$ rpki-client -vvf rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft File: -uYgHGZjkjQL7hOO1BeZuobapog.mft (raw, json) Hash identifier: Q2iS4YNSauuyJobYkPsiHpwm5U24IY5DrFnqdGkSiAs= Subject key identifier: 25:CF:E2:DD:B2:FC:7C:3A:42:10:41:8B:F7:DC:CE:16:BA:75:4B:82 Authority key identifier: FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88 Certificate issuer: /CN=A9158840/serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688 Certificate serial: 0C42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft Manifest number: 0C32 Signing time: Thu 12 Jun 2025 18:26:48 +0000 Manifest this update: Thu 12 Jun 2025 18:26:47 +0000 Manifest next update: Thu 19 Jun 2025 18:26:47 +0000 Files and hashes: 1: -uYgHGZjkjQL7hOO1BeZuobapog.crl (hash: AzpJEAld/d1aEKT6sRMbw40tSiGgtJQrOcwCMt3pEuk=) 2: 513421B0E3AB11EF9C68465CC4F9AE02.roa (hash: /6OtFAV0fvfK8AYoQXUKAPYFcikHsFv3EvaxBMPOB2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3138 (0xc42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158840, serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688 Validity Not Before: Jun 12 18:26:47 2025 GMT Not After : Jun 19 18:26:47 2025 GMT Subject: CN=684b1be8-d840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d3:d0:5e:32:e6:d7:3a:a2:98:9c:c4:a0:6d: 32:71:4f:5e:ad:5e:28:15:14:02:c6:db:9f:3e:84: 8e:d0:9e:23:0f:a6:1b:9f:23:97:5d:c4:61:9f:42: d4:14:f5:1b:b7:e2:7e:ce:b4:23:48:c6:90:88:6b: 2c:46:a0:e3:79:5c:d4:dd:7d:15:98:e4:af:92:92: 12:40:b4:f6:80:07:04:15:7f:56:42:a4:cf:35:88: 32:f8:e9:09:94:1a:fb:01:91:3e:36:01:56:c5:78: dd:57:7d:6d:96:ca:ec:25:ca:0f:3d:8b:83:42:53: 6b:23:b2:8e:f2:8d:40:d0:75:60:f4:8d:53:cf:6c: d2:97:83:84:d3:d4:88:bd:ab:ee:a6:c1:a4:89:a5: f9:f3:a6:ef:cd:21:2a:41:46:6f:02:bc:ec:dd:98: f6:53:89:6b:41:0d:52:39:e7:9e:0b:52:9f:7e:74: 95:9c:ff:b5:ee:05:b5:89:d8:1c:78:37:9f:5e:28: 66:ca:7a:e6:05:86:10:9c:e7:11:3c:7b:4f:25:2c: c8:8a:55:01:4a:b5:23:70:d6:da:69:17:c6:e9:49: 70:a9:7a:57:de:f2:52:8d:c7:67:2d:f1:2a:80:3e: 59:3c:3f:c6:50:20:60:3a:3b:e7:82:d4:2f:e9:90: 43:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CF:E2:DD:B2:FC:7C:3A:42:10:41:8B:F7:DC:CE:16:BA:75:4B:82 X509v3 Authority Key Identifier: keyid:FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:37:62:04:41:a9:3d:46:c5:d0:44:5d:5f:3d:0e:1c:68:77: 1c:58:30:7a:0c:c8:ee:8a:86:86:a5:83:6d:e1:0e:3b:71:2b: e8:68:e9:6f:a2:25:23:ca:e9:47:24:b9:1e:06:c3:a2:ff:c7: c8:90:c8:45:38:6b:ee:16:f4:83:dd:c9:a8:53:ff:ab:4f:44: a8:4e:63:2d:6a:4f:6c:6e:f6:fb:06:c5:59:b0:5b:69:f1:2e: 45:8c:64:52:c3:8c:70:db:f2:96:53:82:60:99:67:73:82:30: f3:3c:fa:00:ac:f0:c3:0d:e5:cb:d6:58:3b:7b:52:ad:43:c9: a6:f5:cf:2f:94:86:c3:14:7f:ca:41:97:57:6a:6f:7a:d1:35: a6:68:ae:b3:c8:89:ea:43:7e:34:41:8e:87:de:ad:f1:a3:06: dc:0f:dc:7b:75:4e:31:f6:3a:92:1a:fa:d4:2f:7b:32:85:9b: 90:ff:7a:5d:fd:06:f1:e2:a1:a2:4d:a6:8c:61:0b:ef:57:9c: 34:a0:de:5e:5a:d8:3d:6e:ef:65:dc:78:bb:ef:ae:fd:00:ae: 9c:15:fb:26:c4:4d:a6:6c:65:4c:5c:eb:f0:2a:36:35:73:18: c6:bb:32:b8:35:a4:a3:0d:e6:0e:5b:25:c4:08:e1:aa:5d:38: 72:05:81:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg4NDAxMTAvBgNVBAUTKEZBRTYyMDFDNjY2MzkyMzQwQkVFMTM4RUQ0MTc5OUJB ODZEQUE2ODgwHhcNMjUwNjEyMTgyNjQ3WhcNMjUwNjE5MTgyNjQ3WjAYMRYwFAYD VQQDEw02ODRiMWJlOC1kODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA79PQXjLm1zqimJzEoG0ycU9erV4oFRQCxtufPoSO0J4jD6YbnyOXXcRhn0LU FPUbt+J+zrQjSMaQiGssRqDjeVzU3X0VmOSvkpISQLT2gAcEFX9WQqTPNYgy+OkJ lBr7AZE+NgFWxXjdV31tlsrsJcoPPYuDQlNrI7KO8o1A0HVg9I1Tz2zSl4OE09SI vavupsGkiaX586bvzSEqQUZvArzs3Zj2U4lrQQ1SOeeeC1KffnSVnP+17gW1idgc eDefXihmynrmBYYQnOcRPHtPJSzIilUBSrUjcNbaaRfG6UlwqXpX3vJSjcdnLfEq gD5ZPD/GUCBgOjvngtQv6ZBD7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXP4t2y /Hw6QhBBi/fczha6dUuCMB8GA1UdIwQYMBaAFPrmIBxmY5I0C+4TjtQXmbqG2qaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODg0MC82MTc3MzMyQTBC ODIxMUVBODA0MTE1NEJDNEY5QUUwMi8tdVlnSEdaamtqUUw3aE9PMUJlWnVvYmFw b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11WWdIR1pqa2pRTDdoT08xQmVadW9iYXBvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODg0MC82MTc3MzMyQTBCODIxMUVBODA0MTE1NEJDNEY5QUUwMi8tdVlnSEdaamtq UUw3aE9PMUJlWnVvYmFwb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhN2IEQak9RsXQRF1fPQ4caHccWDB6DMjuioaGpYNt4Q47cSvoaOlv oiUjyulHJLkeBsOi/8fIkMhFOGvuFvSD3cmoU/+rT0SoTmMtak9sbvb7BsVZsFtp 8S5FjGRSw4xw2/KWU4JgmWdzgjDzPPoArPDDDeXL1lg7e1KtQ8mm9c8vlIbDFH/K QZdXam960TWmaK6zyInqQ340QY6H3q3xowbcD9x7dU4x9jqSGvrUL3syhZuQ/3pd /Qbx4qGiTaaMYQvvV5w0oN5eWtg9bu9l3Hi77679AK6cFfsmxE2mbGVMXOvwKjY1 cxjGuzK4NaSjDeYOWyXECOGqXThyBYHk -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:56 2025 by rpki-client