$ rpki-client -vvf rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft File: U1n0WpMqsOo84GFn1fzHBltN2IU.mft (raw, json) Hash identifier: h3EJIx6hXAfS1bA9BIxeoPXdHh9JNGVi6oThEFku08E= Subject key identifier: CA:8A:7D:2F:DB:8E:08:2D:F9:BB:C5:DD:62:F2:DB:D1:FD:FF:F5:9C Authority key identifier: 53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85 Certificate issuer: /CN=A911367F/serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885 Certificate serial: 0C58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft Manifest number: 0C4C Signing time: Fri 30 May 2025 18:35:24 +0000 Manifest this update: Fri 30 May 2025 18:35:24 +0000 Manifest next update: Fri 06 Jun 2025 18:35:24 +0000 Files and hashes: 1: U1n0WpMqsOo84GFn1fzHBltN2IU.crl (hash: OY6q1GOUF8wLEM37E1e0QcMLmNVRhCskoBvodzmI0po=) 2: 6751E26C415511ECA2FD715CC4F9AE02.roa (hash: NWXl0/HloQJgP5iTbQs1BacGndGc9HtR4LlBAy7UnRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3160 (0xc58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911367F, serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885 Validity Not Before: May 30 18:35:24 2025 GMT Not After : Jun 6 18:35:24 2025 GMT Subject: CN=6839fa6c-b63c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e8:ab:4c:26:bd:29:98:3d:a5:87:33:83:6a: cc:54:79:58:30:c9:d0:a7:7b:40:e7:48:bf:d7:a5: 24:37:72:7d:60:67:35:58:2b:5d:f8:a9:66:06:9a: b1:ed:13:24:df:0d:b7:fd:05:ef:90:cc:d5:d3:6e: 36:cd:4d:89:ee:5e:75:5d:bc:76:11:cc:d5:49:9a: 79:a5:75:95:c1:f3:73:28:bd:45:41:e9:9f:52:da: 11:85:74:e7:b9:c0:12:40:91:a6:1a:4b:89:88:89: 9a:c7:9c:ed:9b:91:50:9c:fe:51:09:6c:4d:e6:c2: f7:3f:b0:4b:4f:a5:0a:7c:f4:2d:a5:ba:2b:43:5e: 0b:4a:c9:81:4c:86:2e:50:b1:67:f6:47:89:bd:a5: 8b:bd:a2:ba:47:a2:a6:2c:ce:0d:a4:0e:e0:1a:ef: 52:57:05:a0:a2:a1:d2:bb:2b:24:04:3f:3a:dc:f4: fa:4d:cd:46:1e:f6:f2:a8:20:e0:30:5e:8f:51:24: 21:c9:25:0a:9c:d7:12:b0:4e:2d:60:da:38:c9:f4: 64:2b:8a:9a:24:4f:07:ec:d2:02:5d:f7:20:02:18: 6c:96:e2:52:f2:5f:94:b1:70:92:65:e8:bf:0e:22: 97:e4:15:c2:f1:1c:31:24:09:76:75:94:d8:16:e0: 8f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8A:7D:2F:DB:8E:08:2D:F9:BB:C5:DD:62:F2:DB:D1:FD:FF:F5:9C X509v3 Authority Key Identifier: keyid:53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:df:f5:e6:2c:e3:6f:44:0a:bd:ec:d3:6e:7c:98:75:07:c8: 41:77:08:d1:83:25:ac:ae:fd:f4:b5:7a:2b:f5:6f:d2:7d:4e: e3:c7:68:bf:4f:d0:b2:04:45:30:48:53:eb:51:54:45:62:57: 85:f0:ac:e8:b4:6b:20:e7:dc:f2:50:ce:37:d1:f8:41:91:a1: 69:f6:c1:d1:58:8d:2a:12:f1:6e:4e:45:25:c7:a2:f5:4a:f0: 62:7e:9d:b8:84:b5:de:7b:77:a2:79:af:49:9a:1a:00:da:f0: 7b:3a:03:2b:5c:fa:4d:b3:76:7f:99:f5:d7:2f:c7:1f:a8:25: 37:e3:a2:90:83:f2:2b:08:ba:f2:c9:36:43:81:12:83:cb:ca: e0:5d:0b:75:95:42:64:96:4a:2d:f4:ff:81:24:ea:5e:fc:c7: 6e:49:d4:58:e2:e9:90:aa:38:d0:e2:74:1a:88:87:5a:4f:44: 23:31:35:9e:e3:59:0f:8d:4e:01:0f:7b:58:13:b2:a1:17:8f: db:e8:41:50:21:48:0e:66:19:1c:28:fd:ed:b4:c7:49:a8:a0: 7e:f7:ad:ac:5f:75:f5:45:78:19:bb:f2:5b:a5:4b:cf:11:65: 9d:8e:b3:aa:b9:73:af:d6:49:1a:0e:7c:ea:b5:0c:0b:34:91: f6:a4:72:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM2N0YxMTAvBgNVBAUTKDUzNTlGNDVBOTMyQUIwRUEzQ0UwNjE2N0Q1RkNDNzA2 NUI0REQ4ODUwHhcNMjUwNTMwMTgzNTI0WhcNMjUwNjA2MTgzNTI0WjAYMRYwFAYD VQQDEw02ODM5ZmE2Yy1iNjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOirTCa9KZg9pYczg2rMVHlYMMnQp3tA50i/16UkN3J9YGc1WCtd+KlmBpqx 7RMk3w23/QXvkMzV0242zU2J7l51Xbx2EczVSZp5pXWVwfNzKL1FQemfUtoRhXTn ucASQJGmGkuJiImax5ztm5FQnP5RCWxN5sL3P7BLT6UKfPQtpborQ14LSsmBTIYu ULFn9keJvaWLvaK6R6KmLM4NpA7gGu9SVwWgoqHSuyskBD863PT6Tc1GHvbyqCDg MF6PUSQhySUKnNcSsE4tYNo4yfRkK4qaJE8H7NICXfcgAhhsluJS8l+UsXCSZei/ DiKX5BXC8RwxJAl2dZTYFuCPKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqKfS/b jggt+bvF3WLy29H9//WcMB8GA1UdIwQYMBaAFFNZ9FqTKrDqPOBhZ9X8xwZbTdiF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzY3Ri83QTk0RDEyODA0 NjExMUVBOUYwRjQwNDJDNEY5QUUwMi9VMW4wV3BNcXNPbzg0R0ZuMWZ6SEJsdE4y SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UxbjBXcE1xc09vODRHRm4xZnpIQmx0TjJJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzY3Ri83QTk0RDEyODA0NjExMUVBOUYwRjQwNDJDNEY5QUUwMi9VMW4wV3BNcXNP bzg0R0ZuMWZ6SEJsdE4ySVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS3/XmLONvRAq97NNufJh1B8hBdwjRgyWsrv30tXor9W/SfU7jx2i/ T9CyBEUwSFPrUVRFYleF8KzotGsg59zyUM430fhBkaFp9sHRWI0qEvFuTkUlx6L1 SvBifp24hLXee3eiea9JmhoA2vB7OgMrXPpNs3Z/mfXXL8cfqCU346KQg/IrCLry yTZDgRKDy8rgXQt1lUJklkot9P+BJOpe/MduSdRY4umQqjjQ4nQaiIdaT0QjMTWe 41kPjU4BD3tYE7KhF4/b6EFQIUgOZhkcKP3ttMdJqKB+962sX3X1RXgZu/JbpUvP EWWdjrOquXOv1kkaDnzqtQwLNJH2pHKP -----END CERTIFICATE-----Generated at Sat May 31 17:08:57 2025 by rpki-client