$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft File: 9UFCkkKfU9qxhrQuVkFJWagL6gg.mft (raw, json) Hash identifier: JggJiBpjn1Bp9K8u4G+xP3Kn0a8PhX/OR/nLVccW4bk= Subject key identifier: 79:28:FD:87:29:8C:56:87:1A:33:59:C8:EA:07:5F:95:52:72:C9:26 Authority key identifier: F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08 Certificate issuer: /CN=A91FB92B/serialNumber=F5414292429F53DAB186B42E56414959A80BEA08 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft Manifest number: 014A Signing time: Tue 17 Jun 2025 03:18:58 +0000 Manifest this update: Tue 17 Jun 2025 03:18:57 +0000 Manifest next update: Tue 24 Jun 2025 03:18:57 +0000 Files and hashes: 1: 9UFCkkKfU9qxhrQuVkFJWagL6gg.crl (hash: nPY/fSaRnzJzovNaqrC/7LautUABSo9jxXLcOIvsHGk=) 2: 25B9F9C454BE11EE810E4C27C4F9AE02.roa (hash: vLaYuuYnarn+LGPGR9ZLrnHgOaNMvO/0VgOiG0azlng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB92B, serialNumber=F5414292429F53DAB186B42E56414959A80BEA08 Validity Not Before: Jun 17 03:18:57 2025 GMT Not After : Jun 24 03:18:57 2025 GMT Subject: CN=6850dea2-3d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5b:5b:9e:84:2d:bd:3f:7b:6d:f9:98:11:2c: e5:c9:68:72:5d:77:b0:c1:6c:c1:49:86:fc:21:04: a1:15:3f:7a:25:e3:0b:2e:ce:c3:f0:0f:f3:61:fc: cf:36:fb:fd:ba:71:55:e2:ba:8e:56:46:d1:d0:1e: 62:92:55:af:9e:55:b8:e7:52:01:26:f6:05:d6:31: a8:95:7d:b4:4e:82:ca:34:60:80:5b:0f:a8:11:97: a8:94:87:24:3b:46:66:31:66:40:10:44:1f:78:0b: fd:d9:84:7b:6e:47:ad:ee:57:d4:b6:3f:71:9e:6f: 15:90:12:20:a1:cf:c4:70:52:da:b9:e0:4f:f1:af: 57:06:f1:ad:7e:51:67:1d:29:65:e1:71:31:bc:ea: cc:9f:fd:77:6f:27:c2:50:97:4b:61:10:e9:ac:15: d3:f8:53:71:30:fc:69:fe:33:bf:87:1e:3b:93:93: 44:44:9f:26:18:20:6b:c8:a1:1d:6b:51:2c:88:d1: 09:c5:df:fd:b4:eb:6c:be:af:e2:e8:48:a3:1f:51: cc:c6:41:5c:a2:44:b3:36:b6:d4:cb:9f:b9:f5:4d: 77:e9:f5:a6:85:58:b5:2c:23:e1:1f:02:4c:92:f7: dd:34:60:95:4e:25:d0:42:b6:52:ef:61:48:87:a9: cc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:28:FD:87:29:8C:56:87:1A:33:59:C8:EA:07:5F:95:52:72:C9:26 X509v3 Authority Key Identifier: keyid:F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:61:80:22:b8:8a:89:07:18:9f:85:c0:40:d4:a3:ac:19:f0: 08:6e:63:b6:e5:06:08:18:9c:62:1f:0f:6b:d1:7a:f5:a5:8c: f2:f4:89:da:d5:b2:a1:29:c0:64:dd:1a:e5:61:6c:08:46:d5: f9:bd:7f:19:30:94:16:c9:ce:c9:bf:fa:1e:50:9a:66:b7:1a: d8:03:9f:2f:83:26:6d:d2:00:75:36:96:aa:a1:c7:f9:5d:cf: 99:58:71:ca:73:2f:bd:2f:31:4b:df:dc:ea:3e:2d:0b:e9:04: 2f:a2:2a:84:01:00:af:e4:b2:7b:b1:a1:ec:7e:f7:96:82:d8: 76:59:41:ce:bb:34:88:5f:5e:46:a0:ea:e8:7b:3c:11:4c:45: d4:6c:70:63:1a:0a:f1:ba:b1:0e:d8:cd:62:3c:aa:ba:40:2e: 5b:d8:70:02:a3:19:54:2f:d4:02:3c:f8:8d:cd:d7:c1:fe:c1: ec:ae:2d:4c:68:b9:30:3d:71:c1:b7:63:07:3f:c2:8e:f8:bd: dd:6c:33:21:72:a3:92:ee:fd:c9:51:87:68:dc:09:3e:f9:a9: 0d:09:71:4d:04:f8:1d:14:a6:6b:88:33:db:2d:02:12:cd:46: a0:c9:f7:52:f6:9b:bd:78:6c:e0:ab:a6:8c:ac:1b:0d:3c:0e: 59:13:71:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI5MkIxMTAvBgNVBAUTKEY1NDE0MjkyNDI5RjUzREFCMTg2QjQyRTU2NDE0OTU5 QTgwQkVBMDgwHhcNMjUwNjE3MDMxODU3WhcNMjUwNjI0MDMxODU3WjAYMRYwFAYD VQQDEw02ODUwZGVhMi0zZDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVtbnoQtvT97bfmYESzlyWhyXXewwWzBSYb8IQShFT96JeMLLs7D8A/zYfzP Nvv9unFV4rqOVkbR0B5iklWvnlW451IBJvYF1jGolX20ToLKNGCAWw+oEZeolIck O0ZmMWZAEEQfeAv92YR7bket7lfUtj9xnm8VkBIgoc/EcFLaueBP8a9XBvGtflFn HSll4XExvOrMn/13byfCUJdLYRDprBXT+FNxMPxp/jO/hx47k5NERJ8mGCBryKEd a1EsiNEJxd/9tOtsvq/i6EijH1HMxkFcokSzNrbUy5+59U136fWmhVi1LCPhHwJM kvfdNGCVTiXQQrZS72FIh6nM1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHko/Ycp jFaHGjNZyOoHX5VScskmMB8GA1UdIwQYMBaAFPVBQpJCn1PasYa0LlZBSVmoC+oI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyQi9DNDYwODFGMjU0 QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5cXhoclF1VmtGSldhZ0w2 Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVRkNra0tmVTlxeGhyUXVWa0ZKV2FnTDZnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjkyQi9DNDYwODFGMjU0QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5 cXhoclF1VmtGSldhZ0w2Z2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQYYAiuIqJBxifhcBA1KOsGfAIbmO25QYIGJxiHw9r0Xr1pYzy9Ina 1bKhKcBk3RrlYWwIRtX5vX8ZMJQWyc7Jv/oeUJpmtxrYA58vgyZt0gB1Npaqocf5 Xc+ZWHHKcy+9LzFL39zqPi0L6QQvoiqEAQCv5LJ7saHsfveWgth2WUHOuzSIX15G oOroezwRTEXUbHBjGgrxurEO2M1iPKq6QC5b2HACoxlUL9QCPPiNzdfB/sHsri1M aLkwPXHBt2MHP8KO+L3dbDMhcqOS7v3JUYdo3Ak++akNCXFNBPgdFKZriDPbLQIS zUagyfdS9pu9eGzgq6aMrBsNPA5ZE3F/ -----END CERTIFICATE-----Generated at Wed Jun 18 03:14:54 2025 by rpki-client