$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft File: U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json) Hash identifier: ngU3z5C8vorhBjPcJQ0NfVlkWRQ63gCNEeuhrmnbG8Q= Subject key identifier: B1:6A:77:EA:D7:25:A5:17:7F:29:94:D7:90:88:67:16:84:1C:FA:79 Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF Certificate issuer: /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Certificate serial: 0D46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft Manifest number: 0CEF Signing time: Sun 08 Jun 2025 17:59:38 +0000 Manifest this update: Sun 08 Jun 2025 17:59:37 +0000 Manifest next update: Sun 15 Jun 2025 17:59:37 +0000 Files and hashes: 1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: zdWEt8t/MHufTZhEwL7WGAmmLBndoCY13LL3oddPzhk=) 2: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: hKWe/eIi1S/b0sftmS4vbxX+CeHNz0WaxfQQONNUalk=) 3: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: yXlaLhbx5YRuGCOCxZS+UVUBHLhciPfPZJOpJ77jS10=) 4: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: 6pM1TQdNb79+DA6IOYbwXDIQvGxFIYUOEy7bg1GioZ4=) 5: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: KHH4guWZz2QPTGfSHIABOFeNEzmNYAkAEdSlj0Q8gIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 17:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3398 (0xd46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Validity Not Before: Jun 8 17:59:37 2025 GMT Not After : Jun 15 17:59:37 2025 GMT Subject: CN=6845cf89-fc2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0a:73:fb:33:9a:a0:c6:04:6a:d7:5b:39:78: e3:df:e1:1d:2c:4a:92:d1:6c:8e:c4:e4:ed:d9:ea: c5:46:3c:4a:77:a0:ae:e7:94:1c:4e:e3:dc:09:bb: a7:03:ce:7f:d7:6f:3c:f5:40:be:3a:85:6e:3f:fe: 63:3f:95:5f:0b:05:e5:0d:7a:46:5a:c2:3e:25:de: 78:75:2d:d6:26:77:7e:08:87:2b:e2:78:cf:e6:af: 88:63:6f:6a:eb:72:7d:37:9f:af:ad:25:5f:ad:d9: 64:d5:7d:ff:3a:83:dc:4e:df:e9:c9:fc:f4:ca:6b: a0:3a:f3:e0:a8:c2:bd:ec:89:a7:05:96:03:80:a9: d7:60:90:71:5c:42:31:49:87:1c:d3:86:9a:c3:e3: b9:37:6c:26:b1:af:5f:45:ef:5e:c9:20:c4:00:a8: ad:23:9e:83:51:5f:1c:c0:2b:b6:c2:68:5a:2b:d9: e4:ff:97:2a:e9:ee:46:7f:de:b3:73:a8:7a:39:a1: 8a:c7:bb:8f:f0:2c:40:20:49:15:83:4f:7d:61:a7: 33:8d:a4:01:3e:dd:7c:b6:50:0a:c9:4c:fc:26:98: fb:bc:4d:9e:b6:bf:c5:b8:88:a3:52:bd:82:21:b8: 53:fc:0a:03:f8:b4:2e:5f:4e:e4:9e:c9:fd:07:b3: 32:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6A:77:EA:D7:25:A5:17:7F:29:94:D7:90:88:67:16:84:1C:FA:79 X509v3 Authority Key Identifier: keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:37:33:1a:93:f9:82:68:74:ca:9d:66:f1:fb:1d:81:1e:a0: 32:05:7f:d4:bb:1f:02:10:58:0a:ad:6d:6b:b2:b6:ae:63:c6: 69:2a:16:8e:e3:60:27:7d:d4:29:30:bd:cd:96:a1:ee:41:92: ea:e7:ee:65:b8:27:dc:06:ba:b2:6e:45:a0:2c:0b:ec:f5:39: c6:1f:d0:44:84:44:f4:cc:40:24:95:19:1e:50:ad:04:ea:84: 89:5d:4e:96:8a:5e:9b:94:4e:ba:04:d6:29:4b:36:0f:c8:94: c3:a4:2e:b4:9b:ca:fc:3f:5f:d3:11:f3:09:ca:b2:99:aa:12: 08:52:0d:18:76:89:eb:b5:a8:0f:5a:a2:f5:43:05:86:11:ef: 82:92:a7:85:c9:08:fc:e8:60:d1:22:7f:d7:5c:99:3b:7c:1f: 93:94:43:ea:3c:88:81:8f:60:f5:97:4c:64:72:53:98:de:fe: 2e:55:ab:c1:67:3d:4e:3f:ac:c9:2b:85:a7:9a:7b:93:06:b8: 54:05:29:ab:78:7c:a7:a5:fb:fa:9b:c4:ae:4f:c9:31:88:ab: 70:56:99:8e:4c:44:1b:38:01:76:72:b8:0f:64:77:b7:ca:a2: 32:c5:09:bc:12:04:8a:c8:e8:b9:db:ff:29:01:cf:fc:b6:ce: fe:91:ea:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4NUMxMTAvBgNVBAUTKDUzNzRDNkU3NUYxODYwNTI0NTVBMkQ4REE1MjkyRkVG MDA5Q0M5QUYwHhcNMjUwNjA4MTc1OTM3WhcNMjUwNjE1MTc1OTM3WjAYMRYwFAYD VQQDEw02ODQ1Y2Y4OS1mYzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQpz+zOaoMYEatdbOXjj3+EdLEqS0WyOxOTt2erFRjxKd6Cu55QcTuPcCbun A85/12889UC+OoVuP/5jP5VfCwXlDXpGWsI+Jd54dS3WJnd+CIcr4njP5q+IY29q 63J9N5+vrSVfrdlk1X3/OoPcTt/pyfz0ymugOvPgqMK97ImnBZYDgKnXYJBxXEIx SYcc04aaw+O5N2wmsa9fRe9eySDEAKitI56DUV8cwCu2wmhaK9nk/5cq6e5Gf96z c6h6OaGKx7uP8CxAIEkVg099YaczjaQBPt18tlAKyUz8Jpj7vE2etr/FuIijUr2C IbhT/AoD+LQuX07knsn9B7MyyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFqd+rX JaUXfymU15CIZxaEHPp5MB8GA1UdIwQYMBaAFFN0xudfGGBSRVotjaUpL+8AnMmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODg1Qy81QzE5Rjg0MkYy NjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlGSkZXaTJOcFNrdjd3Q2N5 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UzVEc1MThZWUZKRldpMk5wU2t2N3dDY3lhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODg1Qy81QzE5Rjg0MkYyNjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlG SkZXaTJOcFNrdjd3Q2N5YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQNzMak/mCaHTKnWbx+x2BHqAyBX/Uux8CEFgKrW1rsrauY8ZpKhaO 42AnfdQpML3NlqHuQZLq5+5luCfcBrqybkWgLAvs9TnGH9BEhET0zEAklRkeUK0E 6oSJXU6Wil6blE66BNYpSzYPyJTDpC60m8r8P1/TEfMJyrKZqhIIUg0YdonrtagP WqL1QwWGEe+CkqeFyQj86GDRIn/XXJk7fB+TlEPqPIiBj2D1l0xkclOY3v4uVavB Zz1OP6zJK4WnmnuTBrhUBSmreHynpfv6m8SuT8kxiKtwVpmOTEQbOAF2crgPZHe3 yqIyxQm8EgSKyOi52/8pAc/8ts7+kepp -----END CERTIFICATE-----Generated at Tue Jun 10 13:00:36 2025 by rpki-client