$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft File: vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft (raw, json) Hash identifier: yf3Y94Tor2R0Ub23thHdg/Vx847eQaTYJsNt9Rz3ufY= Subject key identifier: D0:6B:14:F8:CC:30:50:C1:EB:83:32:32:E8:79:76:5C:5B:5E:4B:55 Authority key identifier: BD:48:BA:FA:32:AD:2E:93:B8:89:CF:3E:38:69:AC:03:4A:17:23:12 Certificate issuer: /CN=A9181EBC/serialNumber=BD48BAFA32AD2E93B889CF3E3869AC034A172312 Certificate serial: 0698 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft Manifest number: 068C Signing time: Sat 14 Jun 2025 21:58:41 +0000 Manifest this update: Sat 14 Jun 2025 21:58:41 +0000 Manifest next update: Sat 21 Jun 2025 21:58:41 +0000 Files and hashes: 1: vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl (hash: JXMgRNPM1PcTtEM6XHfX9ciYQLjzHDUqly//dcGcjkI=) 2: 62D6FB5474D811EB99569279C4F9AE02.roa (hash: d5GYDhOIlD2Y6V3aPBFRagLvqFIYFYSveCQyFaynEfU=) 3: 625827FC74D811EB99569279C4F9AE02.roa (hash: nuHbMZ7jdYXMsw/8MYqt1N+pl2yGg3LZQWJTXeLOE+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1688 (0x698) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EBC, serialNumber=BD48BAFA32AD2E93B889CF3E3869AC034A172312 Validity Not Before: Jun 14 21:58:41 2025 GMT Not After : Jun 21 21:58:41 2025 GMT Subject: CN=684df091-fa77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ba:a3:88:47:45:b9:9d:0b:99:4d:90:17:18: 41:30:0b:9f:94:95:ac:83:70:5a:f2:3f:cb:90:21: f1:c5:00:62:34:bf:b3:c5:46:04:ac:72:e0:0f:63: 8f:88:82:2a:58:68:57:5d:ec:76:2e:82:15:a7:9c: ad:97:91:5e:57:03:fc:0c:37:f0:09:b4:99:cd:b2: f5:49:62:d5:12:cd:c8:f5:d5:f3:ec:68:9d:84:fb: ea:37:6c:d1:82:fb:d8:c5:c3:79:2b:d4:f4:5d:9b: 5a:50:ff:f2:ca:66:ab:09:38:df:38:24:f1:f9:14: b0:81:3e:85:de:4a:12:d9:68:9d:37:c8:71:0b:f9: 64:ef:e7:d7:9b:f7:43:57:52:d6:bc:63:44:60:df: 44:d6:ba:85:ac:0f:cc:e2:4a:35:df:40:fd:76:bf: 5d:c5:a4:32:a2:69:26:d3:1d:0d:26:f9:ac:93:2d: ca:5c:55:b1:7b:2c:21:72:71:34:51:0d:90:95:37: d6:8e:95:90:41:55:6f:1f:68:fc:0b:07:0e:b5:30: d3:5d:b2:0e:e4:e8:e0:4a:56:0b:d8:11:08:f2:87: 10:f8:9e:4f:bf:4d:76:e1:e8:eb:34:5b:cb:46:4d: ed:a2:82:0f:6b:03:e5:cb:52:31:2c:8c:c5:4d:88: fa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6B:14:F8:CC:30:50:C1:EB:83:32:32:E8:79:76:5C:5B:5E:4B:55 X509v3 Authority Key Identifier: keyid:BD:48:BA:FA:32:AD:2E:93:B8:89:CF:3E:38:69:AC:03:4A:17:23:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:cd:f6:5b:57:2c:a4:94:44:e1:9d:0a:0d:ed:90:54:e6:f4: ff:1d:33:db:f0:c9:e6:88:24:d9:2e:ee:88:d5:0a:36:29:ec: 3b:81:c2:e3:ff:23:93:b9:67:b4:76:16:99:b5:4a:79:df:19: 8f:0f:7c:28:4f:ac:b1:09:50:5c:b7:71:31:86:46:5d:62:3e: c5:e8:3a:fc:00:0e:47:a6:6c:f7:c5:a6:20:77:99:31:01:30: d9:a4:b0:e3:38:6c:70:dc:b1:5e:f9:e5:36:bb:00:37:af:8b: 5f:0f:0f:fd:91:32:f8:28:09:7b:ca:54:17:1c:96:1c:ac:91: bb:55:db:0b:28:e8:c8:7d:49:20:bf:87:11:23:01:55:17:f1: 00:f5:85:b6:8c:24:7f:37:21:db:79:0e:26:f8:c0:9b:f2:37: dc:02:70:24:c6:9d:75:0a:57:40:20:35:ca:ff:aa:10:36:d0: bb:a6:ae:53:b7:6f:51:38:3f:9d:b3:90:29:c4:de:77:95:cd: 72:3b:08:9a:97:5a:40:11:17:df:1a:aa:20:f2:47:0a:8a:73: c7:b4:cb:a6:b2:e2:f7:f4:6b:98:0e:8b:56:a5:ab:c8:e7:96: f2:f5:b2:fa:d7:e4:6b:63:88:76:64:fc:78:8d:13:8b:4e:4b: 9c:40:b2:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQkMxMTAvBgNVBAUTKEJENDhCQUZBMzJBRDJFOTNCODg5Q0YzRTM4NjlBQzAz NEExNzIzMTIwHhcNMjUwNjE0MjE1ODQxWhcNMjUwNjIxMjE1ODQxWjAYMRYwFAYD VQQDEw02ODRkZjA5MS1mYTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7qjiEdFuZ0LmU2QFxhBMAuflJWsg3Ba8j/LkCHxxQBiNL+zxUYErHLgD2OP iIIqWGhXXex2LoIVp5ytl5FeVwP8DDfwCbSZzbL1SWLVEs3I9dXz7GidhPvqN2zR gvvYxcN5K9T0XZtaUP/yymarCTjfOCTx+RSwgT6F3koS2WidN8hxC/lk7+fXm/dD V1LWvGNEYN9E1rqFrA/M4ko130D9dr9dxaQyomkm0x0NJvmsky3KXFWxeywhcnE0 UQ2QlTfWjpWQQVVvH2j8CwcOtTDTXbIO5OjgSlYL2BEI8ocQ+J5Pv0124ejrNFvL Rk3tooIPawPly1IxLIzFTYj60wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBrFPjM MFDB64MyMuh5dlxbXktVMB8GA1UdIwQYMBaAFL1IuvoyrS6TuInPPjhprANKFyMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVCQy8zODgzNDE0ODc0 RDYxMUVCQkNCREZBNzNDNEY5QUUwMi92VWk2LWpLdExwTzRpYzgtT0dtc0Ewb1hJ eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZVaTYtakt0THBPNGljOC1PR21zQTBvWEl4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVCQy8zODgzNDE0ODc0RDYxMUVCQkNCREZBNzNDNEY5QUUwMi92VWk2LWpLdExw TzRpYzgtT0dtc0Ewb1hJeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDzfZbVyyklEThnQoN7ZBU5vT/HTPb8MnmiCTZLu6I1Qo2Kew7gcLj /yOTuWe0dhaZtUp53xmPD3woT6yxCVBct3ExhkZdYj7F6Dr8AA5Hpmz3xaYgd5kx ATDZpLDjOGxw3LFe+eU2uwA3r4tfDw/9kTL4KAl7ylQXHJYcrJG7VdsLKOjIfUkg v4cRIwFVF/EA9YW2jCR/NyHbeQ4m+MCb8jfcAnAkxp11CldAIDXK/6oQNtC7pq5T t29ROD+ds5ApxN53lc1yOwial1pAERffGqog8kcKinPHtMumsuL39GuYDotWpavI 55by9bL61+RrY4h2ZPx4jROLTkucQLKY -----END CERTIFICATE-----Generated at Sun Jun 15 09:58:43 2025 by rpki-client