$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft File: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft (raw, json) Hash identifier: GcxCis4+yNTrtKZTCX+FRazg5wWt2P98/5gt18O3RTk= Subject key identifier: 44:CF:F4:08:02:79:97:2C:EC:27:79:3C:FF:64:27:0F:00:C4:9A:7D Authority key identifier: BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 Certificate issuer: /CN=A91836DB/serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft Manifest number: 45 Signing time: Thu 19 Jun 2025 06:46:22 +0000 Manifest this update: Thu 19 Jun 2025 06:46:22 +0000 Manifest next update: Thu 26 Jun 2025 06:46:22 +0000 Files and hashes: 1: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl (hash: fBrE+qeG8oXbvBOSk1N4Iy1vhAjVNYJB5yGqVpBFkEM=) 2: C7001B70E45E11EFA2243E47C4F9AE02.roa (hash: wGQDHFlAfYrGUZehEya3kdO0mpkCJUDStwU2YZOiDKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836DB, serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Validity Not Before: Jun 19 06:46:22 2025 GMT Not After : Jun 26 06:46:22 2025 GMT Subject: CN=6853b23e-3296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fe:19:6c:16:f6:a7:c7:71:3c:ba:87:87:71: 58:3f:13:29:47:fe:68:c7:30:5b:bf:49:5b:8b:9f: 42:87:ae:cc:c9:22:cd:53:22:bb:ac:d9:da:33:09: dd:95:ca:92:6c:b3:19:67:49:e3:3b:bb:1a:05:48: 75:27:d8:13:bb:0c:1d:26:c1:71:85:83:a4:3d:b5: 62:69:9b:ce:f7:82:4e:c3:0d:6d:56:6d:4c:be:91: 0e:89:2d:4e:07:f4:f3:61:f7:c2:10:14:fb:31:b8: 8c:31:e3:af:d0:fe:7c:7b:13:f0:8c:fa:37:c6:65: 31:2e:12:ca:b5:39:43:8a:d2:57:b5:32:8d:9d:d3: 99:10:be:55:3f:76:fe:fb:03:2a:a7:87:3b:7a:a0: 7d:14:93:d9:31:cc:96:80:57:b8:40:b9:6e:66:41: 59:c9:41:fb:55:13:f9:82:45:04:39:18:70:77:41: ac:12:ca:72:cb:12:5b:f0:c9:df:07:a6:24:c6:83: 6f:ed:9f:72:d4:b4:c4:6b:08:6c:f0:cc:52:e4:d5: 1a:07:9c:cd:20:29:40:ed:0b:6f:78:b3:7c:3a:bd: fa:56:f4:31:86:04:c5:8f:91:69:3e:08:7f:7b:df: 01:2d:b1:fc:cf:91:db:57:fd:e4:83:54:47:f1:e7: ae:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CF:F4:08:02:79:97:2C:EC:27:79:3C:FF:64:27:0F:00:C4:9A:7D X509v3 Authority Key Identifier: keyid:BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:2c:32:31:a5:bb:7d:06:ea:50:b4:f1:be:ac:b5:d0:9f:c9: 6b:2e:0c:ed:6e:77:63:89:c8:82:84:d1:35:04:67:83:0a:62: e1:ca:eb:23:72:a0:3a:22:1f:7e:e5:fa:6a:86:6a:d5:28:9f: 4e:8f:17:63:d8:94:36:df:7b:45:52:2e:02:8a:20:29:71:c8: d7:b7:d8:8b:17:10:e3:1e:26:54:cb:74:44:b5:d5:9f:94:e0: 2b:e0:27:38:81:1c:91:15:6b:a9:bf:c0:90:d4:b3:81:6a:a2: d5:87:6c:54:68:4c:3a:5a:bf:57:0a:4b:82:69:7e:1d:d6:80: 3d:86:eb:17:0a:0d:71:43:e6:79:c1:10:ac:c6:80:a3:39:7a: d7:f8:82:25:99:a8:3f:5d:da:77:86:87:57:48:ca:88:34:a5: 31:0d:0c:23:fc:1e:2c:b2:93:66:d1:31:30:57:01:e4:2e:f1: 0d:9b:61:6d:e8:72:56:24:3a:70:ca:e8:40:3f:1e:3b:d3:9a: 3e:a5:e6:fa:5a:88:b9:48:0a:b3:2b:4a:02:ef:1c:8d:db:89: 2d:0b:aa:36:36:fa:b3:d8:5c:8f:1c:4a:d0:f4:d6:54:29:9f: 48:e3:cf:d0:c4:17:da:14:75:6f:4f:f9:4b:65:69:76:60:39: c7:b9:9a:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzZEQjExMC8GA1UEBRMoQkI1MDVERkYzMkVDRDQ5MkJGMUVGRjdGRTM5NEYxMjg5 MEFBNjczNDAeFw0yNTA2MTkwNjQ2MjJaFw0yNTA2MjYwNjQ2MjJaMBgxFjAUBgNV BAMTDTY4NTNiMjNlLTMyOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI/hlsFvanx3E8uoeHcVg/EylH/mjHMFu/SVuLn0KHrszJIs1TIrus2dozCd2V ypJssxlnSeM7uxoFSHUn2BO7DB0mwXGFg6Q9tWJpm873gk7DDW1WbUy+kQ6JLU4H 9PNh98IQFPsxuIwx46/Q/nx7E/CM+jfGZTEuEsq1OUOK0le1Mo2d05kQvlU/dv77 Ayqnhzt6oH0Uk9kxzJaAV7hAuW5mQVnJQftVE/mCRQQ5GHB3QawSynLLElvwyd8H piTGg2/tn3LUtMRrCGzwzFLk1RoHnM0gKUDtC294s3w6vfpW9DGGBMWPkWk+CH97 3wEtsfzPkdtX/eSDVEfx565DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURM/0CAJ5 lyzsJ3k8/2QnDwDEmn0wHwYDVR0jBBgwFoAUu1Bd/zLs1JK/Hv9/45TxKJCqZzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNkRCLzUxQkUwMTI0RTQ1 RTExRUZBMTU2Mjg0NkM0RjlBRTAyL3UxQmRfekxzMUpLX0h2OV80NVR4S0pDcVp6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdTFCZF96THMxSktfSHY5XzQ1VHhLSkNxWnpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz NkRCLzUxQkUwMTI0RTQ1RTExRUZBMTU2Mjg0NkM0RjlBRTAyL3UxQmRfekxzMUpL X0h2OV80NVR4S0pDcVp6US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEgsMjGlu30G6lC08b6stdCfyWsuDO1ud2OJyIKE0TUEZ4MKYuHK6yNy oDoiH37l+mqGatUon06PF2PYlDbfe0VSLgKKIClxyNe32IsXEOMeJlTLdES11Z+U 4CvgJziBHJEVa6m/wJDUs4FqotWHbFRoTDpav1cKS4Jpfh3WgD2G6xcKDXFD5nnB EKzGgKM5etf4giWZqD9d2neGh1dIyog0pTENDCP8Hiyyk2bRMTBXAeQu8Q2bYW3o clYkOnDK6EA/HjvTmj6l5vpaiLlICrMrSgLvHI3biS0LqjY2+rPYXI8cStD01lQp n0jjz9DEF9oUdW9P+UtlaXZgOce5muM= -----END CERTIFICATE-----Generated at Fri Jun 20 17:34:32 2025 by rpki-client