$ rpki-client -vvf rpki.apnic.net/member_repository/A9125026/EBC2CF4A168E11F084F93477C4F9AE02/UY9neucmpLw3i_Hu_aSY3pQZ-sM.mft File: UY9neucmpLw3i_Hu_aSY3pQZ-sM.mft (raw, json) Hash identifier: +qdikteLNCIAeKEkwxgkd0EklNjf9kO5wOIX4IM9e0Y= Subject key identifier: CC:5B:E1:B6:4E:96:A4:C9:24:6D:F3:01:C4:10:80:4D:28:92:F3:9E Authority key identifier: 51:8F:67:7A:E7:26:A4:BC:37:8B:F1:EE:FD:A4:98:DE:94:19:FA:C3 Certificate issuer: /CN=A9125026/serialNumber=518F677AE726A4BC378BF1EEFDA498DE9419FAC3 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UY9neucmpLw3i_Hu_aSY3pQZ-sM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125026/EBC2CF4A168E11F084F93477C4F9AE02/UY9neucmpLw3i_Hu_aSY3pQZ-sM.mft Manifest number: 2A Signing time: Tue 01 Jul 2025 08:31:59 +0000 Manifest this update: Tue 01 Jul 2025 08:31:58 +0000 Manifest next update: Tue 08 Jul 2025 08:31:58 +0000 Files and hashes: 1: UY9neucmpLw3i_Hu_aSY3pQZ-sM.crl (hash: fhEILx51DzRmHQ5Z7mngdVwaldYhikUXOSXg8nOjKbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125026/EBC2CF4A168E11F084F93477C4F9AE02/UY9neucmpLw3i_Hu_aSY3pQZ-sM.crl rsync://rpki.apnic.net/member_repository/A9125026/EBC2CF4A168E11F084F93477C4F9AE02/UY9neucmpLw3i_Hu_aSY3pQZ-sM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UY9neucmpLw3i_Hu_aSY3pQZ-sM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125026, serialNumber=518F677AE726A4BC378BF1EEFDA498DE9419FAC3 Validity Not Before: Jul 1 08:31:58 2025 GMT Not After : Jul 8 08:31:58 2025 GMT Subject: CN=68639cfe-1219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a8:7c:7b:3c:b3:45:b3:57:8a:81:79:6a:51: 18:b6:c5:45:02:91:cf:b5:b8:7a:ef:c7:d4:56:a6: 16:aa:48:ba:66:d1:38:09:88:73:eb:5b:0f:b6:7a: 2e:2a:61:d4:fd:ea:65:87:47:69:74:2c:97:9f:34: 06:9c:09:78:00:31:66:b9:e8:6d:a5:fa:d5:6b:8e: 2a:5f:1a:0f:f2:31:df:fb:57:de:72:35:71:33:00: b6:bd:86:f0:91:dc:c3:1c:0c:91:bc:0a:ae:2b:65: 0e:28:80:28:9f:69:fd:0c:80:ef:80:17:a3:5f:5c: 98:25:a1:a3:a7:d8:42:9d:58:8b:84:4e:6a:b7:55: fc:e2:97:c5:10:17:2d:76:cc:89:02:b5:4a:87:24: 33:19:63:24:03:01:ec:7f:44:c3:4a:17:3b:09:94: 82:df:0b:ab:91:91:7c:88:9a:c5:f1:fe:96:61:bc: 4d:88:a0:19:ab:47:05:00:6c:2f:84:a3:65:57:69: aa:4c:18:ff:88:97:71:d0:17:1d:2d:2b:dd:93:ec: 7b:18:d0:d5:30:d1:28:c8:e5:2a:8b:f7:0f:d2:6b: f4:c8:dc:00:04:c7:db:07:8b:20:a8:87:27:2e:9c: fa:ed:bb:bc:f4:46:8f:9f:73:4d:c7:9a:95:db:2b: ed:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5B:E1:B6:4E:96:A4:C9:24:6D:F3:01:C4:10:80:4D:28:92:F3:9E X509v3 Authority Key Identifier: keyid:51:8F:67:7A:E7:26:A4:BC:37:8B:F1:EE:FD:A4:98:DE:94:19:FA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125026/EBC2CF4A168E11F084F93477C4F9AE02/UY9neucmpLw3i_Hu_aSY3pQZ-sM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UY9neucmpLw3i_Hu_aSY3pQZ-sM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125026/EBC2CF4A168E11F084F93477C4F9AE02/UY9neucmpLw3i_Hu_aSY3pQZ-sM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:96:c0:37:37:da:10:97:c4:ba:b5:d2:29:18:df:39:aa:42: 37:d0:e5:d0:29:3e:b1:7e:ea:4a:f8:15:c9:d5:e1:e2:fe:0a: 26:6b:66:53:1a:ef:9a:63:35:fb:cf:d6:09:0e:ce:c2:9c:96: b1:31:93:38:43:dc:55:4e:86:70:e1:4f:0f:f4:31:a9:7f:f1: bb:dc:8c:9d:57:4d:4a:ee:7c:b3:d3:6d:be:1b:cb:0f:a3:05: 7f:82:72:57:25:d2:78:48:e5:f8:dc:a9:b3:83:8a:4b:b7:9e: a5:36:7e:7f:0f:9c:f2:d2:80:57:53:e6:14:cf:0c:b8:cd:63: 6f:8f:26:11:58:37:ee:5a:eb:c9:68:5f:e2:61:25:6a:2a:f6: b0:fd:e8:dd:60:8a:ee:15:8f:3e:24:c7:85:f9:54:13:96:b1: 7c:b7:ca:e2:ab:36:d1:27:71:d5:73:18:e8:a6:aa:78:af:a8: 32:60:54:c7:47:ff:9d:2c:2a:75:fe:e7:ec:5f:49:d9:33:7e: 3b:1e:f8:5c:b8:8c:e5:c3:63:21:83:84:56:f4:28:b6:d9:ef: 2e:37:02:d1:cd:f0:67:6a:d2:76:b4:eb:2a:29:aa:39:6b:4e: 91:d0:c6:9a:71:a7:91:eb:2c:33:07:df:97:6a:7a:8e:9c:ed: 41:8c:f3:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTAyNjExMC8GA1UEBRMoNTE4RjY3N0FFNzI2QTRCQzM3OEJGMUVFRkRBNDk4REU5 NDE5RkFDMzAeFw0yNTA3MDEwODMxNThaFw0yNTA3MDgwODMxNThaMBgxFjAUBgNV BAMTDTY4NjM5Y2ZlLTEyMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6qHx7PLNFs1eKgXlqURi2xUUCkc+1uHrvx9RWphaqSLpm0TgJiHPrWw+2ei4q YdT96mWHR2l0LJefNAacCXgAMWa56G2l+tVrjipfGg/yMd/7V95yNXEzALa9hvCR 3MMcDJG8Cq4rZQ4ogCifaf0MgO+AF6NfXJgloaOn2EKdWIuETmq3Vfzil8UQFy12 zIkCtUqHJDMZYyQDAex/RMNKFzsJlILfC6uRkXyImsXx/pZhvE2IoBmrRwUAbC+E o2VXaapMGP+Il3HQFx0tK92T7HsY0NUw0SjI5SqL9w/Sa/TI3AAEx9sHiyCohycu nPrtu7z0Ro+fc03HmpXbK+2HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzFvhtk6W pMkkbfMBxBCATSiS854wHwYDVR0jBBgwFoAUUY9neucmpLw3i/Hu/aSY3pQZ+sMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1MDI2L0VCQzJDRjRBMTY4 RTExRjA4NEY5MzQ3N0M0RjlBRTAyL1VZOW5ldWNtcEx3M2lfSHVfYVNZM3BRWi1z TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVVk5bmV1Y21wTHczaV9IdV9hU1kzcFFaLXNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 MDI2L0VCQzJDRjRBMTY4RTExRjA4NEY5MzQ3N0M0RjlBRTAyL1VZOW5ldWNtcEx3 M2lfSHVfYVNZM3BRWi1zTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB+WwDc32hCXxLq10ikY3zmqQjfQ5dApPrF+6kr4FcnV4eL+CiZrZlMa 75pjNfvP1gkOzsKclrExkzhD3FVOhnDhTw/0Mal/8bvcjJ1XTUrufLPTbb4byw+j BX+Cclcl0nhI5fjcqbODiku3nqU2fn8PnPLSgFdT5hTPDLjNY2+PJhFYN+5a68lo X+JhJWoq9rD96N1giu4Vjz4kx4X5VBOWsXy3yuKrNtEncdVzGOimqnivqDJgVMdH /50sKnX+5+xfSdkzfjse+Fy4jOXDYyGDhFb0KLbZ7y43AtHN8Gdq0na06yopqjlr TpHQxppxp5HrLDMH35dqeo6c7UGM8ww= -----END CERTIFICATE-----Generated at Wed Jul 2 20:59:31 2025 by rpki-client