$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft File: uOpx0E7INugYCHPJ6dQM0uNVNwE.mft (raw, json) Hash identifier: htfYfJpnpEWUHV0TVG3/TtmqKXFwL8MJrntdZB8GivI= Subject key identifier: B8:29:AB:0E:9A:00:53:4F:D1:0A:3C:14:DA:31:75:70:73:12:6F:27 Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 Certificate issuer: /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Certificate serial: 01FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft Manifest number: 01ED Signing time: Tue 17 Jun 2025 01:44:48 +0000 Manifest this update: Tue 17 Jun 2025 01:44:48 +0000 Manifest next update: Tue 24 Jun 2025 01:44:48 +0000 Files and hashes: 1: uOpx0E7INugYCHPJ6dQM0uNVNwE.crl (hash: xCb7ByNJddKrD63zl/ZNXNFm88aDLY1Nso+QHIivQPg=) 2: CC74271E8A8711ED98572D26C4F9AE02.roa (hash: rGioCcK4Zr+knzNA5J2qJp6M9oaPBmCCilGkVDkio+Y=) 3: C9E35E848A8711ED98572D26C4F9AE02.roa (hash: eHox8CScwy17I91npttE3xAPIO9P1S6yAPyglPvKM8k=) 4: 4865D4707C3111EFBD9FF572C4F9AE02.roa (hash: nGayQSIhHNj55hF0Vf/Lo4S3bo5wcu1gOdllnD1y6Pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCF10, serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Validity Not Before: Jun 17 01:44:48 2025 GMT Not After : Jun 24 01:44:48 2025 GMT Subject: CN=6850c890-7f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3f:96:c7:dd:67:cb:1a:0b:c0:89:97:af:35: 4a:7b:a5:84:00:f2:a4:91:d5:fd:49:59:16:a4:3a: 19:2b:40:83:c9:10:ab:f9:19:8b:5d:ab:5b:5e:9f: 29:fe:d4:83:9d:8c:d7:8c:15:b4:93:f1:31:c3:6d: ef:45:a8:c4:cf:39:6d:f3:89:ef:9f:d0:7a:65:4a: 9a:9b:41:c2:63:66:75:d2:b3:ac:52:86:d9:cb:5b: 2a:6b:66:d5:7a:23:0a:f6:e2:d5:72:6b:8d:e4:36: b5:78:be:f3:e1:1e:0f:5b:51:41:d8:de:24:d3:9b: 73:e2:dc:20:de:58:30:3e:ed:1e:48:e8:48:b0:a7: 2e:97:2c:de:3d:e1:84:69:10:aa:50:28:c3:7f:99: 2a:92:ee:b9:a9:14:d2:ff:2b:67:81:13:ce:ae:57: 47:2f:03:44:fa:ff:4e:e3:d7:cf:de:1a:e5:84:35: 7d:a8:ff:4b:10:2f:27:a8:bb:67:b9:8c:c2:45:a1: a8:e5:86:d3:78:0e:cd:0a:0e:95:7f:52:2e:b4:c8: 1d:19:af:56:da:18:08:1e:50:b5:c8:2e:fd:e0:73: 4c:64:6d:52:11:3d:6d:5d:1c:2e:71:98:52:89:e9: 8d:60:74:38:b2:13:fc:8f:69:f3:82:20:cf:c3:97: 28:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:29:AB:0E:9A:00:53:4F:D1:0A:3C:14:DA:31:75:70:73:12:6F:27 X509v3 Authority Key Identifier: keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:ce:f9:24:96:85:a5:48:69:57:4d:44:58:35:e5:c2:dc:b4: 7c:96:d1:d0:8a:e0:01:b6:a7:68:48:5e:4c:0e:dd:8e:79:e6: bb:61:57:d6:49:a4:94:81:ff:ad:da:f7:31:60:9f:09:de:9d: 78:9c:13:a7:c6:23:bc:d5:38:47:05:ac:c1:34:ca:99:88:f2: bf:4c:9d:56:30:0b:26:53:85:af:00:ca:ad:59:84:b8:80:bb: 78:05:09:a2:4d:89:74:b5:51:f8:ca:93:35:e1:71:09:a8:6c: fd:be:12:05:51:33:d2:fb:f8:fb:b6:de:11:79:c4:2d:ca:a0: a0:90:71:31:0b:db:04:7e:07:3e:aa:93:71:9b:b6:59:cc:20: ba:c9:76:93:53:bc:7d:6a:1c:ce:ba:12:d9:b9:d8:ba:59:99: dc:b3:44:8e:6e:76:54:d9:bb:15:a3:90:06:2d:9c:ee:2d:ab: 79:a2:1d:a3:ce:12:ca:70:ba:8b:74:78:e6:7d:75:30:ec:e2: d0:16:84:17:8b:bf:e9:39:62:84:ad:17:bb:cf:0e:de:80:1f: e5:89:fc:94:21:36:b0:d9:63:3b:22:9c:29:89:68:c5:c5:c0: 95:f3:a6:33:6a:37:28:09:fc:2a:a7:90:59:c6:45:99:c0:ff: 13:4b:e7:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NGMTAxMTAvBgNVBAUTKEI4RUE3MUQwNEVDODM2RTgxODA4NzNDOUU5RDQwQ0Qy RTM1NTM3MDEwHhcNMjUwNjE3MDE0NDQ4WhcNMjUwNjI0MDE0NDQ4WjAYMRYwFAYD VQQDEw02ODUwYzg5MC03ZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0T+Wx91nyxoLwImXrzVKe6WEAPKkkdX9SVkWpDoZK0CDyRCr+RmLXatbXp8p /tSDnYzXjBW0k/Exw23vRajEzzlt84nvn9B6ZUqam0HCY2Z10rOsUobZy1sqa2bV eiMK9uLVcmuN5Da1eL7z4R4PW1FB2N4k05tz4twg3lgwPu0eSOhIsKculyzePeGE aRCqUCjDf5kqku65qRTS/ytngRPOrldHLwNE+v9O49fP3hrlhDV9qP9LEC8nqLtn uYzCRaGo5YbTeA7NCg6Vf1IutMgdGa9W2hgIHlC1yC794HNMZG1SET1tXRwucZhS iemNYHQ4shP8j2nzgiDPw5conQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgpqw6a AFNP0Qo8FNoxdXBzEm8nMB8GA1UdIwQYMBaAFLjqcdBOyDboGAhzyenUDNLjVTcB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0YxMC9FQzY3MzMzRTYw OTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51Z1lDSFBKNmRRTTB1TlZO d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPcHgwRTdJTnVnWUNIUEo2ZFFNMHVOVk53RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0YxMC9FQzY3MzMzRTYwOTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51 Z1lDSFBKNmRRTTB1TlZOd0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1zvkkloWlSGlXTURYNeXC3LR8ltHQiuABtqdoSF5MDt2Oeea7YVfW SaSUgf+t2vcxYJ8J3p14nBOnxiO81ThHBazBNMqZiPK/TJ1WMAsmU4WvAMqtWYS4 gLt4BQmiTYl0tVH4ypM14XEJqGz9vhIFUTPS+/j7tt4RecQtyqCgkHExC9sEfgc+ qpNxm7ZZzCC6yXaTU7x9ahzOuhLZudi6WZncs0SObnZU2bsVo5AGLZzuLat5oh2j zhLKcLqLdHjmfXUw7OLQFoQXi7/pOWKErRe7zw7egB/lifyUITaw2WM7IpwpiWjF xcCV86YzajcoCfwqp5BZxkWZwP8TS+dc -----END CERTIFICATE-----Generated at Wed Jun 18 06:04:03 2025 by rpki-client