$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft File: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft (raw, json) Hash identifier: C8VQQd8oY+4f1ebl2MW23dceOE5ly4Ob5pe4TrKna0Q= Subject key identifier: CF:EE:53:0D:20:3A:87:F3:8A:74:F3:A1:1C:60:3B:90:40:45:B4:4F Authority key identifier: 52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24 Certificate issuer: /CN=A91774FB/serialNumber=5296BC801402C73909F591E19095F22465414324 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft Manifest number: B9 Signing time: Thu 19 Jun 2025 05:16:53 +0000 Manifest this update: Thu 19 Jun 2025 05:16:53 +0000 Manifest next update: Thu 26 Jun 2025 05:16:53 +0000 Files and hashes: 1: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl (hash: f3qmJ8pn52cATp5QFR1yGLnN/SFMhg9OFv07gO0OuNc=) 2: 24142938343C11EFA0165876C4F9AE02.roa (hash: n7AIK79a5+aPFKSTz88y32yhIzyT87IgTPflOpV9KLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91774FB, serialNumber=5296BC801402C73909F591E19095F22465414324 Validity Not Before: Jun 19 05:16:53 2025 GMT Not After : Jun 26 05:16:53 2025 GMT Subject: CN=68539d45-0560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0b:1c:91:49:80:d2:82:e7:8d:54:0d:3d:0e: 1f:74:88:2b:c9:0a:c9:3a:95:a9:be:7a:4e:e8:ba: 3f:1f:65:08:e8:36:37:a2:37:82:ca:6a:05:9b:7d: 61:48:41:45:34:9c:c9:5a:07:9c:6d:a3:98:08:d0: a2:51:f4:0d:6a:13:0e:27:fb:8f:58:4a:77:f3:1d: 0c:e2:0d:a7:c8:73:81:38:84:31:80:11:9f:82:c3: a3:3b:6e:c9:51:fa:97:09:d4:ac:97:a9:5c:97:7e: a6:38:34:d5:82:3a:4c:6c:f3:1b:90:69:54:e1:96: 4c:c9:82:ff:b4:dc:1a:27:9a:0a:9c:be:3f:d1:7a: d2:eb:f2:7f:28:50:1e:67:f1:f3:68:83:de:e0:c7: 11:79:ba:e3:9d:41:43:fd:21:02:66:c5:ac:7c:a5: d5:6f:47:13:20:5e:e0:12:06:29:86:95:0d:c8:68: fe:80:48:43:a2:46:00:ef:b5:43:dc:4b:e8:af:00: 3f:fe:12:f1:d4:93:5e:d7:16:83:46:ca:f6:36:4e: d6:7d:fc:65:85:dc:82:21:5c:c9:c8:bd:4d:24:3a: 72:9b:37:92:42:84:e4:73:0d:0e:9b:54:a6:86:d4: 03:ee:ad:e2:10:44:e6:1b:c7:d8:df:85:08:03:32: e9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:EE:53:0D:20:3A:87:F3:8A:74:F3:A1:1C:60:3B:90:40:45:B4:4F X509v3 Authority Key Identifier: keyid:52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:23:eb:f4:5b:57:87:14:ae:a5:a3:a9:9f:cc:00:f2:ea:0a: 39:76:b0:ab:73:7e:39:0e:bc:91:b9:68:34:c7:a5:0f:75:ec: 71:b8:bb:a2:b4:47:0b:8d:31:2c:d7:73:00:1c:48:b2:7a:1a: f8:69:c2:4d:a2:a2:8c:b9:17:49:10:d7:94:67:6c:dd:b6:73: b3:8a:bd:e0:b9:8a:e1:21:8e:85:1f:45:02:ee:da:f6:ec:34: 3d:67:53:b1:66:1d:b2:f4:a7:f8:2c:f6:76:8c:1e:b4:f0:a1: 0f:03:12:c8:5a:44:3f:c2:1c:c1:f7:8c:fb:9e:d9:eb:57:82: 59:22:f5:95:ef:24:16:bb:03:5b:71:3d:60:95:07:5f:1a:1f: f9:bb:f1:5f:9b:81:12:a9:08:7f:6d:22:ad:1b:82:fd:90:d6: d8:29:31:a3:a3:74:b7:e4:39:8d:03:c5:61:13:80:52:08:b0: 23:b5:82:b5:ba:10:02:06:93:40:69:6c:b3:2b:03:99:60:f6: de:ca:c3:91:9d:e4:25:a1:39:a4:f9:f4:48:7f:7c:4b:67:b9: de:c7:5b:00:dc:c6:2c:68:de:ad:b8:6e:99:c5:9b:af:e4:c2: 10:67:96:97:0b:99:0a:55:7a:18:c5:d1:a1:6a:ed:2f:28:ab: a7:5b:11:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0RkIxMTAvBgNVBAUTKDUyOTZCQzgwMTQwMkM3MzkwOUY1OTFFMTkwOTVGMjI0 NjU0MTQzMjQwHhcNMjUwNjE5MDUxNjUzWhcNMjUwNjI2MDUxNjUzWjAYMRYwFAYD VQQDEw02ODUzOWQ0NS0wNTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgsckUmA0oLnjVQNPQ4fdIgryQrJOpWpvnpO6Lo/H2UI6DY3ojeCymoFm31h SEFFNJzJWgecbaOYCNCiUfQNahMOJ/uPWEp38x0M4g2nyHOBOIQxgBGfgsOjO27J UfqXCdSsl6lcl36mODTVgjpMbPMbkGlU4ZZMyYL/tNwaJ5oKnL4/0XrS6/J/KFAe Z/HzaIPe4McRebrjnUFD/SECZsWsfKXVb0cTIF7gEgYphpUNyGj+gEhDokYA77VD 3EvorwA//hLx1JNe1xaDRsr2Nk7WffxlhdyCIVzJyL1NJDpymzeSQoTkcw0Om1Sm htQD7q3iEETmG8fY34UIAzLpHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/uUw0g OofzinTzoRxgO5BARbRPMB8GA1UdIwQYMBaAFFKWvIAUAsc5CfWR4ZCV8iRlQUMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzRGQi83ODk3RjgxNjM0 MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9VcGE4Z0JRQ3h6a0o5Wkhoa0pYeUpHVkJR eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VwYThnQlFDeHprSjlaSGhrSlh5SkdWQlF5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzRGQi83ODk3RjgxNjM0MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9VcGE4Z0JRQ3h6 a0o5Wkhoa0pYeUpHVkJReVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKI+v0W1eHFK6lo6mfzADy6go5drCrc345DryRuWg0x6UPdexxuLui tEcLjTEs13MAHEiyehr4acJNoqKMuRdJENeUZ2zdtnOzir3guYrhIY6FH0UC7tr2 7DQ9Z1OxZh2y9Kf4LPZ2jB608KEPAxLIWkQ/whzB94z7ntnrV4JZIvWV7yQWuwNb cT1glQdfGh/5u/Ffm4ESqQh/bSKtG4L9kNbYKTGjo3S35DmNA8VhE4BSCLAjtYK1 uhACBpNAaWyzKwOZYPbeysORneQloTmk+fRIf3xLZ7nex1sA3MYsaN6tuG6ZxZuv 5MIQZ5aXC5kKVXoYxdGhau0vKKunWxG2 -----END CERTIFICATE-----Generated at Thu Jun 19 18:57:53 2025 by rpki-client