$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft File: uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft (raw, json) Hash identifier: N3cCktUHzu03Zbp5EOZaq8AmvC+4eoPlMbh9R4gSPaA= Subject key identifier: 2D:67:A8:CD:03:75:32:00:76:91:E3:DA:2E:14:6A:B2:42:C8:16:DB Authority key identifier: B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB Certificate issuer: /CN=A91E5C49/serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB Certificate serial: 0770 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft Manifest number: 0EDF Signing time: Sat 14 Jun 2025 21:17:01 +0000 Manifest this update: Sat 14 Jun 2025 21:17:00 +0000 Manifest next update: Sat 21 Jun 2025 21:17:00 +0000 Files and hashes: 1: uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl (hash: vQQKo4sMHQWv6soxUSRflIJgQlqpU2ZF+bdDJBnROvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1904 (0x770) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5C49, serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB Validity Not Before: Jun 14 21:17:00 2025 GMT Not After : Jun 21 21:17:00 2025 GMT Subject: CN=684de6cc-346c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:73:68:63:10:05:78:9c:24:d8:55:9f:27:d3: 92:a0:0b:87:92:1a:8c:9b:82:68:21:a2:0c:60:39: 5f:69:38:e2:ff:16:01:68:06:c1:5b:72:ca:91:ef: 24:51:e2:62:de:27:33:66:a1:49:89:4d:df:02:23: b7:77:11:6e:11:de:dc:df:ec:53:02:ae:7b:65:d7: 5f:09:6a:18:cd:a1:10:a4:8d:a1:59:a4:86:77:65: 17:d1:df:61:59:c4:a1:48:11:d7:e2:1a:3f:24:9f: 24:93:78:3a:4d:ae:de:95:6f:aa:d5:e4:e9:1c:90: 02:eb:95:6e:93:e2:25:e5:bd:84:fc:33:38:4f:a6: c2:70:96:e2:45:0c:38:a0:a0:1b:66:df:9e:4a:45: 44:15:8a:e9:7c:70:66:90:64:4f:56:05:f5:cd:4e: 85:fc:66:e6:37:db:5d:42:a3:a2:44:c3:21:26:5d: 6b:51:89:35:44:43:c7:eb:f2:16:ef:1b:2e:a3:6b: 7a:3c:fa:69:7d:b2:5b:a7:ef:9c:f0:74:19:87:3d: 05:91:fa:7f:5e:ef:0f:ef:67:89:57:63:36:43:49: 67:e7:f8:d5:c3:d6:b3:60:17:84:af:d8:04:ca:30: ae:12:8a:58:2b:dc:8a:96:5e:b1:a6:3c:71:74:48: 79:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:67:A8:CD:03:75:32:00:76:91:E3:DA:2E:14:6A:B2:42:C8:16:DB X509v3 Authority Key Identifier: keyid:B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:c6:07:b0:8b:12:14:d2:5d:e4:1a:ef:a5:05:a8:8e:3e:11: 82:46:6d:e5:89:14:69:62:14:41:39:9f:f9:70:0f:08:c7:99: ee:dd:0c:7d:8c:af:3d:a7:de:17:97:9b:37:b5:58:92:0e:ab: e9:45:53:b0:d2:a0:05:ec:4a:dd:32:5f:5b:4c:7c:6b:ab:1e: 3c:da:9f:41:d6:29:73:e4:6e:d7:ab:c6:23:00:a3:24:3d:c0: 68:69:4c:1c:26:11:dc:65:94:29:a2:a4:a1:cf:b7:b6:2f:2c: 33:78:9b:97:92:dc:b9:dd:bd:fa:68:2e:ac:95:be:90:40:5f: 1f:2c:22:bf:41:0a:7a:81:59:f6:52:fa:41:0c:06:8f:e1:fe: 9e:2a:63:99:dd:ba:6a:f3:11:04:92:4b:7a:68:9c:7b:39:a6: 8c:57:be:35:df:38:4a:b9:4f:9c:b1:59:27:c2:bb:cc:07:14: 23:f1:37:cb:bb:36:58:89:42:5c:1b:a4:28:73:fd:14:a0:e8: 92:2f:f0:24:10:0b:bb:23:ac:5b:38:12:56:7c:61:f2:4b:d3: 21:35:a1:31:d8:29:1b:a2:db:44:ee:22:35:91:6e:36:95:05: fa:c2:7e:f8:c8:83:f7:f6:1b:86:af:00:00:ed:2e:8a:49:20: e9:10:7f:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVDNDkxMTAvBgNVBAUTKEI5N0Q4RjI1MzQ1NjgwOTQ0OUVERTVEQzVDQTI1NjlB ODRFNzgzREIwHhcNMjUwNjE0MjExNzAwWhcNMjUwNjIxMjExNzAwWjAYMRYwFAYD VQQDEw02ODRkZTZjYy0zNDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3NoYxAFeJwk2FWfJ9OSoAuHkhqMm4JoIaIMYDlfaTji/xYBaAbBW3LKke8k UeJi3iczZqFJiU3fAiO3dxFuEd7c3+xTAq57ZddfCWoYzaEQpI2hWaSGd2UX0d9h WcShSBHX4ho/JJ8kk3g6Ta7elW+q1eTpHJAC65Vuk+Il5b2E/DM4T6bCcJbiRQw4 oKAbZt+eSkVEFYrpfHBmkGRPVgX1zU6F/GbmN9tdQqOiRMMhJl1rUYk1REPH6/IW 7xsuo2t6PPppfbJbp++c8HQZhz0Fkfp/Xu8P72eJV2M2Q0ln5/jVw9azYBeEr9gE yjCuEopYK9yKll6xpjxxdEh5cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1nqM0D dTIAdpHj2i4UarJCyBbbMB8GA1UdIwQYMBaAFLl9jyU0VoCUSe3l3FyiVpqE54Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUM0OS84QTg3RUZDMjFB NDgxMUVCOEYxNDMyNDZDNEY5QUUwMi91WDJQSlRSV2dKUko3ZVhjWEtKV21vVG5n OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYMlBKVFJXZ0pSSjdlWGNYS0pXbW9Ubmc5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUM0OS84QTg3RUZDMjFBNDgxMUVCOEYxNDMyNDZDNEY5QUUwMi91WDJQSlRSV2dK Uko3ZVhjWEtKV21vVG5nOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAExgewixIU0l3kGu+lBaiOPhGCRm3liRRpYhRBOZ/5cA8Ix5nu3Qx9 jK89p94Xl5s3tViSDqvpRVOw0qAF7ErdMl9bTHxrqx482p9B1ilz5G7Xq8YjAKMk PcBoaUwcJhHcZZQpoqShz7e2LywzeJuXkty53b36aC6slb6QQF8fLCK/QQp6gVn2 UvpBDAaP4f6eKmOZ3bpq8xEEkkt6aJx7OaaMV7413zhKuU+csVknwrvMBxQj8TfL uzZYiUJcG6Qoc/0UoOiSL/AkEAu7I6xbOBJWfGHyS9MhNaEx2CkbottE7iI1kW42 lQX6wn74yIP39huGrwAA7S6KSSDpEH9G -----END CERTIFICATE-----Generated at Sun Jun 15 07:07:42 2025 by rpki-client