:c8:55:8e:c6:01:d7:76:f6:34:4c:34:60:6b:09:de: d4:89:20:02:52:26:82:29:19:41:a5:34:54:2d:d4:7f:05:57: af:96:ba:2d:8d:19:eb:67:68:c2:60:78:28:52:a9:38:4c:1d: 7b:43:ee:1e:43:ca:10:a8:51:75:cd:9c:ac:dd:3e:e4:7c:d6: 83:1e:d2:bd:57:a1:f9:ad:c3:4c:9a:59:f9:49:8c:89:b0:35: bc:9b:a4:ed:ca:b2:38:ef:aa:65:bf:66:7e:43:d9:9a:33:fc: eb:36:54:e6:e0:e4:27:3e:22:52:f7:e3:62:c5:d9:4f:d9:eb: b7:ee:bf:de:09:69:83:39:b7:2a:40:34:b1:f4:87:f5:f0:4e: 27:cf:b4:ec:4a:e1:61:13:5b:3a:18:4a:4f:d9:5b:76:41:db: 28:b9:f6:43:af:51:ce:e7:4a:02:62:50:9b:6c:c9:01:12:e6: fc:b2:5c:f3:68:30:ff:07:2c:61:0a:bd:f0:0a:99:00:c0:8c: 62:96:5c:e6:12:02:c1:49:7d:aa:d2:79:21:8d:1c:c1:28:ce: b3:2e:17:aa:26:0a:11:fa:d5:e2:e3:56:2d:83:63:ff:ae:b8: 93:52:54:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IxREExMTAvBgNVBAUTKDUwRTY2ODNBNkFGNDY0NEI2OEExMUMyMkRBN0YzQTY1 QjMxMkMwNkYwHhcNMjUwNjIwMTUyODMwWhcNMjUwNjI3MTUyODMwWjAYMRYwFAYD VQQDEw02ODU1N2UxZS1lM2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AvAyf/ZkihDggHS0QeBhb9gIT/0XUZm4YOaDj3gY3hlVpZRxCCjk2oKPNi+ +xDt22uZ0tu9U34FxUbnV6OtKSsf2+FPUqUqGa6UovR7+yomtIeX3om6O4+gxueW NmzoMJ7BOjJ6VaPi4Q7W4rsqHaY2Kng1fgrbs0N/s2kyTSb00MDtbR5FdCHkwpjD ahSTIF4YEMpOG8ws3hyGdpIli4U8RMhUTWNann8F3zwne5DfMyeODd2mIiCkAgyF nBqkiR3yC7kkrnDMFLDWAEk2WbPvXFg/tO34pal0CeScl3MX3SbcDmyeJfImKYH/ NS965EYA7PGycgRDBfXYck7qeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvIt0ID b9B8vKK8iA3aGXH0J357MB8GA1UdIwQYMBaAFFDmaDpq9GRLaKEcItp/OmWzEsBv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS8xNEI3NkJDOEVE MEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpFdG9vUndpMm44NlpiTVN3 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPWm9PbXIwWkV0b29Sd2kybjg2WmJNU3dHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjFEQS8xNEI3NkJDOEVEMEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpF dG9vUndpMm44NlpiTVN3RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBRlHs15B2SPfeJJPVQ0VDa64VbKnIVY7GAdd29jRMNGBrCd7UiSAC UiaCKRlBpTRULdR/BVevlrotjRnrZ2jCYHgoUqk4TB17Q+4eQ8oQqFF1zZys3T7k fNaDHtK9V6H5rcNMmln5SYyJsDW8m6TtyrI476plv2Z+Q9maM/zrNlTm4OQnPiJS 9+NixdlP2eu37r/eCWmDObcqQDSx9If18E4nz7TsSuFhE1s6GEpP2Vt2QdsoufZD r1HO50oCYlCbbMkBEub8slzzaDD/ByxhCr3wCpkAwIxillzmEgLBSX2q0nkhjRzB KM6zLheqJgoR+tXi41Ytg2P/rriTUlSb -----END CERTIFICATE-----Generated at Fri Jun 20 18:58:21 2025 by rpki-client