$ rpki-client -vvf rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft File: uAcN_Ffq4OvoruS7XJHQar0cpxo.mft (raw, json) Hash identifier: e/UIE5z6TzHq3ewPRJFyshBmwD9Vgqezu6gd+d3+hIw= Subject key identifier: 21:C9:A0:CE:7A:72:2A:78:04:93:2A:5E:FB:B8:A5:AF:FA:37:DA:D9 Authority key identifier: B8:07:0D:FC:57:EA:E0:EB:E8:AE:E4:BB:5C:91:D0:6A:BD:1C:A7:1A Certificate issuer: /CN=A9196977/serialNumber=B8070DFC57EAE0EBE8AEE4BB5C91D06ABD1CA71A Certificate serial: 0603 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft Manifest number: 05F8 Signing time: Sun 08 Jun 2025 22:33:30 +0000 Manifest this update: Sun 08 Jun 2025 22:33:29 +0000 Manifest next update: Sun 15 Jun 2025 22:33:29 +0000 Files and hashes: 1: uAcN_Ffq4OvoruS7XJHQar0cpxo.crl (hash: cjC/j+P2YbGpo70vbnk//hqn6rOwQqlKgMnI5Fe6giU=) 2: E40449BED7A011EFB0DF210CC4F9AE02.roa (hash: ars+4kUYh+fBY0hItqO0CQ4bv/P8oF+2aWPQbb5TTz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.crl rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 22:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1539 (0x603) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196977, serialNumber=B8070DFC57EAE0EBE8AEE4BB5C91D06ABD1CA71A Validity Not Before: Jun 8 22:33:29 2025 GMT Not After : Jun 15 22:33:29 2025 GMT Subject: CN=68460fb9-1654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:88:f6:3d:ac:3a:78:8c:20:25:c9:40:08:8b: 3e:d2:c7:6d:c9:b2:f5:22:7c:d4:e9:ab:bf:5b:0d: 49:0c:07:83:66:ce:f7:02:ee:97:3d:4a:a9:66:e1: 5d:7d:91:a0:21:b3:d8:f7:1b:19:b9:74:ac:39:9e: ba:a9:ce:27:97:95:03:e5:49:9b:3a:6e:39:d8:27: 46:d6:fd:f5:d5:44:e5:b1:bf:33:69:00:01:dc:08: 2c:f0:dd:c4:35:4c:6e:ae:01:a8:5c:27:bc:55:af: fa:93:00:21:ee:72:7e:85:77:45:ad:c7:57:39:54: a7:d2:ab:34:9c:00:79:40:e0:d8:92:03:9c:ae:32: 7a:2d:f7:f8:22:dc:74:4b:38:34:f6:ea:bd:fc:00: 56:20:24:23:bd:45:b7:1e:60:c7:3a:30:b0:90:68: 60:a2:3d:cf:4d:fb:87:46:37:a0:58:53:ea:8b:29: 44:de:1b:09:d5:03:88:3b:02:fb:98:59:8c:18:f7: fc:c6:02:de:46:5e:b7:81:ac:c9:57:e1:ef:3b:d1: 75:3b:22:48:29:06:88:27:b5:f7:44:06:6e:85:bc: c2:db:c4:ba:49:03:d8:3e:10:c0:eb:48:54:2f:0c: 3f:5c:19:ed:91:0b:dd:12:46:3f:d4:65:ae:2d:c5: 81:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C9:A0:CE:7A:72:2A:78:04:93:2A:5E:FB:B8:A5:AF:FA:37:DA:D9 X509v3 Authority Key Identifier: keyid:B8:07:0D:FC:57:EA:E0:EB:E8:AE:E4:BB:5C:91:D0:6A:BD:1C:A7:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:2f:ba:02:c4:19:18:22:74:16:32:dc:8a:db:ae:b7:89:b7: ad:2c:40:ec:6c:50:a9:3a:6a:3f:c3:aa:50:87:56:60:e2:09: 79:83:a6:36:ed:ff:ef:a8:7f:aa:8b:c3:44:88:75:28:68:ff: 33:fc:6a:33:fc:c2:a1:34:ed:76:6b:1f:1d:d3:5a:c6:39:82: 76:fd:e2:66:16:98:d3:70:3f:12:5e:4b:78:c3:80:0a:68:00: 27:c5:76:c2:b6:66:92:79:8f:79:2d:47:be:90:13:44:8a:3d: 13:89:11:67:d8:fc:ae:a9:e8:15:20:77:a7:9f:76:f1:bf:df: 41:96:10:cd:dc:76:52:1e:28:3a:ae:cb:ea:ca:d6:9f:25:b5: b1:46:9e:d9:63:7e:5a:a5:cf:9d:f5:91:96:ef:17:fb:df:ce: 92:7a:94:f3:46:cc:e2:f4:e1:ed:08:88:48:d7:5a:dc:7a:42: c4:50:42:6d:07:0c:eb:ea:06:18:8b:ab:5a:6a:7a:94:47:d1: 92:00:38:36:6a:30:94:f5:e6:48:9f:90:51:83:50:ce:3d:77: ca:22:bc:44:89:1b:84:59:29:09:47:97:ba:c8:4e:b1:42:35: 1c:4c:fc:67:60:b0:4f:2f:e5:86:f8:63:1e:5d:2b:91:f6:55: 86:71:28:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY5NzcxMTAvBgNVBAUTKEI4MDcwREZDNTdFQUUwRUJFOEFFRTRCQjVDOTFEMDZB QkQxQ0E3MUEwHhcNMjUwNjA4MjIzMzI5WhcNMjUwNjE1MjIzMzI5WjAYMRYwFAYD VQQDEw02ODQ2MGZiOS0xNjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24j2Paw6eIwgJclACIs+0sdtybL1InzU6au/Ww1JDAeDZs73Au6XPUqpZuFd fZGgIbPY9xsZuXSsOZ66qc4nl5UD5UmbOm452CdG1v311UTlsb8zaQAB3Ags8N3E NUxurgGoXCe8Va/6kwAh7nJ+hXdFrcdXOVSn0qs0nAB5QODYkgOcrjJ6Lff4Itx0 Szg09uq9/ABWICQjvUW3HmDHOjCwkGhgoj3PTfuHRjegWFPqiylE3hsJ1QOIOwL7 mFmMGPf8xgLeRl63gazJV+HvO9F1OyJIKQaIJ7X3RAZuhbzC28S6SQPYPhDA60hU Lww/XBntkQvdEkY/1GWuLcWBYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHJoM56 cip4BJMqXvu4pa/6N9rZMB8GA1UdIwQYMBaAFLgHDfxX6uDr6K7ku1yR0Gq9HKca MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Njk3Ny9COTRCOEM5OEIy MDQxMUVCOUNDN0Y0NDlDNEY5QUUwMi91QWNOX0ZmcTRPdm9ydVM3WEpIUWFyMGNw eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VBY05fRmZxNE92b3J1UzdYSkhRYXIwY3B4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Njk3Ny9COTRCOEM5OEIyMDQxMUVCOUNDN0Y0NDlDNEY5QUUwMi91QWNOX0ZmcTRP dm9ydVM3WEpIUWFyMGNweG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdL7oCxBkYInQWMtyK2663ibetLEDsbFCpOmo/w6pQh1Zg4gl5g6Y2 7f/vqH+qi8NEiHUoaP8z/Goz/MKhNO12ax8d01rGOYJ2/eJmFpjTcD8SXkt4w4AK aAAnxXbCtmaSeY95LUe+kBNEij0TiRFn2PyuqegVIHenn3bxv99BlhDN3HZSHig6 rsvqytafJbWxRp7ZY35apc+d9ZGW7xf7386SepTzRszi9OHtCIhI11rcekLEUEJt Bwzr6gYYi6taanqUR9GSADg2ajCU9eZIn5BRg1DOPXfKIrxEiRuEWSkJR5e6yE6x QjUcTPxnYLBPL+WG+GMeXSuR9lWGcSiU -----END CERTIFICATE-----Generated at Mon Jun 9 11:40:48 2025 by rpki-client