$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft File: Ut5nj6808fJ7_XLOdS9c1X6ME84.mft (raw, json) Hash identifier: N7NV7E0KU/RYFp8xw/lM/2YYMRHqLJWFpkG0HimhXck= Subject key identifier: 60:C8:AF:8B:25:4A:0A:EF:CC:DA:C5:6E:14:57:6B:32:06:DB:BE:49 Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE Certificate issuer: /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft Manifest number: 01D0 Signing time: Fri 13 Jun 2025 01:56:33 +0000 Manifest this update: Fri 13 Jun 2025 01:56:33 +0000 Manifest next update: Fri 20 Jun 2025 01:56:33 +0000 Files and hashes: 1: Ut5nj6808fJ7_XLOdS9c1X6ME84.crl (hash: XuFz9zm/5tY4OqmzcwDJCSzaqNwL0mNnDYNqBb9nvvk=) 2: F5D6B6B8810811ED9EA03683C4F9AE02.roa (hash: O+0diP1NN2sNjxwB1I26KY0g98dCGDnYbn9P30v6lyY=) 3: F69540BA810811ED9EA03683C4F9AE02.roa (hash: AmVibyk3kyTCjjmayzEhVr/vWHjKhAHUPjsO+1Nf/Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91781C0, serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Validity Not Before: Jun 13 01:56:33 2025 GMT Not After : Jun 20 01:56:33 2025 GMT Subject: CN=684b8551-9bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:37:8c:d4:1a:4f:c9:aa:7f:ea:1e:c5:88:12: f2:ba:6f:8b:3f:6e:c9:1d:de:32:20:ba:7b:7b:cf: d2:aa:ac:fe:62:66:b8:09:63:ed:48:c8:7b:5e:5e: 87:a8:18:8b:c1:31:56:f1:5c:f8:fc:cc:f2:c6:30: 25:08:d8:a1:c3:49:52:d8:ff:eb:71:3c:f5:c0:83: 44:c5:0a:28:6b:7d:35:a6:6b:a1:83:86:dd:13:07: 3d:ed:71:13:8c:49:9e:8c:69:30:75:c1:2b:9c:a8: e0:f3:79:1d:5b:cb:1a:2c:ae:4a:09:1c:97:15:cd: 15:41:bd:ac:25:27:31:7e:4a:fa:dd:ad:cd:0f:ee: bf:13:7c:b3:a9:78:40:fe:3d:33:be:87:e5:5b:d4: 08:63:2f:65:cb:72:6f:14:32:36:2a:15:7b:e1:5d: 50:c0:f0:c0:7e:7c:cc:35:0f:eb:6b:ad:67:0c:76: 0b:29:b5:91:77:31:56:52:a0:c9:8c:b8:53:ca:de: 11:68:56:61:35:09:7f:ab:db:8e:4a:52:19:d2:2a: a7:9f:96:31:df:85:e5:19:6c:e3:73:d6:e9:1a:71: b2:a5:24:ca:0f:5a:25:d4:90:7d:38:6e:bd:a9:e6: e2:62:bf:54:c5:86:a6:01:48:48:be:da:c5:e0:2e: 14:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C8:AF:8B:25:4A:0A:EF:CC:DA:C5:6E:14:57:6B:32:06:DB:BE:49 X509v3 Authority Key Identifier: keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:01:68:08:d6:5e:ec:01:e7:e1:48:fc:69:e8:70:cf:df:67: 6c:bb:25:4a:2c:98:5a:55:ff:5a:47:3f:9c:14:07:78:3c:91: 49:fa:69:5f:4d:bb:ec:41:a6:a5:ab:43:a5:16:f9:0a:16:e2: e0:ae:95:4f:ab:70:72:1f:4a:50:8d:c9:72:ee:6f:af:33:26: fb:94:a7:fc:27:88:3e:27:27:f6:a5:73:0a:eb:e8:70:60:26: 96:c4:db:e2:26:93:14:d6:27:29:83:21:39:67:69:69:ff:46: 3c:64:a2:84:7c:9c:9f:34:d0:25:5e:bf:f4:af:3e:3c:6a:08: 88:68:04:c9:4f:56:71:a4:ca:2b:6b:f6:ba:87:77:04:27:28: f8:e3:df:10:22:31:1b:46:63:64:f4:55:85:1f:f5:ae:d8:10: df:84:30:f5:96:92:6b:88:38:8d:2e:81:0f:ba:51:0b:c8:dd: e2:51:c8:e1:6e:71:c2:5f:13:42:d0:2e:fd:d4:3f:07:83:01: 6b:a1:9e:d1:37:38:ea:ce:3c:b5:1e:15:20:c3:70:e2:b7:fe: f0:d0:c8:71:0b:3f:f1:20:e7:3d:c3:a5:77:50:f6:6f:d6:76: 9f:cc:5a:78:56:d4:f7:22:a4:5e:1c:c3:e1:1a:4a:95:08:74: 65:4d:13:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzgxQzAxMTAvBgNVBAUTKDUyREU2NzhGQUYzNEYxRjI3QkZENzJDRTc1MkY1Q0Q1 N0U4QzEzQ0UwHhcNMjUwNjEzMDE1NjMzWhcNMjUwNjIwMDE1NjMzWjAYMRYwFAYD VQQDEw02ODRiODU1MS05YmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jeM1BpPyap/6h7FiBLyum+LP27JHd4yILp7e8/Sqqz+Yma4CWPtSMh7Xl6H qBiLwTFW8Vz4/MzyxjAlCNihw0lS2P/rcTz1wINExQooa301pmuhg4bdEwc97XET jEmejGkwdcErnKjg83kdW8saLK5KCRyXFc0VQb2sJScxfkr63a3ND+6/E3yzqXhA /j0zvoflW9QIYy9ly3JvFDI2KhV74V1QwPDAfnzMNQ/ra61nDHYLKbWRdzFWUqDJ jLhTyt4RaFZhNQl/q9uOSlIZ0iqnn5Yx34XlGWzjc9bpGnGypSTKD1ol1JB9OG69 qebiYr9UxYamAUhIvtrF4C4USQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDIr4sl SgrvzNrFbhRXazIG275JMB8GA1UdIwQYMBaAFFLeZ4+vNPHye/1yznUvXNV+jBPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODFDMC8yRjI4OUVENjgx MDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhmSjdfWExPZFM5YzFYNk1F ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V0NW5qNjgwOGZKN19YTE9kUzljMVg2TUU4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODFDMC8yRjI4OUVENjgxMDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhm SjdfWExPZFM5YzFYNk1FODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIAWgI1l7sAefhSPxp6HDP32dsuyVKLJhaVf9aRz+cFAd4PJFJ+mlf TbvsQaalq0OlFvkKFuLgrpVPq3ByH0pQjcly7m+vMyb7lKf8J4g+Jyf2pXMK6+hw YCaWxNviJpMU1icpgyE5Z2lp/0Y8ZKKEfJyfNNAlXr/0rz48agiIaATJT1ZxpMor a/a6h3cEJyj4498QIjEbRmNk9FWFH/Wu2BDfhDD1lpJriDiNLoEPulELyN3iUcjh bnHCXxNC0C791D8HgwFroZ7RNzjqzjy1HhUgw3Dit/7w0MhxCz/xIOc9w6V3UPZv 1nafzFp4VtT3IqReHMPhGkqVCHRlTRP2 -----END CERTIFICATE-----Generated at Sat Jun 14 18:49:25 2025 by rpki-client