$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft File: UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json) Hash identifier: gBoLBl72PwRv1gedWFvFNd5AOYZE52vEzGYBrJ5lkXE= Subject key identifier: 69:01:B3:19:55:17:8D:A0:4A:2B:4E:AF:78:2E:29:40:E9:8F:F6:48 Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 Certificate issuer: /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Certificate serial: 0A55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft Manifest number: 0A4F Signing time: Thu 12 Jun 2025 19:29:57 +0000 Manifest this update: Thu 12 Jun 2025 19:29:57 +0000 Manifest next update: Thu 19 Jun 2025 19:29:57 +0000 Files and hashes: 1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: T+9cxyOSBrQxamfm5Ltqp1lI7K6hLv/KZq5BROgQmgU=) 2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: nyOJoLIDGp7/wafl1yH4CbKrruUiB3iOpUkQ72n7ZjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2645 (0xa55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149DF2, serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Validity Not Before: Jun 12 19:29:57 2025 GMT Not After : Jun 19 19:29:57 2025 GMT Subject: CN=684b2ab5-bb31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:91:aa:44:66:91:d4:4a:cc:75:db:63:1c:ea: 73:ac:27:c4:0f:9c:09:7d:4b:15:5f:37:1f:8e:73: 7f:f6:c6:bd:70:53:fd:00:59:9e:ef:6a:6c:a5:a2: 47:d2:ce:f8:af:89:86:cd:c2:44:bc:71:b3:34:ae: 5b:ad:36:62:52:5b:ea:5e:32:8d:b9:0e:cf:85:65: d9:b6:09:21:4d:93:24:9d:27:a5:a8:97:4d:a3:6e: 8b:06:3a:56:0f:f2:a3:80:dd:16:0d:ca:3e:29:98: 30:62:40:6b:4f:52:16:30:01:97:95:c7:21:75:c1: 29:83:16:b1:ea:06:95:0f:a6:47:eb:bc:ca:24:41: 90:48:b4:7e:b2:1a:5f:dd:81:64:f8:05:2d:31:21: 1b:63:84:89:e8:d2:01:57:33:b8:86:62:81:cf:88: f0:1f:23:45:28:80:e6:81:3a:75:65:b5:b2:db:b4: ac:cf:3b:2d:60:69:d7:e6:0a:02:d0:08:ba:05:be: 79:f6:5b:76:f3:6b:5a:32:4e:fb:a2:f5:49:30:21: 68:ea:a6:60:ee:66:3b:53:fa:48:1f:dd:cc:59:29: cf:07:77:c2:57:52:08:58:45:cb:60:88:f3:64:81: 89:c5:bc:50:af:51:29:bc:aa:12:fb:8b:27:3a:8a: bc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:01:B3:19:55:17:8D:A0:4A:2B:4E:AF:78:2E:29:40:E9:8F:F6:48 X509v3 Authority Key Identifier: keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:20:70:92:89:eb:2b:d2:00:a9:81:fb:92:27:61:7b:4a:9b: 7f:b3:ff:63:96:c6:d4:c8:ff:b0:0d:75:e2:d0:57:34:63:a4: 56:1c:54:2b:f3:0a:95:57:01:24:83:37:ba:5c:91:89:f7:ac: bc:3e:fe:5d:df:fe:54:17:5a:4d:9f:53:49:2d:3f:d1:9d:71: 69:dd:d9:99:94:aa:12:1b:13:71:01:fe:c1:2c:2f:14:22:58: a0:9d:0c:e4:46:1b:31:3a:9e:08:83:4a:57:e3:f8:fd:fd:75: e0:3c:9a:59:c7:49:4c:7b:a1:79:f6:b0:e8:d4:9f:39:92:fe: 02:af:01:ef:db:06:3d:26:26:04:b3:33:bc:d6:8b:c0:fd:cf: ac:6e:91:10:77:ab:14:d0:98:89:d2:fa:fd:01:52:36:e9:4f: 60:23:1c:53:0d:7f:39:f8:7c:fb:2b:8b:7e:de:c8:84:14:b5: b8:80:d4:6f:e2:69:e6:9b:ac:22:00:db:5d:2b:a1:11:4c:2c: 5a:7a:f5:f6:a9:32:68:43:61:cb:eb:f9:d3:e8:02:1c:95:d5: 7e:3b:bc:35:45:a1:37:84:6b:0c:93:fa:4c:2d:d9:bd:84:53: 32:f9:81:8e:41:9f:2f:90:4d:20:88:9d:4e:af:f3:de:a5:00: 22:73:35:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlERjIxMTAvBgNVBAUTKDUwRUZFMURGNzI5MTVFRDMzNjFEQjU1OUI1QjZCODNF QUUzRUYzQzAwHhcNMjUwNjEyMTkyOTU3WhcNMjUwNjE5MTkyOTU3WjAYMRYwFAYD VQQDEw02ODRiMmFiNS1iYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZGqRGaR1ErMddtjHOpzrCfED5wJfUsVXzcfjnN/9sa9cFP9AFme72pspaJH 0s74r4mGzcJEvHGzNK5brTZiUlvqXjKNuQ7PhWXZtgkhTZMknSelqJdNo26LBjpW D/KjgN0WDco+KZgwYkBrT1IWMAGXlcchdcEpgxax6gaVD6ZH67zKJEGQSLR+shpf 3YFk+AUtMSEbY4SJ6NIBVzO4hmKBz4jwHyNFKIDmgTp1ZbWy27SszzstYGnX5goC 0Ai6Bb559lt282taMk77ovVJMCFo6qZg7mY7U/pIH93MWSnPB3fCV1IIWEXLYIjz ZIGJxbxQr1EpvKoS+4snOoq8XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkBsxlV F42gSitOr3guKUDpj/ZIMB8GA1UdIwQYMBaAFFDv4d9ykV7TNh21WbW2uD6uPvPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OURGMi85OTk4RjFDNDY3 OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0TTJIYlZadGJhNFBxNC04 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPX2gzM0tSWHRNMkhiVlp0YmE0UHE0LTg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OURGMi85OTk4RjFDNDY3OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0 TTJIYlZadGJhNFBxNC04OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtIHCSiesr0gCpgfuSJ2F7Spt/s/9jlsbUyP+wDXXi0Fc0Y6RWHFQr 8wqVVwEkgze6XJGJ96y8Pv5d3/5UF1pNn1NJLT/RnXFp3dmZlKoSGxNxAf7BLC8U IlignQzkRhsxOp4Ig0pX4/j9/XXgPJpZx0lMe6F59rDo1J85kv4CrwHv2wY9JiYE szO81ovA/c+sbpEQd6sU0JiJ0vr9AVI26U9gIxxTDX85+Hz7K4t+3siEFLW4gNRv 4mnmm6wiANtdK6ERTCxaevX2qTJoQ2HL6/nT6AIcldV+O7w1RaE3hGsMk/pMLdm9 hFMy+YGOQZ8vkE0giJ1Or/PepQAiczWe -----END CERTIFICATE-----Generated at Sat Jun 14 18:15:57 2025 by rpki-client