$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft File: S-UGizexYyUw_1Ijhue3-wGI6eo.mft (raw, json) Hash identifier: s5AD3fKFmUJEtKbV2zG3NSAGJGehcJs5crLbq1UDnwk= Subject key identifier: 3E:52:93:27:4D:C9:22:FD:5F:57:6C:23:1A:37:9E:CB:99:06:47:C2 Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA Certificate issuer: /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft Manifest number: 0113 Signing time: Tue 17 Jun 2025 03:59:09 +0000 Manifest this update: Tue 17 Jun 2025 03:59:09 +0000 Manifest next update: Tue 24 Jun 2025 03:59:09 +0000 Files and hashes: 1: S-UGizexYyUw_1Ijhue3-wGI6eo.crl (hash: OXElfV/d9OMLNF99BXGbNOUPHEy7fI7g+HuVExoTPBs=) 2: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (hash: PrkTvOXkxIIDm1NyNDWg8hQLP2IiT8tO2SVVH/dIBvI=) 3: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (hash: s22fNuehfcR8cdi3cFR8Z1yPLk8LwMQLolDpdzgZgc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:59:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Validity Not Before: Jun 17 03:59:09 2025 GMT Not After : Jun 24 03:59:09 2025 GMT Subject: CN=6850e80d-51de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c1:09:16:3d:a4:fd:60:15:c2:18:c7:d4:49: b7:3e:39:2c:19:45:42:58:0b:3e:a7:44:95:ef:e3: 0c:4b:53:89:42:be:0a:f2:c5:1b:b0:59:a3:c5:cf: 6d:24:4f:5a:36:98:ae:ee:a0:29:6e:68:88:76:69: e6:23:07:9c:41:c3:28:63:03:be:4f:c3:57:af:80: af:86:36:24:c4:da:e6:04:78:82:53:0b:65:34:e1: f6:7a:a5:ef:62:14:ca:4c:3c:7c:be:c5:e2:33:c1: 90:c6:5f:66:9c:0a:ae:d9:5e:7b:6e:98:73:ee:64: ca:d3:54:fc:54:fd:b0:8d:d1:c4:02:c3:00:85:41: 29:4a:11:ec:26:f6:d2:04:32:05:9b:e6:5d:15:9b: fa:eb:ac:6d:74:17:de:e4:cd:99:b0:54:80:69:c8: 65:16:f4:10:7f:d4:d8:98:10:56:57:3f:3f:83:ec: 46:7e:e6:39:75:a9:56:89:9c:94:b2:9b:bb:b8:9d: ef:86:b0:8b:6c:ad:1a:df:70:e3:d9:1d:4c:cc:5f: cd:70:71:cd:d8:a9:61:ea:52:c6:0d:81:25:f8:da: 38:36:8f:ba:1b:6e:ab:56:fa:2b:52:a0:ce:40:ec: 19:05:89:b6:3f:9d:eb:4d:4b:74:88:e8:fd:bf:87: 80:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:52:93:27:4D:C9:22:FD:5F:57:6C:23:1A:37:9E:CB:99:06:47:C2 X509v3 Authority Key Identifier: keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:38:e9:a1:a1:6c:3d:11:6b:f8:7e:20:44:57:e8:d9:67:fc: 51:75:62:0c:57:3d:ce:a1:c3:42:67:fa:ed:8d:30:09:a4:82: 14:62:d4:5d:00:9d:7a:73:67:33:8d:fc:29:a4:f4:a2:39:25: 07:d8:6d:40:73:c3:1e:09:0d:77:1f:a3:fa:1d:b7:92:c8:56: 50:a9:f8:53:66:8b:63:67:65:05:9f:23:44:07:bf:c2:e7:94: 56:e5:1d:41:78:b3:b9:a0:db:53:3b:01:f6:52:fc:5f:fa:d1: 43:75:a7:a3:93:cf:d2:9f:7f:17:2e:a9:0e:9d:06:97:a5:03: 5d:3b:85:a1:60:c4:30:aa:ec:07:ba:a3:9d:d9:ce:76:69:7e: 77:d5:ca:e6:3c:d9:78:a2:7a:1f:fe:fe:cb:44:7c:82:16:95: cd:f2:1c:58:f1:31:40:36:7e:5f:11:39:3e:aa:82:5a:7b:83: 43:2f:a7:f9:a5:0d:50:25:2e:8b:29:90:cd:47:22:51:c2:f0: d1:ce:fc:34:7a:d2:bb:c9:ed:9c:14:c2:01:13:ee:91:94:f4: eb:f4:b4:ca:28:d2:0c:15:09:44:0f:e6:99:2b:ed:7f:ae:92: bc:5e:0f:c5:5d:3f:06:42:6e:18:cd:15:3a:87:7f:76:0f:be: 7f:57:cc:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDRCRTUwNjhCMzdCMTYzMjUzMEZGNTIyMzg2RTdCN0ZC MDE4OEU5RUEwHhcNMjUwNjE3MDM1OTA5WhcNMjUwNjI0MDM1OTA5WjAYMRYwFAYD VQQDEw02ODUwZTgwZC01MWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcEJFj2k/WAVwhjH1Em3PjksGUVCWAs+p0SV7+MMS1OJQr4K8sUbsFmjxc9t JE9aNpiu7qApbmiIdmnmIwecQcMoYwO+T8NXr4CvhjYkxNrmBHiCUwtlNOH2eqXv YhTKTDx8vsXiM8GQxl9mnAqu2V57bphz7mTK01T8VP2wjdHEAsMAhUEpShHsJvbS BDIFm+ZdFZv666xtdBfe5M2ZsFSAachlFvQQf9TYmBBWVz8/g+xGfuY5dalWiZyU spu7uJ3vhrCLbK0a33Dj2R1MzF/NcHHN2Klh6lLGDYEl+No4No+6G26rVvorUqDO QOwZBYm2P53rTUt0iOj9v4eAHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5SkydN ySL9X1dsIxo3nsuZBkfCMB8GA1UdIwQYMBaAFEvlBos3sWMlMP9SI4bnt/sBiOnq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy9FODBGMTM3Q0I5 OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5VXdfMUlqaHVlMy13R0k2 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1MtVUdpemV4WXlVd18xSWpodWUzLXdHSTZlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy9FODBGMTM3Q0I5OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5 VXdfMUlqaHVlMy13R0k2ZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHOOmhoWw9EWv4fiBEV+jZZ/xRdWIMVz3OocNCZ/rtjTAJpIIUYtRd AJ16c2czjfwppPSiOSUH2G1Ac8MeCQ13H6P6HbeSyFZQqfhTZotjZ2UFnyNEB7/C 55RW5R1BeLO5oNtTOwH2Uvxf+tFDdaejk8/Sn38XLqkOnQaXpQNdO4WhYMQwquwH uqOd2c52aX531crmPNl4onof/v7LRHyCFpXN8hxY8TFANn5fETk+qoJae4NDL6f5 pQ1QJS6LKZDNRyJRwvDRzvw0etK7ye2cFMIBE+6RlPTr9LTKKNIMFQlED+aZK+1/ rpK8Xg/FXT8GQm4YzRU6h392D75/V8xf -----END CERTIFICATE-----Generated at Thu Jun 19 06:40:27 2025 by rpki-client