$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft File: UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft (raw, json) Hash identifier: 8egQpuWDKNbCoLBQV8hJeFURis3ake8n5z0906twjIs= Subject key identifier: 0A:7F:79:9E:50:AF:8B:93:5A:5C:E9:B1:99:71:CF:90:B0:92:8C:72 Authority key identifier: 52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13 Certificate issuer: /CN=A91DD1CC/serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft Manifest number: 0A Signing time: Tue 01 Jul 2025 08:56:01 +0000 Manifest this update: Tue 01 Jul 2025 08:56:01 +0000 Manifest next update: Tue 08 Jul 2025 08:56:01 +0000 Files and hashes: 1: UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl (hash: ZetRCZFR0T5Js/P2qlNzF1/IOz8rpjMThuA3XeHLQGQ=) 2: 0745DA884A3C11F0AFF98454C4F9AE02.roa (hash: aHkW6AI6M6GCpQTIMNKGhCjE+iAmC4ZK4etHz7DUzdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1CC, serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813 Validity Not Before: Jul 1 08:56:01 2025 GMT Not After : Jul 8 08:56:01 2025 GMT Subject: CN=6863a2a1-c638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:6d:62:49:3a:a8:d7:72:2b:1f:81:ad:73: d0:95:0c:e8:de:28:d0:24:04:74:a0:08:af:2e:dd: ff:a5:ca:37:39:96:81:e9:bd:2d:8d:fb:a9:e0:39: 63:4f:b5:8e:9d:03:b5:45:75:42:6d:da:25:6c:07: ef:fb:f7:4d:07:ba:5c:0f:ce:e8:10:c1:da:c5:05: 3b:54:b4:6d:4e:c6:3b:f4:7c:80:61:4d:a4:f1:8f: 3c:cc:7a:eb:82:a7:8e:d8:af:0e:08:0f:78:2a:55: 81:6d:c6:13:10:c9:83:1b:b9:85:ee:27:02:c7:67: b3:fb:1a:88:81:bd:27:44:6d:0d:f5:63:b2:43:a1: a5:70:a9:8d:4b:8b:f1:05:87:72:69:0b:7a:d8:c7: fa:3f:ea:88:aa:2a:ea:1b:e1:18:13:41:89:3f:b4: c2:96:19:f5:29:58:f7:57:8e:dd:aa:8d:0c:07:41: ff:0a:5b:09:1a:95:bd:22:ec:22:f7:3b:a4:4f:38: 7f:5f:c4:3d:93:77:99:a2:ae:84:8d:1d:af:90:fb: f0:19:38:62:69:db:ac:a0:19:5f:cf:2d:e7:14:de: b2:49:67:32:55:64:8d:88:79:09:a9:16:46:22:5f: d8:cf:68:b9:fb:f6:3d:1b:40:89:ec:9f:28:8b:a0: 6b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7F:79:9E:50:AF:8B:93:5A:5C:E9:B1:99:71:CF:90:B0:92:8C:72 X509v3 Authority Key Identifier: keyid:52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:ba:c0:e8:68:da:ad:0b:5a:ed:11:ee:f9:4d:a6:5d:b4:c9: 6b:98:d3:a1:34:fb:97:24:46:d3:19:bc:f7:ae:c7:7b:1d:b9: 01:45:b8:6e:17:04:28:26:55:7b:ac:81:6c:1f:34:68:3a:02: 6c:d5:fe:ea:8c:28:b7:f0:cb:fe:ef:80:19:4a:bf:98:a5:b5: c7:88:e8:6b:48:7b:1d:14:88:a4:bd:74:eb:f5:43:e8:d1:55: b3:c0:e7:0f:47:78:1a:f0:b4:87:cd:70:b6:db:dd:f4:0d:c9: 22:a5:f3:a0:c6:0f:2e:9a:e9:de:fb:d4:51:1d:6e:ba:48:02: bc:e2:be:4a:ef:ff:5d:f8:0b:3a:80:1c:da:a0:ca:e3:01:2b: 74:00:85:e8:3c:f3:02:a1:42:f1:64:2d:d9:e9:cb:1f:b7:92: 76:f2:e8:0f:3f:05:27:da:69:a4:45:63:c5:5b:2f:92:90:ae: 7a:13:1b:6f:70:5f:77:68:7e:9a:eb:ca:f9:f2:bc:38:b5:13: 44:e5:a1:7c:48:83:87:47:78:76:1c:35:1b:aa:07:e3:e8:8a: 2e:e9:49:63:26:20:4d:d2:d8:35:e3:3f:0f:2d:51:b8:c8:c3: af:90:a0:d1:4a:d2:59:f4:19:44:43:b9:72:88:32:1b:8e:09: a0:48:41:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDFDQzExMC8GA1UEBRMoNTIzMUM0NTc0MTNCOUM3OUNENUIzMDBEODRBNDNCMDAz OUJCNjgxMzAeFw0yNTA3MDEwODU2MDFaFw0yNTA3MDgwODU2MDFaMBgxFjAUBgNV BAMTDTY4NjNhMmExLWM2MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH7G1iSTqo13IrH4Gtc9CVDOjeKNAkBHSgCK8u3f+lyjc5loHpvS2N+6ngOWNP tY6dA7VFdUJt2iVsB+/7900HulwPzugQwdrFBTtUtG1Oxjv0fIBhTaTxjzzMeuuC p47Yrw4ID3gqVYFtxhMQyYMbuYXuJwLHZ7P7GoiBvSdEbQ31Y7JDoaVwqY1Li/EF h3JpC3rYx/o/6oiqKuob4RgTQYk/tMKWGfUpWPdXjt2qjQwHQf8KWwkalb0i7CL3 O6RPOH9fxD2Td5miroSNHa+Q+/AZOGJp26ygGV/PLecU3rJJZzJVZI2IeQmpFkYi X9jPaLn79j0bQInsnyiLoGsRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCn95nlCv i5NaXOmxmXHPkLCSjHIwHwYDVR0jBBgwFoAUUjHEV0E7nHnNWzANhKQ7ADm7aBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMUNDLzczOTA2ODBFNEEz QTExRjBCRDVDMUI0RkM0RjlBRTAyL1VqSEVWMEU3bkhuTld6QU5oS1E3QURtN2FC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVWpIRVYwRTduSG5OV3pBTmhLUTdBRG03YUJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MUNDLzczOTA2ODBFNEEzQTExRjBCRDVDMUI0RkM0RjlBRTAyL1VqSEVWMEU3bkhu Tld6QU5oS1E3QURtN2FCTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADa6wOho2q0LWu0R7vlNpl20yWuY06E0+5ckRtMZvPeux3sduQFFuG4X BCgmVXusgWwfNGg6AmzV/uqMKLfwy/7vgBlKv5iltceI6GtIex0UiKS9dOv1Q+jR VbPA5w9HeBrwtIfNcLbb3fQNySKl86DGDy6a6d771FEdbrpIArzivkrv/134CzqA HNqgyuMBK3QAheg88wKhQvFkLdnpyx+3knby6A8/BSfaaaRFY8VbL5KQrnoTG29w X3dofprryvnyvDi1E0TloXxIg4dHeHYcNRuqB+Poii7pSWMmIE3S2DXjPw8tUbjI w6+QoNFK0ln0GURDuXKIMhuOCaBIQWw= -----END CERTIFICATE-----Generated at Wed Jul 2 13:16:50 2025 by rpki-client