$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft File: 5ufguvNPIMPZye8md2gF84JGO4Y.mft (raw, json) Hash identifier: 3F0iwiqemFXdgcNc9YDYHOLwYzW+Q6bhNIqFxJ0tyxQ= Subject key identifier: 2F:EE:FE:BB:85:42:7F:79:51:8B:AC:1B:DD:75:D3:0B:8C:60:B6:A6 Authority key identifier: E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86 Certificate issuer: /CN=A9160BD2/serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86 Certificate serial: 0678 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft Manifest number: 0673 Signing time: Sat 14 Jun 2025 22:05:06 +0000 Manifest this update: Sat 14 Jun 2025 22:05:06 +0000 Manifest next update: Sat 21 Jun 2025 22:05:06 +0000 Files and hashes: 1: 5ufguvNPIMPZye8md2gF84JGO4Y.crl (hash: UXQEmYEyCOvVW7McFiHGvN466eQn8SfMjzpJXeTGyeo=) 2: 159A3C967D7211EBA0A7FF60C4F9AE02.roa (hash: Zxo0mKrJYkISVsqHRZIlLeBZhk5GaXEPMnvmTBTNLew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1656 (0x678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160BD2, serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86 Validity Not Before: Jun 14 22:05:06 2025 GMT Not After : Jun 21 22:05:06 2025 GMT Subject: CN=684df212-3fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5b:1e:03:ea:12:da:c8:8f:16:b2:0e:26:7e: c3:1f:9b:98:c3:d9:60:53:3b:19:b6:10:02:7c:ea: b7:f2:38:56:3c:66:c4:cd:23:7e:fc:79:d9:36:c5: 7d:fa:65:2d:f9:21:bf:b8:66:57:01:7d:f8:fc:5a: bd:d9:b3:4a:68:f5:55:cc:a7:e9:cc:24:02:c5:a9: 91:49:f2:74:df:86:df:c6:88:d6:4d:8b:f9:2b:2f: cb:0e:8e:88:f0:26:d6:08:85:de:6d:4a:be:b1:1b: e3:74:4b:e1:27:8a:48:cb:b1:3e:ee:46:ad:13:a4: 68:a7:9e:ef:d8:49:b8:e2:8e:66:df:f5:b1:87:d8: 13:ee:00:c6:85:41:58:f0:1b:25:71:98:1d:3d:44: 8b:ae:39:56:07:65:4c:8e:0b:f3:22:c0:34:d6:50: 39:5c:99:57:fd:75:76:20:fa:1d:6f:8b:51:b1:52: 55:9f:fb:a9:92:4a:b2:b5:30:88:0f:a9:42:4e:62: e9:b1:e9:d7:05:ce:04:2d:bf:58:eb:87:9d:32:27: e8:45:82:69:7d:40:b3:d9:59:7a:7d:de:9a:0b:12: 87:5c:a6:00:c0:5d:49:25:3e:e0:3d:6f:93:fc:6c: bb:be:e1:a8:87:36:3e:23:23:6b:a7:84:60:44:72: 1c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EE:FE:BB:85:42:7F:79:51:8B:AC:1B:DD:75:D3:0B:8C:60:B6:A6 X509v3 Authority Key Identifier: keyid:E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:8b:9c:01:7a:6b:cb:0d:50:f6:7e:53:74:60:88:1d:cc:17: 3e:fd:e2:42:c0:d6:d8:78:90:f8:3e:7e:05:f7:06:e3:00:53: 4d:be:6b:d6:51:00:13:fb:f6:1e:fc:bb:ad:43:0f:fa:76:96: 1b:4d:e8:09:bb:91:1d:92:6a:2b:8e:48:d3:d1:b1:4c:dd:69: 31:c2:46:d4:5d:f6:21:c5:2b:c2:ed:0f:f7:c1:67:6d:16:8d: b4:4d:0c:99:e1:b0:39:ef:a7:fb:17:bd:3e:02:a7:7b:bf:9a: d4:a8:35:5d:28:8e:d2:89:58:97:dd:d5:2f:a3:fa:b9:e5:3a: e6:6f:89:51:37:b7:65:ce:8c:fa:ce:0d:c6:b7:da:a2:8c:64: 7d:06:d1:26:7f:3f:20:5e:0f:b2:47:a1:06:f8:44:6a:a8:a7: 0d:9e:9f:cd:64:d1:17:4d:69:f5:84:ee:3d:30:4e:bc:a1:03: 50:e1:09:1d:ba:91:40:c6:78:0a:af:9a:2a:6e:02:53:27:97: 7a:34:0c:6e:be:02:5e:7c:5d:8f:cb:83:ab:77:58:11:bc:fb: be:44:77:e4:b8:fc:b0:cc:59:41:18:5b:ad:a7:f8:ed:81:69: e8:41:76:8a:ad:f2:1d:03:bd:38:6c:e6:f4:ed:38:76:ad:ca: b1:71:0d:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBCRDIxMTAvBgNVBAUTKEU2RTdFMEJBRjM0RjIwQzNEOUM5RUYyNjc3NjgwNUYz ODI0NjNCODYwHhcNMjUwNjE0MjIwNTA2WhcNMjUwNjIxMjIwNTA2WjAYMRYwFAYD VQQDEw02ODRkZjIxMi0zZmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lseA+oS2siPFrIOJn7DH5uYw9lgUzsZthACfOq38jhWPGbEzSN+/HnZNsV9 +mUt+SG/uGZXAX34/Fq92bNKaPVVzKfpzCQCxamRSfJ034bfxojWTYv5Ky/LDo6I 8CbWCIXebUq+sRvjdEvhJ4pIy7E+7katE6Rop57v2Em44o5m3/Wxh9gT7gDGhUFY 8BslcZgdPUSLrjlWB2VMjgvzIsA01lA5XJlX/XV2IPodb4tRsVJVn/upkkqytTCI D6lCTmLpsenXBc4ELb9Y64edMifoRYJpfUCz2Vl6fd6aCxKHXKYAwF1JJT7gPW+T /Gy7vuGohzY+IyNrp4RgRHIcgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/u/ruF Qn95UYusG9110wuMYLamMB8GA1UdIwQYMBaAFObn4LrzTyDD2cnvJndoBfOCRjuG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEJEMi9FN0U5MDQwMDdE NkYxMUVCODYxMTExNDdDNEY5QUUwMi81dWZndXZOUElNUFp5ZThtZDJnRjg0SkdP NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV1Zmd1dk5QSU1QWnllOG1kMmdGODRKR080WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEJEMi9FN0U5MDQwMDdENkYxMUVCODYxMTExNDdDNEY5QUUwMi81dWZndXZOUElN UFp5ZThtZDJnRjg0SkdPNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDi5wBemvLDVD2flN0YIgdzBc+/eJCwNbYeJD4Pn4F9wbjAFNNvmvW UQAT+/Ye/LutQw/6dpYbTegJu5EdkmorjkjT0bFM3WkxwkbUXfYhxSvC7Q/3wWdt Fo20TQyZ4bA576f7F70+Aqd7v5rUqDVdKI7SiViX3dUvo/q55Trmb4lRN7dlzoz6 zg3Gt9qijGR9BtEmfz8gXg+yR6EG+ERqqKcNnp/NZNEXTWn1hO49ME68oQNQ4Qkd upFAxngKr5oqbgJTJ5d6NAxuvgJefF2Py4Ord1gRvPu+RHfkuPywzFlBGFutp/jt gWnoQXaKrfIdA704bOb07Th2rcqxcQ1h -----END CERTIFICATE-----Generated at Sun Jun 15 08:44:36 2025 by rpki-client