$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft File: UyhhbneUVH65zpK0qPBF5LLMwPw.mft (raw, json) Hash identifier: 48xa8psT1w46oODDmzHf1zY+7EitD1h8MMPDQ4ToCtc= Subject key identifier: 6E:1C:FB:57:0B:B5:C0:42:9B:5A:39:1D:7E:D4:E0:61:D5:74:EE:5E Authority key identifier: 53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC Certificate issuer: /CN=A91847A0/serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC Certificate serial: 1D17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft Manifest number: 1D0B Signing time: Sat 14 Jun 2025 16:07:29 +0000 Manifest this update: Sat 14 Jun 2025 16:07:28 +0000 Manifest next update: Sat 21 Jun 2025 16:07:28 +0000 Files and hashes: 1: UyhhbneUVH65zpK0qPBF5LLMwPw.crl (hash: 9pvnL14BkxKvZkoNWiN4rhVFUaurCnMWWuAp7BFInnE=) 2: 82E0D450BC5011E6B01A8D4CC4F9AE02.roa (hash: 0pFtdAh/nKnP5eoxsGxODsFcMEqhXHUTJ4P3f5IMFhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7447 (0x1d17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A0, serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC Validity Not Before: Jun 14 16:07:28 2025 GMT Not After : Jun 21 16:07:28 2025 GMT Subject: CN=684d9e41-3d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:98:f8:4a:2c:2b:2e:98:8d:e6:36:0d:0b:63: cf:d4:3a:f7:a1:c8:04:fa:fa:46:e6:cc:7b:a2:85: f1:03:d2:fe:c6:5e:65:63:17:7c:f3:85:9b:70:85: dc:8b:f2:f1:d5:26:f1:82:6b:a4:62:9d:ea:20:55: b5:3b:b4:04:bf:70:f5:18:50:52:09:b4:0f:a1:ec: c1:12:cd:d2:40:6c:1d:a7:85:f0:63:2d:18:1d:b6: c2:ee:6c:b7:ec:4b:26:17:c0:18:dd:b4:6b:cb:b8: ca:89:46:f2:64:16:d4:a1:10:db:8f:5a:38:98:52: 56:2b:9a:2b:b0:4b:64:4f:8a:b2:a8:cc:14:e2:46: 0a:77:3b:3f:30:82:49:81:bf:60:97:41:fb:aa:ad: 7f:e3:2b:15:30:b7:93:c1:eb:b8:e8:bc:8b:2c:ca: 3d:49:39:fa:4f:16:a9:ed:4a:bb:52:e4:bb:64:1d: db:d5:60:e2:07:44:6a:27:12:d3:d7:2e:90:17:73: 91:37:eb:4f:f9:81:a9:4d:28:06:12:93:80:11:96: 34:35:12:df:00:02:ca:b3:23:03:a9:61:2d:ae:78: b2:65:30:84:f4:61:11:31:81:5a:98:a9:c1:ae:20: 05:ec:81:62:88:c9:b4:1a:76:bf:d6:f9:f1:3b:fe: 59:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1C:FB:57:0B:B5:C0:42:9B:5A:39:1D:7E:D4:E0:61:D5:74:EE:5E X509v3 Authority Key Identifier: keyid:53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:c5:87:c8:fb:da:02:a8:f2:81:51:cb:58:20:f2:31:af:5e: 25:a0:52:d8:ce:15:98:b6:a4:2f:16:68:f3:6d:f7:75:22:e9: 29:59:a1:3b:3e:7c:93:f1:56:ba:9d:65:02:ae:d9:51:89:e9: 4a:a4:b0:d6:ae:83:71:6d:c7:7a:7d:63:48:8c:dd:67:ff:de: e5:f0:c4:86:0c:55:b5:24:dc:2f:78:ac:cc:91:1b:51:70:3a: 15:67:fc:40:71:b8:ac:81:47:13:4a:62:8b:52:f8:78:bf:6c: 12:0a:61:fd:aa:62:d0:f6:ea:0f:76:01:8c:28:70:57:52:6e: 69:73:cf:16:b4:43:97:ec:fc:f7:cc:cb:3d:4e:99:65:79:0a: 10:2e:14:54:56:c7:0d:35:91:42:4f:c7:ae:b8:d8:fe:77:6d: 74:48:86:a7:5d:34:ca:a6:bc:47:b5:f6:7a:71:cb:fd:9d:2d: b4:ca:4b:41:47:3e:54:f5:67:45:3c:2b:47:55:df:e9:d0:26: b9:32:7d:b6:1e:d4:b0:e0:9c:fb:73:f8:6e:2e:00:0d:8f:04: 76:4e:35:58:42:f3:1c:0b:8e:93:00:dd:cd:7a:d5:95:1e:8d: 7c:d7:e2:04:2f:e0:cc:87:8e:e9:ae:4e:71:2b:e1:c5:17:d2: 17:ba:2c:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTAxMTAvBgNVBAUTKDUzMjg2MTZFNzc5NDU0N0VCOUNFOTJCNEE4RjA0NUU0 QjJDQ0MwRkMwHhcNMjUwNjE0MTYwNzI4WhcNMjUwNjIxMTYwNzI4WjAYMRYwFAYD VQQDEw02ODRkOWU0MS0zZDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpj4SiwrLpiN5jYNC2PP1Dr3ocgE+vpG5sx7ooXxA9L+xl5lYxd884WbcIXc i/Lx1SbxgmukYp3qIFW1O7QEv3D1GFBSCbQPoezBEs3SQGwdp4XwYy0YHbbC7my3 7EsmF8AY3bRry7jKiUbyZBbUoRDbj1o4mFJWK5orsEtkT4qyqMwU4kYKdzs/MIJJ gb9gl0H7qq1/4ysVMLeTweu46LyLLMo9STn6Txap7Uq7UuS7ZB3b1WDiB0RqJxLT 1y6QF3ORN+tP+YGpTSgGEpOAEZY0NRLfAALKsyMDqWEtrniyZTCE9GERMYFamKnB riAF7IFiiMm0Gna/1vnxO/5ZJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4c+1cL tcBCm1o5HX7U4GHVdO5eMB8GA1UdIwQYMBaAFFMoYW53lFR+uc6StKjwReSyzMD8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMC8wRTRBRDEyOEJD NEYxMUU2QkFGMUMyNEFDNEY5QUUwMi9VeWhoYm5lVVZINjV6cEswcVBCRjVMTE13 UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5aGhibmVVVkg2NXpwSzBxUEJGNUxMTXdQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMC8wRTRBRDEyOEJDNEYxMUU2QkFGMUMyNEFDNEY5QUUwMi9VeWhoYm5lVVZI NjV6cEswcVBCRjVMTE13UHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnxYfI+9oCqPKBUctYIPIxr14loFLYzhWYtqQvFmjzbfd1IukpWaE7 PnyT8Va6nWUCrtlRielKpLDWroNxbcd6fWNIjN1n/97l8MSGDFW1JNwveKzMkRtR cDoVZ/xAcbisgUcTSmKLUvh4v2wSCmH9qmLQ9uoPdgGMKHBXUm5pc88WtEOX7Pz3 zMs9TplleQoQLhRUVscNNZFCT8euuNj+d210SIanXTTKprxHtfZ6ccv9nS20yktB Rz5U9WdFPCtHVd/p0Ca5Mn22HtSw4Jz7c/huLgANjwR2TjVYQvMcC46TAN3NetWV Ho181+IEL+DMh47prk5xK+HFF9IXuiyV -----END CERTIFICATE-----Generated at Sun Jun 15 09:29:24 2025 by rpki-client