$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft File: U0TWuzfqDMOR0SQgetmV_Nd7npU.mft (raw, json) Hash identifier: uisfe7VtgLVYlqQtCI1aXViOD3wp1l6s6stu0kIYSSY= Subject key identifier: C5:D4:34:00:F1:A7:EB:6A:87:34:06:BE:23:50:71:49:D9:01:44:7B Authority key identifier: 53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95 Certificate issuer: /CN=A91881D5/serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft Manifest number: 71 Signing time: Sun 15 Jun 2025 06:02:33 +0000 Manifest this update: Sun 15 Jun 2025 06:02:32 +0000 Manifest next update: Sun 22 Jun 2025 06:02:32 +0000 Files and hashes: 1: U0TWuzfqDMOR0SQgetmV_Nd7npU.crl (hash: d++UdCLIJU820igxqLgpiHL58vTMZyc4e7ua95wSJMw=) 2: 0C8BE222C89F11EF972B8B0FC4F9AE02.roa (hash: R1ZRqn0ylt//iP3Dpq4PDjSTmlLC/ZvrxfTWyncyjuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91881D5, serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95 Validity Not Before: Jun 15 06:02:32 2025 GMT Not After : Jun 22 06:02:32 2025 GMT Subject: CN=684e61f9-ce0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:66:f0:a6:f9:f3:74:ec:3f:9b:2b:bb:c5:8d: cc:10:81:8a:8e:00:38:91:57:9b:6f:31:04:f1:cb: dc:e0:aa:fb:d1:bd:36:7f:15:93:91:ba:12:53:16: 64:e0:a1:27:b1:b9:30:fc:9d:7a:49:bc:e0:b3:59: a6:b8:87:ca:76:db:9b:ef:ff:0b:39:78:62:a3:99: 3b:80:d9:5c:45:e1:7c:b3:31:c2:61:7f:e3:d8:90: df:52:6a:ec:61:34:74:6f:01:af:9d:73:84:c9:98: 00:54:e8:3b:a8:ac:e3:ff:74:48:47:56:9e:34:0d: 93:af:4e:9b:40:58:ae:89:89:4e:d9:10:31:75:82: 28:c7:ae:95:06:3d:ba:c9:f8:3b:38:41:3f:a1:ad: 07:04:93:da:f9:d8:f7:38:1d:c8:72:ba:3b:e2:ef: c1:ec:36:34:02:5b:46:40:41:42:ea:7b:a6:3a:bd: d1:1a:17:08:8a:29:d1:e1:c0:44:dd:7d:5d:3d:f9: 6e:f9:ae:a8:1d:52:09:e3:f7:13:b4:33:ed:7a:3a: 7b:40:25:6f:57:69:dc:ac:02:93:ee:a5:d5:56:b8: 77:56:5a:f2:db:60:e9:89:94:12:71:e6:78:ed:b3: ca:03:82:c6:bb:b2:45:6c:99:7c:37:58:4a:ef:ad: cd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D4:34:00:F1:A7:EB:6A:87:34:06:BE:23:50:71:49:D9:01:44:7B X509v3 Authority Key Identifier: keyid:53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e9:4a:d6:c4:3b:9c:c5:4c:45:21:38:56:58:f3:43:43:06: ec:df:6b:61:08:ce:3a:21:e0:12:e3:4c:12:39:5b:e5:24:a8: 15:43:b5:c3:60:17:88:a2:31:a4:83:bb:0f:68:73:7b:31:0c: d7:62:ac:c4:1b:bb:48:21:15:d9:0b:a0:00:f0:3a:6d:4b:8a: fd:4a:44:f7:cd:dd:41:49:dd:d4:1b:a9:fa:77:4b:37:92:e3: 19:d1:1d:13:26:94:1d:18:4b:57:f9:b9:bd:b6:33:17:e2:e1: 77:72:92:96:d6:c4:a4:07:ee:93:7e:07:21:7c:b5:99:bf:ba: a9:23:7c:79:63:81:32:f7:ea:99:b0:93:6a:7b:b2:01:e9:d9: c7:59:d7:03:fc:36:f9:a8:3e:b6:b9:c3:36:9f:10:53:81:a7: 88:d5:3d:93:ed:f1:76:be:96:d6:29:68:eb:b1:3f:46:ef:9c: 21:b1:8c:40:ef:be:7c:87:7a:21:f2:1f:a9:43:fe:f1:9e:a7: a6:b0:3f:73:aa:48:e6:de:f0:a7:5c:d2:8e:98:e3:43:22:72: 28:0b:bd:1c:22:99:b6:4f:50:31:4f:ab:7a:9f:59:ad:50:2e: 42:dc:0a:37:09:1c:8c:a5:31:a9:3d:b3:27:b6:f7:ec:16:93: 7b:bc:68:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODFENTExMC8GA1UEBRMoNTM0NEQ2QkIzN0VBMENDMzkxRDEyNDIwN0FEOTk1RkNE NzdCOUU5NTAeFw0yNTA2MTUwNjAyMzJaFw0yNTA2MjIwNjAyMzJaMBgxFjAUBgNV BAMTDTY4NGU2MWY5LWNlMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHZvCm+fN07D+bK7vFjcwQgYqOADiRV5tvMQTxy9zgqvvRvTZ/FZORuhJTFmTg oSexuTD8nXpJvOCzWaa4h8p225vv/ws5eGKjmTuA2VxF4XyzMcJhf+PYkN9Sauxh NHRvAa+dc4TJmABU6DuorOP/dEhHVp40DZOvTptAWK6JiU7ZEDF1gijHrpUGPbrJ +Ds4QT+hrQcEk9r52Pc4Hchyujvi78HsNjQCW0ZAQULqe6Y6vdEaFwiKKdHhwETd fV09+W75rqgdUgnj9xO0M+16OntAJW9XadysApPupdVWuHdWWvLbYOmJlBJx5njt s8oDgsa7skVsmXw3WErvrc1/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxdQ0APGn 62qHNAa+I1BxSdkBRHswHwYDVR0jBBgwFoAUU0TWuzfqDMOR0SQgetmV/Nd7npUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4MUQ1LzY2NURCN0M2QTdD MDExRUY5OEJBNUUyQUM0RjlBRTAyL1UwVFd1emZxRE1PUjBTUWdldG1WX05kN25w VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVTBUV3V6ZnFETU9SMFNRZ2V0bVZfTmQ3bnBVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 MUQ1LzY2NURCN0M2QTdDMDExRUY5OEJBNUUyQUM0RjlBRTAyL1UwVFd1emZxRE1P UjBTUWdldG1WX05kN25wVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABzpStbEO5zFTEUhOFZY80NDBuzfa2EIzjoh4BLjTBI5W+UkqBVDtcNg F4iiMaSDuw9oc3sxDNdirMQbu0ghFdkLoADwOm1Liv1KRPfN3UFJ3dQbqfp3SzeS 4xnRHRMmlB0YS1f5ub22Mxfi4XdykpbWxKQH7pN+ByF8tZm/uqkjfHljgTL36pmw k2p7sgHp2cdZ1wP8NvmoPra5wzafEFOBp4jVPZPt8Xa+ltYpaOuxP0bvnCGxjEDv vnyHeiHyH6lD/vGep6awP3OqSObe8Kdc0o6Y40MicigLvRwimbZPUDFPq3qfWa1Q LkLcCjcJHIylMak9sye29+wWk3u8aEY= -----END CERTIFICATE-----Generated at Sun Jun 15 08:35:19 2025 by rpki-client