$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft File: xUK94Lg0fDed4d4dgkOpLLlMh00.mft (raw, json) Hash identifier: /vr3IR0fUXWyCiE8X2s/BMjqFsMxRzjT2grS8WvWw4c= Subject key identifier: C5:A4:28:F9:E4:D4:75:BA:D2:CC:F1:11:EC:D4:68:A3:EE:DF:C9:36 Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D Certificate issuer: /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft Manifest number: 0108 Signing time: Fri 13 Jun 2025 03:59:25 +0000 Manifest this update: Fri 13 Jun 2025 03:59:24 +0000 Manifest next update: Fri 20 Jun 2025 03:59:24 +0000 Files and hashes: 1: xUK94Lg0fDed4d4dgkOpLLlMh00.crl (hash: ivx7BZYjHLvPLmrQHbuBHT7KrfYOanbUGCpjtQMo+dc=) 2: FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (hash: +xX3fyh3F9druR4nFxovnFPsJhxpAOsF0rFF0c+Rr5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB297, serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D Validity Not Before: Jun 13 03:59:24 2025 GMT Not After : Jun 20 03:59:24 2025 GMT Subject: CN=684ba21c-cb2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fb:ae:1e:5c:2a:ea:65:72:66:42:83:66:20: bc:33:d3:6b:70:56:59:b7:c4:39:b6:2d:06:7b:a5: 00:b1:bb:c9:09:2f:82:4e:d1:b3:3e:3d:9b:dc:ef: 08:c0:05:b1:47:3c:a5:e7:17:8b:ed:ff:30:f4:c9: 86:63:ad:66:f2:04:94:32:43:43:70:d3:be:e5:54: 58:5f:5f:fc:62:78:d6:d5:82:b5:9f:73:8b:35:6d: 69:07:33:d6:05:fa:23:98:ae:97:61:84:0e:d1:13: ff:fc:19:0e:ff:f3:b5:12:b5:01:df:21:9f:eb:d3: 4c:e6:5e:43:19:01:4a:d9:43:4f:e8:8c:62:7c:76: 4a:4c:f4:7c:00:48:cc:6a:cd:7d:c3:cd:1d:0b:7e: 7d:d1:32:75:50:33:45:0d:16:18:30:03:cb:45:d7: 38:d6:99:14:78:c9:b2:5b:bb:51:ae:5f:6d:34:37: fa:8f:f3:f3:6d:95:ac:67:ca:18:bf:af:79:b5:59: c2:bd:07:c8:ff:15:4a:98:30:c1:16:87:98:33:5a: 2c:bb:d5:97:af:bb:a9:97:82:74:29:67:80:6c:91: dc:d5:52:91:48:54:0f:cd:3f:aa:d7:ac:98:9f:a7: e9:14:45:0d:49:44:11:de:c1:1d:19:47:47:b4:87: 2d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A4:28:F9:E4:D4:75:BA:D2:CC:F1:11:EC:D4:68:A3:EE:DF:C9:36 X509v3 Authority Key Identifier: keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c6:a7:56:54:92:a3:7e:01:76:51:2c:d0:c2:91:65:ae:90: be:a8:88:02:6b:8d:ce:d0:e9:28:75:b0:91:9a:9e:21:f2:dc: 7c:0f:22:c1:71:8c:6c:88:30:30:8a:0e:e3:78:8a:9a:a1:34: fc:3a:a0:ad:85:b0:94:2c:40:d4:cf:57:ba:bb:e4:91:08:89: ac:49:d9:e9:ac:d4:32:fd:5d:12:b3:30:c3:b2:76:58:a8:e3: 92:01:51:b9:57:c1:2c:0b:5b:ef:90:c6:8b:df:13:4c:a5:c7: 0e:b9:28:db:27:6b:56:36:ad:d2:9b:a0:aa:96:70:f6:64:77: 8d:16:1c:7a:a9:90:da:54:48:4b:ec:c2:f7:99:7a:df:a2:df: ec:c6:0c:70:4c:bd:52:a3:b2:35:a9:66:af:98:b0:cb:9d:65: 62:02:09:ee:9b:9e:e0:b2:01:3e:56:f7:91:8a:e9:e4:cd:a5: 99:ce:53:54:20:20:9f:79:99:25:15:9f:60:bf:f4:c0:44:35: c7:dd:bd:6c:74:f4:eb:88:56:80:d5:4b:1e:27:66:ab:57:73: e9:9b:51:30:2a:49:b4:aa:95:67:50:4b:24:b3:47:cd:e0:e3: ca:58:7c:05:ca:e2:d4:d2:b7:7d:e0:ea:91:d2:ac:00:ad:d0: 23:12:29:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIyOTcxMTAvBgNVBAUTKEM1NDJCREUwQjgzNDdDMzc5REUxREUxRDgyNDNBOTJD Qjk0Qzg3NEQwHhcNMjUwNjEzMDM1OTI0WhcNMjUwNjIwMDM1OTI0WjAYMRYwFAYD VQQDEw02ODRiYTIxYy1jYjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfuuHlwq6mVyZkKDZiC8M9NrcFZZt8Q5ti0Ge6UAsbvJCS+CTtGzPj2b3O8I wAWxRzyl5xeL7f8w9MmGY61m8gSUMkNDcNO+5VRYX1/8YnjW1YK1n3OLNW1pBzPW BfojmK6XYYQO0RP//BkO//O1ErUB3yGf69NM5l5DGQFK2UNP6IxifHZKTPR8AEjM as19w80dC3590TJ1UDNFDRYYMAPLRdc41pkUeMmyW7tRrl9tNDf6j/PzbZWsZ8oY v695tVnCvQfI/xVKmDDBFoeYM1osu9WXr7upl4J0KWeAbJHc1VKRSFQPzT+q16yY n6fpFEUNSUQR3sEdGUdHtIct8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWkKPnk 1HW60szxEezUaKPu38k2MB8GA1UdIwQYMBaAFMVCveC4NHw3neHeHYJDqSy5TIdN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjI5Ny85QTg5MEU2RUI1 RTExMUVFQTBBNjE3NkRDNEY5QUUwMi94VUs5NExnMGZEZWQ0ZDRkZ2tPcExMbE1o MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVSzk0TGcwZkRlZDRkNGRna09wTExsTWgwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjI5Ny85QTg5MEU2RUI1RTExMUVFQTBBNjE3NkRDNEY5QUUwMi94VUs5NExnMGZE ZWQ0ZDRkZ2tPcExMbE1oMDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuxqdWVJKjfgF2USzQwpFlrpC+qIgCa43O0OkodbCRmp4h8tx8DyLB cYxsiDAwig7jeIqaoTT8OqCthbCULEDUz1e6u+SRCImsSdnprNQy/V0SszDDsnZY qOOSAVG5V8EsC1vvkMaL3xNMpccOuSjbJ2tWNq3Sm6CqlnD2ZHeNFhx6qZDaVEhL 7ML3mXrfot/sxgxwTL1So7I1qWavmLDLnWViAgnum57gsgE+VveRiunkzaWZzlNU ICCfeZklFZ9gv/TARDXH3b1sdPTriFaA1UseJ2arV3Ppm1EwKkm0qpVnUEsks0fN 4OPKWHwFyuLU0rd94OqR0qwArdAjEimt -----END CERTIFICATE-----Generated at Sat Jun 14 18:41:51 2025 by rpki-client