$ rpki-client -vvf rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft File: _UXMVAPGTPsjCqfe7RC8aCKNdHM.mft (raw, json) Hash identifier: ZZTuaXg95hqBZISfNNXUL/cSi6HD7l6xIGG1HQ/vS4s= Subject key identifier: B0:74:23:1F:0D:A0:9C:4E:33:77:5F:B1:AA:41:99:DF:12:CB:9A:05 Authority key identifier: FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73 Certificate issuer: /CN=A9186BCC/serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft Manifest number: 014E Signing time: Fri 13 Jun 2025 03:09:25 +0000 Manifest this update: Fri 13 Jun 2025 03:09:24 +0000 Manifest next update: Fri 20 Jun 2025 03:09:24 +0000 Files and hashes: 1: _UXMVAPGTPsjCqfe7RC8aCKNdHM.crl (hash: s+dtYtxid2jVxC/LNyPKXweeqIbcH5NYD6KQuZPPxc8=) 2: 6B62D92248D511EEBE05CC7FC4F9AE02.roa (hash: 3T/MseZ6JXWgLESYBTBgDLBC7fpGasfK+B1pI77N9vU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186BCC, serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473 Validity Not Before: Jun 13 03:09:24 2025 GMT Not After : Jun 20 03:09:24 2025 GMT Subject: CN=684b9664-418e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:86:57:99:c9:a6:fe:75:c2:5e:3b:71:ee:75: 8b:af:50:22:da:dd:8b:62:d3:8f:82:d4:e5:89:2e: 49:9e:01:ec:71:01:68:6f:73:1a:c1:7f:e8:18:5b: 46:ab:6a:2f:c9:bc:7c:a9:69:bc:69:8e:43:f1:23: b2:b5:1f:58:3a:a0:6f:f1:64:5f:73:b3:c0:c7:a6: d1:75:c9:7d:73:a4:eb:79:f0:6e:2a:44:13:6c:2c: 90:d3:b5:20:d2:91:5d:ce:88:51:cf:97:28:4c:93: 14:46:7e:d3:55:29:17:70:54:bc:e3:8e:ca:52:1c: ec:45:af:68:ef:09:4f:81:49:18:b7:8f:e7:27:fb: 84:04:88:d5:0e:65:ab:2b:9a:6e:50:cc:46:c1:26: 55:03:90:32:8f:f2:29:03:ab:2a:51:59:c5:98:5e: 2a:d1:a7:5e:71:e1:74:6d:ae:0c:77:14:36:2c:02: 89:4f:97:25:02:c3:d6:b4:da:cd:d1:91:76:b1:40: e4:fd:17:b3:d1:3c:79:f4:d9:45:df:71:a5:18:c0: 54:9b:46:ee:57:08:ce:e7:7a:ee:c8:d9:dc:bd:d9: e5:cf:b3:cd:ba:69:70:57:a1:22:57:04:44:93:38: 48:3b:d3:dc:f8:b5:6d:4a:ae:a2:ff:77:25:8c:b0: 2a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:74:23:1F:0D:A0:9C:4E:33:77:5F:B1:AA:41:99:DF:12:CB:9A:05 X509v3 Authority Key Identifier: keyid:FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:dd:ee:1a:74:4d:80:03:74:76:95:ee:22:e6:29:b1:d9:34: 31:28:20:c3:d0:ab:bf:05:06:6e:6d:24:2d:b1:50:5a:ff:bc: b4:36:6d:44:2e:72:03:fc:47:0f:da:fd:4d:aa:89:23:47:3c: 33:7e:2b:68:6e:d0:e6:16:76:0d:f7:45:f3:2a:3f:ea:b4:54: 08:45:91:9f:78:c7:a9:66:c4:df:3f:be:12:00:45:c9:5f:75: 5e:8f:81:8f:5d:a5:aa:6c:c0:58:51:57:d6:d3:7a:0f:f1:85: a4:4c:6f:5a:7e:5d:7f:4a:c1:5c:02:7a:6e:55:7e:a9:02:f5: 72:03:c4:fc:53:9e:23:e8:b1:28:89:aa:f2:7a:9b:64:b3:cd: 92:77:9d:2a:1e:e0:63:2d:10:ed:a5:1c:33:ff:64:a1:49:14: b6:5b:7f:4d:36:f6:1c:23:e8:ac:97:df:f6:41:67:81:40:fe: 3c:5c:29:b7:b4:6b:b2:2b:e0:b2:ec:cd:e7:e0:7c:7b:cf:36: ab:43:d5:1d:af:ab:41:1b:f1:e4:3c:8a:65:a8:eb:15:7c:2b: 51:0a:b3:f0:f2:b6:6d:24:74:b0:79:44:49:85:24:3b:54:c4: cd:79:4f:88:8b:bf:01:55:77:49:fc:e5:31:43:75:6d:8b:85: e5:83:e1:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCQ0MxMTAvBgNVBAUTKEZENDVDQzU0MDNDNjRDRkIyMzBBQTdERUVEMTBCQzY4 MjI4RDc0NzMwHhcNMjUwNjEzMDMwOTI0WhcNMjUwNjIwMDMwOTI0WjAYMRYwFAYD VQQDEw02ODRiOTY2NC00MThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYZXmcmm/nXCXjtx7nWLr1Ai2t2LYtOPgtTliS5JngHscQFob3MawX/oGFtG q2ovybx8qWm8aY5D8SOytR9YOqBv8WRfc7PAx6bRdcl9c6TrefBuKkQTbCyQ07Ug 0pFdzohRz5coTJMURn7TVSkXcFS8447KUhzsRa9o7wlPgUkYt4/nJ/uEBIjVDmWr K5puUMxGwSZVA5Ayj/IpA6sqUVnFmF4q0adeceF0ba4MdxQ2LAKJT5clAsPWtNrN 0ZF2sUDk/Rez0Tx59NlF33GlGMBUm0buVwjO53ruyNncvdnlz7PNumlwV6EiVwRE kzhIO9Pc+LVtSq6i/3cljLAqXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLB0Ix8N oJxOM3dfsapBmd8Sy5oFMB8GA1UdIwQYMBaAFP1FzFQDxkz7Iwqn3u0QvGgijXRz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkJDQy85MDRFNTBGMDQ4 RDQxMUVFQjVENkExN0JDNEY5QUUwMi9fVVhNVkFQR1RQc2pDcWZlN1JDOGFDS05k SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VWE1WQVBHVFBzakNxZmU3UkM4YUNLTmRITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkJDQy85MDRFNTBGMDQ4RDQxMUVFQjVENkExN0JDNEY5QUUwMi9fVVhNVkFQR1RQ c2pDcWZlN1JDOGFDS05kSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC3e4adE2AA3R2le4i5imx2TQxKCDD0Ku/BQZubSQtsVBa/7y0Nm1E LnID/EcP2v1NqokjRzwzfitobtDmFnYN90XzKj/qtFQIRZGfeMepZsTfP74SAEXJ X3Vej4GPXaWqbMBYUVfW03oP8YWkTG9afl1/SsFcAnpuVX6pAvVyA8T8U54j6LEo iaryeptks82Sd50qHuBjLRDtpRwz/2ShSRS2W39NNvYcI+isl9/2QWeBQP48XCm3 tGuyK+Cy7M3n4Hx7zzarQ9Udr6tBG/HkPIplqOsVfCtRCrPw8rZtJHSweURJhSQ7 VMTNeU+Ii78BVXdJ/OUxQ3Vti4Xlg+Fn -----END CERTIFICATE-----Generated at Sat Jun 14 18:37:02 2025 by rpki-client