$ rpki-client -vvf rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft File: uc1X4v9PWLuVmpVBoxz99ml2GLI.mft (raw, json) Hash identifier: l74WzQDEtWmDD2FsFAfVz8d+Y1nrgSl17I//v3RNwPc= Subject key identifier: 61:55:10:AC:E2:7F:D0:99:36:47:8B:1E:AD:F9:BF:D0:B8:7C:06:5D Authority key identifier: B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2 Certificate issuer: /CN=A918E023/serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft Manifest number: 25 Signing time: Sun 15 Jun 2025 06:53:39 +0000 Manifest this update: Sun 15 Jun 2025 06:53:38 +0000 Manifest next update: Sun 22 Jun 2025 06:53:38 +0000 Files and hashes: 1: uc1X4v9PWLuVmpVBoxz99ml2GLI.crl (hash: xT8FZs5llijN5n+OksCUB+6/ulGzlRnZhasloDdvAUo=) 2: C420B2B6111D11F0BE9ABA7AC4F9AE02.roa (hash: BmMWgtMQ3PCdQlZ5TlrzvWUUVUt35N0MZwh0nPjZPiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E023, serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2 Validity Not Before: Jun 15 06:53:38 2025 GMT Not After : Jun 22 06:53:38 2025 GMT Subject: CN=684e6df2-e861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:67:79:33:0c:2d:77:17:dd:97:63:99:70:5a: f5:5c:b9:f2:6c:94:63:96:8a:d1:48:52:75:16:6b: b8:95:16:54:00:b9:4c:95:9c:27:f2:0d:92:20:95: c5:72:c5:89:fe:4f:42:26:8b:3d:a9:76:39:27:89: 24:b1:d6:d9:0e:43:5c:23:62:0b:0a:17:5d:e7:d5: 95:0e:e9:ea:98:82:6f:fc:15:94:ec:2c:08:8a:64: c2:87:b3:c6:fb:ee:fa:d8:19:f2:4f:6e:04:2d:f8: 1f:f0:4e:08:ac:b4:ed:66:81:70:c5:5b:ad:eb:50: e3:44:31:2b:5a:5e:27:7e:ee:e3:90:c9:a4:3f:52: 19:99:ef:ad:8f:31:d6:d8:76:38:09:09:d1:9a:12: d5:0b:10:a9:9f:ac:ba:51:2a:c6:e9:9f:4d:54:38: 72:94:4a:f7:2f:2b:ea:0b:6f:05:06:3a:ae:3f:8a: 2a:04:97:0b:30:ad:98:71:a6:b1:45:11:ec:36:3f: 07:ef:f1:e9:1f:b1:96:59:65:ac:be:4a:82:91:c4: 86:47:4f:db:33:65:04:65:b5:58:2a:7c:67:31:0e: 6f:93:eb:14:6f:3d:a4:f0:86:91:85:6a:69:d9:dc: f7:42:7a:9a:72:b5:2f:ca:c4:f9:14:e8:a0:87:61: 6c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:55:10:AC:E2:7F:D0:99:36:47:8B:1E:AD:F9:BF:D0:B8:7C:06:5D X509v3 Authority Key Identifier: keyid:B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:d8:01:06:4b:9a:c6:d2:a0:f4:42:f8:8f:9a:12:1c:38:d9: d6:f9:b0:cd:f2:7b:e2:99:23:15:56:ee:27:34:37:91:3d:f9: 86:95:dc:c9:c1:ac:aa:14:b2:12:08:a0:42:86:43:49:89:93: db:3d:15:fa:d4:c1:32:92:64:e9:38:4a:46:31:f3:3d:a9:56: 0e:28:cf:eb:a4:7e:f3:ed:ea:b9:0f:f2:ed:70:94:36:e4:38: 2e:83:87:00:ca:82:54:63:1d:15:a3:0e:0b:00:9d:f2:47:8a: fe:0b:1e:f5:0e:61:fd:47:aa:5c:ff:85:36:93:1a:b6:0f:25: a2:2f:0a:9a:b8:b2:88:3d:7f:56:c6:1b:d3:07:e8:49:f4:b4: ee:70:96:28:f4:d4:57:8c:39:60:82:cf:ab:60:13:eb:0e:18: 1c:bf:d9:2d:27:f7:21:ac:82:8c:56:ec:bd:61:f4:99:be:b9: 0e:3a:e7:9f:ab:af:73:1c:97:4b:7a:98:ea:dd:30:02:f8:1f: 40:67:4f:aa:b2:63:11:6c:6f:e7:58:44:6d:b4:84:24:02:66: 68:71:b0:40:39:e6:e5:71:ca:b8:a2:57:8b:9c:33:a4:38:22: e3:37:64:10:ed:51:88:17:f5:d2:46:ff:64:38:94:41:5e:47: a4:de:06:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTAyMzExMC8GA1UEBRMoQjlDRDU3RTJGRjRGNThCQjk1OUE5NTQxQTMxQ0ZERjY2 OTc2MThCMjAeFw0yNTA2MTUwNjUzMzhaFw0yNTA2MjIwNjUzMzhaMBgxFjAUBgNV BAMTDTY4NGU2ZGYyLWU4NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYZ3kzDC13F92XY5lwWvVcufJslGOWitFIUnUWa7iVFlQAuUyVnCfyDZIglcVy xYn+T0Imiz2pdjkniSSx1tkOQ1wjYgsKF13n1ZUO6eqYgm/8FZTsLAiKZMKHs8b7 7vrYGfJPbgQt+B/wTgistO1mgXDFW63rUONEMStaXid+7uOQyaQ/UhmZ762PMdbY djgJCdGaEtULEKmfrLpRKsbpn01UOHKUSvcvK+oLbwUGOq4/iioElwswrZhxprFF Eew2Pwfv8ekfsZZZZay+SoKRxIZHT9szZQRltVgqfGcxDm+T6xRvPaTwhpGFamnZ 3PdCeppytS/KxPkU6KCHYWzpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYVUQrOJ/ 0Jk2R4serfm/0Lh8Bl0wHwYDVR0jBBgwFoAUuc1X4v9PWLuVmpVBoxz99ml2GLIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFMDIzL0E2NTRGRUYwMTEx QzExRjBCMTVBRjk3MEM0RjlBRTAyL3VjMVg0djlQV0x1Vm1wVkJveHo5OW1sMkdM SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWMxWDR2OVBXTHVWbXBWQm94ejk5bWwyR0xJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF MDIzL0E2NTRGRUYwMTExQzExRjBCMTVBRjk3MEM0RjlBRTAyL3VjMVg0djlQV0x1 Vm1wVkJveHo5OW1sMkdMSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADTYAQZLmsbSoPRC+I+aEhw42db5sM3ye+KZIxVW7ic0N5E9+YaV3MnB rKoUshIIoEKGQ0mJk9s9FfrUwTKSZOk4SkYx8z2pVg4oz+ukfvPt6rkP8u1wlDbk OC6DhwDKglRjHRWjDgsAnfJHiv4LHvUOYf1Hqlz/hTaTGrYPJaIvCpq4sog9f1bG G9MH6En0tO5wlij01FeMOWCCz6tgE+sOGBy/2S0n9yGsgoxW7L1h9Jm+uQ4655+r r3Mcl0t6mOrdMAL4H0BnT6qyYxFsb+dYRG20hCQCZmhxsEA55uVxyriiV4ucM6Q4 IuM3ZBDtUYgX9dJG/2Q4lEFeR6TeBoU= -----END CERTIFICATE-----Generated at Sun Jun 15 09:29:46 2025 by rpki-client