$ rpki-client -vvf rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft File: uHLzTVUlH6dw7MOT0mcSED1VBzc.mft (raw, json) Hash identifier: heeVV9ScgmIQKwUSuX9ZGaUI1zIXfyKbiD6zkJoE1Eo= Subject key identifier: F2:0E:E1:AC:DA:6B:30:A2:C7:41:10:EF:FE:75:0E:59:49:C0:77:BC Authority key identifier: B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37 Certificate issuer: /CN=A917C606/serialNumber=B872F34D55251FA770ECC393D26712103D550737 Certificate serial: 03D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft Manifest number: 03C7 Signing time: Sun 15 Jun 2025 00:22:47 +0000 Manifest this update: Sun 15 Jun 2025 00:22:46 +0000 Manifest next update: Sun 22 Jun 2025 00:22:46 +0000 Files and hashes: 1: uHLzTVUlH6dw7MOT0mcSED1VBzc.crl (hash: iepubyv/ZnPQkmsvMR0sddftN56y00uWHBCgUXBXWt4=) 2: 945375FAF69511EC90A47215C4F9AE02.roa (hash: 93z4oqW7DQ1yUII6DWRvY7Xrtn4iF7Cp5BMrU5CKBhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 978 (0x3d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C606, serialNumber=B872F34D55251FA770ECC393D26712103D550737 Validity Not Before: Jun 15 00:22:46 2025 GMT Not After : Jun 22 00:22:46 2025 GMT Subject: CN=684e1257-9722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:57:99:ae:3f:ba:db:23:b1:c9:2f:69:41:bf: 09:78:02:5f:50:fe:81:64:d4:ad:99:7b:0e:da:e3: c3:16:c4:f3:7b:db:49:81:34:0b:e2:79:47:b5:51: d7:f9:24:4e:0a:70:6f:b2:63:fa:4c:73:bd:7b:9b: dc:9a:47:18:22:b4:ba:62:a2:fc:63:47:cc:93:21: aa:92:c2:7e:a0:26:59:f9:e3:ad:7b:14:79:b9:a3: 15:dc:11:90:a1:bf:54:e9:1e:48:ff:b6:44:ff:30: eb:0d:64:b1:43:04:46:59:e6:0a:86:2a:b1:d7:e7: 25:11:fb:08:a3:21:7d:55:9f:ac:f3:4c:41:8f:4d: cf:7a:15:3b:f6:88:f4:d5:70:4a:d0:2f:e4:2a:b6: b5:d5:bb:78:16:41:a8:a5:77:28:50:65:33:05:db: 06:d8:31:33:07:90:c5:d2:92:84:18:2c:f3:f3:41: a0:6f:87:9f:e2:4d:ff:68:b4:97:d1:61:7a:a3:e0: 95:43:be:bb:18:50:1e:dd:59:4d:65:56:e2:b4:fd: df:9b:e1:21:c4:2c:b7:70:5e:e0:15:4e:ec:ca:32: 8e:aa:09:52:61:2b:c0:3e:cf:db:5c:c2:c5:bb:f7: 72:6b:6e:e4:a8:07:14:84:ff:d3:7c:ab:a4:2a:f1: bd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0E:E1:AC:DA:6B:30:A2:C7:41:10:EF:FE:75:0E:59:49:C0:77:BC X509v3 Authority Key Identifier: keyid:B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:54:44:6a:e0:53:08:ea:ba:3a:bc:84:c8:fd:26:ad:9e:8d: 54:e5:0d:70:85:d8:67:90:eb:e6:13:76:f4:3f:77:4b:e0:5d: 30:76:67:84:31:07:17:cd:79:05:23:a5:f2:26:0d:df:4b:58: e3:89:33:4d:69:92:bb:3c:c7:6b:6a:52:de:fe:11:ad:e8:80: c9:4a:1a:b8:aa:96:e2:b2:d9:4b:42:b9:34:9a:cc:b0:b4:88: 35:f4:ab:fd:44:ca:ff:6f:02:91:f1:93:ad:57:c1:b7:0f:58: 65:68:81:45:30:c5:53:39:ec:8f:7a:67:2a:81:b3:06:64:7d: 03:29:14:9e:be:fb:ac:cf:e8:b0:71:29:c2:07:49:48:c3:26: dd:9a:96:33:84:84:d1:da:b2:d5:b7:44:43:20:7b:17:47:e6: fd:42:15:79:7a:fd:e3:42:42:a7:b7:6b:79:fd:a0:2e:1b:ca: 79:e5:0a:3d:3a:b0:d9:a1:ef:3f:ca:87:f6:db:b5:27:c8:d1: 11:a9:5e:e2:34:d0:38:72:ca:0a:4d:47:0a:4f:69:d7:1b:04: a1:b2:84:7b:b9:79:c8:f7:60:78:7d:6e:ae:51:8e:aa:6c:62: 1e:d1:71:e8:4d:f6:78:b7:da:11:ea:76:37:e1:a2:ff:6c:09: 1c:80:7e:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2MDYxMTAvBgNVBAUTKEI4NzJGMzRENTUyNTFGQTc3MEVDQzM5M0QyNjcxMjEw M0Q1NTA3MzcwHhcNMjUwNjE1MDAyMjQ2WhcNMjUwNjIyMDAyMjQ2WjAYMRYwFAYD VQQDEw02ODRlMTI1Ny05NzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6VeZrj+62yOxyS9pQb8JeAJfUP6BZNStmXsO2uPDFsTze9tJgTQL4nlHtVHX +SROCnBvsmP6THO9e5vcmkcYIrS6YqL8Y0fMkyGqksJ+oCZZ+eOtexR5uaMV3BGQ ob9U6R5I/7ZE/zDrDWSxQwRGWeYKhiqx1+clEfsIoyF9VZ+s80xBj03PehU79oj0 1XBK0C/kKra11bt4FkGopXcoUGUzBdsG2DEzB5DF0pKEGCzz80Ggb4ef4k3/aLSX 0WF6o+CVQ767GFAe3VlNZVbitP3fm+EhxCy3cF7gFU7syjKOqglSYSvAPs/bXMLF u/dya27kqAcUhP/TfKukKvG9CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIO4aza azCix0EQ7/51DllJwHe8MB8GA1UdIwQYMBaAFLhy801VJR+ncOzDk9JnEhA9VQc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzYwNi83QzhCMTM3QThG QzkxMUVDODE1NURCNjFDNEY5QUUwMi91SEx6VFZVbEg2ZHc3TU9UMG1jU0VEMVZC emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VITHpUVlVsSDZkdzdNT1QwbWNTRUQxVkJ6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzYwNi83QzhCMTM3QThGQzkxMUVDODE1NURCNjFDNEY5QUUwMi91SEx6VFZVbEg2 ZHc3TU9UMG1jU0VEMVZCemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWVERq4FMI6ro6vITI/Satno1U5Q1whdhnkOvmE3b0P3dL4F0wdmeE MQcXzXkFI6XyJg3fS1jjiTNNaZK7PMdralLe/hGt6IDJShq4qpbistlLQrk0msyw tIg19Kv9RMr/bwKR8ZOtV8G3D1hlaIFFMMVTOeyPemcqgbMGZH0DKRSevvusz+iw cSnCB0lIwybdmpYzhITR2rLVt0RDIHsXR+b9QhV5ev3jQkKnt2t5/aAuG8p55Qo9 OrDZoe8/yof227UnyNERqV7iNNA4csoKTUcKT2nXGwShsoR7uXnI92B4fW6uUY6q bGIe0XHoTfZ4t9oR6nY34aL/bAkcgH4F -----END CERTIFICATE-----Generated at Sun Jun 15 08:20:29 2025 by rpki-client