$ rpki-client -vvf rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft File: uu94943Hy_m3MScKqxBp9eNDPLs.mft (raw, json) Hash identifier: yaCHZL4Ne6jbe5cjc+XAMRogqQGX3n6Kwrw7pz5BT9A= Subject key identifier: C4:0A:DA:7C:01:CA:1B:96:A3:F0:03:F7:87:18:F1:94:59:23:66:79 Authority key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB Certificate issuer: /CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft Manifest number: A2 Signing time: Sun 15 Jun 2025 05:24:22 +0000 Manifest this update: Sun 15 Jun 2025 05:24:22 +0000 Manifest next update: Sun 22 Jun 2025 05:24:22 +0000 Files and hashes: 1: uu94943Hy_m3MScKqxBp9eNDPLs.crl (hash: BAAPYUwqNlKadMFzyjhyrQ586tFU7ncrh74y8AfLvUY=) 2: 0FB823502CB011F0A2157E15C4F9AE02.roa (hash: aewtQCUG7+5ML687Xz8ENKgAxLHbUhEu6uDVXdbbcGc=) 3: 286AB0F22CB011F084E4A915C4F9AE02.roa (hash: vZWC1pyitJpkKdITTAunKDCWOD3MkKIrS8Vik2p3gr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B61A7, serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB Validity Not Before: Jun 15 05:24:22 2025 GMT Not After : Jun 22 05:24:22 2025 GMT Subject: CN=684e5906-5bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:80:5a:dd:33:c0:b0:79:28:a0:40:9b:a2:45: 8f:93:1f:64:35:30:1b:ca:77:7e:bd:c7:1f:a7:c8: 1c:7b:eb:14:8f:59:0b:04:32:a5:7f:73:81:4a:62: 4e:2f:fb:86:09:7a:bd:30:3f:61:8f:18:d7:87:0e: 26:ba:b2:99:6b:ce:f2:99:84:c8:13:86:73:d1:3b: 69:aa:f0:c9:7d:59:51:48:26:93:e2:12:66:a8:39: 9b:0f:68:1d:48:6e:95:ce:d4:f8:89:23:48:e0:d4: a3:6b:9f:86:99:1e:47:d9:2f:bf:21:86:90:ec:12: a0:44:9c:0e:ef:5e:98:02:d6:43:c3:6f:34:b1:55: a0:a9:2e:e9:b0:0a:f5:2e:6a:58:04:9e:66:2a:83: 22:d4:c7:e2:be:18:ad:5b:e8:be:d5:8d:40:65:6f: 00:43:98:fb:37:bf:0c:e1:8c:bf:e0:c4:14:f9:42: 31:a5:14:6f:3c:80:f7:68:65:d1:2f:4e:6b:b3:77: 9f:30:10:dd:e7:51:ba:a6:a0:a5:8f:ec:19:1b:a2: 21:b4:3d:2c:19:3f:fd:66:f0:a7:77:0d:9b:55:11: 8a:49:53:f0:8d:ac:dd:05:83:ae:9a:71:ed:e3:42: 44:39:cf:3e:92:5f:98:14:53:1e:33:f2:ec:9d:33: 5c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0A:DA:7C:01:CA:1B:96:A3:F0:03:F7:87:18:F1:94:59:23:66:79 X509v3 Authority Key Identifier: keyid:BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:2d:93:a1:60:e4:38:7b:ab:8f:ee:e1:25:82:b1:42:04:a1: 1b:06:06:8e:46:48:1d:6e:0e:1c:75:44:01:33:bd:85:89:2e: f2:9a:4a:d3:e0:33:32:3a:c5:93:75:62:5e:9f:12:2a:ac:21: 0b:13:cb:32:4e:36:c4:45:a7:be:e6:18:38:7e:88:f4:a0:c7: 50:50:7c:2b:fc:7e:4e:08:8f:56:50:1f:cb:17:ae:13:e8:75: 23:40:72:eb:0d:f5:1a:1a:be:92:ad:6a:f3:4d:23:bf:7b:34: 7a:3e:a2:c1:95:68:50:38:a8:d6:91:6e:c3:a3:62:cd:ed:74: c4:67:18:d0:d6:53:c9:5f:e5:dc:bb:c5:eb:4e:93:f8:76:ea: 88:4d:6d:31:40:66:de:4c:98:dd:ce:51:b0:a1:75:37:be:03: 51:8d:55:d5:b2:b2:e5:1a:e4:45:76:19:7b:5e:24:88:2d:1e: 2a:e9:79:24:dc:53:64:cf:03:5b:7e:9d:89:92:73:0b:5f:22: 56:31:34:0f:fe:d2:ae:42:ff:f8:13:3e:5d:3d:2a:9b:62:c5: 47:3f:20:f5:2a:53:8c:54:f4:bc:8d:b2:89:e2:44:85:9d:26: fa:7e:5c:52:07:ff:40:ae:bf:fd:e4:f9:f4:95:44:13:74:3d: 2b:36:96:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxQTcxMTAvBgNVBAUTKEJBRUY3OEY3OERDN0NCRjlCNzMxMjcwQUFCMTA2OUY1 RTM0MzNDQkIwHhcNMjUwNjE1MDUyNDIyWhcNMjUwNjIyMDUyNDIyWjAYMRYwFAYD VQQDEw02ODRlNTkwNi01YmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/YBa3TPAsHkooECbokWPkx9kNTAbynd+vccfp8gce+sUj1kLBDKlf3OBSmJO L/uGCXq9MD9hjxjXhw4murKZa87ymYTIE4Zz0TtpqvDJfVlRSCaT4hJmqDmbD2gd SG6VztT4iSNI4NSja5+GmR5H2S+/IYaQ7BKgRJwO716YAtZDw280sVWgqS7psAr1 LmpYBJ5mKoMi1MfivhitW+i+1Y1AZW8AQ5j7N78M4Yy/4MQU+UIxpRRvPID3aGXR L05rs3efMBDd51G6pqClj+wZG6IhtD0sGT/9ZvCndw2bVRGKSVPwjazdBYOumnHt 40JEOc8+kl+YFFMeM/LsnTNcDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQK2nwB yhuWo/AD94cY8ZRZI2Z5MB8GA1UdIwQYMBaAFLrvePeNx8v5tzEnCqsQafXjQzy7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjFBNy8wRjQ5OTIwNDVC QTExMUVGOUE3OUU5NjFDNEY5QUUwMi91dTk0OTQzSHlfbTNNU2NLcXhCcDllTkRQ THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V1OTQ5NDNIeV9tM01TY0txeEJwOWVORFBMcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjFBNy8wRjQ5OTIwNDVCQTExMUVGOUE3OUU5NjFDNEY5QUUwMi91dTk0OTQzSHlf bTNNU2NLcXhCcDllTkRQTHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhLZOhYOQ4e6uP7uElgrFCBKEbBgaORkgdbg4cdUQBM72FiS7ymkrT 4DMyOsWTdWJenxIqrCELE8syTjbERae+5hg4foj0oMdQUHwr/H5OCI9WUB/LF64T 6HUjQHLrDfUaGr6SrWrzTSO/ezR6PqLBlWhQOKjWkW7Do2LN7XTEZxjQ1lPJX+Xc u8XrTpP4duqITW0xQGbeTJjdzlGwoXU3vgNRjVXVsrLlGuRFdhl7XiSILR4q6Xkk 3FNkzwNbfp2JknMLXyJWMTQP/tKuQv/4Ez5dPSqbYsVHPyD1KlOMVPS8jbKJ4kSF nSb6flxSB/9Arr/95Pn0lUQTdD0rNpYU -----END CERTIFICATE-----Generated at Sun Jun 15 08:42:07 2025 by rpki-client