$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft File: uSVP8yozKY2dXGFc_aRTFeFcfLU.mft (raw, json) Hash identifier: ABTEfpUXNGAl9ZCyx2Q9HUGQ523sUNhwcTjdNcpkUIs= Subject key identifier: 98:86:EB:21:54:C3:A9:BC:85:99:C7:E2:9F:F7:71:26:50:CD:76:76 Authority key identifier: B9:25:4F:F3:2A:33:29:8D:9D:5C:61:5C:FD:A4:53:15:E1:5C:7C:B5 Certificate issuer: /CN=A91F3043/serialNumber=B9254FF32A33298D9D5C615CFDA45315E15C7CB5 Certificate serial: 0650 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft Manifest number: 0647 Signing time: Thu 12 Jun 2025 22:16:51 +0000 Manifest this update: Thu 12 Jun 2025 22:16:50 +0000 Manifest next update: Thu 19 Jun 2025 22:16:50 +0000 Files and hashes: 1: uSVP8yozKY2dXGFc_aRTFeFcfLU.crl (hash: uQqHW/vTjUaGf3WKTEXpsxF8cS+6Gv+axX1fQ0K3Z9g=) 2: BDFE68F491FD11EB84408D16C4F9AE02.roa (hash: NiOCVi1ZAoRhfdZ2LF+ut8x9beDsO9AQBCdgx3wc2ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.crl rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1616 (0x650) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3043, serialNumber=B9254FF32A33298D9D5C615CFDA45315E15C7CB5 Validity Not Before: Jun 12 22:16:50 2025 GMT Not After : Jun 19 22:16:50 2025 GMT Subject: CN=684b51d3-b35d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:81:e5:48:c5:61:e7:98:bf:38:0e:63:bf:49: 99:39:f5:ee:3a:f3:05:b8:a8:00:c5:8a:9e:64:de: 60:29:7d:fc:66:35:45:d9:42:66:62:eb:f5:30:a7: 1d:f1:31:62:04:bb:de:b6:45:c8:5f:b5:be:54:41: 6c:a6:cd:dd:59:11:49:7a:dc:e8:75:5b:6d:91:ae: 25:a8:cd:af:57:6d:2f:8e:b8:1d:c8:81:e0:a2:68: 5e:33:44:52:c4:bb:ca:dc:27:77:4f:cd:e3:70:be: cb:da:09:84:37:eb:30:a2:e3:16:d9:df:5e:92:f1: d9:2c:2c:e4:ed:98:52:a7:45:09:13:f4:08:5e:09: 8c:49:d1:aa:6f:14:53:15:88:a6:c3:1a:ec:06:f2: c6:46:39:91:5a:b2:9f:56:3e:91:d1:a9:51:40:13: ae:48:78:57:cd:2d:d0:df:7f:45:f2:e7:97:56:3d: 96:9e:47:0d:9d:8c:5a:33:e0:b1:a5:15:7a:f8:84: 88:1c:28:82:71:e1:ad:e6:7a:c9:51:bc:8d:2e:1d: 2e:d7:1d:21:f2:33:9f:6f:d9:b4:23:d3:13:c0:8d: 45:a2:e0:67:0f:e6:14:66:08:65:2e:ba:4e:4f:71: 42:90:1f:0a:9c:8e:72:30:01:05:ad:e5:27:47:25: 3e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:86:EB:21:54:C3:A9:BC:85:99:C7:E2:9F:F7:71:26:50:CD:76:76 X509v3 Authority Key Identifier: keyid:B9:25:4F:F3:2A:33:29:8D:9D:5C:61:5C:FD:A4:53:15:E1:5C:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:06:11:aa:eb:d8:72:b3:80:5d:70:8d:6a:02:f8:e6:96:c0: 65:cf:d9:56:73:a1:11:7d:01:d9:63:31:28:65:e2:f2:e2:27: a8:ce:e5:f2:13:f6:e4:09:f1:00:fb:8f:36:9b:91:16:ef:ed: 81:9f:98:8b:cd:1c:2d:bc:17:31:2c:0f:00:17:7a:2e:09:d7: 81:49:ca:31:0d:9d:d5:8c:51:97:d3:99:b0:73:15:2b:98:c1: 97:e5:19:ae:50:cd:5c:71:0a:67:fe:c6:4a:3f:a5:b2:19:a1: a6:87:96:d1:f8:51:2b:2b:23:41:b8:6a:83:0c:0b:31:85:17: 20:d6:f7:28:6b:9e:5a:3d:f5:31:07:d7:c6:a8:26:65:f7:9b: 57:c6:40:20:a3:b9:7f:cd:5e:45:5f:cf:36:5d:37:1d:6a:2f: ca:dd:5e:eb:fa:e5:d3:c8:e0:46:3a:89:d3:7a:03:c5:b8:20: ae:a4:9f:39:81:bc:16:2b:78:c1:51:65:fa:1d:ac:4e:e6:fe: cd:f7:bd:85:0c:8a:0e:86:a8:89:36:02:53:19:4a:6e:d4:59: 93:a3:82:57:b6:5c:b2:bc:e4:42:3b:bf:42:7a:89:e3:9f:24: c0:d2:10:e9:02:a9:2c:0a:b9:5e:33:98:dd:fd:78:87:7b:9a: f5:23:d0:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwNDMxMTAvBgNVBAUTKEI5MjU0RkYzMkEzMzI5OEQ5RDVDNjE1Q0ZEQTQ1MzE1 RTE1QzdDQjUwHhcNMjUwNjEyMjIxNjUwWhcNMjUwNjE5MjIxNjUwWjAYMRYwFAYD VQQDEw02ODRiNTFkMy1iMzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4IHlSMVh55i/OA5jv0mZOfXuOvMFuKgAxYqeZN5gKX38ZjVF2UJmYuv1MKcd 8TFiBLvetkXIX7W+VEFsps3dWRFJetzodVttka4lqM2vV20vjrgdyIHgomheM0RS xLvK3Cd3T83jcL7L2gmEN+swouMW2d9ekvHZLCzk7ZhSp0UJE/QIXgmMSdGqbxRT FYimwxrsBvLGRjmRWrKfVj6R0alRQBOuSHhXzS3Q339F8ueXVj2WnkcNnYxaM+Cx pRV6+ISIHCiCceGt5nrJUbyNLh0u1x0h8jOfb9m0I9MTwI1FouBnD+YUZghlLrpO T3FCkB8KnI5yMAEFreUnRyU+DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiG6yFU w6m8hZnH4p/3cSZQzXZ2MB8GA1UdIwQYMBaAFLklT/MqMymNnVxhXP2kUxXhXHy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzA0My8zOTZDNUQ0MDkx RkMxMUVCQTk5OERCMTRDNEY5QUUwMi91U1ZQOHlvektZMmRYR0ZjX2FSVEZlRmNm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VTVlA4eW96S1kyZFhHRmNfYVJURmVGY2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzA0My8zOTZDNUQ0MDkxRkMxMUVCQTk5OERCMTRDNEY5QUUwMi91U1ZQOHlvektZ MmRYR0ZjX2FSVEZlRmNmTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeBhGq69hys4BdcI1qAvjmlsBlz9lWc6ERfQHZYzEoZeLy4ieozuXy E/bkCfEA+482m5EW7+2Bn5iLzRwtvBcxLA8AF3ouCdeBScoxDZ3VjFGX05mwcxUr mMGX5RmuUM1ccQpn/sZKP6WyGaGmh5bR+FErKyNBuGqDDAsxhRcg1vcoa55aPfUx B9fGqCZl95tXxkAgo7l/zV5FX882XTcdai/K3V7r+uXTyOBGOonTegPFuCCupJ85 gbwWK3jBUWX6HaxO5v7N972FDIoOhqiJNgJTGUpu1FmTo4JXtlyyvORCO79Ceonj nyTA0hDpAqksCrleM5jd/XiHe5r1I9AX -----END CERTIFICATE-----Generated at Sat Jun 14 17:50:31 2025 by rpki-client