$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft File: uzvV1-GZJNhitqQb80x_27vpHG0.mft (raw, json) Hash identifier: eBYS+WJFDKIp0+isLRm9Hpn5bADN26qW6/q5UUvggJ4= Subject key identifier: 0F:54:A9:23:11:67:A6:FD:B4:6A:E6:47:1A:69:65:5A:FC:F6:FC:8A Authority key identifier: BB:3B:D5:D7:E1:99:24:D8:62:B6:A4:1B:F3:4C:7F:DB:BB:E9:1C:6D Certificate issuer: /CN=A91CA735/serialNumber=BB3BD5D7E19924D862B6A41BF34C7FDBBBE91C6D Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft Manifest number: 96 Signing time: Sun 01 Jun 2025 06:09:59 +0000 Manifest this update: Sun 01 Jun 2025 06:09:59 +0000 Manifest next update: Sun 08 Jun 2025 06:09:59 +0000 Files and hashes: 1: uzvV1-GZJNhitqQb80x_27vpHG0.crl (hash: 63AK9AhZzJQa5UrNrAQkwirfgOdHfsn5dhgPOet8N9c=) 2: 385E3308639D11EFB668775FC4F9AE02.roa (hash: TCYXclRvYYtZUxQ5mRKUajDIcjauKFDG/zZisgUfCFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.crl rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA735, serialNumber=BB3BD5D7E19924D862B6A41BF34C7FDBBBE91C6D Validity Not Before: Jun 1 06:09:59 2025 GMT Not After : Jun 8 06:09:59 2025 GMT Subject: CN=683beeb7-8a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0f:af:c3:4d:a4:80:15:c7:8d:47:f2:87:6a: 2d:77:c3:57:d0:2e:e9:b4:5b:87:c7:fb:08:e9:e9: 8c:d3:ef:b4:d8:04:d4:fc:5e:e8:81:a6:76:ad:7a: ec:82:7d:36:f8:eb:e6:f1:d1:11:ac:56:25:81:b5: 2e:d9:59:1b:d5:69:19:21:a2:6b:e1:ef:69:bc:0f: 43:2c:62:e7:59:22:ab:aa:60:7a:ad:d7:8a:b2:63: 5c:68:77:ab:7f:07:51:e9:d6:57:f6:44:31:64:10: dd:6a:20:1b:44:6a:0b:a6:08:da:dc:87:49:dd:88: 10:8c:a1:1a:dc:6e:ce:a0:5d:aa:1b:8c:79:a1:a2: 7b:65:91:e6:d3:eb:01:22:81:4f:95:01:b0:15:63: fa:26:58:42:b6:c4:29:4f:8e:83:14:2d:8a:5b:03: dc:6e:ec:db:1a:b3:48:06:d6:16:0e:dc:21:6b:c1: 34:87:4f:3b:bb:45:62:95:f8:e1:fe:d7:5e:8d:e8: ed:72:70:a3:84:90:c9:9d:15:c2:c2:7b:4a:a9:e4: 3c:dc:98:0d:34:01:8d:23:84:da:d5:05:12:2c:20: 3b:2a:77:70:dd:d5:c8:4d:55:66:69:07:ea:e7:ee: 83:4b:98:ef:30:a7:63:b6:66:9b:5c:a1:cc:d2:bc: 99:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:54:A9:23:11:67:A6:FD:B4:6A:E6:47:1A:69:65:5A:FC:F6:FC:8A X509v3 Authority Key Identifier: keyid:BB:3B:D5:D7:E1:99:24:D8:62:B6:A4:1B:F3:4C:7F:DB:BB:E9:1C:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ea:8b:4b:f2:e7:a1:e1:a9:8c:9b:07:93:1b:ce:6b:b3:6e: 32:f1:12:2b:29:3c:66:f1:9c:e9:8f:d0:87:92:bc:5e:9d:50: 06:7f:64:89:7c:aa:f3:86:38:75:38:be:2f:ea:d8:23:f3:50: 9c:85:3c:85:82:82:ad:6a:d1:35:ca:91:e9:ec:d4:18:99:99: 8c:8b:03:ea:53:f3:09:2e:e2:31:31:82:88:b6:ac:8d:ce:51: 28:39:7e:71:a3:38:48:a8:ec:57:f2:21:68:59:6c:b5:a6:4c: 97:79:83:f6:2f:8e:c3:29:3d:ef:65:67:3e:bc:8e:91:4e:60: 17:c1:ea:fe:f3:ee:31:0f:3a:7e:a6:a8:84:1f:70:ff:75:78: 4b:28:c0:fa:f2:57:c2:3e:c4:8a:ed:7d:a0:ad:21:4b:76:d2: e4:6f:44:9c:26:a8:2a:2a:0f:bf:4d:55:37:84:9d:46:d2:89: 22:19:4e:bb:45:a1:53:77:af:eb:ae:93:7d:dc:c2:fc:bf:5f: 13:93:74:b2:c3:f0:64:6a:b0:30:95:39:58:55:df:f0:43:5c: 97:20:ac:50:4e:ad:4a:dd:59:f8:73:c0:72:ff:c0:ca:3d:e4: 56:0f:e6:15:10:f5:50:24:d9:28:e8:9f:30:43:25:fd:17:cd: bc:a3:a8:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E3MzUxMTAvBgNVBAUTKEJCM0JENUQ3RTE5OTI0RDg2MkI2QTQxQkYzNEM3RkRC QkJFOTFDNkQwHhcNMjUwNjAxMDYwOTU5WhcNMjUwNjA4MDYwOTU5WjAYMRYwFAYD VQQDEw02ODNiZWViNy04YTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArA+vw02kgBXHjUfyh2otd8NX0C7ptFuHx/sI6emM0++02ATU/F7ogaZ2rXrs gn02+Ovm8dERrFYlgbUu2Vkb1WkZIaJr4e9pvA9DLGLnWSKrqmB6rdeKsmNcaHer fwdR6dZX9kQxZBDdaiAbRGoLpgja3IdJ3YgQjKEa3G7OoF2qG4x5oaJ7ZZHm0+sB IoFPlQGwFWP6JlhCtsQpT46DFC2KWwPcbuzbGrNIBtYWDtwha8E0h087u0Vilfjh /tdejejtcnCjhJDJnRXCwntKqeQ83JgNNAGNI4Ta1QUSLCA7Kndw3dXITVVmaQfq 5+6DS5jvMKdjtmabXKHM0ryZxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9UqSMR Z6b9tGrmRxppZVr89vyKMB8GA1UdIwQYMBaAFLs71dfhmSTYYrakG/NMf9u76Rxt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTczNS9DN0Y0NDFDNjYz OUIxMUVGOUI0RDJBNURDNEY5QUUwMi91enZWMS1HWkpOaGl0cVFiODB4XzI3dnBI RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3V6dlYxLUdaSk5oaXRxUWI4MHhfMjd2cEhHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTczNS9DN0Y0NDFDNjYzOUIxMUVGOUI0RDJBNURDNEY5QUUwMi91enZWMS1HWkpO aGl0cVFiODB4XzI3dnBIRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK6otL8ueh4amMmweTG85rs24y8RIrKTxm8Zzpj9CHkrxenVAGf2SJ fKrzhjh1OL4v6tgj81CchTyFgoKtatE1ypHp7NQYmZmMiwPqU/MJLuIxMYKItqyN zlEoOX5xozhIqOxX8iFoWWy1pkyXeYP2L47DKT3vZWc+vI6RTmAXwer+8+4xDzp+ pqiEH3D/dXhLKMD68lfCPsSK7X2grSFLdtLkb0ScJqgqKg+/TVU3hJ1G0okiGU67 RaFTd6/rrpN93ML8v18Tk3Syw/BkarAwlTlYVd/wQ1yXIKxQTq1K3Vn4c8By/8DK PeRWD+YVEPVQJNko6J8wQyX9F828o6iT -----END CERTIFICATE-----Generated at Mon Jun 2 21:59:28 2025 by rpki-client