$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft File: uesVSGZ3c32yc5_WVGKu55BhaMI.mft (raw, json) Hash identifier: OC7d/DL2XNiCoThP6PaHEx3h9e68fUZhOahP8HCnLtc= Subject key identifier: BF:42:B7:8B:5D:41:1F:5E:6B:9F:2B:4B:16:05:55:EA:DE:FF:66:F0 Authority key identifier: B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2 Certificate issuer: /CN=A91DA649/serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2 Certificate serial: 0C22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft Manifest number: 0C1A Signing time: Wed 18 Jun 2025 18:33:43 +0000 Manifest this update: Wed 18 Jun 2025 18:33:42 +0000 Manifest next update: Wed 25 Jun 2025 18:33:42 +0000 Files and hashes: 1: uesVSGZ3c32yc5_WVGKu55BhaMI.crl (hash: /3TsLiBomPPW5iX4dqiNvbONqn7q61H4tEFs2jsRhRI=) 2: C4391160305611EABE7DF272C4F9AE02.roa (hash: 3CS63lxTVcr1lDEM5PMs5CO7XzdKCmryVXHiyIzoBgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 18:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3106 (0xc22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA649, serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2 Validity Not Before: Jun 18 18:33:42 2025 GMT Not After : Jun 25 18:33:42 2025 GMT Subject: CN=68530686-d759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1d:4a:3f:96:4c:1d:dd:f4:fb:a2:d6:f6:0d: 29:17:5c:30:68:31:b1:ef:cd:6e:db:83:4b:59:69: 70:0d:c6:9c:e3:60:fc:64:50:d5:fe:31:13:d5:e1: 17:29:d8:f1:83:ad:ef:11:84:e3:da:cd:a2:bb:39: 8a:16:67:88:be:d6:fc:e2:6f:a1:04:b6:f3:9f:cb: 18:12:be:3d:bd:17:21:36:32:24:a9:b4:e7:c9:40: be:b7:ca:27:93:75:4e:53:ca:0d:08:c3:04:47:e9: 88:6a:e1:d4:d9:20:85:c0:b4:3d:6a:41:2c:15:9a: 14:fa:4d:a4:c3:ba:38:d5:50:67:48:c7:b2:f2:e2: a8:44:aa:bc:dd:8f:3a:9b:18:57:bc:e9:d5:3b:2e: 1c:c5:c8:bd:b1:f1:de:d4:8c:14:a8:93:53:a1:f7: 39:b9:38:a1:22:cb:df:20:1b:42:e4:0c:1c:40:42: 24:c7:9c:e9:12:ac:81:ec:25:1d:a4:f5:0a:ed:ef: 72:fa:88:fe:d4:e2:86:e1:24:0b:40:5e:47:a5:4f: 93:87:42:c6:4a:69:54:eb:5f:54:bb:b9:3f:7e:fd: c7:56:da:95:16:6c:5b:59:15:b2:e5:b0:bd:94:16: af:5d:5b:0b:09:d9:19:6e:44:27:6a:0c:20:e0:4e: f5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:42:B7:8B:5D:41:1F:5E:6B:9F:2B:4B:16:05:55:EA:DE:FF:66:F0 X509v3 Authority Key Identifier: keyid:B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:87:87:a0:14:4f:f6:3b:91:7e:45:09:d9:23:64:31:1f:51: e2:6d:d4:46:95:d4:52:dd:20:77:00:76:31:f9:a1:fd:b9:3f: 6d:b4:c2:71:27:61:db:81:03:3a:e3:07:87:7d:95:cc:e5:0d: eb:01:14:73:04:79:cb:70:b5:96:e6:09:55:74:74:4e:62:65: 09:05:15:88:96:7f:bd:31:90:4e:9a:32:8b:76:63:ab:2d:57: 94:a4:54:dc:e5:7e:0a:cc:07:38:d9:24:77:e6:a3:a9:14:e1: 62:94:11:a2:a5:ab:ad:99:54:5a:51:18:a5:33:a5:9e:47:11: db:27:b0:24:aa:d7:24:92:06:3e:ca:f8:77:76:ae:ee:a3:e2: 54:f2:9c:b2:33:69:00:f3:5f:fa:d7:1e:6a:92:35:57:e3:b3: a0:0c:aa:45:e1:6c:dd:cc:a3:49:6a:4b:d6:17:72:2c:0e:32: 78:7f:87:32:c6:99:18:0d:a3:16:dc:f0:1e:74:9e:75:a5:60: fc:34:f1:46:73:5c:52:54:35:b9:50:74:35:d3:27:e3:1e:55: be:16:32:3a:85:6e:f5:6d:11:ca:84:49:3b:ed:21:ba:b3:e9: 43:f4:08:ab:62:81:50:4f:e6:32:4f:c2:f8:a5:1a:dc:db:20: 44:2e:94:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE2NDkxMTAvBgNVBAUTKEI5RUIxNTQ4NjY3NzczN0RCMjczOUZENjU0NjJBRUU3 OTA2MTY4QzIwHhcNMjUwNjE4MTgzMzQyWhcNMjUwNjI1MTgzMzQyWjAYMRYwFAYD VQQDEw02ODUzMDY4Ni1kNzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0R1KP5ZMHd30+6LW9g0pF1wwaDGx781u24NLWWlwDcac42D8ZFDV/jET1eEX Kdjxg63vEYTj2s2iuzmKFmeIvtb84m+hBLbzn8sYEr49vRchNjIkqbTnyUC+t8on k3VOU8oNCMMER+mIauHU2SCFwLQ9akEsFZoU+k2kw7o41VBnSMey8uKoRKq83Y86 mxhXvOnVOy4cxci9sfHe1IwUqJNTofc5uTihIsvfIBtC5AwcQEIkx5zpEqyB7CUd pPUK7e9y+oj+1OKG4SQLQF5HpU+Th0LGSmlU619Uu7k/fv3HVtqVFmxbWRWy5bC9 lBavXVsLCdkZbkQnagwg4E71GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9Ct4td QR9ea58rSxYFVere/2bwMB8GA1UdIwQYMBaAFLnrFUhmd3N9snOf1lRirueQYWjC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTY0OS81RDk3Nzc0QzBG NTExMUVBOEM0QTVDMEFDNEY5QUUwMi91ZXNWU0daM2MzMnljNV9XVkdLdTU1Qmhh TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vlc1ZTR1ozYzMyeWM1X1dWR0t1NTVCaGFNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTY0OS81RDk3Nzc0QzBGNTExMUVBOEM0QTVDMEFDNEY5QUUwMi91ZXNWU0daM2Mz MnljNV9XVkdLdTU1QmhhTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTh4egFE/2O5F+RQnZI2QxH1HibdRGldRS3SB3AHYx+aH9uT9ttMJx J2HbgQM64weHfZXM5Q3rARRzBHnLcLWW5glVdHROYmUJBRWIln+9MZBOmjKLdmOr LVeUpFTc5X4KzAc42SR35qOpFOFilBGipautmVRaURilM6WeRxHbJ7AkqtckkgY+ yvh3dq7uo+JU8pyyM2kA81/61x5qkjVX47OgDKpF4WzdzKNJakvWF3IsDjJ4f4cy xpkYDaMW3PAedJ51pWD8NPFGc1xSVDW5UHQ10yfjHlW+FjI6hW71bRHKhEk77SG6 s+lD9AirYoFQT+YyT8L4pRrc2yBELpT+ -----END CERTIFICATE-----Generated at Thu Jun 19 13:07:18 2025 by rpki-client