$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft File: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft (raw, json) Hash identifier: WE15SWsuGn4gGS8FW1irkTNyBh2M+ZW51wClsfnflhQ= Subject key identifier: C9:5F:E2:04:E5:CA:62:7A:1F:E5:DD:B2:88:A1:6B:7E:4D:41:18:27 Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Certificate serial: 0490 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft Manifest number: 0477 Signing time: Sat 14 Jun 2025 23:53:36 +0000 Manifest this update: Sat 14 Jun 2025 23:53:35 +0000 Manifest next update: Sat 21 Jun 2025 23:53:35 +0000 Files and hashes: 1: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl (hash: +l8PAdLgO5sPatq4cUiNzJylJMZj2Oo/knI7pcrjKLk=) 2: F63AA888900F11ED8B4CB41DC4F9AE02.roa (hash: 4GFmq+y/6BnQNNwGjl1gbuy3YynLJ9fv1uZb3cM+3cw=) 3: 4BA245C01F3711F0BFC63D0BC4F9AE02.roa (hash: S6UWCaduxR+lbz98yPRDyqlqJNdrgD9va4Ql8ns2n7I=) 4: 8120226CBEE111ECBFC4F882C4F9AE02.roa (hash: X8UbCCq9WNbgn+zBad8J0ZOiCGTAAafiKf0ffwPz0jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1168 (0x490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Validity Not Before: Jun 14 23:53:35 2025 GMT Not After : Jun 21 23:53:35 2025 GMT Subject: CN=684e0b7f-2c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:34:af:cb:c5:a3:ab:35:e6:c4:6b:8e:56:41: df:05:a2:b1:b2:45:ff:54:f1:a1:ed:ce:5a:c1:1a: 29:6c:1f:81:55:4a:c5:e0:77:82:ea:bd:21:41:bf: 42:2e:3e:83:55:31:92:65:ef:dc:bb:c2:57:8a:ec: 5a:ff:fc:39:0e:01:3a:98:99:bb:e6:1f:09:2b:8e: c3:d9:d4:45:e3:d1:d0:97:ff:f1:aa:55:4e:6f:43: 51:4b:f0:4e:7a:48:77:ef:a0:39:b8:73:23:8c:7f: 51:ee:0a:ba:f0:18:17:8e:00:6c:b1:8d:5d:05:91: 95:a9:95:d4:3f:cb:11:a0:de:cc:ea:c8:c0:b3:df: 48:d8:bb:5d:7e:9e:6c:f2:04:a8:2a:d8:1e:1c:48: ce:a6:9d:07:6c:a6:ab:88:f0:77:52:df:c3:ce:bc: ef:07:49:c9:4f:c3:21:25:70:4b:73:e3:fe:6f:75: ea:9d:bf:71:98:45:b5:67:00:e0:7f:a7:a9:56:1d: b9:a4:08:96:f5:1f:a6:b5:96:6a:e6:60:0c:1c:d1: 09:a2:e4:2f:ae:b6:a5:d2:c6:89:28:58:40:26:bc: af:53:6d:d7:2a:00:0d:c9:01:9b:44:d2:ff:15:41: eb:94:32:a6:78:2e:b2:8f:39:3e:e4:08:82:b1:01: 83:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5F:E2:04:E5:CA:62:7A:1F:E5:DD:B2:88:A1:6B:7E:4D:41:18:27 X509v3 Authority Key Identifier: keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:5d:9b:c7:ea:87:b1:06:51:61:e5:f4:4d:5f:e0:77:e7:4e: c2:be:77:38:e2:85:00:47:f5:63:30:f7:d8:a0:cd:df:db:1e: c4:4f:b0:0b:cd:44:07:e8:bd:8a:c7:18:c2:00:15:1d:48:6f: bd:a3:1a:f3:98:71:25:f5:ba:46:8a:85:c6:31:44:68:90:17: fd:5f:c6:5c:c5:37:aa:29:b7:c5:83:7f:d4:21:65:74:39:61: 8b:86:5d:6a:3d:a4:91:40:b8:b0:c0:37:79:2d:c5:0b:17:a6: 06:68:a3:75:58:1b:2c:c4:99:a4:3d:1c:10:22:6b:04:79:30: 56:37:48:53:3d:ce:e6:f7:78:eb:13:de:df:c1:65:a8:49:e4: 78:c8:30:2e:3e:f7:85:40:db:23:a2:3b:81:8a:30:cb:18:e4: 4e:2d:3c:66:6e:bd:3b:31:6e:ce:e2:4f:17:15:eb:eb:a4:49: c8:54:da:0f:63:cb:00:5d:7a:5d:80:45:05:ed:8e:0c:6d:9d: ce:a1:30:a5:77:9d:81:4f:6e:2d:7a:ed:b2:84:7d:68:b3:b6: c7:59:b3:a1:fd:09:af:a5:93:29:7c:ea:aa:dd:c0:55:e9:df: a5:6b:b2:d3:11:da:11:a6:b1:ef:5e:ce:38:38:63:8f:ee:5e: de:a7:86:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0NjcxMTAvBgNVBAUTKDUyQkU5RERFOTU2OEZFNEFEQ0EwRjM0NUIzNjE3QTYz QzMwNzU4NDUwHhcNMjUwNjE0MjM1MzM1WhcNMjUwNjIxMjM1MzM1WjAYMRYwFAYD VQQDEw02ODRlMGI3Zi0yYzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TSvy8WjqzXmxGuOVkHfBaKxskX/VPGh7c5awRopbB+BVUrF4HeC6r0hQb9C Lj6DVTGSZe/cu8JXiuxa//w5DgE6mJm75h8JK47D2dRF49HQl//xqlVOb0NRS/BO ekh376A5uHMjjH9R7gq68BgXjgBssY1dBZGVqZXUP8sRoN7M6sjAs99I2Ltdfp5s 8gSoKtgeHEjOpp0HbKariPB3Ut/DzrzvB0nJT8MhJXBLc+P+b3Xqnb9xmEW1ZwDg f6epVh25pAiW9R+mtZZq5mAMHNEJouQvrral0saJKFhAJryvU23XKgANyQGbRNL/ FUHrlDKmeC6yjzk+5AiCsQGDZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlf4gTl ymJ6H+Xdsoiha35NQRgnMB8GA1UdIwQYMBaAFFK+nd6VaP5K3KDzRbNhemPDB1hF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQ2Ny83NzBCNEYxQTUy NkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19rcmNvUE5GczJGNlk4TUhX RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyNmQzcFZvX2tyY29QTkZzMkY2WThNSFdFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTQ2Ny83NzBCNEYxQTUyNkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19r cmNvUE5GczJGNlk4TUhXRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHXZvH6oexBlFh5fRNX+B3507Cvnc44oUAR/VjMPfYoM3f2x7ET7AL zUQH6L2KxxjCABUdSG+9oxrzmHEl9bpGioXGMURokBf9X8ZcxTeqKbfFg3/UIWV0 OWGLhl1qPaSRQLiwwDd5LcULF6YGaKN1WBssxJmkPRwQImsEeTBWN0hTPc7m93jr E97fwWWoSeR4yDAuPveFQNsjojuBijDLGOROLTxmbr07MW7O4k8XFevrpEnIVNoP Y8sAXXpdgEUF7Y4MbZ3OoTCld52BT24teu2yhH1os7bHWbOh/QmvpZMpfOqq3cBV 6d+la7LTEdoRprHvXs44OGOP7l7ep4bN -----END CERTIFICATE-----Generated at Sun Jun 15 09:51:40 2025 by rpki-client