$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft File: uOVJaYlT9l5x-4S20zjAisF4Glo.mft (raw, json) Hash identifier: 7tWfNgM+n0qRAj3GKPzikaZeEoKA4xMeITtgHTWCjQI= Subject key identifier: CB:6A:85:A8:A2:98:F7:BB:66:7E:3A:83:22:9A:8B:36:6D:25:78:83 Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A Certificate issuer: /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Certificate serial: 099B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft Manifest number: 0984 Signing time: Thu 12 Jun 2025 19:55:35 +0000 Manifest this update: Thu 12 Jun 2025 19:55:34 +0000 Manifest next update: Thu 19 Jun 2025 19:55:34 +0000 Files and hashes: 1: uOVJaYlT9l5x-4S20zjAisF4Glo.crl (hash: fRmeilY5D5jnTE1VIook+0NpVJnQPx6fM0CmMghKFkk=) 2: 4B31BDC4B76911ED8A503224C4F9AE02.roa (hash: l0BRfiLqHQsOV1ADKIbKK5vOrt/xeo6mhndQAShwIN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2459 (0x99b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5C70, serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Validity Not Before: Jun 12 19:55:34 2025 GMT Not After : Jun 19 19:55:34 2025 GMT Subject: CN=684b30b6-545d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3e:a4:00:ed:06:9b:d5:33:ff:b8:e7:cc:fd: 1e:90:74:e2:69:56:6b:aa:64:17:ca:9e:f4:3e:5d: 6f:58:bf:17:c9:65:58:1c:8f:ab:b8:6a:8d:ee:18: 9f:d3:89:b9:a5:3d:04:64:e5:ab:d4:cb:32:98:eb: 77:4b:b6:fd:14:57:a7:e9:0f:13:ad:c3:54:f0:e7: d3:23:92:2f:7e:04:4f:80:96:e2:ae:06:e4:13:26: a2:e2:91:77:7b:d0:9b:78:24:63:3e:b5:35:30:48: 5a:17:ea:73:ec:11:c6:ae:cc:99:09:7b:f4:60:69: 71:73:fb:f1:52:99:cd:44:9d:3e:a3:91:e4:26:91: cb:27:2b:21:00:f4:01:c5:b2:ff:37:7a:59:be:e3: 5a:4c:70:5f:ba:a9:9f:52:82:c2:4a:d3:63:bf:c6: 9f:48:94:8e:03:22:9b:be:46:ca:82:ee:4b:6d:85: 9b:d4:3f:22:7a:67:29:e3:06:f0:36:e1:eb:96:2c: c7:08:a1:19:6e:7c:5a:c1:5a:53:8f:85:5e:eb:01: 72:a6:42:2f:f0:be:fb:0b:e8:53:69:3f:a4:3d:1f: de:07:51:ff:24:fe:ac:c8:f1:d7:9c:e3:6b:ad:fb: 87:5f:d1:b0:bf:d3:7b:3e:96:b9:a8:c5:8a:8d:0b: 8a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6A:85:A8:A2:98:F7:BB:66:7E:3A:83:22:9A:8B:36:6D:25:78:83 X509v3 Authority Key Identifier: keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:a9:06:2c:22:fe:ae:68:21:43:71:6e:68:e6:97:13:bd:dd: f1:12:30:41:cb:69:07:94:e8:22:dd:53:c6:f3:9a:d2:ec:1a: 2e:57:f5:f8:56:29:89:f5:44:ad:ea:33:df:f3:10:67:3f:11: a4:8d:db:cc:95:98:50:18:01:3b:1d:39:37:4e:06:6f:e4:35: 17:5f:93:05:67:d0:e9:6e:95:5c:60:3b:99:6a:5a:47:b7:46: bc:3e:fc:b1:b4:6b:53:2e:eb:ee:18:b3:f3:cf:6c:11:a6:aa: 87:5e:0f:ce:ff:e6:86:d1:63:72:c6:ee:31:d8:53:db:c5:13: b3:83:95:50:c2:4b:21:21:64:4d:02:67:bc:4d:cf:fb:4d:44: b1:2e:7d:f3:03:7d:2a:ee:46:f8:16:1c:b0:98:07:71:16:9b: d0:8f:79:72:cb:65:69:14:92:43:83:50:66:b9:72:c3:ab:d7: fd:04:4c:a6:ac:f3:2a:92:6b:9a:a6:77:2a:df:b3:d6:63:82: e4:8d:25:f4:92:8d:cc:fa:e6:a6:8c:8d:06:fc:47:f8:bd:f4: 2d:6f:97:8b:b9:27:f8:b1:2f:06:ef:e2:ed:8b:43:12:97:cc: f8:c1:fd:f3:ef:f4:e4:19:1f:3c:7d:09:af:bd:fa:64:2d:79: 9a:fe:c3:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDNzAxMTAvBgNVBAUTKEI4RTU0OTY5ODk1M0Y2NUU3MUZCODRCNkQzMzhDMDhB QzE3ODFBNUEwHhcNMjUwNjEyMTk1NTM0WhcNMjUwNjE5MTk1NTM0WjAYMRYwFAYD VQQDEw02ODRiMzBiNi01NDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvT6kAO0Gm9Uz/7jnzP0ekHTiaVZrqmQXyp70Pl1vWL8XyWVYHI+ruGqN7hif 04m5pT0EZOWr1MsymOt3S7b9FFen6Q8TrcNU8OfTI5IvfgRPgJbirgbkEyai4pF3 e9CbeCRjPrU1MEhaF+pz7BHGrsyZCXv0YGlxc/vxUpnNRJ0+o5HkJpHLJyshAPQB xbL/N3pZvuNaTHBfuqmfUoLCStNjv8afSJSOAyKbvkbKgu5LbYWb1D8iemcp4wbw NuHrlizHCKEZbnxawVpTj4Ve6wFypkIv8L77C+hTaT+kPR/eB1H/JP6syPHXnONr rfuHX9Gwv9N7Ppa5qMWKjQuKfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtqhaii mPe7Zn46gyKaizZtJXiDMB8GA1UdIwQYMBaAFLjlSWmJU/ZecfuEttM4wIrBeBpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUM3MC8yM0EwQUMwNjkx MDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDlsNXgtNFMyMHpqQWlzRjRH bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPVkphWWxUOWw1eC00UzIwempBaXNGNEdsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUM3MC8yM0EwQUMwNjkxMDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDls NXgtNFMyMHpqQWlzRjRHbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4qQYsIv6uaCFDcW5o5pcTvd3xEjBBy2kHlOgi3VPG85rS7BouV/X4 VimJ9USt6jPf8xBnPxGkjdvMlZhQGAE7HTk3TgZv5DUXX5MFZ9DpbpVcYDuZalpH t0a8PvyxtGtTLuvuGLPzz2wRpqqHXg/O/+aG0WNyxu4x2FPbxROzg5VQwkshIWRN Ame8Tc/7TUSxLn3zA30q7kb4FhywmAdxFpvQj3lyy2VpFJJDg1BmuXLDq9f9BEym rPMqkmuapncq37PWY4LkjSX0ko3M+uamjI0G/Ef4vfQtb5eLuSf4sS8G7+Lti0MS l8z4wf3z7/TkGR88fQmvvfpkLXma/sPH -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:56 2025 by rpki-client