$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft File: juUibgV6ZUQkIur-2cYuKQ3zJIo.mft (raw, json) Hash identifier: bgqqx0pwLWIgYggd4KhqH+/q/XS5vwrpfCaWteQljS4= Subject key identifier: 9C:8D:8E:F8:0B:06:3D:6F:E6:93:4D:0D:EF:0F:24:F9:7E:DB:4F:F5 Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A Certificate issuer: /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft Manifest number: 0195 Signing time: Fri 13 Jun 2025 02:32:18 +0000 Manifest this update: Fri 13 Jun 2025 02:32:17 +0000 Manifest next update: Fri 20 Jun 2025 02:32:17 +0000 Files and hashes: 1: juUibgV6ZUQkIur-2cYuKQ3zJIo.crl (hash: WAj2drRIWaiwuzcYcWM9/7g60EjPI5Vf3gcdTKlZAO4=) 2: FD678F40214E11F095B05918C4F9AE02.roa (hash: SE2tQtfXNh6RaSGSNFmLS6aWkLKk1NZamBIU1kOWDMs=) 3: 45399802215111F0B94CA13FC4F9AE02.roa (hash: 4P/ZavUH4NM6wMd2wGqcFK1zMWVNSTlldDMPOXOpXSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A Validity Not Before: Jun 13 02:32:17 2025 GMT Not After : Jun 20 02:32:17 2025 GMT Subject: CN=684b8db1-418a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:35:a6:91:bb:29:d2:54:bb:59:1b:63:47:cc: 05:7b:34:15:f3:31:b5:26:19:b0:72:bd:d2:0d:49: 6a:38:e4:d5:a7:4b:10:1a:0a:96:ab:35:9d:5f:0f: 99:6b:0c:b0:e9:c1:31:07:59:e3:e8:35:68:76:34: a8:3a:92:eb:0f:b2:e0:39:51:6e:a9:fd:5a:e6:7c: e7:7d:77:51:2b:85:e8:5e:cc:c1:a5:5e:51:55:9a: 6d:c6:76:53:73:49:35:53:5d:c5:d6:23:a2:5b:e4: cf:0f:9d:b3:e0:81:db:8c:7f:50:6b:10:20:c5:a2: 1b:fa:1f:85:10:98:ea:d8:ea:6a:52:76:d2:57:38: e3:07:8c:75:f7:4b:94:b4:87:d4:46:12:21:38:3f: c4:40:11:5c:4b:6a:ba:6f:75:69:5b:43:4c:e5:76: 52:02:60:62:21:b4:4f:4b:14:a2:78:b0:0d:8e:16: af:30:9e:88:2e:ea:cb:b6:2b:4d:85:6c:d9:d7:80: f8:aa:df:bb:f1:f5:95:09:ff:c0:b9:90:ae:1b:33: 7b:61:63:7f:e7:33:e6:1b:e2:2a:cd:b2:2c:15:45: 2a:b8:da:91:eb:97:55:bb:e6:55:e4:d5:f0:86:af: c7:bf:3e:86:9d:de:e7:48:0f:30:8e:fc:a9:b4:d8: 11:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8D:8E:F8:0B:06:3D:6F:E6:93:4D:0D:EF:0F:24:F9:7E:DB:4F:F5 X509v3 Authority Key Identifier: keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:88:77:4d:ba:c3:05:48:6c:ac:49:18:33:a8:46:7c:82:23: a1:7e:f8:6e:3a:73:f9:bc:48:1c:20:0b:f4:e1:87:c2:a5:e7: a9:cf:f7:53:c7:4b:26:65:b7:a0:40:81:5f:9c:b1:8b:d1:b2: 9f:11:be:50:d4:94:40:2f:30:c8:25:cc:76:a4:c9:94:08:5c: 88:df:45:f3:73:ad:f8:71:17:a4:eb:ff:47:e8:ee:ea:c6:93: ae:c5:71:da:0a:c7:3f:a9:9f:fd:7e:7a:49:7a:4a:7f:b3:61: 1e:27:34:fa:76:c8:87:6d:a6:98:6f:ee:12:9a:39:52:1f:4d: 4d:dc:09:76:79:9e:a2:a2:89:a8:5e:b0:74:29:93:7e:b7:03: ac:d6:c5:a3:5c:bc:de:d4:02:b6:5a:32:e9:72:df:3f:cb:67: 0c:4a:a1:20:dc:f6:d8:77:86:73:ee:34:64:32:0e:25:d5:84: 22:5a:a0:99:72:86:d2:2a:8c:56:6c:70:19:50:f7:52:19:9c: ee:cb:82:d9:23:33:d6:fb:a0:46:54:54:8d:73:b2:e3:e4:bf: 77:39:55:b4:7d:b5:d4:e0:1d:a9:5e:c2:a2:06:21:16:0a:8a: a1:86:d4:34:d9:e3:28:a3:e7:0b:aa:49:75:12:ba:11:d4:ba: f4:6f:44:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcyRTMxMTAvBgNVBAUTKDhFRTUyMjZFMDU3QTY1NDQyNDIyRUFGRUQ5QzYyRTI5 MERGMzI0OEEwHhcNMjUwNjEzMDIzMjE3WhcNMjUwNjIwMDIzMjE3WjAYMRYwFAYD VQQDEw02ODRiOGRiMS00MThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzWmkbsp0lS7WRtjR8wFezQV8zG1Jhmwcr3SDUlqOOTVp0sQGgqWqzWdXw+Z awyw6cExB1nj6DVodjSoOpLrD7LgOVFuqf1a5nznfXdRK4XoXszBpV5RVZptxnZT c0k1U13F1iOiW+TPD52z4IHbjH9QaxAgxaIb+h+FEJjq2OpqUnbSVzjjB4x190uU tIfURhIhOD/EQBFcS2q6b3VpW0NM5XZSAmBiIbRPSxSieLANjhavMJ6ILurLtitN hWzZ14D4qt+78fWVCf/AuZCuGzN7YWN/5zPmG+IqzbIsFUUquNqR65dVu+ZV5NXw hq/Hvz6Gnd7nSA8wjvyptNgR8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyNjvgL Bj1v5pNNDe8PJPl+20/1MB8GA1UdIwQYMBaAFI7lIm4FemVEJCLq/tnGLikN8ySK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJFMy9DNkI1MDEzQ0VB RTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpVUWtJdXItMmNZdUtRM3pK SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p1VWliZ1Y2WlVRa0l1ci0yY1l1S1EzekpJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzJFMy9DNkI1MDEzQ0VBRTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpV UWtJdXItMmNZdUtRM3pKSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXiHdNusMFSGysSRgzqEZ8giOhfvhuOnP5vEgcIAv04YfCpeepz/dT x0smZbegQIFfnLGL0bKfEb5Q1JRALzDIJcx2pMmUCFyI30Xzc634cRek6/9H6O7q xpOuxXHaCsc/qZ/9fnpJekp/s2EeJzT6dsiHbaaYb+4SmjlSH01N3Al2eZ6ioomo XrB0KZN+twOs1sWjXLze1AK2WjLpct8/y2cMSqEg3PbYd4Zz7jRkMg4l1YQiWqCZ cobSKoxWbHAZUPdSGZzuy4LZIzPW+6BGVFSNc7Lj5L93OVW0fbXU4B2pXsKiBiEW CoqhhtQ02eMoo+cLqkl1EroR1Lr0b0Rq -----END CERTIFICATE-----Generated at Sat Jun 14 19:10:20 2025 by rpki-client