$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft File: uHa2DaKzyctmxyu5_Kc77ssR_dE.mft (raw, json) Hash identifier: GvUox17q2Ch4V2qsorHLEPTqB9GUU5BtlJ2MoXIe6R0= Subject key identifier: B7:B5:01:61:A7:47:60:74:FF:76:3D:EF:2D:CB:E1:B3:58:6F:CC:FB Authority key identifier: B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 Certificate issuer: /CN=A912611F/serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Certificate serial: 0FEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft Manifest number: 190B Signing time: Thu 12 Jun 2025 17:22:31 +0000 Manifest this update: Thu 12 Jun 2025 17:22:30 +0000 Manifest next update: Thu 19 Jun 2025 17:22:30 +0000 Files and hashes: 1: uHa2DaKzyctmxyu5_Kc77ssR_dE.crl (hash: hPoS1ZEwfz8ijjaaPDccFzy3m0K6ctxfNYIOg26h1q4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4078 (0xfee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912611F, serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Validity Not Before: Jun 12 17:22:30 2025 GMT Not After : Jun 19 17:22:30 2025 GMT Subject: CN=684b0cd7-51b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:42:7a:c2:0a:fc:af:ad:54:2f:33:61:2e:d3: 69:b5:cb:9a:dd:16:79:01:f9:ed:d4:b0:3e:0d:be: 50:03:0d:14:39:6d:65:e2:3f:c9:52:62:e1:9e:57: 86:dc:9f:52:d2:96:9b:3d:86:61:f2:bd:d7:5a:90: fa:41:7c:b8:a1:a5:09:6c:a9:2b:8b:3a:98:23:b9: ef:fa:e2:3b:45:66:28:e4:93:e0:33:4f:a4:00:da: b6:e0:7d:14:2a:19:95:20:ce:37:10:93:c0:0d:f2: 7b:d8:d2:c8:64:0b:ef:f9:f3:3b:3f:f0:20:a5:bd: d3:66:a8:cb:51:ea:42:6f:ed:46:dc:76:7e:4c:92: 57:f2:c5:1c:e7:a9:79:ed:3f:d0:02:48:67:7f:60: de:34:06:5d:b4:a1:4c:92:e2:3d:71:a5:d4:97:65: 6b:82:69:76:10:ed:f6:43:ae:83:9e:e7:65:83:db: d8:79:7d:8e:03:8d:c2:a2:92:fd:db:5e:35:9f:2b: 2c:72:30:4b:3a:b0:5f:8b:a8:66:d4:6d:cd:56:2a: da:14:53:9e:d6:13:0e:39:3b:e4:ca:cb:06:6d:75: 52:bd:f0:c2:63:33:11:7d:34:a2:5d:1a:20:8d:37: 5c:51:34:36:3f:49:53:85:0d:e3:94:85:42:5c:f4: ff:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B5:01:61:A7:47:60:74:FF:76:3D:EF:2D:CB:E1:B3:58:6F:CC:FB X509v3 Authority Key Identifier: keyid:B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:fc:4f:26:87:05:06:18:c9:21:12:ea:2e:6a:64:2b:0b:ee: ca:45:fb:6b:3f:cf:e0:a6:2c:dd:ab:76:5c:a3:77:ee:0b:74: 03:e1:d9:27:30:9d:cd:ad:8c:4a:e5:15:d1:0f:9a:16:0c:fb: 00:42:74:f6:be:0f:11:4b:64:fe:62:55:34:e6:b2:6b:d7:56: d0:ab:02:63:1f:23:fe:b1:42:a6:1c:8c:74:d2:12:02:bc:2c: d0:0e:60:02:69:87:14:39:6f:73:c8:f0:48:e1:24:73:46:91: ba:b8:45:fe:a9:12:22:21:2c:78:d7:e5:81:d6:a6:1b:a8:2d: 17:83:d4:2b:4f:cd:cc:7c:5a:5a:a8:7b:60:68:6c:5d:2a:a0: 49:00:ff:dc:fd:5b:28:b0:c7:8f:9a:00:8a:4b:c8:e9:d6:d8: 74:b2:40:91:de:9e:d1:99:18:94:92:75:6b:e6:00:4d:48:e5: 7d:3f:ef:d6:cd:68:91:c1:af:8e:aa:1b:f0:0f:71:9c:69:c8: b5:5b:f8:4c:78:33:69:6e:13:1f:b8:9b:e3:7d:54:a5:76:1a: 15:10:a5:8c:ca:45:3a:12:d5:c9:ab:a5:89:3c:0d:27:95:25: 58:9c:38:01:24:42:39:16:a4:b0:0d:8e:1f:c4:d5:7e:61:80: 30:4b:a0:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxMUYxMTAvBgNVBAUTKEI4NzZCNjBEQTJCM0M5Q0I2NkM3MkJCOUZDQTczQkVF Q0IxMUZERDEwHhcNMjUwNjEyMTcyMjMwWhcNMjUwNjE5MTcyMjMwWjAYMRYwFAYD VQQDEw02ODRiMGNkNy01MWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0J6wgr8r61ULzNhLtNptcua3RZ5Afnt1LA+Db5QAw0UOW1l4j/JUmLhnleG 3J9S0pabPYZh8r3XWpD6QXy4oaUJbKkrizqYI7nv+uI7RWYo5JPgM0+kANq24H0U KhmVIM43EJPADfJ72NLIZAvv+fM7P/Agpb3TZqjLUepCb+1G3HZ+TJJX8sUc56l5 7T/QAkhnf2DeNAZdtKFMkuI9caXUl2Vrgml2EO32Q66Dnudlg9vYeX2OA43CopL9 2141nysscjBLOrBfi6hm1G3NViraFFOe1hMOOTvkyssGbXVSvfDCYzMRfTSiXRog jTdcUTQ2P0lThQ3jlIVCXPT/MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLe1AWGn R2B0/3Y97y3L4bNYb8z7MB8GA1UdIwQYMBaAFLh2tg2is8nLZscrufynO+7LEf3R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenljdG14eXU1X0tjNzdzc1Jf ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VIYTJEYUt6eWN0bXh5dTVfS2M3N3NzUl9kRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenlj dG14eXU1X0tjNzdzc1JfZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDS/E8mhwUGGMkhEuouamQrC+7KRftrP8/gpizdq3Zco3fuC3QD4dkn MJ3NrYxK5RXRD5oWDPsAQnT2vg8RS2T+YlU05rJr11bQqwJjHyP+sUKmHIx00hIC vCzQDmACaYcUOW9zyPBI4SRzRpG6uEX+qRIiISx41+WB1qYbqC0Xg9QrT83MfFpa qHtgaGxdKqBJAP/c/VsosMePmgCKS8jp1th0skCR3p7RmRiUknVr5gBNSOV9P+/W zWiRwa+OqhvwD3Gcaci1W/hMeDNpbhMfuJvjfVSldhoVEKWMykU6EtXJq6WJPA0n lSVYnDgBJEI5FqSwDY4fxNV+YYAwS6CJ -----END CERTIFICATE-----Generated at Sat Jun 14 00:30:20 2025 by rpki-client