$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft File: uf67oJzxCyh-7SzlZyKzyaDvEv8.mft (raw, json) Hash identifier: oov4affQnqUebWNSkDDp2Mw58w9rJH58sbyW3YzjSnQ= Subject key identifier: 45:A8:54:F3:DC:C2:04:EF:8A:B0:71:EB:B1:43:10:4F:72:CE:47:C2 Authority key identifier: B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF Certificate issuer: /CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Certificate serial: 098D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft Manifest number: 0987 Signing time: Thu 12 Jun 2025 19:53:40 +0000 Manifest this update: Thu 12 Jun 2025 19:53:40 +0000 Manifest next update: Thu 19 Jun 2025 19:53:40 +0000 Files and hashes: 1: uf67oJzxCyh-7SzlZyKzyaDvEv8.crl (hash: ItRPNNzpgpvom56Kn/dktOl/W/zqrR1MCwK9eBhoGrY=) 2: 27030ADA8EB211EA9D09090FC4F9AE02.roa (hash: KzsEqYZi4RymBpkz6QVCB3ieArM+VhARkW/2ksmdU8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2445 (0x98d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB7A, serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Validity Not Before: Jun 12 19:53:40 2025 GMT Not After : Jun 19 19:53:40 2025 GMT Subject: CN=684b3044-7225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a1:cc:25:5c:c9:07:b8:a7:28:b3:56:08:3b: 78:dd:fe:67:b1:39:09:86:0f:df:59:15:c6:b7:76: 8f:3e:aa:7b:e5:92:bb:94:15:54:95:f6:62:77:07: ca:ad:c2:0c:5d:f1:5d:a3:f5:4d:2c:7a:86:10:a7: c9:d3:f5:7e:a1:74:e4:4c:15:7e:0d:de:f8:63:ed: 0c:61:0f:c0:ab:a5:77:d6:6b:58:bc:57:4f:c9:09: a4:b0:66:b4:98:b7:96:07:32:68:e2:a4:b1:28:cb: 55:93:76:8a:2b:49:a9:d0:ab:42:5c:46:c3:44:74: 84:91:39:95:34:4a:f5:95:f4:7d:51:18:82:83:81: ee:52:0f:ff:7d:a0:a7:f8:df:cb:a0:b6:23:8f:f5: 10:a4:83:ca:9b:12:36:0a:79:67:99:af:cf:7b:da: d7:91:31:95:7d:43:d3:24:b7:ad:6e:37:1e:05:3f: 0a:23:39:fd:8a:df:43:62:d4:21:c8:47:67:60:c1: 46:4e:48:e8:d0:d3:ed:12:c9:6a:64:e0:61:32:05: d7:76:83:36:0a:aa:1f:98:f2:d8:38:bd:44:a7:72: 2b:59:d7:02:32:0d:9b:ca:cf:e7:60:94:96:f2:74: 85:27:c6:e5:dc:29:2e:3f:23:dc:fa:8d:cc:f0:0d: c7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A8:54:F3:DC:C2:04:EF:8A:B0:71:EB:B1:43:10:4F:72:CE:47:C2 X509v3 Authority Key Identifier: keyid:B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:e5:12:de:97:64:36:db:c2:49:85:34:a0:bd:1c:36:0e:9a: 04:59:5f:a9:f5:c9:6f:d4:e6:c7:be:34:83:4a:87:b7:72:fd: 8e:58:7c:00:74:0d:e3:99:dd:af:99:52:48:e0:4c:ad:78:db: 4c:c7:77:d1:48:9b:71:a2:e6:82:93:6b:4e:0b:1a:0d:25:c0: a1:70:46:4d:82:9b:7f:1f:50:dd:ab:94:7d:de:63:91:fe:a3: eb:54:87:ad:32:df:00:7b:bb:a2:3c:fb:2b:7b:85:2f:ca:a7: 65:20:e8:1a:8f:bf:0a:1d:aa:85:53:29:51:c8:7f:d8:0a:00: 5d:11:67:5d:e6:13:33:d9:e9:ff:76:6e:b3:c9:04:87:1b:0b: 83:44:03:44:02:b1:86:b4:7b:05:76:eb:60:66:fe:3b:de:7b: de:d4:93:79:9e:7d:fc:a4:b2:ae:c8:88:44:21:f0:66:40:c3: 0d:e8:a3:fd:78:92:39:db:13:1d:78:43:5a:99:17:9e:c1:3e: 0a:a8:b9:27:05:a6:12:c9:0f:d1:93:45:1c:1c:96:3a:1a:b6: 4c:63:af:1d:f2:df:69:0d:61:5e:4c:71:b3:03:28:db:71:72: 41:af:9d:a9:1f:59:fc:e2:4f:6c:66:24:7a:52:ee:5a:00:52: 69:fb:98:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCN0ExMTAvBgNVBAUTKEI5RkVCQkEwOUNGMTBCMjg3RUVEMkNFNTY3MjJCM0M5 QTBFRjEyRkYwHhcNMjUwNjEyMTk1MzQwWhcNMjUwNjE5MTk1MzQwWjAYMRYwFAYD VQQDEw02ODRiMzA0NC03MjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKHMJVzJB7inKLNWCDt43f5nsTkJhg/fWRXGt3aPPqp75ZK7lBVUlfZidwfK rcIMXfFdo/VNLHqGEKfJ0/V+oXTkTBV+Dd74Y+0MYQ/Aq6V31mtYvFdPyQmksGa0 mLeWBzJo4qSxKMtVk3aKK0mp0KtCXEbDRHSEkTmVNEr1lfR9URiCg4HuUg//faCn +N/LoLYjj/UQpIPKmxI2Cnlnma/Pe9rXkTGVfUPTJLetbjceBT8KIzn9it9DYtQh yEdnYMFGTkjo0NPtEslqZOBhMgXXdoM2CqofmPLYOL1Ep3IrWdcCMg2bys/nYJSW 8nSFJ8bl3CkuPyPc+o3M8A3HaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWoVPPc wgTvirBx67FDEE9yzkfCMB8GA1UdIwQYMBaAFLn+u6Cc8Qsofu0s5Wcis8mg7xL/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI3QS81RDIxMTg0QzhF QjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5aC03U3psWnlLenlhRHZF djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmNjdvSnp4Q3loLTdTemxaeUt6eWFEdkV2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkI3QS81RDIxMTg0QzhFQjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5 aC03U3psWnlLenlhRHZFdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ5RLel2Q228JJhTSgvRw2DpoEWV+p9clv1ObHvjSDSoe3cv2OWHwA dA3jmd2vmVJI4EyteNtMx3fRSJtxouaCk2tOCxoNJcChcEZNgpt/H1Ddq5R93mOR /qPrVIetMt8Ae7uiPPsre4UvyqdlIOgaj78KHaqFUylRyH/YCgBdEWdd5hMz2en/ dm6zyQSHGwuDRANEArGGtHsFdutgZv473nve1JN5nn38pLKuyIhEIfBmQMMN6KP9 eJI52xMdeENamReewT4KqLknBaYSyQ/Rk0UcHJY6GrZMY68d8t9pDWFeTHGzAyjb cXJBr52pH1n84k9sZiR6Uu5aAFJp+5it -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:16 2025 by rpki-client