$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft File: uRokzwRxERfIw7omSjM5Xad_kbQ.mft (raw, json) Hash identifier: /P67LFOTUKCWHP3MWGsij0YwG5pjD+Yq173niAsAZH0= Subject key identifier: C5:84:9C:C2:5B:12:34:84:D2:1E:C2:28:16:A7:65:A6:38:0E:E7:9F Authority key identifier: B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4 Certificate issuer: /CN=A9133BB0/serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft Manifest number: 98 Signing time: Sun 01 Jun 2025 05:59:30 +0000 Manifest this update: Sun 01 Jun 2025 05:59:29 +0000 Manifest next update: Sun 08 Jun 2025 05:59:29 +0000 Files and hashes: 1: uRokzwRxERfIw7omSjM5Xad_kbQ.crl (hash: y0vwMzRaucqHrVjk3o+tnZw6V5SqcpTxeBm6EO1l74Y=) 2: 27995372566911EF9D53B517C4F9AE02.roa (hash: xq/tIHChRUQ/SVgEnorDvzsCIu9u4UcNJR+//ggbghs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4 Validity Not Before: Jun 1 05:59:29 2025 GMT Not After : Jun 8 05:59:29 2025 GMT Subject: CN=683bec42-392d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:99:05:db:78:fc:a7:21:76:83:a4:e8:1c:f5: 6d:02:f1:d8:0e:68:b7:a2:6e:e8:eb:e3:fa:58:5a: a8:27:36:69:4b:9e:f3:33:d9:95:0e:0b:b7:a8:09: ce:1f:bb:70:0e:80:4f:ff:27:4a:36:ef:e6:76:b7: 06:c4:81:b4:fe:65:36:46:7a:9b:1d:06:63:96:0a: 98:cc:ad:6d:47:e1:35:34:21:c4:5e:af:e6:9a:cb: 3f:b3:8e:5b:a8:4f:46:4f:ca:de:f2:20:cc:13:90: 48:b3:41:6f:87:25:80:f1:43:64:b1:16:26:60:2f: 90:ea:d4:c7:91:55:63:47:12:6c:3c:17:46:12:58: 67:e4:be:38:3c:91:a4:6a:17:e8:66:f4:16:65:68: fe:89:9d:d4:4d:dc:93:ae:97:48:94:cd:1a:ae:91: bb:f0:36:a7:03:66:b5:3a:62:f6:ee:5e:51:7d:4b: fd:d3:69:7e:09:8e:38:5d:63:5d:25:7e:5d:1f:1b: c7:92:a9:9f:2a:1c:be:9d:60:b6:53:a4:99:3c:13: 44:2e:e4:d6:c5:cb:1d:41:3d:61:35:12:54:2d:b6: b7:54:f0:a2:4f:12:51:47:da:84:ce:c9:2e:06:aa: 0a:ff:f2:f0:00:f4:91:87:d0:16:9d:66:3d:f6:23: dd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:84:9C:C2:5B:12:34:84:D2:1E:C2:28:16:A7:65:A6:38:0E:E7:9F X509v3 Authority Key Identifier: keyid:B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:60:7e:ec:f7:7a:f7:72:05:b0:bb:09:63:1a:d0:43:1f:c8: 28:a0:86:34:06:b0:56:85:7e:ad:00:d5:b6:dd:f8:95:54:51: 54:92:56:7e:8e:bc:48:8d:69:46:94:f8:94:2f:f2:8c:94:e1: 7b:08:1b:83:60:2e:b6:24:5d:43:2e:0e:55:19:ea:c0:67:0d: 43:42:74:45:ed:db:d7:fd:7e:7e:d7:32:19:bb:0b:71:37:97: b5:0f:b8:6e:4f:8d:a1:a1:ba:6f:d7:79:14:9f:f2:56:fa:8d: 01:dd:95:b6:84:4f:36:d6:67:61:58:f3:b3:53:ad:a7:1e:ec: 83:45:4a:8b:29:f1:07:3a:8d:ac:26:52:90:d9:fb:85:2d:0e: 74:12:0a:0a:b6:3c:b5:7a:43:dc:5c:13:f0:97:f4:a9:34:26: ae:6c:02:2c:33:90:cb:fd:5a:3f:4b:fb:15:ef:76:e9:8d:5f: 4e:b0:e3:1a:48:3d:a5:f7:54:85:b3:96:03:56:2f:bc:ff:ce: 58:83:80:3f:aa:76:6f:ee:6f:64:a7:b3:3d:f4:7e:09:e1:61: f8:63:ff:ee:ad:67:cc:30:44:76:e9:9b:7e:bd:06:9a:00:93: 07:7b:c5:19:8c:1b:a7:07:eb:39:69:e3:65:64:34:b7:d6:ec: 89:ae:27:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKEI5MUEyNENGMDQ3MTExMTdDOEMzQkEyNjRBMzMzOTVE QTc3RjkxQjQwHhcNMjUwNjAxMDU1OTI5WhcNMjUwNjA4MDU1OTI5WjAYMRYwFAYD VQQDEw02ODNiZWM0Mi0zOTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZkF23j8pyF2g6ToHPVtAvHYDmi3om7o6+P6WFqoJzZpS57zM9mVDgu3qAnO H7twDoBP/ydKNu/mdrcGxIG0/mU2RnqbHQZjlgqYzK1tR+E1NCHEXq/mmss/s45b qE9GT8re8iDME5BIs0FvhyWA8UNksRYmYC+Q6tTHkVVjRxJsPBdGElhn5L44PJGk ahfoZvQWZWj+iZ3UTdyTrpdIlM0arpG78DanA2a1OmL27l5RfUv902l+CY44XWNd JX5dHxvHkqmfKhy+nWC2U6SZPBNELuTWxcsdQT1hNRJULba3VPCiTxJRR9qEzsku BqoK//LwAPSRh9AWnWY99iPd5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWEnMJb EjSE0h7CKBanZaY4DuefMB8GA1UdIwQYMBaAFLkaJM8EcREXyMO6JkozOV2nf5G0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9CODY1QjM3RTU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi91Um9rendSeEVSZkl3N29tU2pNNVhhZF9r YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VSb2t6d1J4RVJmSXc3b21Tak01WGFkX2tiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0JCMC9CODY1QjM3RTU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi91Um9rendSeEVS Zkl3N29tU2pNNVhhZF9rYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkYH7s93r3cgWwuwljGtBDH8gooIY0BrBWhX6tANW23fiVVFFUklZ+ jrxIjWlGlPiUL/KMlOF7CBuDYC62JF1DLg5VGerAZw1DQnRF7dvX/X5+1zIZuwtx N5e1D7huT42hobpv13kUn/JW+o0B3ZW2hE821mdhWPOzU62nHuyDRUqLKfEHOo2s JlKQ2fuFLQ50EgoKtjy1ekPcXBPwl/SpNCaubAIsM5DL/Vo/S/sV73bpjV9OsOMa SD2l91SFs5YDVi+8/85Yg4A/qnZv7m9kp7M99H4J4WH4Y//urWfMMER26Zt+vQaa AJMHe8UZjBunB+s5aeNlZDS31uyJridk -----END CERTIFICATE-----Generated at Mon Jun 2 22:15:08 2025 by rpki-client