$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft File: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft (raw, json) Hash identifier: 0VAjuOXvfLq1Qm8kcxCW4kBmdY4PiYSGnoBP4o34n7M= Subject key identifier: D3:72:C5:2E:4E:08:5F:D6:66:3E:8E:CB:39:16:3A:D8:5A:3B:BA:9F Authority key identifier: 52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E Certificate issuer: /CN=A919EF51/serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E Certificate serial: 0B27 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft Manifest number: 0B1F Signing time: Sat 31 May 2025 19:16:30 +0000 Manifest this update: Sat 31 May 2025 19:16:30 +0000 Manifest next update: Sat 07 Jun 2025 19:16:30 +0000 Files and hashes: 1: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl (hash: dhgrXwur4iQred8/yTJPtQbBhJbvpGDZcGeFzZkpRv8=) 2: BC60BC2A63F711EA8CBEB029C4F9AE02.roa (hash: wRvd5l9La3MSVA49dLn9S92nbQQvOi4LJr/5XnlTFpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 19:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2855 (0xb27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF51, serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E Validity Not Before: May 31 19:16:30 2025 GMT Not After : Jun 7 19:16:30 2025 GMT Subject: CN=683b558e-e85d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5f:3b:59:ee:d6:28:66:a7:38:f1:78:a0:38: 01:d5:54:e6:ce:9c:22:3c:85:a8:d3:40:d6:19:34: d5:aa:eb:26:0b:fb:dd:bd:41:fb:42:b0:45:30:bc: db:d4:f8:92:1b:bb:c1:35:cc:e2:2a:c1:bb:ce:bd: 86:5c:82:7d:b7:9f:2d:8d:c8:8b:9c:49:2e:b4:78: d3:b7:ef:1f:4f:01:9a:b4:ea:f9:8d:41:86:d0:d5: ca:c0:d0:58:31:74:0a:85:92:bd:46:77:f7:62:71: 06:9e:4c:63:1e:a8:b3:c0:9e:db:ae:31:b1:d4:bd: 95:28:93:20:62:cf:fc:19:85:e6:dd:fb:d9:c6:77: f8:20:4f:73:e1:c3:53:17:28:1d:b7:e5:54:9e:d3: a0:af:c6:e9:87:7d:a8:04:bc:2c:5f:23:9d:8b:73: b3:e7:b1:36:01:cb:e5:b2:ed:5f:54:74:4e:95:7e: 77:88:9c:d4:cb:32:c4:29:7c:02:88:1d:59:e9:dd: b3:74:fe:38:72:af:23:80:89:81:55:04:08:15:0d: 84:57:07:2e:8b:ca:d8:4b:24:1d:6d:d1:a6:d2:e9: 5e:9b:a3:7f:9e:12:b9:e7:e6:a6:9d:a0:ff:f9:35: 7c:a2:77:9a:97:20:e7:53:91:f8:23:17:04:d4:36: 90:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:72:C5:2E:4E:08:5F:D6:66:3E:8E:CB:39:16:3A:D8:5A:3B:BA:9F X509v3 Authority Key Identifier: keyid:52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c1:66:2b:39:6b:aa:0e:f4:65:d2:74:ab:a1:a6:3d:71:00: 1b:e9:71:3c:c1:8a:c7:9b:52:34:f6:d2:34:dd:11:79:5f:52: c6:48:b7:73:43:31:13:b4:06:7b:83:9c:07:8f:32:d6:86:22: 1a:14:0f:1b:cc:39:77:0e:f0:8f:d2:0c:38:43:be:a0:fb:b4: 7b:2e:bb:47:1f:1c:b1:53:db:55:c6:28:26:56:ca:58:80:63: 0d:12:dd:27:fd:93:f2:c7:8b:2b:07:50:70:f2:29:5a:fa:ff: db:43:dc:aa:d7:1d:bf:61:a5:08:c2:e7:7c:66:92:91:2f:6b: e3:6a:27:d7:61:c6:de:7a:16:14:3c:d2:7e:8d:8f:ec:e0:a3: b1:e6:32:5b:cf:24:18:ca:3f:bd:32:d5:cf:2e:ce:dd:94:36: 40:44:1b:2a:38:f0:51:b2:1b:42:a7:50:b1:bf:8c:ec:75:9b: fd:cf:a8:e1:a5:e7:3c:5b:bd:4e:b9:27:b3:a0:d7:86:4b:a8: 71:45:86:c1:77:79:84:57:f4:8b:df:21:a7:53:f9:79:5a:83: 35:bf:4a:b6:79:d8:ec:9d:f5:d0:97:7e:a5:94:20:13:32:06: a9:ea:4e:18:41:ed:ac:ca:f2:1b:78:db:84:0a:53:61:58:31: fe:fc:88:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNTExMTAvBgNVBAUTKDUyRDY4MEUwNDVEQ0U5OTA3ODlFMEQ3NzcyNjE3QzYw QzM2RUQxOEUwHhcNMjUwNTMxMTkxNjMwWhcNMjUwNjA3MTkxNjMwWjAYMRYwFAYD VQQDEw02ODNiNTU4ZS1lODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArV87We7WKGanOPF4oDgB1VTmzpwiPIWo00DWGTTVqusmC/vdvUH7QrBFMLzb 1PiSG7vBNcziKsG7zr2GXIJ9t58tjciLnEkutHjTt+8fTwGatOr5jUGG0NXKwNBY MXQKhZK9Rnf3YnEGnkxjHqizwJ7brjGx1L2VKJMgYs/8GYXm3fvZxnf4IE9z4cNT Fygdt+VUntOgr8bph32oBLwsXyOdi3Oz57E2Acvlsu1fVHROlX53iJzUyzLEKXwC iB1Z6d2zdP44cq8jgImBVQQIFQ2EVwcui8rYSyQdbdGm0ulem6N/nhK55+amnaD/ +TV8onealyDnU5H4IxcE1DaQAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNyxS5O CF/WZj6OyzkWOthaO7qfMB8GA1UdIwQYMBaAFFLWgOBF3OmQeJ4Nd3JhfGDDbtGO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9CQTNDRDRBNjNE ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9VdGFBNEVYYzZaQjRuZzEzY21GOFlNTnUw WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1V0YUE0RVhjNlpCNG5nMTNjbUY4WU1OdTBZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY1MS9CQTNDRDRBNjNEODIxMUVBOUYyNjczNzBDNEY5QUUwMi9VdGFBNEVYYzZa QjRuZzEzY21GOFlNTnUwWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBewWYrOWuqDvRl0nSroaY9cQAb6XE8wYrHm1I09tI03RF5X1LGSLdz QzETtAZ7g5wHjzLWhiIaFA8bzDl3DvCP0gw4Q76g+7R7LrtHHxyxU9tVxigmVspY gGMNEt0n/ZPyx4srB1Bw8ila+v/bQ9yq1x2/YaUIwud8ZpKRL2vjaifXYcbeehYU PNJ+jY/s4KOx5jJbzyQYyj+9MtXPLs7dlDZARBsqOPBRshtCp1Cxv4zsdZv9z6jh pec8W71OuSezoNeGS6hxRYbBd3mEV/SL3yGnU/l5WoM1v0q2edjsnfXQl36llCAT Mgap6k4YQe2syvIbeNuEClNhWDH+/IgB -----END CERTIFICATE-----Generated at Mon Jun 2 17:06:25 2025 by rpki-client