$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft File: ujgt6jovW4xMIgXskp9gG-NP538.mft (raw, json) Hash identifier: bdpM9HAzzfdOmSQkU6lxAkK71XOrWt0LeL9SvmwidsA= Subject key identifier: 19:50:2C:5C:56:38:90:85:FB:D1:4F:D7:D7:0F:59:38:4C:FB:93:64 Authority key identifier: BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F Certificate issuer: /CN=A91B7B34/serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F Certificate serial: 0C57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft Manifest number: 0C4D Signing time: Mon 30 Jun 2025 18:39:40 +0000 Manifest this update: Mon 30 Jun 2025 18:39:39 +0000 Manifest next update: Mon 07 Jul 2025 18:39:39 +0000 Files and hashes: 1: ujgt6jovW4xMIgXskp9gG-NP538.crl (hash: zvRaglWuTvnDJrbQWq5n6sldVTTj2hjCdkKgCd/Rpk4=) 2: 52E56FA806C711EA84978821C4F9AE02.roa (hash: pC6YASmlOW3gbC5Njuzzo1yhASqi/WroinaiHpfVYXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3159 (0xc57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B34, serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F Validity Not Before: Jun 30 18:39:39 2025 GMT Not After : Jul 7 18:39:39 2025 GMT Subject: CN=6862d9ec-315e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:49:1e:7d:15:9d:65:bb:5b:50:26:1f:52:cc: 6e:bc:ea:fb:76:d1:2c:76:6a:2c:bb:67:14:9d:56: c8:91:f8:90:04:fb:5b:99:57:24:88:19:57:21:2c: 6f:58:43:4f:e9:a8:d3:6b:3b:3b:68:2c:e1:5d:46: 9b:17:b9:46:7a:c0:bb:06:69:47:46:b9:15:e3:00: 91:2a:dd:9a:d2:c1:59:83:ea:c2:15:71:10:7b:a9: 3f:98:f7:07:fc:53:fa:cb:c4:d8:79:0c:39:6c:48: ee:6b:46:48:16:32:c7:fb:37:2a:21:31:59:dd:3a: 0a:e8:c7:23:93:b4:f9:e4:06:44:2e:89:78:0b:00: 9a:86:e1:ca:cd:c9:9e:73:97:08:9d:6f:b6:9a:f6: ae:ae:d3:b9:7d:1a:8e:ac:20:24:a6:d2:5f:a0:97: a4:47:8a:0d:b3:6f:e6:10:92:a4:59:af:6f:6a:29: 78:52:6a:b6:e5:7d:dd:23:34:25:b9:76:e3:1e:44: 36:1f:fe:88:04:b7:7b:34:7b:c5:64:ae:02:11:af: 41:0b:03:11:32:0b:52:9a:cb:03:7e:fb:c2:a9:51: 21:bc:cb:77:ac:7e:8e:ab:6a:d2:24:45:b9:ca:4a: bd:6e:93:4e:bb:f5:f4:9a:55:59:0b:3c:5a:89:f5: 3a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:50:2C:5C:56:38:90:85:FB:D1:4F:D7:D7:0F:59:38:4C:FB:93:64 X509v3 Authority Key Identifier: keyid:BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:a4:56:3a:c4:8b:ec:98:f7:48:4b:ca:6a:b2:b0:39:42:86: ed:df:c1:dc:16:4a:46:88:9e:07:19:ca:c4:f6:98:d0:a2:79: 04:ee:34:63:3c:2d:76:0c:62:ee:6b:ec:31:82:3a:57:ed:ce: 9f:0c:2f:69:c9:26:bb:55:09:1a:e5:eb:4e:8a:20:f8:af:76: 84:7e:ad:76:6b:68:02:67:59:a2:75:2a:2d:eb:6c:d9:72:71: 6b:30:0e:bc:d2:4c:a3:a0:d2:88:97:23:34:28:d9:31:fa:ce: c2:e3:6a:20:82:66:63:62:6a:87:7e:81:ce:08:2d:39:f3:a5: 22:af:3a:55:ae:fa:f9:41:83:98:3d:e8:cc:f2:98:5b:f4:92: 9d:1c:af:49:2a:c0:2b:59:6a:04:f9:b4:d5:76:0e:d8:d4:5e: db:8f:a9:57:c1:dd:a4:bd:13:7e:8f:08:3a:ba:b2:ab:c6:31: b2:88:70:0a:35:28:ad:2e:39:97:31:24:bd:e0:f7:b0:f9:91: 7f:a9:dc:e0:58:a7:99:4e:69:9b:e3:a9:0b:08:87:a6:8a:c6: 22:35:c1:ed:5b:85:7d:67:1d:0d:c9:06:1d:17:e7:22:e2:47: 43:53:ae:df:69:f1:f0:33:11:6b:1f:c9:31:58:94:ce:77:ac: 8d:a3:43:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMzQxMTAvBgNVBAUTKEJBMzgyREVBM0EyRjVCOEM0QzIyMDVFQzkyOUY2MDFC RTM0RkU3N0YwHhcNMjUwNjMwMTgzOTM5WhcNMjUwNzA3MTgzOTM5WjAYMRYwFAYD VQQDEw02ODYyZDllYy0zMTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1EkefRWdZbtbUCYfUsxuvOr7dtEsdmosu2cUnVbIkfiQBPtbmVckiBlXISxv WENP6ajTazs7aCzhXUabF7lGesC7BmlHRrkV4wCRKt2a0sFZg+rCFXEQe6k/mPcH /FP6y8TYeQw5bEjua0ZIFjLH+zcqITFZ3ToK6Mcjk7T55AZELol4CwCahuHKzcme c5cInW+2mvaurtO5fRqOrCAkptJfoJekR4oNs2/mEJKkWa9vail4Umq25X3dIzQl uXbjHkQ2H/6IBLd7NHvFZK4CEa9BCwMRMgtSmssDfvvCqVEhvMt3rH6Oq2rSJEW5 ykq9bpNOu/X0mlVZCzxaifU6LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlQLFxW OJCF+9FP19cPWThM+5NkMB8GA1UdIwQYMBaAFLo4Leo6L1uMTCIF7JKfYBvjT+d/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IzNC9ERUNFM0VCQTA2 QzYxMUVBQTUxQTYwMjFDNEY5QUUwMi91amd0Nmpvdlc0eE1JZ1hza3A5Z0ctTlA1 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VqZ3Q2am92VzR4TUlnWHNrcDlnRy1OUDUzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IzNC9ERUNFM0VCQTA2QzYxMUVBQTUxQTYwMjFDNEY5QUUwMi91amd0Nmpvdlc0 eE1JZ1hza3A5Z0ctTlA1MzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAApFY6xIvsmPdIS8pqsrA5Qobt38HcFkpGiJ4HGcrE9pjQonkE7jRj PC12DGLua+wxgjpX7c6fDC9pySa7VQka5etOiiD4r3aEfq12a2gCZ1midSot62zZ cnFrMA680kyjoNKIlyM0KNkx+s7C42oggmZjYmqHfoHOCC0586UirzpVrvr5QYOY PejM8phb9JKdHK9JKsArWWoE+bTVdg7Y1F7bj6lXwd2kvRN+jwg6urKrxjGyiHAK NSitLjmXMSS94Pew+ZF/qdzgWKeZTmmb46kLCIemisYiNcHtW4V9Zx0NyQYdF+ci 4kdDU67fafHwMxFrH8kxWJTOd6yNo0Oq -----END CERTIFICATE-----Generated at Wed Jul 2 07:32:59 2025 by rpki-client