$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft File: uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft (raw, json) Hash identifier: +AwQVh3U8Of0KtdiRrn/LoxZgqVRxOgXyyWTwJooEA8= Subject key identifier: B5:8A:B1:84:21:4B:FC:FE:21:33:48:46:9A:01:E3:75:78:04:5B:64 Authority key identifier: B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36 Certificate issuer: /CN=A915825D/serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft Manifest number: 72 Signing time: Fri 13 Jun 2025 05:50:27 +0000 Manifest this update: Fri 13 Jun 2025 05:50:27 +0000 Manifest next update: Fri 20 Jun 2025 05:50:27 +0000 Files and hashes: 1: uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl (hash: o9p6WecXU6PiZ90wEZgzEnN0aOcDkfgcn+KWJfU1Lhg=) 2: B035E67615D311F09BAD2971C4F9AE02.roa (hash: m6K1ejQzgZZN/JIHhR+mHfBRgRA0KhwEs/admphjKvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915825D, serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636 Validity Not Before: Jun 13 05:50:27 2025 GMT Not After : Jun 20 05:50:27 2025 GMT Subject: CN=684bbc23-72af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:db:5c:ca:ed:9a:a6:52:e4:f3:56:d5:51:80: 48:8c:26:cb:8e:9a:8f:9f:54:bd:56:75:d6:89:da: 07:7a:bc:72:fb:c3:af:6a:61:a7:90:f2:e0:79:30: a5:47:38:f4:28:1b:c3:ad:fa:fb:46:c1:bc:5b:95: e4:1d:69:09:41:b2:6d:4f:fb:87:e8:1b:d8:7d:b9: ca:5d:99:df:7f:63:b0:d2:13:39:30:fc:76:14:11: cf:a6:8e:d7:9b:23:ff:bc:19:6c:0e:88:cd:a0:a7: 5d:0f:b2:53:a4:46:52:be:94:5d:35:78:4b:1a:7f: f0:cf:ed:87:4a:5e:1c:bb:43:3a:ff:cc:b6:e4:8f: 1b:7b:08:81:13:87:81:50:37:ee:f5:73:ef:8c:b0: c6:2a:b0:83:2b:c6:2f:9a:78:eb:a7:f7:f1:6a:87: 8b:4e:d9:54:12:34:b2:cc:86:7e:2f:eb:b0:6a:94: a6:63:71:6c:d1:9c:f2:aa:7a:a3:51:36:05:f3:e8: 26:ca:d1:3b:80:81:fa:37:1f:47:7a:2f:50:4a:99: c6:11:1a:c3:5e:68:94:13:80:66:ff:a4:dc:d8:9e: f0:0e:df:63:88:2e:a1:8b:86:97:44:66:22:26:02: 42:e7:14:87:b3:f9:0d:77:c2:5a:4c:92:38:8d:a3: 7e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8A:B1:84:21:4B:FC:FE:21:33:48:46:9A:01:E3:75:78:04:5B:64 X509v3 Authority Key Identifier: keyid:B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:41:0d:a3:ba:f6:0d:4e:9b:95:37:f6:8e:94:ee:4a:ad:2f: 33:ff:b2:11:8e:28:6f:13:7e:d0:b9:5a:6f:29:a9:87:db:89: 75:0e:4e:18:a2:9f:b7:26:aa:23:9e:90:37:5b:bd:8c:29:c3: 64:a9:30:6c:59:96:ee:9c:6c:ab:dd:1a:f9:3b:f5:fb:5a:8d: cc:9e:ef:0d:a3:c9:50:d0:6c:58:d9:42:a6:3d:31:0c:94:26: 11:80:89:5e:33:ce:0a:bd:fb:a1:09:6e:16:88:cf:5c:81:e5: cd:55:c7:a0:8d:3c:35:c1:b6:0f:3a:f6:7a:49:ca:91:2d:d5: 1c:aa:78:3f:37:fc:77:f0:06:66:55:28:eb:d3:2a:f1:06:a6: a9:fa:d8:fa:b8:82:95:16:63:df:70:6f:36:56:62:a6:4e:46: dc:6e:33:f0:63:40:aa:2c:d9:14:5c:62:5a:16:c3:b5:e1:cd: 86:65:64:df:b8:54:64:dd:8b:ae:7f:8a:a2:ab:58:7d:c1:02: 4a:d4:ad:0a:08:d0:ee:d7:03:94:d5:7d:2c:d8:de:47:c6:48: a1:69:34:4a:38:ef:c5:2b:f1:fc:93:61:25:a6:c3:be:af:ea: e4:5e:01:f5:36:d8:d4:12:2c:78:16:7c:29:63:c3:da:0a:34: b8:07:db:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODI1RDExMC8GA1UEBRMoQjg4QkQ1RDVCOUI4NjQ2RDhFNDNFNjRDMTI3Qjg0ODFB NDE4QzYzNjAeFw0yNTA2MTMwNTUwMjdaFw0yNTA2MjAwNTUwMjdaMBgxFjAUBgNV BAMTDTY4NGJiYzIzLTcyYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC721zK7ZqmUuTzVtVRgEiMJsuOmo+fVL1WddaJ2gd6vHL7w69qYaeQ8uB5MKVH OPQoG8Ot+vtGwbxbleQdaQlBsm1P+4foG9h9ucpdmd9/Y7DSEzkw/HYUEc+mjteb I/+8GWwOiM2gp10PslOkRlK+lF01eEsaf/DP7YdKXhy7Qzr/zLbkjxt7CIETh4FQ N+71c++MsMYqsIMrxi+aeOun9/Fqh4tO2VQSNLLMhn4v67BqlKZjcWzRnPKqeqNR NgXz6CbK0TuAgfo3H0d6L1BKmcYRGsNeaJQTgGb/pNzYnvAO32OILqGLhpdEZiIm AkLnFIez+Q13wlpMkjiNo36DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtYqxhCFL /P4hM0hGmgHjdXgEW2QwHwYDVR0jBBgwFoAUuIvV1bm4ZG2OQ+ZMEnuEgaQYxjYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4MjVEL0U1OEIyMjY4QTQ0 NjExRUY4RDU4QTYyNEM0RjlBRTAyL3VJdlYxYm00WkcyT1EtWk1FbnVFZ2FRWXhq WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdUl2VjFibTRaRzJPUS1aTUVudUVnYVFZeGpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 MjVEL0U1OEIyMjY4QTQ0NjExRUY4RDU4QTYyNEM0RjlBRTAyL3VJdlYxYm00Wkcy T1EtWk1FbnVFZ2FRWXhqWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANVBDaO69g1Om5U39o6U7kqtLzP/shGOKG8TftC5Wm8pqYfbiXUOThii n7cmqiOekDdbvYwpw2SpMGxZlu6cbKvdGvk79ftajcye7w2jyVDQbFjZQqY9MQyU JhGAiV4zzgq9+6EJbhaIz1yB5c1Vx6CNPDXBtg869npJypEt1RyqeD83/HfwBmZV KOvTKvEGpqn62Pq4gpUWY99wbzZWYqZORtxuM/BjQKos2RRcYloWw7XhzYZlZN+4 VGTdi65/iqKrWH3BAkrUrQoI0O7XA5TVfSzY3kfGSKFpNEo478Ur8fyTYSWmw76v 6uReAfU22NQSLHgWfCljw9oKNLgH2wM= -----END CERTIFICATE-----Generated at Sat Jun 14 19:41:09 2025 by rpki-client