$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft File: ux3tVEsnoTcZtI-wA3PNSeDehRc.mft (raw, json) Hash identifier: YbwfHQcp2AcF3+ryc4nk0uiwBaObpLF/j29SPSi6MXw= Subject key identifier: D1:43:C0:B7:3A:2F:78:58:C3:47:02:91:02:61:ED:40:9B:94:FF:16 Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Certificate serial: 08CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft Manifest number: 08C3 Signing time: Thu 12 Jun 2025 20:14:14 +0000 Manifest this update: Thu 12 Jun 2025 20:14:14 +0000 Manifest next update: Thu 19 Jun 2025 20:14:14 +0000 Files and hashes: 1: ux3tVEsnoTcZtI-wA3PNSeDehRc.crl (hash: H05eG7yFCdJxW/MSppjX52qeNojlZ2/E1OkFLekXius=) 2: 2B7215E2B54B11EA85EE266DC4F9AE02.roa (hash: HHCFckY7O591LILqzlA5i+TVYe0u7mT2Ya4XZsY3L5w=) 3: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (hash: vv1GYbA2AyqRD7ZSBeebG8Ws0r4NHNq0J0Vkh/R0ypw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2255 (0x8cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919123C, serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Validity Not Before: Jun 12 20:14:14 2025 GMT Not After : Jun 19 20:14:14 2025 GMT Subject: CN=684b3516-acdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f1:66:aa:91:a6:4f:5c:e7:50:b8:24:b6:37: 83:2b:c8:d9:84:32:46:d5:41:bd:30:57:77:ff:a8: 8a:38:8b:12:d5:69:4c:00:7f:0c:11:40:39:51:57: b9:7e:54:c5:2a:50:84:79:64:5b:1a:c6:fc:b9:cd: b5:77:ef:33:3b:7e:1b:ee:12:c6:7e:6e:a5:12:fd: 93:b2:9f:57:91:a5:6b:96:48:a6:43:9e:46:1a:ba: ea:35:bd:d3:31:75:42:e7:86:0e:50:ef:24:3f:ff: c2:d3:cb:6f:f6:03:c8:a5:5a:1b:dd:78:0f:ed:fc: d5:13:c0:6b:42:68:e1:46:a3:a2:77:57:d1:5d:bc: 3e:ab:65:0a:5a:e0:e5:ea:dc:79:06:b3:ac:ce:bd: 4d:db:0f:dd:01:01:94:de:6c:88:ec:c2:ba:de:c6: 6a:7c:84:18:ee:3e:fe:5a:49:56:4d:86:ae:77:a9: 6e:a8:73:9b:ea:ec:a3:b4:dd:d9:66:46:ba:d1:7a: a8:05:07:26:7e:86:58:98:51:cd:69:10:34:5b:99: 7b:f3:ac:5f:d5:b6:96:fb:71:c1:2b:73:33:6f:c6: 50:0f:ef:1e:78:d4:2b:48:c4:ee:4a:7a:8d:f4:ce: 5a:20:c3:80:63:81:96:c3:89:be:de:69:f9:56:83: 27:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:43:C0:B7:3A:2F:78:58:C3:47:02:91:02:61:ED:40:9B:94:FF:16 X509v3 Authority Key Identifier: keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:7e:cd:e0:e4:cf:97:d4:f1:54:33:24:74:6d:a5:eb:62:fe: 8c:77:29:a5:52:0f:e3:3b:1f:67:a1:50:e8:16:17:77:e0:51: a1:ec:be:6e:a7:96:51:95:aa:5e:34:68:b1:24:f2:68:f6:ac: 15:04:0c:bf:61:01:3c:cf:a5:9a:19:63:10:03:41:3a:5e:31: 7d:ac:72:7d:42:78:50:24:59:fd:b8:97:9c:80:53:ff:2f:4b: 86:a9:55:e9:ef:59:06:2d:b1:9c:5a:12:8a:3a:3e:53:2b:ac: ce:81:dc:ac:c8:c7:24:20:4e:d7:7f:69:88:9f:ca:9a:d4:ca: 1f:92:07:34:ed:a6:cb:f8:33:d2:0c:81:f1:b9:6b:40:be:46: fb:75:e7:d1:de:d0:da:72:96:54:2d:9d:49:b4:98:e1:07:2a: d2:31:bf:aa:69:53:58:47:ab:00:91:2b:99:58:f2:3d:0e:87: 95:84:7d:59:00:a5:6c:2f:38:14:83:27:a6:a0:98:df:6a:b1: 2e:ca:c8:f6:dd:45:3b:92:d2:dc:f5:de:8f:ea:88:8e:44:66: 55:86:8d:bb:09:8c:90:4a:b2:d9:53:e2:b0:54:f4:3f:c1:90: 51:f7:0f:a9:91:22:7e:53:d8:96:b0:dc:bf:7f:b5:88:90:d7: ce:a7:11:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyM0MxMTAvBgNVBAUTKEJCMURFRDU0NEIyN0ExMzcxOUI0OEZCMDAzNzNDRDQ5 RTBERTg1MTcwHhcNMjUwNjEyMjAxNDE0WhcNMjUwNjE5MjAxNDE0WjAYMRYwFAYD VQQDEw02ODRiMzUxNi1hY2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5/FmqpGmT1znULgktjeDK8jZhDJG1UG9MFd3/6iKOIsS1WlMAH8MEUA5UVe5 flTFKlCEeWRbGsb8uc21d+8zO34b7hLGfm6lEv2Tsp9XkaVrlkimQ55GGrrqNb3T MXVC54YOUO8kP//C08tv9gPIpVob3XgP7fzVE8BrQmjhRqOid1fRXbw+q2UKWuDl 6tx5BrOszr1N2w/dAQGU3myI7MK63sZqfIQY7j7+WklWTYaud6luqHOb6uyjtN3Z Zka60XqoBQcmfoZYmFHNaRA0W5l786xf1baW+3HBK3Mzb8ZQD+8eeNQrSMTuSnqN 9M5aIMOAY4GWw4m+3mn5VoMnswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFDwLc6 L3hYw0cCkQJh7UCblP8WMB8GA1UdIwQYMBaAFLsd7VRLJ6E3GbSPsANzzUng3oUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTIzQy9FNTYyMUE2OEI1 NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9UY1p0SS13QTNQTlNlRGVo UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V4M3RWRXNub1RjWnRJLXdBM1BOU2VEZWhSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTIzQy9FNTYyMUE2OEI1NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9U Y1p0SS13QTNQTlNlRGVoUmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARfs3g5M+X1PFUMyR0baXrYv6MdymlUg/jOx9noVDoFhd34FGh7L5u p5ZRlapeNGixJPJo9qwVBAy/YQE8z6WaGWMQA0E6XjF9rHJ9QnhQJFn9uJecgFP/ L0uGqVXp71kGLbGcWhKKOj5TK6zOgdysyMckIE7Xf2mIn8qa1Mofkgc07abL+DPS DIHxuWtAvkb7defR3tDacpZULZ1JtJjhByrSMb+qaVNYR6sAkSuZWPI9DoeVhH1Z AKVsLzgUgyemoJjfarEuysj23UU7ktLc9d6P6oiORGZVho27CYyQSrLZU+KwVPQ/ wZBR9w+pkSJ+U9iWsNy/f7WIkNfOpxFB -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:18 2025 by rpki-client