$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft File: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft (raw, json) Hash identifier: KaIDP3FDZm/9KS1loXGwp+mfjMSrhtIp8cBRSXysfLM= Subject key identifier: F9:09:11:CE:AA:3C:CD:30:31:F1:B1:FF:D0:AA:D4:06:11:B6:F4:C4 Authority key identifier: 53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82 Certificate issuer: /CN=A91F3AF8/serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682 Certificate serial: 07BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft Manifest number: 07B0 Signing time: Sun 08 Jun 2025 20:54:13 +0000 Manifest this update: Sun 08 Jun 2025 20:54:13 +0000 Manifest next update: Sun 15 Jun 2025 20:54:13 +0000 Files and hashes: 1: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl (hash: FSWSE/btbJJCri3pQ3z2tmwAepUxYkZ5K9Y4KWXxFQ4=) 2: 3791632A030011EB909C3244C4F9AE02.roa (hash: dB3zmsBTd89CRpUWBbCoSsuPQSrK3XC84t7uk9x1cA8=) 3: CC08667A7A6011EB9BC9937BC4F9AE02.roa (hash: Z/3rZQtnqfOwNEnHVO1+ydXZ5JjAuPVHRMvibrG3oIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 20:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1980 (0x7bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3AF8, serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682 Validity Not Before: Jun 8 20:54:13 2025 GMT Not After : Jun 15 20:54:13 2025 GMT Subject: CN=6845f875-0a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:08:d7:33:75:78:e4:74:52:a4:3c:9b:31:b8: 5b:e0:b2:d6:94:f1:48:d5:9c:05:f0:60:91:7e:09: 33:03:4b:58:35:ec:3c:86:b4:4a:48:88:ba:96:f8: a5:3f:42:90:16:0c:a8:35:36:ee:79:93:53:b8:f7: 83:86:5a:d4:eb:39:26:77:ee:53:15:1a:55:68:2f: c3:0a:28:80:74:ca:89:bb:2d:3f:23:04:04:7d:d9: f3:1b:e0:90:af:ab:8b:c9:67:ad:8a:40:c0:75:21: 9f:9c:fe:a2:4e:43:64:19:27:04:bf:6a:6d:72:c6: 78:4f:6c:4c:e0:5f:bf:2a:22:41:c6:7f:da:2d:b1: 5c:27:36:c6:13:6e:9e:c9:74:c4:a1:47:3f:df:db: 49:6b:c4:56:50:0f:b6:36:0c:e2:3a:75:b9:73:c6: 6c:d5:55:ff:82:6d:ce:b0:9a:39:b4:bc:df:be:a3: c7:12:e6:c6:a1:91:fe:95:69:65:a9:d1:a9:54:06: 70:9f:2f:ea:06:0f:35:0a:59:d3:de:a1:5d:26:16: 83:99:9f:fa:05:44:ba:3b:b7:0b:27:e0:62:0a:b9: 36:4d:1f:26:00:49:db:69:65:96:7f:c3:72:19:fa: 8b:5a:db:28:ea:fc:dc:37:1c:75:82:f0:b4:27:03: fd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:09:11:CE:AA:3C:CD:30:31:F1:B1:FF:D0:AA:D4:06:11:B6:F4:C4 X509v3 Authority Key Identifier: keyid:53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:61:c0:cb:63:18:8c:b5:e6:f2:e6:6b:34:c9:b9:24:82:d5: 84:69:96:22:34:bc:c9:61:f2:50:44:60:c9:60:20:e6:27:38: f7:88:24:c5:4d:8a:02:8e:d1:45:c7:f9:f7:3a:1e:63:62:2a: f7:db:7c:1d:44:c0:0f:85:a3:d5:e0:44:4d:d7:1f:5d:be:b0: f6:54:3e:75:38:ab:24:e3:61:f8:3f:f9:9e:76:7b:e2:30:2c: 31:a9:cd:e0:88:e0:c1:e0:1d:24:6c:df:36:15:b3:db:a8:68: b0:ee:9b:a6:39:a1:28:c1:ae:3f:80:2f:81:6a:0d:18:fe:55: 35:19:ed:85:49:aa:b1:6a:da:64:7d:9b:ba:56:4d:a2:54:9d: a1:88:a7:93:dd:a3:f1:93:8a:ee:ac:aa:95:3a:70:2e:d9:9a: 33:ed:18:5e:f4:02:df:fc:4a:f4:ae:bf:db:75:70:6a:56:3c: 63:77:00:c6:9f:0f:79:33:f0:5b:cb:21:6a:7e:d0:89:15:96: d4:e9:f9:88:c0:a5:a6:8c:e1:59:9d:e4:29:21:b9:29:06:c0: 63:77:9f:41:57:6c:15:22:cd:8c:a3:f2:ce:29:a4:91:8b:61: 5f:34:fd:10:e6:e9:3e:47:68:50:08:04:70:bf:6a:64:5c:9f: 33:75:93:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNBRjgxMTAvBgNVBAUTKDUzMEQyOUFEQzBGQjFDRjI4MzdEMzlCQjg2MzQzNDg2 QzFDNzE2ODIwHhcNMjUwNjA4MjA1NDEzWhcNMjUwNjE1MjA1NDEzWjAYMRYwFAYD VQQDEw02ODQ1Zjg3NS0wYTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgjXM3V45HRSpDybMbhb4LLWlPFI1ZwF8GCRfgkzA0tYNew8hrRKSIi6lvil P0KQFgyoNTbueZNTuPeDhlrU6zkmd+5TFRpVaC/DCiiAdMqJuy0/IwQEfdnzG+CQ r6uLyWetikDAdSGfnP6iTkNkGScEv2ptcsZ4T2xM4F+/KiJBxn/aLbFcJzbGE26e yXTEoUc/39tJa8RWUA+2NgziOnW5c8Zs1VX/gm3OsJo5tLzfvqPHEubGoZH+lWll qdGpVAZwny/qBg81ClnT3qFdJhaDmZ/6BUS6O7cLJ+BiCrk2TR8mAEnbaWWWf8Ny GfqLWtso6vzcNxx1gvC0JwP9mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkJEc6q PM0wMfGx/9Cq1AYRtvTEMB8GA1UdIwQYMBaAFFMNKa3A+xzyg305u4Y0NIbBxxaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0FGOC80ODI5N0ZFRTAy RkUxMUVCQjcwNjY0M0VDNEY5QUUwMi9VdzBwcmNEN0hQS0RmVG03aGpRMGhzSEhG b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V3MHByY0Q3SFBLRGZUbTdoalEwaHNISEZvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0FGOC80ODI5N0ZFRTAyRkUxMUVCQjcwNjY0M0VDNEY5QUUwMi9VdzBwcmNEN0hQ S0RmVG03aGpRMGhzSEhGb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRYcDLYxiMteby5ms0ybkkgtWEaZYiNLzJYfJQRGDJYCDmJzj3iCTF TYoCjtFFx/n3Oh5jYir323wdRMAPhaPV4ERN1x9dvrD2VD51OKsk42H4P/mednvi MCwxqc3giODB4B0kbN82FbPbqGiw7pumOaEowa4/gC+Bag0Y/lU1Ge2FSaqxatpk fZu6Vk2iVJ2hiKeT3aPxk4rurKqVOnAu2Zoz7Rhe9ALf/Er0rr/bdXBqVjxjdwDG nw95M/BbyyFqftCJFZbU6fmIwKWmjOFZneQpIbkpBsBjd59BV2wVIs2Mo/LOKaSR i2FfNP0Q5uk+R2hQCARwv2pkXJ8zdZOq -----END CERTIFICATE-----Generated at Mon Jun 9 07:34:16 2025 by rpki-client