$ rpki-client -vvf rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft File: c-uK0qOl84q_4a4oB08oMcJzG6k.mft (raw, json) Hash identifier: +FbjKv5At9ozimBWueIdltECkuOGZ9f60ddl9xj+9d8= Subject key identifier: EE:5F:43:8E:77:90:54:08:AB:94:C3:98:A7:50:E3:CC:31:10:B1:85 Authority key identifier: 73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9 Certificate issuer: /CN=A91E42AA/serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft Manifest number: 8E Signing time: Sun 15 Jun 2025 05:34:57 +0000 Manifest this update: Sun 15 Jun 2025 05:34:57 +0000 Manifest next update: Sun 22 Jun 2025 05:34:57 +0000 Files and hashes: 1: c-uK0qOl84q_4a4oB08oMcJzG6k.crl (hash: 1fRPktpMWRnSpNk/0jm8ctwaKsd4E+S4YLjDfYHnXYE=) 2: 8B7BD7CC700211EF9FEC365AC4F9AE02.roa (hash: MYqPgxBGfIGKCkX+SQW42+81sVWr8a9Nd2V6LH33Vw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E42AA, serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9 Validity Not Before: Jun 15 05:34:57 2025 GMT Not After : Jun 22 05:34:57 2025 GMT Subject: CN=684e5b81-1701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a6:7b:24:69:74:54:0e:09:c1:87:c7:f1:2e: f4:db:51:05:95:a6:b1:09:a9:a2:81:cf:86:b5:b9: d9:cc:0b:19:64:18:ce:aa:03:31:fd:c6:bd:16:58: 76:b8:1e:9d:12:10:f6:37:a7:f4:bb:73:a2:dc:02: 77:38:29:b6:82:7f:a1:ab:5f:1f:42:73:f7:c0:a8: a7:0b:0d:74:46:5e:e4:f4:dd:bd:c3:3b:9f:e8:31: 28:58:48:1e:1b:18:7e:9c:5c:73:69:0b:04:45:42: 04:b6:52:66:0a:e1:5c:0e:93:7f:15:64:1f:72:b1: 74:6b:38:7a:c5:29:b8:71:f7:77:07:3e:fe:c2:0f: e4:6f:03:80:73:65:46:42:17:76:9e:f1:ea:62:36: f5:76:c0:8c:bf:22:88:b5:5f:33:47:f2:e7:d8:83: d5:65:ee:a1:02:6d:dc:7b:ea:11:7a:a8:40:5b:00: 92:95:a6:12:4b:1a:de:f4:3c:2f:bd:47:6c:2b:ba: 9c:e7:60:0c:7c:ee:13:7a:87:fc:9b:18:1f:5b:bb: cf:fc:65:fc:3d:e4:2d:0c:88:f3:ab:4c:e6:5c:46: 7c:f4:54:2b:70:c7:43:7e:87:56:b1:c6:47:e2:ec: 81:af:a2:2b:34:5f:89:d9:54:fa:da:e0:98:cd:bc: 6e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5F:43:8E:77:90:54:08:AB:94:C3:98:A7:50:E3:CC:31:10:B1:85 X509v3 Authority Key Identifier: keyid:73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f7:fb:9d:8c:2f:2b:a3:4a:c1:72:6e:d1:1e:fd:72:56:43: 3d:8d:8d:01:6d:76:74:74:da:3a:18:89:c7:09:48:ad:a8:2b: 92:ed:53:1e:39:3c:fb:51:04:5e:4c:ea:13:38:51:e7:f1:a7: e3:fd:ee:07:d2:e8:e6:51:d1:ad:30:5f:3d:09:d0:7b:ff:e1: 50:e4:ae:db:40:ef:30:a9:c1:99:f4:a3:63:47:66:a5:b7:29: 7e:1a:62:d1:bd:26:d4:71:cd:dc:1e:01:78:cd:3c:fb:4f:1f: 0b:12:c6:f1:24:16:5a:e6:05:2d:37:86:af:cb:34:99:98:f6: ae:6a:f2:cb:d6:10:e8:19:53:6f:42:41:d8:5b:56:0c:2c:25: de:fd:f9:4d:c7:a5:04:c9:a8:c5:96:5f:2a:5d:69:72:c5:56: 59:54:2c:14:7f:05:e1:22:4e:f3:ef:b2:51:ff:04:3a:f4:e5: de:0d:12:0a:e0:7c:97:98:8f:bc:d2:b8:d2:01:bb:43:ff:1a: 8e:f6:76:f1:1d:0d:5e:b1:a2:07:29:70:de:68:06:53:1f:d9: 63:b6:94:75:9f:2e:c8:c2:e0:55:81:82:34:9b:63:60:1d:8d: 7d:91:f7:de:3b:15:17:ad:4e:d0:7a:ee:30:3a:6e:4e:29:6f: 7f:af:aa:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQyQUExMTAvBgNVBAUTKDczRUI4QUQyQTNBNUYzOEFCRkUxQUUyODA3NEYyODMx QzI3MzFCQTkwHhcNMjUwNjE1MDUzNDU3WhcNMjUwNjIyMDUzNDU3WjAYMRYwFAYD VQQDEw02ODRlNWI4MS0xNzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaZ7JGl0VA4JwYfH8S7021EFlaaxCamigc+GtbnZzAsZZBjOqgMx/ca9Flh2 uB6dEhD2N6f0u3Oi3AJ3OCm2gn+hq18fQnP3wKinCw10Rl7k9N29wzuf6DEoWEge Gxh+nFxzaQsERUIEtlJmCuFcDpN/FWQfcrF0azh6xSm4cfd3Bz7+wg/kbwOAc2VG Qhd2nvHqYjb1dsCMvyKItV8zR/Ln2IPVZe6hAm3ce+oReqhAWwCSlaYSSxre9Dwv vUdsK7qc52AMfO4Teof8mxgfW7vP/GX8PeQtDIjzq0zmXEZ89FQrcMdDfodWscZH 4uyBr6IrNF+J2VT62uCYzbxu7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5fQ453 kFQIq5TDmKdQ48wxELGFMB8GA1UdIwQYMBaAFHPritKjpfOKv+GuKAdPKDHCcxup MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDJBQS9FNDA3QjMzMDcw MDExMUVGQkJFOEExNThDNEY5QUUwMi9jLXVLMHFPbDg0cV80YTRvQjA4b01jSnpH NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MtdUswcU9sODRxXzRhNG9CMDhvTWNKekc2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDJBQS9FNDA3QjMzMDcwMDExMUVGQkJFOEExNThDNEY5QUUwMi9jLXVLMHFPbDg0 cV80YTRvQjA4b01jSnpHNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa9/udjC8ro0rBcm7RHv1yVkM9jY0BbXZ0dNo6GInHCUitqCuS7VMe OTz7UQReTOoTOFHn8afj/e4H0ujmUdGtMF89CdB7/+FQ5K7bQO8wqcGZ9KNjR2al tyl+GmLRvSbUcc3cHgF4zTz7Tx8LEsbxJBZa5gUtN4avyzSZmPauavLL1hDoGVNv QkHYW1YMLCXe/flNx6UEyajFll8qXWlyxVZZVCwUfwXhIk7z77JR/wQ69OXeDRIK 4HyXmI+80rjSAbtD/xqO9nbxHQ1esaIHKXDeaAZTH9ljtpR1ny7IwuBVgYI0m2Ng HY19kffeOxUXrU7Qeu4wOm5OKW9/r6qd -----END CERTIFICATE-----Generated at Sun Jun 15 09:51:11 2025 by rpki-client