$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft File: UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft (raw, json) Hash identifier: 9skR6JUEGJ08VKwMcQZEF5Ok5WHBAwVgCpKQG3NkUMY= Subject key identifier: EA:7D:E9:CF:58:8C:82:61:5F:9E:5A:E1:0E:BA:32:79:43:0F:E5:27 Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F Certificate issuer: /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F Certificate serial: 307D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft Manifest number: 306F Signing time: Mon 02 Jun 2025 15:32:35 +0000 Manifest this update: Mon 02 Jun 2025 15:32:35 +0000 Manifest next update: Mon 09 Jun 2025 15:32:35 +0000 Files and hashes: 1: UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl (hash: CRROAxS84oT7+sURFLtkNcdE6cVdm/pL73M6vpbY5Lo=) 2: E5DB5238DFBD11EC8E203126C4F9AE02.roa (hash: 8yPXIp2srpOMXwXrVDBAhf+m6VYRXr2aEaNExsEirN4=) 3: B8B02658C16B11EEA7D01A7DC4F9AE02.roa (hash: WamiUU84cAcc5WGx4lslvANbP3TtO/lIaFT/y7zUmEY=) 4: 446A425EA6BB11ED9D458785C4F9AE02.roa (hash: WhKdctnJM8x/P3lLuqtSYgwShQQZa8r7EVnRQb0csbo=) 5: 43DADDD0A6BB11ED9D458785C4F9AE02.roa (hash: T37Xr3jND0OgDmWZSLZeRiJ8MSQ6+oBhyzh33K0Hddg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 15:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12413 (0x307d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F Validity Not Before: Jun 2 15:32:35 2025 GMT Not After : Jun 9 15:32:35 2025 GMT Subject: CN=683dc413-45a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fd:80:11:b9:8c:e3:36:04:d5:30:93:05:e9: fc:9a:53:cb:e6:96:43:b9:53:e7:82:f3:c7:89:13: e9:f8:08:62:59:0c:12:bb:e8:aa:c3:0b:3d:37:bd: 02:cb:3c:44:76:3b:c4:35:2c:5f:dc:b9:81:a6:ce: 57:54:9d:db:9b:bc:85:fd:0a:5e:79:52:aa:33:b5: 06:b5:6b:7d:26:bf:dd:fb:7c:39:12:74:c1:c0:bd: c9:b5:da:5c:ee:70:7f:98:75:9b:71:12:74:dd:fe: 55:56:b0:db:73:aa:de:01:4f:5e:d3:8a:bc:80:c4: bb:55:2c:32:d7:0e:7a:cf:8d:15:33:42:6e:94:92: 47:08:c7:d8:08:43:7f:53:a3:89:78:5d:3d:bf:fa: 23:c5:b5:d0:cd:3b:10:a5:13:e2:a8:44:83:34:26: 2f:96:3d:5d:3e:76:02:c3:e0:5c:f2:74:b8:f4:a2: 96:cc:ab:9a:fe:de:6d:15:6a:d6:c7:b7:38:84:c7: 08:69:c2:f4:97:fe:b2:a9:15:e7:c7:6c:3e:42:ee: ec:41:ae:21:fa:a9:90:36:31:15:4e:30:ec:ba:4b: ca:9c:24:bb:4e:47:77:b6:4b:40:f8:50:91:1a:66: 4a:a0:41:e7:b9:9c:1d:5f:33:b7:f6:4f:d0:5a:74: 65:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:7D:E9:CF:58:8C:82:61:5F:9E:5A:E1:0E:BA:32:79:43:0F:E5:27 X509v3 Authority Key Identifier: keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a3:52:fa:98:fd:8e:72:47:ac:fa:0d:c2:2c:f8:f5:d8:60: d6:2c:e2:d1:b9:a8:59:00:62:96:2b:73:6e:58:ce:f3:5b:f6: a8:12:1b:bd:4b:dc:13:1a:dc:70:ec:cc:b5:25:a6:27:b3:57: a8:fc:15:3f:a4:fc:e3:4c:48:b3:d2:5d:65:f3:f4:ec:6b:73: 0f:52:a3:6c:8f:bb:44:07:3b:5e:2d:e2:c1:db:11:40:ce:52: 48:b9:15:cd:15:4d:84:e3:02:f6:67:55:4e:57:a0:a4:ca:d6: 16:37:d9:0b:1c:53:87:71:10:7f:56:c3:9c:e5:fe:80:50:15: 4d:19:02:5f:e4:9f:14:c6:05:2f:48:22:81:23:6a:e2:d7:6f: 24:84:1b:80:76:68:cb:22:e5:a4:2c:21:98:09:aa:9b:aa:39: 2d:29:dc:86:16:b1:cb:ac:ba:34:80:80:6b:bf:e8:68:60:2d: 17:8b:13:74:b5:8f:12:28:3d:1c:26:5b:4b:b4:08:ca:84:fe: 64:99:27:02:53:26:22:39:17:95:09:18:67:72:72:40:af:e9: 3a:ba:16:1d:11:c3:1b:1a:d6:cb:39:e3:45:0f:25:30:31:d9: e2:f4:68:38:8b:79:7b:cf:c1:52:13:7d:34:1b:7a:a0:31:08: 27:43:44:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IxREExMTAvBgNVBAUTKDUwRTY2ODNBNkFGNDY0NEI2OEExMUMyMkRBN0YzQTY1 QjMxMkMwNkYwHhcNMjUwNjAyMTUzMjM1WhcNMjUwNjA5MTUzMjM1WjAYMRYwFAYD VQQDEw02ODNkYzQxMy00NWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5f2AEbmM4zYE1TCTBen8mlPL5pZDuVPngvPHiRPp+AhiWQwSu+iqwws9N70C yzxEdjvENSxf3LmBps5XVJ3bm7yF/QpeeVKqM7UGtWt9Jr/d+3w5EnTBwL3Jtdpc 7nB/mHWbcRJ03f5VVrDbc6reAU9e04q8gMS7VSwy1w56z40VM0JulJJHCMfYCEN/ U6OJeF09v/ojxbXQzTsQpRPiqESDNCYvlj1dPnYCw+Bc8nS49KKWzKua/t5tFWrW x7c4hMcIacL0l/6yqRXnx2w+Qu7sQa4h+qmQNjEVTjDsukvKnCS7Tkd3tktA+FCR GmZKoEHnuZwdXzO39k/QWnRlCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOp96c9Y jIJhX55a4Q66MnlDD+UnMB8GA1UdIwQYMBaAFFDmaDpq9GRLaKEcItp/OmWzEsBv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS8xNEI3NkJDOEVE MEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpFdG9vUndpMm44NlpiTVN3 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPWm9PbXIwWkV0b29Sd2kybjg2WmJNU3dHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjFEQS8xNEI3NkJDOEVEMEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpF dG9vUndpMm44NlpiTVN3RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdo1L6mP2Ockes+g3CLPj12GDWLOLRuahZAGKWK3NuWM7zW/aoEhu9 S9wTGtxw7My1JaYns1eo/BU/pPzjTEiz0l1l8/Tsa3MPUqNsj7tEBzteLeLB2xFA zlJIuRXNFU2E4wL2Z1VOV6CkytYWN9kLHFOHcRB/VsOc5f6AUBVNGQJf5J8UxgUv SCKBI2ri128khBuAdmjLIuWkLCGYCaqbqjktKdyGFrHLrLo0gIBrv+hoYC0XixN0 tY8SKD0cJltLtAjKhP5kmScCUyYiOReVCRhncnJAr+k6uhYdEcMbGtbLOeNFDyUw Mdni9Gg4i3l7z8FSE300G3qgMQgnQ0Tr -----END CERTIFICATE-----Generated at Wed Jun 4 12:28:55 2025 by rpki-client