$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft File: u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft (raw, json) Hash identifier: 6ngYsQpyIL6tThKmtWYY61tEjTIUtcn6X50o6E930vM= Subject key identifier: 51:3B:F5:3A:70:D7:B4:94:8B:97:52:9D:A2:B0:31:F1:01:FB:2C:8C Authority key identifier: BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0 Certificate issuer: /CN=A91CEE85/serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft Manifest number: BF Signing time: Sat 19 Jul 2025 06:06:23 +0000 Manifest this update: Sat 19 Jul 2025 06:06:22 +0000 Manifest next update: Sat 26 Jul 2025 06:06:22 +0000 Files and hashes: 1: u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl (hash: EJ7kvBoZsQzIxAtJAAhD0wxb36ec/3KhlvuOzru9e+8=) 2: 4D189DD4728311EFA9CECE43C4F9AE02.roa (hash: Ge+55CQegGWCZISlkeWVyEDQbw8xhE1lFYLjXYnwl5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE85, serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0 Validity Not Before: Jul 19 06:06:22 2025 GMT Not After : Jul 26 06:06:22 2025 GMT Subject: CN=687b35df-061f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:2e:e7:ea:ff:7a:49:23:5e:33:6f:e7:f1: 7c:8e:b9:0a:25:f0:f9:e2:e7:2c:42:f2:79:1f:de: 1b:8e:ee:4f:ff:aa:c2:64:c5:dc:cf:6f:39:f2:0e: 77:66:1c:cb:07:dc:84:0e:71:c1:3b:ef:ef:35:5b: 9d:5b:d1:bb:af:f5:3e:8b:c7:9f:fc:9c:bd:f1:4c: 2e:1e:a1:e0:e4:ed:3a:46:a7:77:63:8b:f5:37:45: 5d:27:6e:9f:d4:2b:cd:ac:a4:c7:04:70:c2:ff:8e: 9b:69:cb:d6:f1:bc:1b:ae:40:65:f7:37:db:65:b3: 0e:78:08:4f:38:38:ec:16:d6:b0:cf:30:a5:56:41: e5:3d:06:3b:66:5c:1a:82:80:84:f9:6a:54:ce:e3: a5:b1:9c:cd:99:40:8c:58:da:a5:40:a9:a1:fd:54: e4:17:3f:c2:ab:69:ae:b3:5d:22:0e:f6:11:c9:d9: ab:0f:f9:db:ab:ca:20:07:48:66:f2:0d:74:74:41: bc:b0:93:49:6d:ee:29:bc:99:6f:02:c4:5c:42:94: 8e:ad:3e:51:5a:ad:dd:5e:5e:d0:b2:5a:eb:8b:37: d7:51:f2:fc:fd:2c:7d:bf:96:0e:88:11:61:3c:1e: 55:34:9f:70:25:01:6b:ed:dc:f0:8f:e8:f9:cd:b1: d0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3B:F5:3A:70:D7:B4:94:8B:97:52:9D:A2:B0:31:F1:01:FB:2C:8C X509v3 Authority Key Identifier: keyid:BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:14:ab:3d:84:b3:77:ee:c2:b2:0b:8c:bd:0b:53:c3:a3:51: b6:67:4e:9e:ad:98:f9:4a:29:12:57:5b:4e:ef:2e:a0:1a:db: 4c:62:36:89:27:8c:8d:b8:fb:a6:9f:53:61:fb:d4:5c:c1:11: d0:bc:06:90:ec:de:ae:60:93:1d:cc:78:b0:9c:a1:0e:60:ad: 24:9b:fd:24:4c:c1:ca:58:26:ab:35:05:96:09:da:60:8c:ff: cf:d1:1b:87:2d:a8:6c:3f:4a:5e:3c:3e:95:0b:78:0c:54:a6: 8d:d0:96:51:26:ba:8a:83:54:4b:67:0c:a1:14:a2:ba:a0:a3: 04:83:df:57:9e:4b:1f:e9:11:0c:06:15:bf:9d:2c:d9:40:e9: ac:cb:1e:76:29:95:06:cd:fc:23:ad:17:9d:e0:3d:3a:aa:1c: 25:27:47:13:a9:0f:07:04:b2:4a:2e:3c:7b:06:a6:c1:73:f0: d5:7f:26:fb:29:bd:53:97:c5:25:ff:de:31:e9:34:34:dd:e1: 3a:73:58:3b:42:64:93:64:d9:8c:21:02:73:13:0d:cd:77:8d: 7a:23:93:45:14:e2:1c:d0:3a:16:47:92:e0:fe:63:f4:d0:0c: 0e:77:4e:c4:d6:22:c3:bf:b3:85:4e:83:2c:7c:71:f1:f1:6b: 41:cd:a4:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VFODUxMTAvBgNVBAUTKEJCRTgwM0ZCNzU3RTBDNDdEMzIwNDU0NTIxODdCNzRB RTI3MTExRjAwHhcNMjUwNzE5MDYwNjIyWhcNMjUwNzI2MDYwNjIyWjAYMRYwFAYD VQQDEw02ODdiMzVkZi0wNjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrou5+r/ekkjXjNv5/F8jrkKJfD54ucsQvJ5H94bju5P/6rCZMXcz2858g53 ZhzLB9yEDnHBO+/vNVudW9G7r/U+i8ef/Jy98UwuHqHg5O06Rqd3Y4v1N0VdJ26f 1CvNrKTHBHDC/46bacvW8bwbrkBl9zfbZbMOeAhPODjsFtawzzClVkHlPQY7Zlwa goCE+WpUzuOlsZzNmUCMWNqlQKmh/VTkFz/Cq2mus10iDvYRydmrD/nbq8ogB0hm 8g10dEG8sJNJbe4pvJlvAsRcQpSOrT5RWq3dXl7QslrrizfXUfL8/Sx9v5YOiBFh PB5VNJ9wJQFr7dzwj+j5zbHQqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFE79Tpw 17SUi5dSnaKwMfEB+yyMMB8GA1UdIwQYMBaAFLvoA/t1fgxH0yBFRSGHt0ricRHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU4NS8wNUE3Q0U2ODQ1 QUUxMUVGQjQzNUVCNkZDNEY5QUUwMi91LWdELTNWLURFZlRJRVZGSVllM1N1SnhF ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtZ0QtM1YtREVmVElFVkZJWWUzU3VKeEVmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUU4NS8wNUE3Q0U2ODQ1QUUxMUVGQjQzNUVCNkZDNEY5QUUwMi91LWdELTNWLURF ZlRJRVZGSVllM1N1SnhFZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfFKs9hLN37sKyC4y9C1PDo1G2Z06erZj5SikSV1tO7y6gGttMYjaJ J4yNuPumn1Nh+9RcwRHQvAaQ7N6uYJMdzHiwnKEOYK0km/0kTMHKWCarNQWWCdpg jP/P0RuHLahsP0pePD6VC3gMVKaN0JZRJrqKg1RLZwyhFKK6oKMEg99Xnksf6REM BhW/nSzZQOmsyx52KZUGzfwjrRed4D06qhwlJ0cTqQ8HBLJKLjx7BqbBc/DVfyb7 Kb1Tl8Ul/94x6TQ03eE6c1g7QmSTZNmMIQJzEw3Nd416I5NFFOIc0DoWR5Lg/mP0 0AwOd07E1iLDv7OFToMsfHHx8WtBzaQ8 -----END CERTIFICATE-----Generated at Sun Jul 20 06:23:17 2025 by rpki-client