$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft File: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft (raw, json) Hash identifier: WeURGoijr0c8JSjnTy6dycmlGKj5fmMSx4ThExJ3SxQ= Subject key identifier: D9:DE:AC:22:B1:24:93:F0:17:B4:BF:CD:0C:D8:61:B1:F3:4C:E4:D2 Authority key identifier: 52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24 Certificate issuer: /CN=A91774FB/serialNumber=5296BC801402C73909F591E19095F22465414324 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft Manifest number: B0 Signing time: Sun 01 Jun 2025 05:45:21 +0000 Manifest this update: Sun 01 Jun 2025 05:45:20 +0000 Manifest next update: Sun 08 Jun 2025 05:45:20 +0000 Files and hashes: 1: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl (hash: 7niWu3YnWGH+fbLYzPNol0jhIT17i04qSeihFU/Xww4=) 2: 24142938343C11EFA0165876C4F9AE02.roa (hash: n7AIK79a5+aPFKSTz88y32yhIzyT87IgTPflOpV9KLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91774FB, serialNumber=5296BC801402C73909F591E19095F22465414324 Validity Not Before: Jun 1 05:45:20 2025 GMT Not After : Jun 8 05:45:20 2025 GMT Subject: CN=683be8f0-0d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9c:59:cb:ca:cc:7b:1f:77:cc:38:f7:88:21: 6b:6e:cc:1f:f3:ef:b0:dd:bb:bb:17:e1:3d:59:17: b9:c0:ae:00:32:72:96:79:62:08:7c:9c:56:bc:68: 72:98:4c:7c:07:75:9c:33:c7:dd:08:83:27:a2:6f: b1:9b:49:7f:90:3e:ee:14:db:a7:82:90:6d:e4:0b: 48:ac:f8:69:c0:c7:12:8b:c1:a1:82:d0:6c:b6:5e: cf:9f:77:1e:11:10:80:cb:12:be:1f:98:4d:be:85: f2:00:37:5d:17:87:94:b3:d8:5e:92:da:5d:b4:bf: fc:b7:95:99:b2:8b:1a:fe:15:22:91:af:08:69:77: 0f:52:81:f1:f5:bf:74:c8:48:21:ba:74:ab:b7:4f: 46:c1:03:b0:f8:a4:19:f4:59:d9:f7:f1:ba:07:6f: 69:82:03:4f:ce:e9:ba:ee:6d:95:a9:2a:20:36:60: 17:ec:93:84:ff:a3:e5:03:f7:6f:c6:68:a5:b2:cd: bb:05:22:d8:03:3b:0b:c6:5f:13:bd:ce:ef:6f:ea: 40:d5:54:f0:31:f7:5c:68:ab:97:6b:79:23:b2:25: ea:17:b5:89:c8:7b:6a:d9:26:d5:d5:29:e2:1b:a9: 38:69:4e:48:35:99:ef:c2:46:d1:9b:01:f1:76:0c: 60:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DE:AC:22:B1:24:93:F0:17:B4:BF:CD:0C:D8:61:B1:F3:4C:E4:D2 X509v3 Authority Key Identifier: keyid:52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:f5:fe:3d:a1:cf:9e:c6:3a:d6:79:cc:97:b3:09:4d:1b:03: 6f:0a:45:0e:31:d3:90:a8:7d:00:8a:c5:90:cb:ce:aa:bd:b3: 75:80:48:a1:a3:01:6f:26:6c:56:ce:4f:80:9d:8d:c8:48:c2: 54:b2:1e:fc:dc:9e:81:ed:67:97:55:20:1e:0f:3e:ed:76:7d: 0d:70:65:30:44:98:ff:a3:c1:d1:d7:de:39:b2:12:41:c0:9d: b8:b2:71:d7:66:f1:31:68:67:8f:43:45:bc:f3:20:b8:85:d1: 75:25:d1:a7:77:07:24:db:85:a3:72:d1:24:0a:2d:ea:e6:6b: 46:f0:e0:8d:1c:fe:ff:a3:f3:24:4c:c3:c9:25:3b:6c:bb:cf: 8d:8f:fe:b1:c1:fd:71:49:2a:4d:8c:64:46:8b:42:0c:a3:37: 88:b0:01:aa:be:29:d5:35:30:85:e5:ae:c8:4c:dd:7b:ca:7e: c5:be:11:40:98:5a:89:0c:11:c3:0e:21:d3:05:d8:a8:18:77: 72:4e:aa:90:63:bd:6b:05:f0:b5:eb:69:9c:ea:53:e1:ef:29: 53:1a:08:95:f8:23:01:3f:be:27:1e:9b:40:ff:bc:63:25:6b: 66:f9:81:6d:72:b8:b8:69:de:83:64:3d:36:56:20:bf:b0:7b: ac:60:22:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0RkIxMTAvBgNVBAUTKDUyOTZCQzgwMTQwMkM3MzkwOUY1OTFFMTkwOTVGMjI0 NjU0MTQzMjQwHhcNMjUwNjAxMDU0NTIwWhcNMjUwNjA4MDU0NTIwWjAYMRYwFAYD VQQDEw02ODNiZThmMC0wZDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5xZy8rMex93zDj3iCFrbswf8++w3bu7F+E9WRe5wK4AMnKWeWIIfJxWvGhy mEx8B3WcM8fdCIMnom+xm0l/kD7uFNungpBt5AtIrPhpwMcSi8GhgtBstl7Pn3ce ERCAyxK+H5hNvoXyADddF4eUs9hektpdtL/8t5WZsosa/hUika8IaXcPUoHx9b90 yEghunSrt09GwQOw+KQZ9FnZ9/G6B29pggNPzum67m2VqSogNmAX7JOE/6PlA/dv xmilss27BSLYAzsLxl8Tvc7vb+pA1VTwMfdcaKuXa3kjsiXqF7WJyHtq2SbV1Sni G6k4aU5INZnvwkbRmwHxdgxg4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnerCKx JJPwF7S/zQzYYbHzTOTSMB8GA1UdIwQYMBaAFFKWvIAUAsc5CfWR4ZCV8iRlQUMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzRGQi83ODk3RjgxNjM0 MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9VcGE4Z0JRQ3h6a0o5Wkhoa0pYeUpHVkJR eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VwYThnQlFDeHprSjlaSGhrSlh5SkdWQlF5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzRGQi83ODk3RjgxNjM0MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9VcGE4Z0JRQ3h6 a0o5Wkhoa0pYeUpHVkJReVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA49f49oc+exjrWecyXswlNGwNvCkUOMdOQqH0AisWQy86qvbN1gEih owFvJmxWzk+AnY3ISMJUsh783J6B7WeXVSAeDz7tdn0NcGUwRJj/o8HR1945shJB wJ24snHXZvExaGePQ0W88yC4hdF1JdGndwck24WjctEkCi3q5mtG8OCNHP7/o/Mk TMPJJTtsu8+Nj/6xwf1xSSpNjGRGi0IMozeIsAGqvinVNTCF5a7ITN17yn7FvhFA mFqJDBHDDiHTBdioGHdyTqqQY71rBfC162mc6lPh7ylTGgiV+CMBP74nHptA/7xj JWtm+YFtcri4ad6DZD02ViC/sHusYCLo -----END CERTIFICATE-----Generated at Mon Jun 2 21:53:55 2025 by rpki-client