$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft File: U4XhOhtYRftEzutr7Y3rTomvOCk.mft (raw, json) Hash identifier: 52zH8RnaSPFKi8Kw24ABt56U1jtRxnsHqRKXLdilNgM= Subject key identifier: 9C:0F:FB:08:13:DE:47:CB:ED:D9:8E:CE:C3:A4:8C:32:1B:A3:58:70 Authority key identifier: 53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 Certificate issuer: /CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Certificate serial: 0985 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft Manifest number: 0975 Signing time: Mon 16 Jun 2025 19:59:01 +0000 Manifest this update: Mon 16 Jun 2025 19:59:00 +0000 Manifest next update: Mon 23 Jun 2025 19:59:00 +0000 Files and hashes: 1: U4XhOhtYRftEzutr7Y3rTomvOCk.crl (hash: 8YGvkMc7QunGKessfTR578UYQb06PsSBsUlgo9fQW3U=) 2: 3636BCD2937011EA8A795583C4F9AE02.roa (hash: Xd/9pByFb2cbZ9xoUnmDVjNmjmus87X0lFOERhfsZNI=) 3: 35831FCE937011EA8A795583C4F9AE02.roa (hash: N79J5/addSjvuTRJUjHpGEDoonJ5OZtfdl2v8Aonsr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 19:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2437 (0x985) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACFEB, serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Validity Not Before: Jun 16 19:59:00 2025 GMT Not After : Jun 23 19:59:00 2025 GMT Subject: CN=68507784-cc95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fa:83:b4:f6:20:a5:a5:62:ea:77:3d:42:0e: 67:6d:af:91:8f:8f:7c:31:e0:8d:ff:db:7f:d9:d2: 36:81:1e:ae:57:27:0a:ef:17:79:31:8c:b2:61:80: 14:c1:cc:8b:cb:6b:41:f8:57:68:0d:7f:3d:40:da: 18:21:b2:09:05:de:b5:ec:6c:3f:db:ed:30:29:6e: d8:b5:7a:e0:c9:a3:b5:09:cb:84:f2:cd:1c:eb:98: d1:de:db:0c:49:c3:1a:45:b2:42:65:57:48:03:a7: 66:ee:bd:bf:b2:44:9e:ad:13:46:94:c8:6c:f0:3a: c0:cd:f8:6f:87:6d:a6:29:82:e4:05:bd:75:5e:ff: a1:f8:36:7d:fa:85:31:3d:ce:fe:4f:2f:e5:80:9f: ea:6f:b8:a8:a3:e8:bf:1a:ff:03:a8:34:c3:4e:fa: 5b:32:92:b9:13:ba:9a:10:13:5e:33:df:c0:53:91: 25:25:dc:3f:5d:0b:57:e6:32:c6:26:96:92:92:d7: e2:6b:23:0b:ca:57:bf:8c:45:da:6c:4b:69:2d:65: 00:f2:3f:c9:36:31:5f:15:35:4c:1a:a4:05:80:08: 98:0f:c0:b4:06:d9:5a:9c:23:3c:4e:88:c7:c5:f4: 34:0a:97:72:b1:86:f3:ba:e4:0b:5f:e7:a5:d1:fe: b2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0F:FB:08:13:DE:47:CB:ED:D9:8E:CE:C3:A4:8C:32:1B:A3:58:70 X509v3 Authority Key Identifier: keyid:53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:27:7d:c7:0e:4d:43:23:76:33:8c:e6:15:6b:11:e3:c2:8a: 65:60:f9:ce:ef:72:7a:97:3e:3e:b0:6e:13:d8:55:f6:38:3e: af:a3:78:24:93:ae:1a:4a:14:50:b1:8e:5f:f4:a7:fc:4e:98: 2c:57:4f:97:fb:ef:ab:56:99:5c:a1:61:9f:3b:29:71:8e:ff: 04:e4:e8:fb:38:be:b3:8e:8b:7d:1a:e7:d7:c5:26:f0:c3:46: 7f:34:15:7a:d5:bd:2b:20:e2:81:5f:39:97:e9:0e:a8:9e:eb: ba:c4:0a:c2:bd:86:b4:91:16:7c:e7:d3:2d:3a:29:5a:8e:f7: 22:66:0b:92:7c:1e:bc:d5:96:9d:38:74:91:d1:a9:c5:78:e0: 5b:aa:20:48:df:95:c2:1e:d1:7e:de:fb:8a:82:ba:ff:81:09: 5e:ba:d6:50:a6:39:5e:e5:1a:e5:3b:ed:18:67:4d:61:db:3e: 7a:4e:fe:ca:ca:45:9b:02:9a:f4:f7:a6:0b:9b:6b:35:ee:0c: 06:16:b0:1a:dc:7c:7a:cc:56:5c:7d:00:c0:3d:7a:bc:e2:95: bd:56:b4:80:9f:92:c1:fb:32:1c:f5:2e:66:18:32:36:09:c4: 70:d9:ce:a8:8f:14:62:d4:59:78:d8:48:81:a2:b1:e0:75:5b: 7e:da:54:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGRUIxMTAvBgNVBAUTKDUzODVFMTNBMUI1ODQ1RkI0NENFRUI2QkVEOERFQjRF ODlBRjM4MjkwHhcNMjUwNjE2MTk1OTAwWhcNMjUwNjIzMTk1OTAwWjAYMRYwFAYD VQQDEw02ODUwNzc4NC1jYzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPqDtPYgpaVi6nc9Qg5nba+Rj498MeCN/9t/2dI2gR6uVycK7xd5MYyyYYAU wcyLy2tB+FdoDX89QNoYIbIJBd617Gw/2+0wKW7YtXrgyaO1CcuE8s0c65jR3tsM ScMaRbJCZVdIA6dm7r2/skSerRNGlMhs8DrAzfhvh22mKYLkBb11Xv+h+DZ9+oUx Pc7+Ty/lgJ/qb7ioo+i/Gv8DqDTDTvpbMpK5E7qaEBNeM9/AU5ElJdw/XQtX5jLG JpaSktfiayMLyle/jEXabEtpLWUA8j/JNjFfFTVMGqQFgAiYD8C0BtlanCM8TojH xfQ0CpdysYbzuuQLX+el0f6y7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwP+wgT 3kfL7dmOzsOkjDIbo1hwMB8GA1UdIwQYMBaAFFOF4TobWEX7RM7ra+2N606Jrzgp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0ZFQi9DQjJDMzNFNjkz NkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJmdEV6dXRyN1kzclRvbXZP Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0WGhPaHRZUmZ0RXp1dHI3WTNyVG9tdk9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0ZFQi9DQjJDMzNFNjkzNkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJm dEV6dXRyN1kzclRvbXZPQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNJ33HDk1DI3YzjOYVaxHjwoplYPnO73J6lz4+sG4T2FX2OD6vo3gk k64aShRQsY5f9Kf8TpgsV0+X+++rVplcoWGfOylxjv8E5Oj7OL6zjot9GufXxSbw w0Z/NBV61b0rIOKBXzmX6Q6onuu6xArCvYa0kRZ859MtOilajvciZguSfB681Zad OHSR0anFeOBbqiBI35XCHtF+3vuKgrr/gQleutZQpjle5RrlO+0YZ01h2z56Tv7K ykWbApr096YLm2s17gwGFrAa3Hx6zFZcfQDAPXq84pW9VrSAn5LB+zIc9S5mGDI2 CcRw2c6ojxRi1Fl42EiBorHgdVt+2lTX -----END CERTIFICATE-----Generated at Wed Jun 18 01:46:42 2025 by rpki-client