$ rpki-client -vvf rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft File: Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft (raw, json) Hash identifier: D5rsMjmP2AWgEES/1QddN+4CO1VIz4ReYPyXtswgTNk= Subject key identifier: 5C:2F:25:8E:E2:97:04:C0:46:91:6D:81:C8:52:28:F1:14:1D:6F:45 Authority key identifier: 52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E Certificate issuer: /CN=A913CDC4/serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft Manifest number: 01DC Signing time: Tue 17 Jun 2025 01:59:14 +0000 Manifest this update: Tue 17 Jun 2025 01:59:13 +0000 Manifest next update: Tue 24 Jun 2025 01:59:13 +0000 Files and hashes: 1: Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl (hash: ohP/Fm8bTQF4Ct76/KfVxTSwGehP0BwqtSCuX4tPs0k=) 2: 2F38972E672B11EEBA84E00CC4F9AE02.roa (hash: F2m4EZaWhb+L+raUozQ7KqaAu1awnSWg4wSyn9tXN5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CDC4, serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E Validity Not Before: Jun 17 01:59:13 2025 GMT Not After : Jun 24 01:59:13 2025 GMT Subject: CN=6850cbf1-4a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4d:e2:78:22:f7:5b:7c:a7:81:0b:66:4e:b4: 55:b0:12:65:cf:4d:80:61:e9:31:aa:67:74:c4:50: b7:72:21:52:be:b3:fb:c6:71:31:65:e4:5b:2b:56: 47:ab:2f:26:27:02:7a:7d:58:15:57:e7:22:99:a2: 80:ba:7f:57:ed:52:f0:8c:48:cd:90:3f:c3:8b:c6: cc:d8:ae:36:ee:c6:32:19:c6:22:bc:b4:36:cd:f9: 24:51:72:73:99:b1:44:14:0f:2e:89:d1:1b:74:95: 46:8d:47:1b:6b:72:fb:e9:39:94:69:0b:ab:82:d0: 49:12:99:bc:71:d7:da:c0:e0:2c:eb:0c:15:35:c5: 60:fe:24:e3:e8:be:56:34:77:25:4f:9a:75:a4:26: 5c:db:59:08:b1:de:8b:8b:52:b0:32:27:b7:92:9e: df:d6:c4:14:b6:e4:93:75:b7:f3:dc:90:d1:8f:db: e2:84:4d:c9:22:f5:99:30:ae:4b:50:9b:7c:a1:a6: c6:85:b3:1f:0f:0b:f8:1a:d5:d4:32:9c:e0:49:e4: 2c:04:23:9c:d5:76:c0:d8:64:30:0f:be:8d:41:2d: 4a:ed:85:3d:a4:b6:3b:e2:d2:d4:b1:c8:d6:cf:91: 98:82:bb:bf:d5:36:09:be:df:77:a8:48:4e:cc:ab: dd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2F:25:8E:E2:97:04:C0:46:91:6D:81:C8:52:28:F1:14:1D:6F:45 X509v3 Authority Key Identifier: keyid:52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:42:f5:9c:ac:44:33:4d:7f:54:14:5c:e3:75:8b:d6:de:4d: 18:2f:56:73:0b:a6:d7:09:39:6d:84:b1:e3:58:b6:b2:54:b1: 5c:60:f2:53:1f:b1:c4:d2:13:b6:38:20:66:4a:ae:d4:38:39: f4:58:ef:15:b2:83:05:0e:00:2b:33:4c:e6:62:2f:f9:45:28: c0:c0:8f:de:57:ec:41:97:a1:2d:50:d6:9c:1f:4b:39:54:8f: d7:e4:b8:ea:63:47:9e:dc:38:4e:b2:d9:e9:0e:f8:14:c7:be: 57:2f:4f:b9:b5:d2:a1:1a:ee:b6:45:a8:58:1b:e4:87:2c:25: 5d:15:9d:02:4c:0b:be:c9:90:1f:5b:31:b4:c7:c8:b2:ea:e9: dd:96:62:31:6e:0b:31:12:0e:cf:76:10:de:07:48:9b:e0:49: 70:84:89:38:02:c7:1e:5f:0a:a9:96:c6:13:13:79:f1:63:1e: 60:d8:d4:24:e8:f8:df:46:72:3b:32:1d:e7:81:62:68:68:fa: a7:a2:cc:1f:38:d8:6d:c0:b2:78:c4:4f:f1:57:d5:84:9d:e0: 85:f5:fd:e9:6b:3c:e2:16:d3:ae:6b:40:d1:9c:e8:d0:51:53: 9a:7c:2c:e3:c7:4e:8d:e7:c7:5b:d4:98:43:01:dc:50:39:07: cf:4d:f0:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NEQzQxMTAvBgNVBAUTKDUyOEY2RUNFMDgyQkVCM0REMEE2NkQ5MTQ3M0ZDQzY1 NjlDRDVGNEUwHhcNMjUwNjE3MDE1OTEzWhcNMjUwNjI0MDE1OTEzWjAYMRYwFAYD VQQDEw02ODUwY2JmMS00YTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy03ieCL3W3yngQtmTrRVsBJlz02AYekxqmd0xFC3ciFSvrP7xnExZeRbK1ZH qy8mJwJ6fVgVV+cimaKAun9X7VLwjEjNkD/Di8bM2K427sYyGcYivLQ2zfkkUXJz mbFEFA8uidEbdJVGjUcba3L76TmUaQurgtBJEpm8cdfawOAs6wwVNcVg/iTj6L5W NHclT5p1pCZc21kIsd6Li1KwMie3kp7f1sQUtuSTdbfz3JDRj9vihE3JIvWZMK5L UJt8oabGhbMfDwv4GtXUMpzgSeQsBCOc1XbA2GQwD76NQS1K7YU9pLY74tLUscjW z5GYgru/1TYJvt93qEhOzKvdXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwvJY7i lwTARpFtgchSKPEUHW9FMB8GA1UdIwQYMBaAFFKPbs4IK+s90KZtkUc/zGVpzV9O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0RDNC9GODQ4NUY2Njgw Q0ExMUVEODVEQTkxM0RDNEY5QUUwMi9Vbzl1emdncjZ6M1FwbTJSUnpfTVpXbk5Y MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvOXV6Z2dyNnozUXBtMlJSel9NWlduTlgwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0RDNC9GODQ4NUY2NjgwQ0ExMUVEODVEQTkxM0RDNEY5QUUwMi9Vbzl1emdncjZ6 M1FwbTJSUnpfTVpXbk5YMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6QvWcrEQzTX9UFFzjdYvW3k0YL1ZzC6bXCTlthLHjWLayVLFcYPJT H7HE0hO2OCBmSq7UODn0WO8VsoMFDgArM0zmYi/5RSjAwI/eV+xBl6EtUNacH0s5 VI/X5LjqY0ee3DhOstnpDvgUx75XL0+5tdKhGu62RahYG+SHLCVdFZ0CTAu+yZAf WzG0x8iy6undlmIxbgsxEg7PdhDeB0ib4ElwhIk4AsceXwqplsYTE3nxYx5g2NQk 6PjfRnI7Mh3ngWJoaPqnoswfONhtwLJ4xE/xV9WEneCF9f3pazziFtOua0DRnOjQ UVOafCzjx06N58db1JhDAdxQOQfPTfB1 -----END CERTIFICATE-----Generated at Wed Jun 18 23:41:57 2025 by rpki-client