$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft File: ux3tVEsnoTcZtI-wA3PNSeDehRc.mft (raw, json) Hash identifier: 2PaLjl3bcwKNNHfkZ4RjLh46ZSm9iy+PDAWebeahTuY= Subject key identifier: D6:1A:46:77:76:D1:C9:A7:61:34:74:45:5E:4E:F9:10:37:CF:D2:38 Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Certificate serial: 08D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft Manifest number: 08CC Signing time: Mon 30 Jun 2025 20:40:01 +0000 Manifest this update: Mon 30 Jun 2025 20:40:00 +0000 Manifest next update: Mon 07 Jul 2025 20:40:00 +0000 Files and hashes: 1: ux3tVEsnoTcZtI-wA3PNSeDehRc.crl (hash: IavJ7UW+24QYwJZ7gmTyUErkOW3NuhkJFPLpBtc+Iis=) 2: 2B7215E2B54B11EA85EE266DC4F9AE02.roa (hash: HHCFckY7O591LILqzlA5i+TVYe0u7mT2Ya4XZsY3L5w=) 3: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (hash: vv1GYbA2AyqRD7ZSBeebG8Ws0r4NHNq0J0Vkh/R0ypw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2264 (0x8d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919123C, serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Validity Not Before: Jun 30 20:40:00 2025 GMT Not After : Jul 7 20:40:00 2025 GMT Subject: CN=6862f620-8e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:97:2a:87:a7:95:45:b8:93:61:33:59:2a:59: 32:b6:f8:c7:30:ff:7e:94:dd:70:0f:8f:b8:99:d4: ab:aa:b6:07:57:6f:af:06:a3:48:59:93:df:1f:db: 64:91:df:46:72:33:5e:ad:f3:7f:35:b5:4e:06:98: 84:32:53:9a:64:e3:15:e3:3f:d5:d6:22:6a:16:a2: e5:a7:98:bb:f8:d1:04:82:05:ab:6a:73:3b:92:ff: 6a:55:95:14:f4:14:03:42:ca:ca:42:7b:2a:2e:79: 34:73:77:b4:7b:10:b2:11:3e:29:b2:23:6a:33:12: 58:41:1c:15:96:b9:8f:3b:6c:9f:93:74:9f:96:82: 3f:55:34:be:67:fb:ba:fa:0b:7f:81:29:b9:39:3a: d3:a5:fb:8d:7c:d1:bf:0e:bb:92:6a:35:a5:be:62: cd:f6:57:28:96:bd:a1:9b:f9:db:b9:d9:d5:ce:91: e9:cf:29:69:d5:7b:a7:87:cb:e1:03:06:f3:b9:3f: 4b:fc:42:ec:f8:db:e2:44:55:e0:3a:51:05:ef:10: cd:6a:38:f8:74:c4:01:69:dc:fe:8e:7d:23:f5:5e: 49:f8:65:41:fc:5c:5f:fb:d3:e7:73:a0:13:21:55: 24:10:0d:3a:0f:94:6e:04:c5:f3:a4:d9:ab:dd:42: 2c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1A:46:77:76:D1:C9:A7:61:34:74:45:5E:4E:F9:10:37:CF:D2:38 X509v3 Authority Key Identifier: keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:f4:a5:a1:f4:8a:17:c6:cc:b8:38:c3:c1:1f:cc:ea:76:af: ea:58:db:1c:86:45:d5:b3:de:88:b5:32:ae:3e:bd:a9:be:7f: 9a:12:32:19:dc:04:b4:9a:b7:0a:88:f7:c0:fc:e9:7c:78:50: 7b:fc:92:50:bc:f6:da:d2:60:f9:70:e8:f0:54:c4:ae:bc:9d: 24:7e:10:44:44:dc:53:0b:db:ba:3b:da:b0:f9:f9:24:11:11: 98:f4:8e:71:5f:6a:fe:d3:bb:67:94:b6:e6:a7:eb:03:13:d4: 8e:70:90:7b:60:3b:0e:77:36:95:d0:bd:97:d5:bb:bd:7e:26: d9:2e:15:00:2c:59:9c:2a:ee:7d:01:cc:d7:50:f1:78:6e:6e: bb:c9:4a:ae:ce:04:a5:07:9e:4c:7c:ac:fd:82:f0:1f:33:35: 20:4a:72:90:af:b9:4f:2c:e6:08:d6:66:74:54:f2:48:85:15: 53:94:17:7a:f2:f4:6e:68:72:a9:c8:3a:fc:d3:f2:4a:d6:e7: aa:85:22:26:49:77:8d:7a:db:5e:b3:5d:46:7a:e3:a9:8f:33: 35:30:f1:da:0f:b0:89:40:f3:7d:ad:ad:02:bd:1e:a4:a5:4a: f4:9d:4d:c8:4b:e6:26:be:bb:08:39:a5:b4:f1:22:13:ab:6f: 13:3a:9b:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyM0MxMTAvBgNVBAUTKEJCMURFRDU0NEIyN0ExMzcxOUI0OEZCMDAzNzNDRDQ5 RTBERTg1MTcwHhcNMjUwNjMwMjA0MDAwWhcNMjUwNzA3MjA0MDAwWjAYMRYwFAYD VQQDEw02ODYyZjYyMC04ZTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZcqh6eVRbiTYTNZKlkytvjHMP9+lN1wD4+4mdSrqrYHV2+vBqNIWZPfH9tk kd9GcjNerfN/NbVOBpiEMlOaZOMV4z/V1iJqFqLlp5i7+NEEggWranM7kv9qVZUU 9BQDQsrKQnsqLnk0c3e0exCyET4psiNqMxJYQRwVlrmPO2yfk3SfloI/VTS+Z/u6 +gt/gSm5OTrTpfuNfNG/DruSajWlvmLN9lcolr2hm/nbudnVzpHpzylp1Xunh8vh AwbzuT9L/ELs+NviRFXgOlEF7xDNajj4dMQBadz+jn0j9V5J+GVB/Fxf+9Pnc6AT IVUkEA06D5RuBMXzpNmr3UIsDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYaRnd2 0cmnYTR0RV5O+RA3z9I4MB8GA1UdIwQYMBaAFLsd7VRLJ6E3GbSPsANzzUng3oUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTIzQy9FNTYyMUE2OEI1 NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9UY1p0SS13QTNQTlNlRGVo UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V4M3RWRXNub1RjWnRJLXdBM1BOU2VEZWhSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTIzQy9FNTYyMUE2OEI1NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9U Y1p0SS13QTNQTlNlRGVoUmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU9KWh9IoXxsy4OMPBH8zqdq/qWNschkXVs96ItTKuPr2pvn+aEjIZ 3AS0mrcKiPfA/Ol8eFB7/JJQvPba0mD5cOjwVMSuvJ0kfhBERNxTC9u6O9qw+fkk ERGY9I5xX2r+07tnlLbmp+sDE9SOcJB7YDsOdzaV0L2X1bu9fibZLhUALFmcKu59 AczXUPF4bm67yUquzgSlB55MfKz9gvAfMzUgSnKQr7lPLOYI1mZ0VPJIhRVTlBd6 8vRuaHKpyDr80/JK1ueqhSImSXeNettes11GeuOpjzM1MPHaD7CJQPN9ra0CvR6k pUr0nU3IS+YmvrsIOaW08SITq28TOptd -----END CERTIFICATE-----Generated at Tue Jul 1 08:15:20 2025 by rpki-client