$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft File: UzfctqkbQdUhGkTCFqljq6zH4rA.mft (raw, json) Hash identifier: CnHrmmLNOgLaHjgu/JvZPmYLPq6W/NGG5F5nOBmnwB8= Subject key identifier: 8F:CD:97:37:40:5C:CC:6D:BF:98:8A:CD:5A:8F:AE:A7:AE:4F:CE:7D Authority key identifier: 53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0 Certificate issuer: /CN=A9197FBC/serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0 Certificate serial: 34A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft Manifest number: 349A Signing time: Sat 14 Jun 2025 14:44:46 +0000 Manifest this update: Sat 14 Jun 2025 14:44:45 +0000 Manifest next update: Sat 21 Jun 2025 14:44:45 +0000 Files and hashes: 1: UzfctqkbQdUhGkTCFqljq6zH4rA.crl (hash: jhRsR8Gb8P7MODEsSbd05tWSvWL2EQexqg5+i/vejpM=) 2: 8DFE2984EAD811ECA1ED8915C4F9AE02.roa (hash: dOS+EBN8T4gv4pfAW5HZ87ld30CEjTabsXZtn+f9BiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13476 (0x34a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197FBC, serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0 Validity Not Before: Jun 14 14:44:45 2025 GMT Not After : Jun 21 14:44:45 2025 GMT Subject: CN=684d8ade-ef94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:64:82:bc:fc:8c:79:49:ca:7e:9f:f0:5d:d0: 45:62:60:c6:9d:26:b8:43:20:41:13:e7:e8:bb:44: 5f:d4:94:8c:8c:e6:4a:3c:e3:78:5f:2f:3d:3a:a7: 11:27:8c:aa:da:d4:91:ba:1f:d8:2f:a6:93:75:c4: c3:b6:9e:55:ce:6c:ff:6b:ff:5a:75:79:11:8b:1b: d1:ae:11:30:aa:ec:40:1a:1b:7d:3f:6b:12:50:4b: 81:53:dd:7e:86:77:f7:f8:02:3a:9a:95:83:21:3c: 56:8f:22:f3:51:79:4d:6f:63:2f:8d:54:22:56:7a: c9:0e:e0:ed:77:58:11:e6:d8:07:34:16:70:fe:6b: 1d:d1:47:c1:0a:60:53:32:b6:6e:51:ba:57:dc:0e: a4:23:7b:9b:e2:fe:ff:db:e7:59:ca:d2:4a:5d:01: d6:8f:4a:d5:0f:e5:f3:0a:b0:0d:c3:a2:54:d1:df: a8:f2:ed:2c:93:b4:32:95:d0:23:b5:ac:2b:16:d1: bf:51:ff:e6:05:f5:6d:95:40:e1:ff:59:52:6b:c2: a0:5e:27:d7:cf:2c:6f:14:42:62:9e:70:09:9a:f4: b9:de:88:a0:16:bb:df:4c:91:52:34:10:c7:27:5d: 2a:40:a1:3a:8b:83:59:3f:7f:6a:fd:0f:23:0d:ba: 32:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CD:97:37:40:5C:CC:6D:BF:98:8A:CD:5A:8F:AE:A7:AE:4F:CE:7D X509v3 Authority Key Identifier: keyid:53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:03:82:eb:70:d4:20:27:31:f7:4c:55:05:48:32:09:49:63: 67:62:80:6c:ae:31:15:c6:7e:93:84:b3:45:0d:39:ae:e6:fb: ee:58:75:85:60:40:f1:01:fc:e5:c2:98:fb:bc:a9:77:e1:88: fc:80:2a:ec:7b:1d:e6:60:a7:8f:88:1f:3c:6d:c0:e1:45:f1: ca:62:a7:45:f9:14:37:de:14:b2:fc:f6:dc:53:07:28:49:a9: 0e:1f:41:2d:55:77:98:08:0d:0a:1b:be:c9:e4:49:0c:54:e9: 00:87:b3:c4:5e:af:db:8a:28:a4:90:1b:16:aa:97:a5:31:79: 2b:48:c4:a2:44:8f:79:a7:36:91:a0:7b:a0:cd:25:70:44:37: 58:1d:f6:1f:84:40:2b:fd:5a:41:9e:d3:d3:40:0a:90:6e:13: f1:76:bd:01:12:c9:82:66:b4:57:52:c6:42:bf:5d:65:2c:49: 02:d9:35:93:69:a4:4a:bd:8b:8c:86:87:86:e6:98:ce:a6:99: e6:cd:a7:18:20:8a:f9:2f:cf:f5:c4:8b:48:46:17:b0:47:20: cc:87:5f:f6:c6:72:b1:30:8f:4b:a5:e7:c8:23:10:31:6b:a3: f6:5a:75:3d:4e:e9:0b:20:5d:ca:89:f1:43:ef:82:e5:a0:f7: 6d:49:c6:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdGQkMxMTAvBgNVBAUTKDUzMzdEQ0I2QTkxQjQxRDUyMTFBNDRDMjE2QTk2M0FC QUNDN0UyQjAwHhcNMjUwNjE0MTQ0NDQ1WhcNMjUwNjIxMTQ0NDQ1WjAYMRYwFAYD VQQDEw02ODRkOGFkZS1lZjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGSCvPyMeUnKfp/wXdBFYmDGnSa4QyBBE+fou0Rf1JSMjOZKPON4Xy89OqcR J4yq2tSRuh/YL6aTdcTDtp5Vzmz/a/9adXkRixvRrhEwquxAGht9P2sSUEuBU91+ hnf3+AI6mpWDITxWjyLzUXlNb2MvjVQiVnrJDuDtd1gR5tgHNBZw/msd0UfBCmBT MrZuUbpX3A6kI3ub4v7/2+dZytJKXQHWj0rVD+XzCrANw6JU0d+o8u0sk7QyldAj tawrFtG/Uf/mBfVtlUDh/1lSa8KgXifXzyxvFEJinnAJmvS53oigFrvfTJFSNBDH J10qQKE6i4NZP39q/Q8jDboyNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/NlzdA XMxtv5iKzVqPrqeuT859MB8GA1UdIwQYMBaAFFM33LapG0HVIRpEwhapY6usx+Kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZCQy8zNzMwODM4MDFE OTMxMUUyOEFCRTlFRjYwOEIwMkNEMi9VemZjdHFrYlFkVWhHa1RDRnFsanE2ekg0 ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6ZmN0cWtiUWRVaEdrVENGcWxqcTZ6SDRyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0ZCQy8zNzMwODM4MDFEOTMxMUUyOEFCRTlFRjYwOEIwMkNEMi9VemZjdHFrYlFk VWhHa1RDRnFsanE2ekg0ckEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjA4LrcNQgJzH3TFUFSDIJSWNnYoBsrjEVxn6ThLNFDTmu5vvuWHWF YEDxAfzlwpj7vKl34Yj8gCrsex3mYKePiB88bcDhRfHKYqdF+RQ33hSy/PbcUwco SakOH0EtVXeYCA0KG77J5EkMVOkAh7PEXq/biiikkBsWqpelMXkrSMSiRI95pzaR oHugzSVwRDdYHfYfhEAr/VpBntPTQAqQbhPxdr0BEsmCZrRXUsZCv11lLEkC2TWT aaRKvYuMhoeG5pjOppnmzacYIIr5L8/1xItIRhewRyDMh1/2xnKxMI9LpefIIxAx a6P2WnU9TukLIF3KifFD74LloPdtScbI -----END CERTIFICATE-----Generated at Sat Jun 14 19:27:34 2025 by rpki-client