$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft File: u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft (raw, json) Hash identifier: YRJ6gR9A0ohhCOdj8mc8zNTW3kO9ScgLyiQQHFzVbEo= Subject key identifier: 4D:70:3A:0A:15:94:BF:26:5D:C1:6F:20:2B:19:C7:D1:16:DA:1A:E6 Authority key identifier: BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0 Certificate issuer: /CN=A91CEE85/serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft Manifest number: B0 Signing time: Thu 19 Jun 2025 05:25:46 +0000 Manifest this update: Thu 19 Jun 2025 05:25:46 +0000 Manifest next update: Thu 26 Jun 2025 05:25:46 +0000 Files and hashes: 1: u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl (hash: FPdGav77NEL7/uA5pVUQBJ1jhKHX2yEPI4bAxNjFyHM=) 2: 4D189DD4728311EFA9CECE43C4F9AE02.roa (hash: Ge+55CQegGWCZISlkeWVyEDQbw8xhE1lFYLjXYnwl5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE85, serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0 Validity Not Before: Jun 19 05:25:46 2025 GMT Not After : Jun 26 05:25:46 2025 GMT Subject: CN=68539f5a-df63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c2:f8:66:ae:35:90:6a:c3:9c:68:d5:45:1f: 5a:4f:88:fd:52:46:a1:18:e4:ec:b1:52:15:fe:28: 4f:c4:ba:4d:4f:e6:c4:15:f3:6e:0c:e5:06:02:43: d2:61:84:a4:07:c6:75:04:fa:18:28:8d:58:17:54: 50:f4:42:22:95:27:48:32:bc:40:b3:b7:86:f1:17: 24:4d:f1:2c:2c:5b:dc:e1:43:9a:3c:06:14:06:c6: 9e:5b:94:12:29:61:7a:9b:ff:2b:f3:cd:95:ba:6a: 1f:d8:dd:c3:1f:9c:3f:b9:9c:77:0a:bf:1d:84:7d: 63:2a:a5:e3:5b:63:d7:67:ff:d3:ec:e3:ca:99:11: c7:80:b1:4d:43:2d:4b:6a:39:ee:3a:e1:35:f6:f6: 93:36:14:51:c7:3a:66:18:32:f3:07:97:07:13:81: fb:e2:9f:16:26:a2:74:ec:cd:f1:9f:de:6f:c5:50: 12:c3:fe:8e:52:40:5a:95:64:ba:e2:13:26:9f:f2: b5:89:2d:ad:be:03:67:bf:4e:3e:5e:7e:b1:e8:82: d2:53:65:27:34:aa:d2:a7:07:41:81:d5:fa:b5:30: 6e:1a:1f:13:6d:d4:d2:1a:ca:cb:86:22:55:b6:00: a8:bd:fb:f5:cc:57:b6:9e:d6:b7:c7:b2:ce:09:31: 81:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:70:3A:0A:15:94:BF:26:5D:C1:6F:20:2B:19:C7:D1:16:DA:1A:E6 X509v3 Authority Key Identifier: keyid:BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:c1:9c:da:3c:72:14:88:3d:0a:7f:7e:45:e8:7c:c1:0e:c1: 82:b0:be:94:f6:d1:78:be:43:5b:e0:28:c6:b7:79:02:3e:2e: c2:8f:d0:19:2b:c3:26:22:2a:74:8b:55:b4:38:0f:d1:c7:9f: f2:09:c5:68:da:eb:ce:f8:20:b0:ef:0d:44:4b:73:55:08:4c: c6:dc:e3:9b:5a:1d:22:77:f0:5b:13:75:6a:f2:8d:ae:98:d6: 02:ff:c8:e9:a5:49:c1:19:90:ca:ea:16:a0:0f:e7:c0:87:60: 82:b2:a3:4f:1f:c6:a9:a0:b5:77:8e:ca:c7:ce:e7:08:f2:d1: b7:83:17:d3:15:dd:e7:e3:4d:b6:43:af:18:6f:7c:82:17:fe: 6b:b4:19:b5:49:be:5e:23:ff:7b:ca:16:cc:08:90:00:4a:25: 09:28:1c:25:73:1b:69:5d:f6:d7:6c:c9:23:9d:7b:95:a4:70: 85:06:dd:86:d1:07:7f:31:f5:bf:cd:d9:34:28:c2:ed:b1:b5: 62:30:2e:f6:dc:eb:e7:66:c6:5f:4f:62:75:3f:f9:e8:f5:37: 07:7b:ec:32:8d:9a:d6:87:d9:17:44:55:88:4a:e1:84:62:b8: 80:fb:9c:8e:39:70:ef:21:f2:f3:4c:2f:03:70:73:f4:a7:42: cb:82:8a:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VFODUxMTAvBgNVBAUTKEJCRTgwM0ZCNzU3RTBDNDdEMzIwNDU0NTIxODdCNzRB RTI3MTExRjAwHhcNMjUwNjE5MDUyNTQ2WhcNMjUwNjI2MDUyNTQ2WjAYMRYwFAYD VQQDEw02ODUzOWY1YS1kZjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsL4Zq41kGrDnGjVRR9aT4j9UkahGOTssVIV/ihPxLpNT+bEFfNuDOUGAkPS YYSkB8Z1BPoYKI1YF1RQ9EIilSdIMrxAs7eG8RckTfEsLFvc4UOaPAYUBsaeW5QS KWF6m/8r882Vumof2N3DH5w/uZx3Cr8dhH1jKqXjW2PXZ//T7OPKmRHHgLFNQy1L ajnuOuE19vaTNhRRxzpmGDLzB5cHE4H74p8WJqJ07M3xn95vxVASw/6OUkBalWS6 4hMmn/K1iS2tvgNnv04+Xn6x6ILSU2UnNKrSpwdBgdX6tTBuGh8TbdTSGsrLhiJV tgCovfv1zFe2nta3x7LOCTGBewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1wOgoV lL8mXcFvICsZx9EW2hrmMB8GA1UdIwQYMBaAFLvoA/t1fgxH0yBFRSGHt0ricRHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU4NS8wNUE3Q0U2ODQ1 QUUxMUVGQjQzNUVCNkZDNEY5QUUwMi91LWdELTNWLURFZlRJRVZGSVllM1N1SnhF ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtZ0QtM1YtREVmVElFVkZJWWUzU3VKeEVmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUU4NS8wNUE3Q0U2ODQ1QUUxMUVGQjQzNUVCNkZDNEY5QUUwMi91LWdELTNWLURF ZlRJRVZGSVllM1N1SnhFZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCwZzaPHIUiD0Kf35F6HzBDsGCsL6U9tF4vkNb4CjGt3kCPi7Cj9AZ K8MmIip0i1W0OA/Rx5/yCcVo2uvO+CCw7w1ES3NVCEzG3OObWh0id/BbE3Vq8o2u mNYC/8jppUnBGZDK6hagD+fAh2CCsqNPH8apoLV3jsrHzucI8tG3gxfTFd3n4022 Q68Yb3yCF/5rtBm1Sb5eI/97yhbMCJAASiUJKBwlcxtpXfbXbMkjnXuVpHCFBt2G 0Qd/MfW/zdk0KMLtsbViMC723OvnZsZfT2J1P/no9TcHe+wyjZrWh9kXRFWISuGE YriA+5yOOXDvIfLzTC8DcHP0p0LLgop5 -----END CERTIFICATE-----Generated at Thu Jun 19 07:44:08 2025 by rpki-client