$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft File: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft (raw, json) Hash identifier: JA4Ov0Y//B289hxVcCL4vRhJvUuCWPktChHas+XSPN0= Subject key identifier: 98:9D:9C:37:B9:5C:7A:DC:70:AE:08:83:4D:1E:0A:9D:A2:C5:07:CB Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 Certificate issuer: /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft Manifest number: E7 Signing time: Thu 19 Jun 2025 04:47:54 +0000 Manifest this update: Thu 19 Jun 2025 04:47:53 +0000 Manifest next update: Thu 26 Jun 2025 04:47:53 +0000 Files and hashes: 1: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl (hash: RRMnGiPwJ7bYhHIivmsaR9LFOzDM6nkLoVuE7IKzSaE=) 2: 99244E94FE0211EEB1F40344C4F9AE02.roa (hash: ryfpBDCWcmiRZYqeao/rsVyXOOOGDWQajzrZGBcgq+0=) 3: 03BA6992ED7711EE9998FC11C4F9AE02.roa (hash: NecAjd+CZeOPqXXjjBIs9rEIjFJr1slo8jl+q1zHuq8=) 4: 38556AC6ED7711EEA7B2AF12C4F9AE02.roa (hash: x08O0LKYaX3hn9bkCscla0qFn3NKZcPh8LO75bK0AIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 04:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE959, serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Validity Not Before: Jun 19 04:47:53 2025 GMT Not After : Jun 26 04:47:53 2025 GMT Subject: CN=6853967a-b716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4b:26:47:1d:fd:ed:ae:33:46:a8:5c:28:86: c1:95:43:fb:e3:b0:e5:33:b9:7d:59:1d:04:42:41: 29:db:cc:b0:68:ee:4a:e3:a6:ee:40:78:46:ce:e8: e5:57:ad:5e:4b:16:f0:4f:14:69:63:4d:d2:ef:33: 8f:e0:19:37:42:63:90:b7:fb:db:ff:8e:85:a6:7e: 45:ac:61:09:49:11:2d:5f:67:f6:cb:93:ca:75:b3: 01:48:b4:f9:f2:b4:a5:47:3f:3d:ea:bb:54:be:49: 0e:b7:04:a9:54:88:e6:34:58:ec:f1:f0:b5:73:b5: cd:68:39:f3:f7:33:a9:9a:8c:f1:48:e1:d8:72:5b: 81:f9:ca:35:bd:36:49:09:e5:08:87:ab:16:92:27: 24:9f:24:14:9f:e3:d9:28:2d:08:21:a4:f5:de:08: 5a:74:82:1e:55:8b:7b:a2:b8:85:31:e5:ca:8b:73: d3:33:17:00:27:e6:fd:ad:ec:bd:86:0c:53:e4:90: b8:45:87:f1:a5:49:ea:87:e6:d1:40:91:22:72:df: 3d:74:ef:43:33:6a:ef:b0:6e:f4:22:38:26:73:2a: b4:6b:1e:89:6b:41:c6:b1:e3:11:e0:05:b5:e9:d1: 4f:93:5f:d7:bb:fd:41:fe:3a:cd:60:e5:f8:a9:07: 6a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9D:9C:37:B9:5C:7A:DC:70:AE:08:83:4D:1E:0A:9D:A2:C5:07:CB X509v3 Authority Key Identifier: keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:7a:0e:79:47:a8:68:4a:fd:c4:3e:f0:14:31:9f:51:1d:14: 21:57:70:0b:c2:96:cf:8b:f0:44:a7:45:45:7a:e0:88:06:06: 3e:92:e1:5a:a0:07:d7:e7:67:de:a2:be:6d:ee:20:31:76:71: 98:2e:ac:f9:3b:5e:2d:f5:69:bf:40:f0:f7:d0:7a:3a:d4:12: 72:b8:de:11:b1:31:4d:e8:78:8e:1d:aa:44:1f:5d:d8:59:4b: 80:9f:09:18:2f:08:41:d3:cc:d5:75:71:f7:1b:71:d7:d5:2a: 5b:c9:1a:33:59:a8:84:2a:3e:4f:c1:49:30:9f:f4:12:bc:7f: d5:99:b6:f4:24:da:1d:de:33:26:08:99:d0:34:c1:c6:fd:f3: e4:ed:dc:f0:d3:d5:5c:18:d6:54:c7:ab:78:08:00:7f:37:aa: e8:ba:0a:f7:2d:2c:8a:3b:3d:cb:ee:82:e2:70:b5:fb:fb:35: 9e:33:39:04:a9:df:11:b3:a6:a7:88:a6:c9:76:5f:9c:83:0f: 7f:57:41:9e:da:7a:a2:ef:98:bb:e5:6f:67:aa:0c:26:2b:8c: 99:93:dd:27:d2:ad:cb:72:0e:11:53:fd:04:7c:88:c7:ca:a2: ef:9b:52:29:82:4f:76:1a:bd:b0:3a:8d:de:ac:39:8a:d8:03: d3:ef:b4:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NTkxMTAvBgNVBAUTKEQ2RUMyMkE3M0E1OUQyQUE5NTU5OTc0NzAyNzlDNjYy RDExMDg4RjIwHhcNMjUwNjE5MDQ0NzUzWhcNMjUwNjI2MDQ0NzUzWjAYMRYwFAYD VQQDEw02ODUzOTY3YS1iNzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUsmRx397a4zRqhcKIbBlUP747DlM7l9WR0EQkEp28ywaO5K46buQHhGzujl V61eSxbwTxRpY03S7zOP4Bk3QmOQt/vb/46Fpn5FrGEJSREtX2f2y5PKdbMBSLT5 8rSlRz896rtUvkkOtwSpVIjmNFjs8fC1c7XNaDnz9zOpmozxSOHYcluB+co1vTZJ CeUIh6sWkicknyQUn+PZKC0IIaT13ghadIIeVYt7oriFMeXKi3PTMxcAJ+b9rey9 hgxT5JC4RYfxpUnqh+bRQJEict89dO9DM2rvsG70Ijgmcyq0ax6Ja0HGseMR4AW1 6dFPk1/Xu/1B/jrNYOX4qQdqQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJidnDe5 XHrccK4Ig00eCp2ixQfLMB8GA1UdIwQYMBaAFNbsIqc6WdKqlVmXRwJ5xmLREIjy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk1OS9BQTRDNzdFQ0VE NzYxMUVFQUQ4NzFBMTFDNEY5QUUwMi8xdXdpcHpwWjBxcVZXWmRIQW5uR1l0RVFp UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF1d2lwenBaMHFxVldaZEhBbm5HWXRFUWlQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTk1OS9BQTRDNzdFQ0VENzYxMUVFQUQ4NzFBMTFDNEY5QUUwMi8xdXdpcHpwWjBx cVZXWmRIQW5uR1l0RVFpUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqeg55R6hoSv3EPvAUMZ9RHRQhV3ALwpbPi/BEp0VFeuCIBgY+kuFa oAfX52feor5t7iAxdnGYLqz5O14t9Wm/QPD30Ho61BJyuN4RsTFN6HiOHapEH13Y WUuAnwkYLwhB08zVdXH3G3HX1SpbyRozWaiEKj5PwUkwn/QSvH/Vmbb0JNod3jMm CJnQNMHG/fPk7dzw09VcGNZUx6t4CAB/N6rougr3LSyKOz3L7oLicLX7+zWeMzkE qd8Rs6aniKbJdl+cgw9/V0Ge2nqi75i75W9nqgwmK4yZk90n0q3Lcg4RU/0EfIjH yqLvm1Ipgk92Gr2wOo3erDmK2APT77SP -----END CERTIFICATE-----Generated at Thu Jun 19 22:38:49 2025 by rpki-client