$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft File: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft (raw, json) Hash identifier: I//jrbzIs0JszeFm5zWYV824apxhG12HdVEne4U0r/A= Subject key identifier: D7:2B:07:A5:8F:65:DB:DD:97:D8:11:5A:6D:D2:B7:CA:C3:58:C2:87 Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF Certificate issuer: /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Certificate serial: 189B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft Manifest number: 1895 Signing time: Wed 18 Jun 2025 15:48:26 +0000 Manifest this update: Wed 18 Jun 2025 15:48:26 +0000 Manifest next update: Wed 25 Jun 2025 15:48:26 +0000 Files and hashes: 1: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl (hash: LP/WP9pqBZ6ruIuNVaanGUjYJL/n59bGj1FuUxDDJ7I=) 2: AE21A9C6818911EA81577016C4F9AE02.roa (hash: 7SxWILLdTrzJpYEt8Y/6XTCMP3sdZqZUyA4GDfqu88g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 15:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6299 (0x189b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Validity Not Before: Jun 18 15:48:26 2025 GMT Not After : Jun 25 15:48:26 2025 GMT Subject: CN=6852dfca-1a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3f:c8:5a:30:8a:9f:11:4c:76:96:d7:66:4f: 6c:e3:28:b4:e4:3c:87:a2:dc:13:3a:00:72:bb:72: 9e:30:eb:29:07:7f:9a:0a:9c:5d:0b:82:cf:fa:0a: 12:a8:6f:a3:7c:3a:0f:dc:06:6d:e1:09:61:cc:a8: 1d:90:14:43:0d:0e:44:96:55:1e:5f:d1:0e:e9:2c: 67:2d:27:36:d4:e8:f9:88:52:0b:57:0d:a5:2b:9c: e3:8a:d5:40:4f:6b:da:1e:0d:a6:3d:dc:2f:9c:c2: 96:20:1b:b0:c0:f4:e0:2c:08:9d:71:5f:9b:79:55: 6b:b4:4c:f5:02:38:a8:a1:ad:3b:c6:0d:e5:23:72: 0d:0e:16:f2:f6:a1:57:01:13:1d:68:72:36:2e:fe: b3:25:84:b8:41:cf:97:68:07:8a:48:48:27:28:06: 20:b3:89:fd:9b:fa:e8:18:c7:74:9e:7f:f4:c2:ac: 1c:02:20:3e:ca:3f:1c:45:18:96:c5:f7:72:81:7d: 3f:39:f3:a1:27:56:00:d8:3c:3d:f5:a2:7a:44:74: a0:a1:8f:7c:0d:64:6d:ac:5d:7b:4b:0a:4b:a5:15: 83:f7:ee:dd:a8:5f:b8:0c:93:26:c3:a7:25:87:16: ff:e6:25:a8:e7:3d:2a:7e:37:f9:ff:4a:d3:89:58: 00:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2B:07:A5:8F:65:DB:DD:97:D8:11:5A:6D:D2:B7:CA:C3:58:C2:87 X509v3 Authority Key Identifier: keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:11:cd:0b:bd:ee:de:16:0e:d9:3e:b4:73:d4:30:8a:89:ca: 22:b3:db:98:b3:51:e9:f0:d1:11:96:c3:4c:66:d7:4d:ba:93: f3:67:8a:1b:3f:43:0a:98:9c:0b:84:60:96:13:9d:b1:73:7f: d8:bb:bd:fb:d4:b8:c6:02:d3:19:cd:bd:b7:ca:63:8b:f5:e7: 99:ed:73:b1:52:f7:a3:b4:29:de:fb:92:1d:d2:9a:99:e8:a5: c5:27:10:06:1e:3f:86:88:f5:08:ee:27:09:9e:71:fb:c3:9f: a0:a5:85:0b:e6:83:db:b2:27:eb:ae:9f:11:6b:37:5c:be:a8: ec:9a:ee:df:a8:11:19:c6:ae:2f:59:d8:9d:84:c5:6d:15:04: f1:db:0b:f4:24:2b:b3:02:c6:c7:3d:ff:e0:26:c0:8f:22:82: d6:33:2b:c8:b2:7d:62:9a:08:9f:5d:17:ff:70:8f:02:3a:9e: 4e:32:80:72:20:0e:39:86:41:b4:80:c0:35:44:30:be:f0:96: 6a:cf:02:64:52:0b:99:c3:f7:18:c1:5e:0e:38:c9:97:19:d4: 5e:0f:c6:da:1b:04:41:0b:42:3a:8e:8f:a9:9d:56:0b:61:dc: c0:c3:64:f7:e9:8b:47:59:3a:1f:83:16:51:82:b6:28:81:e8: 79:ee:73:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKEQxNDc5RUY2MDM0MUUzOUVDQTE3MkU0Mzc2NDQzQTQ3 MTk3NUNCRUYwHhcNMjUwNjE4MTU0ODI2WhcNMjUwNjI1MTU0ODI2WjAYMRYwFAYD VQQDEw02ODUyZGZjYS0xYTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1z/IWjCKnxFMdpbXZk9s4yi05DyHotwTOgByu3KeMOspB3+aCpxdC4LP+goS qG+jfDoP3AZt4QlhzKgdkBRDDQ5EllUeX9EO6SxnLSc21Oj5iFILVw2lK5zjitVA T2vaHg2mPdwvnMKWIBuwwPTgLAidcV+beVVrtEz1Ajiooa07xg3lI3INDhby9qFX ARMdaHI2Lv6zJYS4Qc+XaAeKSEgnKAYgs4n9m/roGMd0nn/0wqwcAiA+yj8cRRiW xfdygX0/OfOhJ1YA2Dw99aJ6RHSgoY98DWRtrF17SwpLpRWD9+7dqF+4DJMmw6cl hxb/5iWo5z0qfjf5/0rTiVgAWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcrB6WP Zdvdl9gRWm3St8rDWMKHMB8GA1UdIwQYMBaAFNFHnvYDQeOeyhcuQ3ZEOkcZdcvv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS80ODJCQTE3MjlE MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1N0tGeTVEZGtRNlJ4bDF5 LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBVZWU5Z05CNDU3S0Z5NURka1E2UnhsMXktOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS80ODJCQTE3MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1 N0tGeTVEZGtRNlJ4bDF5LTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfEc0Lve7eFg7ZPrRz1DCKicois9uYs1Hp8NERlsNMZtdNupPzZ4ob P0MKmJwLhGCWE52xc3/Yu7371LjGAtMZzb23ymOL9eeZ7XOxUvejtCne+5Id0pqZ 6KXFJxAGHj+GiPUI7icJnnH7w5+gpYUL5oPbsifrrp8Razdcvqjsmu7fqBEZxq4v WdidhMVtFQTx2wv0JCuzAsbHPf/gJsCPIoLWMyvIsn1imgifXRf/cI8COp5OMoBy IA45hkG0gMA1RDC+8JZqzwJkUguZw/cYwV4OOMmXGdReD8baGwRBC0I6jo+pnVYL YdzAw2T36YtHWTofgxZRgrYogeh57nNK -----END CERTIFICATE-----Generated at Fri Jun 20 00:48:16 2025 by rpki-client