$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft File: uokBTrxJS2f9iz-C6LOO9vbFck0.mft (raw, json) Hash identifier: Hsq/SiLvXZPQ/slzChM4LHVsBXYjvvxN5jKpcplfhAg= Subject key identifier: A0:92:C6:97:E3:6E:F7:6C:3C:6D:B3:56:B2:EC:95:F9:A2:54:11:6A Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D Certificate issuer: /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft Manifest number: 0109 Signing time: Fri 13 Jun 2025 04:04:33 +0000 Manifest this update: Fri 13 Jun 2025 04:04:32 +0000 Manifest next update: Fri 20 Jun 2025 04:04:32 +0000 Files and hashes: 1: uokBTrxJS2f9iz-C6LOO9vbFck0.crl (hash: D8VCgmMSGvDpYjS1mFLPKyTLmn7fIuz3SJsCSHHZDLs=) 2: ED352AAEBFE511EEBB3B4D25C4F9AE02.roa (hash: Cg10Lh1/jWjaqO5EBHv5C6vMK3khuwZ/+iMJMpvh7AE=) 3: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (hash: lJjM0vXxFGkR8fpKRXKFywWPgH/0gbH+qkVNiWKRaAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4EC7, serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Validity Not Before: Jun 13 04:04:32 2025 GMT Not After : Jun 20 04:04:32 2025 GMT Subject: CN=684ba350-2282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:85:35:0c:94:c3:98:0e:4d:ba:90:70:0e:0c: 8c:15:a3:75:c9:c0:57:96:ee:8e:c1:c2:87:d8:c8: fb:eb:3b:c0:87:84:d3:a8:6e:0b:01:62:1e:ba:0d: af:b0:dd:53:42:d8:cb:e9:ab:98:a7:d0:ee:57:c4: b8:04:7a:82:05:48:c9:ec:43:1e:ac:21:1a:06:ad: 80:58:ff:ab:74:c9:d1:f6:5a:31:cc:5e:c6:5a:ba: 1a:3f:ab:84:2c:f2:76:7e:36:0d:51:64:f4:3d:bf: 99:2d:3d:a0:35:66:e2:cc:67:82:3a:07:b0:1a:b3: 14:ad:63:54:db:55:90:d7:01:09:c0:eb:c6:89:83: 14:70:ee:7c:97:20:07:8e:a5:1e:fe:ad:df:04:4d: 2b:cf:61:35:eb:e9:3e:07:64:e3:45:a3:7b:b3:48: 75:70:ae:b4:00:ee:40:79:86:16:41:c5:be:b5:bb: b4:03:88:77:c9:12:9d:27:bc:a9:be:95:67:93:a7: 76:cf:b7:67:16:1b:18:06:9d:c8:dd:0b:57:27:6e: f3:13:49:e5:2e:bd:11:2e:6c:6a:ba:9e:85:6b:9e: 0c:8d:a0:e9:c5:48:d4:c9:af:ca:3c:39:ea:48:07: 84:b1:be:5c:bf:b0:b1:ed:b5:35:de:be:6b:bc:19: 37:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:92:C6:97:E3:6E:F7:6C:3C:6D:B3:56:B2:EC:95:F9:A2:54:11:6A X509v3 Authority Key Identifier: keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:23:26:5e:f1:27:20:bb:7c:86:c1:19:08:3e:ec:56:9e:d1: 87:74:50:94:e0:07:e5:60:bb:f3:46:eb:8e:45:fe:5a:73:6f: d7:cf:ea:34:12:22:cf:b9:f7:59:5d:54:f0:2c:bb:cc:26:b2: e5:3d:e7:9e:06:07:d5:9c:66:0f:31:5e:45:10:a3:bc:f1:09: 2e:29:1a:65:b4:65:d4:f8:cf:9e:fb:99:67:89:b4:75:ee:55: c9:10:bc:49:a9:d0:fe:77:1e:d5:b6:36:91:5d:96:ab:f4:81: ed:42:fa:af:9e:82:e2:fb:cf:40:b9:e1:bd:d9:28:bf:31:fa: 74:2e:f6:b8:0c:49:9b:8e:65:d9:c2:4f:e5:2f:be:3e:2c:10: 4a:ff:fa:c6:c5:a6:f3:9f:86:4d:65:dd:87:1b:72:b9:9e:15: 94:ff:a3:22:e9:1c:74:39:c7:35:6f:7b:ad:f6:e9:b6:a1:c5: 76:03:ef:0b:8e:ef:4a:9c:ad:4b:a9:dc:cd:e6:ae:77:75:ff: ef:9e:f9:60:f0:26:c6:be:14:b8:75:64:90:d8:94:45:0a:df: 81:4f:ac:7a:b8:dc:bc:96:be:e8:58:62:af:42:ce:ba:3b:3a: e6:22:d1:8c:1d:16:94:99:95:97:d4:5d:f8:b4:b6:c5:fa:58: 69:a1:51:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFQzcxMTAvBgNVBAUTKEJBODkwMTRFQkM0OTRCNjdGRDhCM0Y4MkU4QjM4RUY2 RjZDNTcyNEQwHhcNMjUwNjEzMDQwNDMyWhcNMjUwNjIwMDQwNDMyWjAYMRYwFAYD VQQDEw02ODRiYTM1MC0yMjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5YU1DJTDmA5NupBwDgyMFaN1ycBXlu6OwcKH2Mj76zvAh4TTqG4LAWIeug2v sN1TQtjL6auYp9DuV8S4BHqCBUjJ7EMerCEaBq2AWP+rdMnR9loxzF7GWroaP6uE LPJ2fjYNUWT0Pb+ZLT2gNWbizGeCOgewGrMUrWNU21WQ1wEJwOvGiYMUcO58lyAH jqUe/q3fBE0rz2E16+k+B2TjRaN7s0h1cK60AO5AeYYWQcW+tbu0A4h3yRKdJ7yp vpVnk6d2z7dnFhsYBp3I3QtXJ27zE0nlLr0RLmxqup6Fa54MjaDpxUjUya/KPDnq SAeEsb5cv7Cx7bU13r5rvBk3pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCSxpfj bvdsPG2zVrLslfmiVBFqMB8GA1UdIwQYMBaAFLqJAU68SUtn/Ys/guizjvb2xXJN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVDNy83NTc1Nzg3MEJG RTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMyZjlpei1DNkxPTzl2YkZj azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vva0JUcnhKUzJmOWl6LUM2TE9POXZiRmNrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEVDNy83NTc1Nzg3MEJGRTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMy Zjlpei1DNkxPTzl2YkZjazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9IyZe8Scgu3yGwRkIPuxWntGHdFCU4AflYLvzRuuORf5ac2/Xz+o0 EiLPufdZXVTwLLvMJrLlPeeeBgfVnGYPMV5FEKO88QkuKRpltGXU+M+e+5lnibR1 7lXJELxJqdD+dx7VtjaRXZar9IHtQvqvnoLi+89AueG92Si/Mfp0Lva4DEmbjmXZ wk/lL74+LBBK//rGxabzn4ZNZd2HG3K5nhWU/6Mi6Rx0Occ1b3ut9um2ocV2A+8L ju9KnK1LqdzN5q53df/vnvlg8CbGvhS4dWSQ2JRFCt+BT6x6uNy8lr7oWGKvQs66 OzrmItGMHRaUmZWX1F34tLbF+lhpoVEz -----END CERTIFICATE-----Generated at Sun Jun 15 04:48:29 2025 by rpki-client