$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft File: UdUxrvegh8GOMB4OaixjcbJkw-g.mft (raw, json) Hash identifier: fcr7isilZWWDSx2aaA2uKYyuCmk8ItXp3UE1zh9KYSQ= Subject key identifier: 30:E2:C4:EB:95:E9:0E:1A:60:A9:3E:A4:49:E7:31:E2:4E:46:A5:F6 Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft Manifest number: 01B9 Signing time: Sun 15 Jun 2025 02:34:37 +0000 Manifest this update: Sun 15 Jun 2025 02:34:37 +0000 Manifest next update: Sun 22 Jun 2025 02:34:37 +0000 Files and hashes: 1: UdUxrvegh8GOMB4OaixjcbJkw-g.crl (hash: VLYeX5mpNvH7Ifl4coXTFdfu7HC36lIettJb8zt3L2Y=) 2: 891E633CB7F111EFA500D67CC4F9AE02.roa (hash: w25txEYnko2hg8Zbjah0ISuSlzEzamAaezA5miWy4fo=) 3: 7D215B2CC3C111EE8F83CE1AC4F9AE02.roa (hash: F/z+I89rbfmUmRP3rbYTqCe+U6Y/OrtE9gxYZLyyaAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Validity Not Before: Jun 15 02:34:37 2025 GMT Not After : Jun 22 02:34:37 2025 GMT Subject: CN=684e313d-e8ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ed:5e:1e:3e:0b:8e:db:66:fd:f3:a2:69:18: 5f:e0:99:31:5b:59:16:37:38:ef:ab:7b:d6:cf:ac: 09:06:a4:f8:fe:19:86:52:d9:b6:63:5d:8a:09:a3: df:b6:99:d1:11:bc:e2:3e:46:c6:e4:ba:a7:71:cf: e7:f5:0b:41:75:73:d7:e4:30:27:af:92:e3:00:c0: b5:d5:19:e8:8c:75:fb:79:33:f0:0f:f9:cf:41:48: fa:13:7e:76:38:b0:d7:0c:6b:31:4f:79:03:1c:68: ab:c4:60:f4:62:d7:da:85:96:c7:6b:87:bd:cf:81: 80:e0:54:ae:10:37:00:c3:28:69:ee:63:9b:54:80: 3f:15:f7:72:21:c4:53:b5:95:09:7b:fc:f7:71:e6: 14:3b:f0:f7:5e:f6:70:55:c6:e4:c0:07:f3:dd:bf: be:22:5b:7e:3f:4f:d1:ee:65:a6:99:5c:8b:6e:8c: a7:bb:d6:8e:6c:90:cc:61:27:90:52:f7:0c:0e:9d: 25:8f:cd:a1:d1:a5:3b:43:bb:b9:8d:8d:73:e6:0e: 3a:bf:ac:20:1c:5e:18:8d:7a:f6:f7:35:00:6a:00: 96:f7:b2:08:ff:5e:ad:32:49:dc:c8:2f:a5:4d:ae: 58:ae:47:a2:28:b1:26:81:61:20:4b:f0:bd:c0:e2: 5e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E2:C4:EB:95:E9:0E:1A:60:A9:3E:A4:49:E7:31:E2:4E:46:A5:F6 X509v3 Authority Key Identifier: keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:0c:87:25:9e:e3:b1:0a:38:87:a0:61:14:81:12:ce:2c:b6: 55:b5:b3:c6:f6:92:bf:ad:2a:19:45:45:ef:65:ac:b7:17:d6: b7:00:be:12:b8:a2:e2:9b:fa:ef:7d:03:07:1d:2f:eb:bc:0a: 61:9b:42:51:91:1c:e8:8a:ba:fa:3d:aa:b1:c2:75:64:36:45: 65:85:bb:2f:a1:f4:c1:b0:a5:ad:47:16:15:68:0c:c3:61:92: 02:c7:f0:9f:c8:c8:37:10:e0:98:e4:77:84:3c:75:86:d2:e0: e9:e5:3d:54:6d:aa:13:fb:60:6f:35:5e:55:7f:13:79:72:e8: be:b9:6d:27:0f:48:cd:06:c6:64:f0:97:25:73:56:81:ba:52: 06:8a:3b:0f:40:9d:86:ed:ab:6f:cb:39:5f:3d:bf:9a:87:5a: 84:96:56:1b:69:b4:24:3d:00:77:e4:45:a1:26:9b:32:e0:3b: 3d:bb:74:96:01:4f:bb:d7:87:61:7b:ba:8d:2d:e1:dc:4e:5d: 1f:00:af:5f:34:35:97:7a:3d:9d:99:84:85:ce:e1:c8:e9:9d: 26:7b:ac:b7:34:da:98:da:1f:47:36:9c:91:a5:cb:06:e6:38: 73:35:9e:b8:6a:ce:91:38:4c:3a:bb:25:52:be:f5:d9:62:b4: 06:d5:40:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZBRkYxMTAvBgNVBAUTKDUxRDUzMUFFRjdBMDg3QzE4RTMwMUUwRTZBMkM2Mzcx QjI2NEMzRTgwHhcNMjUwNjE1MDIzNDM3WhcNMjUwNjIyMDIzNDM3WjAYMRYwFAYD VQQDEw02ODRlMzEzZC1lOGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+1eHj4Ljttm/fOiaRhf4JkxW1kWNzjvq3vWz6wJBqT4/hmGUtm2Y12KCaPf tpnREbziPkbG5Lqncc/n9QtBdXPX5DAnr5LjAMC11RnojHX7eTPwD/nPQUj6E352 OLDXDGsxT3kDHGirxGD0YtfahZbHa4e9z4GA4FSuEDcAwyhp7mObVIA/FfdyIcRT tZUJe/z3ceYUO/D3XvZwVcbkwAfz3b++Ilt+P0/R7mWmmVyLboynu9aObJDMYSeQ UvcMDp0lj82h0aU7Q7u5jY1z5g46v6wgHF4YjXr29zUAagCW97II/16tMkncyC+l Ta5YrkeiKLEmgWEgS/C9wOJeqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDixOuV 6Q4aYKk+pEnnMeJORqX2MB8GA1UdIwQYMBaAFFHVMa73oIfBjjAeDmosY3GyZMPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkFGRi9EMDYxMUYwNEND NDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4R09NQjRPYWl4amNiSmt3 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkVXhydmVnaDhHT01CNE9haXhqY2JKa3ctZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkFGRi9EMDYxMUYwNENDNDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4 R09NQjRPYWl4amNiSmt3LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVDIclnuOxCjiHoGEUgRLOLLZVtbPG9pK/rSoZRUXvZay3F9a3AL4S uKLim/rvfQMHHS/rvAphm0JRkRzoirr6PaqxwnVkNkVlhbsvofTBsKWtRxYVaAzD YZICx/CfyMg3EOCY5HeEPHWG0uDp5T1UbaoT+2BvNV5VfxN5cui+uW0nD0jNBsZk 8Jclc1aBulIGijsPQJ2G7atvyzlfPb+ah1qEllYbabQkPQB35EWhJpsy4Ds9u3SW AU+714dhe7qNLeHcTl0fAK9fNDWXej2dmYSFzuHI6Z0me6y3NNqY2h9HNpyRpcsG 5jhzNZ64as6ROEw6uyVSvvXZYrQG1UBD -----END CERTIFICATE-----Generated at Sun Jun 15 09:36:32 2025 by rpki-client