$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft File: UHztrU5Y_M0K4JOTmGWG21g_B6I.mft (raw, json) Hash identifier: klQskWdJmyaAvCweUnds5W/6jAe72hLgPC8vTqDkb4k= Subject key identifier: E1:01:63:56:C5:91:09:CD:49:14:ED:A1:FA:96:D4:17:86:06:03:12 Authority key identifier: 50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 Certificate issuer: /CN=A912C8FD/serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Certificate serial: 0BBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft Manifest number: 0BBA Signing time: Wed 02 Jul 2025 19:08:51 +0000 Manifest this update: Wed 02 Jul 2025 19:08:50 +0000 Manifest next update: Wed 09 Jul 2025 19:08:50 +0000 Files and hashes: 1: UHztrU5Y_M0K4JOTmGWG21g_B6I.crl (hash: CnqlreB5W750GzTi+Aa+rv7LE4srLZEzt06DsFv3tlw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3002 (0xbba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FD, serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Validity Not Before: Jul 2 19:08:50 2025 GMT Not After : Jul 9 19:08:50 2025 GMT Subject: CN=686583c2-5f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:eb:6e:14:31:bc:18:1c:41:51:f4:c4:29:a0: f0:20:8d:87:06:78:22:5f:51:ba:da:df:a0:b1:1e: b4:52:94:4f:8e:31:9e:77:bb:b5:26:43:f5:3e:3c: b9:9f:f2:62:f7:54:28:17:4b:f6:2b:ae:6f:4c:41: 50:5b:cf:b3:5b:9d:7c:d0:a1:03:ea:89:55:48:29: f7:58:2a:49:fb:4e:b3:e4:19:5e:c5:a6:44:04:ea: 4e:3b:01:be:7c:ec:7d:52:94:a4:53:59:b9:c3:e7: 56:e0:e2:ff:ac:96:1f:b6:ad:3d:e6:86:62:f8:9a: 98:f1:b4:0d:7f:9c:d4:c2:10:6d:94:5e:60:cc:92: c0:b8:4f:36:54:ba:88:8a:9b:f5:35:10:d0:a4:cb: 58:4b:f8:e4:8e:c2:c4:da:58:50:c6:7f:1b:42:d5: fe:b6:8e:ee:0f:25:b2:25:40:24:47:97:ce:9c:8c: c5:65:cd:38:c4:f2:c1:e1:eb:d6:9f:95:67:ec:24: aa:a8:70:a8:78:0d:65:28:87:b2:3e:01:ca:42:ce: 38:fa:3d:55:71:5e:41:c0:13:55:8d:32:09:10:aa: 75:4e:fc:47:71:97:b9:f5:bb:ad:9a:06:4a:31:30: 99:0f:c1:1e:9f:99:30:b7:ca:45:a1:07:29:c6:8f: d9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:01:63:56:C5:91:09:CD:49:14:ED:A1:FA:96:D4:17:86:06:03:12 X509v3 Authority Key Identifier: keyid:50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:e1:d7:8c:d7:5b:f9:9f:03:28:bc:65:48:a3:47:c5:85:aa: c8:7d:3b:a3:21:63:80:12:a7:d8:d4:2a:eb:50:a9:e0:21:82: a9:d2:38:08:07:4b:6b:b9:50:70:dd:d1:ae:87:f1:70:a6:1f: 2e:30:5b:c2:78:20:c9:aa:31:9e:f9:a6:aa:89:ab:12:ef:f9: 89:f6:f0:50:70:9a:f2:d4:f7:12:c2:ad:83:77:59:9f:4a:e0: 03:ef:6b:21:a2:fe:61:60:74:0e:73:14:3b:e2:74:b8:6b:8d: 58:bd:41:75:a1:89:3f:c8:e6:86:a4:cf:27:1c:33:eb:ee:61: 0d:0e:08:dd:d1:08:b2:92:70:f0:7c:53:dd:c2:35:bb:65:6b: c3:ec:57:86:45:42:c5:42:80:65:ed:d1:40:16:3a:f5:2c:49: 61:fe:83:e9:a3:cd:c9:e8:60:dd:6d:3d:2a:21:04:95:ab:e6: 58:17:c9:e9:af:4d:27:74:5a:03:7a:20:76:5f:6c:6f:1c:a2: 0d:83:d9:1c:e2:4b:84:fb:83:96:5d:c6:93:ce:87:ef:7c:08: a6:df:07:cc:f5:cb:40:b0:f3:32:5e:39:22:7d:10:b7:a6:63: 25:dd:21:6d:16:c2:51:97:73:70:d4:d4:69:a8:a4:c1:3c:b5: eb:06:4d:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkQxMTAvBgNVBAUTKDUwN0NFREFENEU1OEZDQ0QwQUUwOTM5Mzk4NjU4NkRC NTgzRjA3QTIwHhcNMjUwNzAyMTkwODUwWhcNMjUwNzA5MTkwODUwWjAYMRYwFAYD VQQDEw02ODY1ODNjMi01ZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqutuFDG8GBxBUfTEKaDwII2HBngiX1G62t+gsR60UpRPjjGed7u1JkP1Pjy5 n/Ji91QoF0v2K65vTEFQW8+zW5180KED6olVSCn3WCpJ+06z5BlexaZEBOpOOwG+ fOx9UpSkU1m5w+dW4OL/rJYftq095oZi+JqY8bQNf5zUwhBtlF5gzJLAuE82VLqI ipv1NRDQpMtYS/jkjsLE2lhQxn8bQtX+to7uDyWyJUAkR5fOnIzFZc04xPLB4evW n5Vn7CSqqHCoeA1lKIeyPgHKQs44+j1VcV5BwBNVjTIJEKp1TvxHcZe59butmgZK MTCZD8Een5kwt8pFoQcpxo/ZCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEBY1bF kQnNSRTtofqW1BeGBgMSMB8GA1UdIwQYMBaAFFB87a1OWPzNCuCTk5hlhttYPwei MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGRC82NzRDRTJGMDIx NjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9NMEs0Sk9UbUdXRzIxZ19C NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIenRyVTVZX00wSzRKT1RtR1dHMjFnX0I2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGRC82NzRDRTJGMDIxNjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9N MEs0Sk9UbUdXRzIxZ19CNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm4deM11v5nwMovGVIo0fFharIfTujIWOAEqfY1CrrUKngIYKp0jgI B0truVBw3dGuh/Fwph8uMFvCeCDJqjGe+aaqiasS7/mJ9vBQcJry1PcSwq2Dd1mf SuAD72shov5hYHQOcxQ74nS4a41YvUF1oYk/yOaGpM8nHDPr7mENDgjd0QiyknDw fFPdwjW7ZWvD7FeGRULFQoBl7dFAFjr1LElh/oPpo83J6GDdbT0qIQSVq+ZYF8np r00ndFoDeiB2X2xvHKINg9kc4kuE+4OWXcaTzofvfAim3wfM9ctAsPMyXjkifRC3 pmMl3SFtFsJRl3Nw1NRpqKTBPLXrBk3g -----END CERTIFICATE-----Generated at Thu Jul 3 13:39:39 2025 by rpki-client