$ rpki-client -vvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft File: UxdJCV5En9gqodtQ2oNAFyML3RM.mft (raw, json) Hash identifier: F8JywLxjn9yn0I1k+gUhbbZOiu++Ha5gjZDpU6XX/gs= Subject key identifier: 4D:67:7B:80:5A:B5:F8:DF:61:62:80:63:3D:D8:58:37:7A:C9:DF:70 Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 Certificate issuer: /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Certificate serial: 0B8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft Manifest number: 0B88 Signing time: Fri 04 Jul 2025 19:21:33 +0000 Manifest this update: Fri 04 Jul 2025 19:21:33 +0000 Manifest next update: Fri 11 Jul 2025 19:21:33 +0000 Files and hashes: 1: UxdJCV5En9gqodtQ2oNAFyML3RM.crl (hash: eROhi/sd5waCF74lvGPr1zFzFrDr9jlmWxBl4aMEtNo=) 2: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (hash: b6SG981ws9YTohF7YJYfD6V/fAmms72gE/FD/yHhvRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2959 (0xb8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117754, serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Validity Not Before: Jul 4 19:21:33 2025 GMT Not After : Jul 11 19:21:33 2025 GMT Subject: CN=686829bd-39af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e0:0b:1a:f9:9d:4b:f8:9c:f4:d3:4f:6d:c9: 16:9a:02:4d:e3:40:60:57:94:47:05:d8:9a:e2:39: 94:af:eb:e0:d0:54:96:dd:49:ef:25:21:88:3b:10: 49:10:ea:7a:6a:91:27:ae:35:2a:0f:9a:ca:fc:64: 7e:b8:3b:8e:6d:2c:b9:c1:5f:3f:60:f2:2d:71:2a: 92:f0:95:67:b4:da:bb:4c:8c:50:79:be:79:bb:01: 66:d3:db:cc:07:e1:96:41:17:30:55:43:a4:53:b6: 31:21:45:db:54:18:da:05:b2:30:cb:ad:9d:4d:e3: e6:8e:87:68:14:a0:da:59:a1:0c:12:76:f8:a1:96: bb:a7:e9:83:12:88:32:77:1a:28:57:a7:32:df:63: 90:fb:66:95:d1:29:6d:a3:fb:9e:2b:da:76:36:ca: 7f:cb:ad:04:b6:b5:b0:22:20:2e:9e:fc:08:47:38: c4:7c:f9:c9:ee:19:52:b3:a1:70:ed:71:16:36:08: 65:44:36:47:b5:7b:9f:c8:ec:df:9c:61:d0:10:9f: 7c:15:5b:b8:1e:4c:3f:6c:ce:31:ba:52:cb:09:b6: 12:48:71:e7:40:a6:0d:77:e1:5c:25:63:c5:29:e7: 19:51:0d:47:48:ae:9f:22:54:e8:5b:b3:92:44:fd: 01:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:67:7B:80:5A:B5:F8:DF:61:62:80:63:3D:D8:58:37:7A:C9:DF:70 X509v3 Authority Key Identifier: keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:ac:37:37:dd:0d:be:fd:8f:64:82:70:7c:1a:4b:3d:1d:ed: 2c:58:eb:62:d8:a8:64:c8:63:81:36:ff:14:c2:15:d8:13:5d: 96:d0:0d:f3:e2:d8:76:7b:46:6e:23:dc:34:63:bb:4a:b1:28: a4:d3:2c:32:50:3e:d2:4e:fa:5c:a3:d3:d0:2f:93:c9:68:53: 6c:ca:cf:c0:19:f7:6c:bf:a2:f1:8e:53:f2:2d:3e:9d:50:5f: 5d:6b:ab:7e:8d:54:23:13:47:81:fc:5b:47:3d:61:85:b7:d6: a9:b3:43:10:9f:09:d8:d1:27:08:e5:05:bb:75:53:2b:7c:21: 66:c7:a9:69:46:16:b6:11:3c:e7:ff:0b:0e:60:f5:9a:63:ad: 80:18:3b:b5:5b:17:9d:e8:a1:08:64:9a:37:fb:78:46:7d:c3: ea:f6:76:d2:a4:c5:17:bb:29:fb:24:e7:21:ec:f0:0e:6e:91: 9f:b0:6a:97:f9:32:28:ad:e3:9a:54:45:1c:69:c5:01:64:c7: d2:83:ed:27:eb:25:ff:b5:e0:fa:46:1f:e3:9a:1d:32:be:81: 56:33:ef:33:69:5d:97:e0:22:c5:ec:b2:6c:cc:06:c0:6d:b0: f0:50:aa:b3:d5:46:41:94:09:c1:05:bf:8b:45:d9:16:f3:7c: 7f:bb:66:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3NTQxMTAvBgNVBAUTKDUzMTc0OTA5NUU0NDlGRDgyQUExREI1MERBODM0MDE3 MjMwQkREMTMwHhcNMjUwNzA0MTkyMTMzWhcNMjUwNzExMTkyMTMzWjAYMRYwFAYD VQQDEw02ODY4MjliZC0zOWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuALGvmdS/ic9NNPbckWmgJN40BgV5RHBdia4jmUr+vg0FSW3UnvJSGIOxBJ EOp6apEnrjUqD5rK/GR+uDuObSy5wV8/YPItcSqS8JVntNq7TIxQeb55uwFm09vM B+GWQRcwVUOkU7YxIUXbVBjaBbIwy62dTePmjodoFKDaWaEMEnb4oZa7p+mDEogy dxooV6cy32OQ+2aV0Slto/ueK9p2Nsp/y60EtrWwIiAunvwIRzjEfPnJ7hlSs6Fw 7XEWNghlRDZHtXufyOzfnGHQEJ98FVu4Hkw/bM4xulLLCbYSSHHnQKYNd+FcJWPF KecZUQ1HSK6fIlToW7OSRP0BOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1ne4Ba tfjfYWKAYz3YWDd6yd9wMB8GA1UdIwQYMBaAFFMXSQleRJ/YKqHbUNqDQBcjC90T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzc1NC84QjMxNDVBRTJD OEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45Z3FvZHRRMm9OQUZ5TUwz Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4ZEpDVjVFbjlncW9kdFEyb05BRnlNTDNSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzc1NC84QjMxNDVBRTJDOEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45 Z3FvZHRRMm9OQUZ5TUwzUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWrDc33Q2+/Y9kgnB8Gks9He0sWOti2KhkyGOBNv8UwhXYE12W0A3z 4th2e0ZuI9w0Y7tKsSik0ywyUD7STvpco9PQL5PJaFNsys/AGfdsv6LxjlPyLT6d UF9da6t+jVQjE0eB/FtHPWGFt9aps0MQnwnY0ScI5QW7dVMrfCFmx6lpRha2ETzn /wsOYPWaY62AGDu1Wxed6KEIZJo3+3hGfcPq9nbSpMUXuyn7JOch7PAObpGfsGqX +TIoreOaVEUcacUBZMfSg+0n6yX/teD6Rh/jmh0yvoFWM+8zaV2X4CLF7LJszAbA bbDwUKqz1UZBlAnBBb+LRdkW83x/u2a1 -----END CERTIFICATE-----Generated at Sat Jul 5 03:04:10 2025 by rpki-client