$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft File: uDIFubLHQGPjdvNxFYOXBe277Ng.mft (raw, json) Hash identifier: DFJc4/NfP7B5xagOO3rd9KDZyazmoRVKpxNc+O9oLq4= Subject key identifier: FB:83:C7:C9:5A:36:98:B7:C6:2A:63:9A:C6:1D:4C:9F:CE:4D:5F:13 Authority key identifier: B8:32:05:B9:B2:C7:40:63:E3:76:F3:71:15:83:97:05:ED:BB:EC:D8 Certificate issuer: /CN=A9130138/serialNumber=B83205B9B2C74063E376F37115839705EDBBECD8 Certificate serial: 0347 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft Manifest number: 0343 Signing time: Thu 03 Jul 2025 01:22:47 +0000 Manifest this update: Thu 03 Jul 2025 01:22:47 +0000 Manifest next update: Thu 10 Jul 2025 01:22:47 +0000 Files and hashes: 1: uDIFubLHQGPjdvNxFYOXBe277Ng.crl (hash: N5T0LQaJe3D2V+6yXxVQDize8HNoEsgs56gOGmn9oMs=) 2: A7DEA0DAC47D11ECB544A26DC4F9AE02.roa (hash: 4+Xf3NTfI2/0BNoXkOgB9ryKoXY/WbTftiAI2ds4gB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.crl rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 839 (0x347) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130138, serialNumber=B83205B9B2C74063E376F37115839705EDBBECD8 Validity Not Before: Jul 3 01:22:47 2025 GMT Not After : Jul 10 01:22:47 2025 GMT Subject: CN=6865db67-ed9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:11:ea:37:da:df:eb:79:56:5f:a6:0c:17:b5: af:31:59:c0:cf:cf:ee:b1:c9:c1:d4:43:b3:f0:f4: fd:4b:4d:69:6b:10:0d:c3:67:e9:0b:f7:e5:10:d0: f4:e4:4e:7e:14:a4:7c:38:ed:f6:d9:3b:02:5e:98: b0:2f:b4:9d:6e:d3:d6:fd:34:49:10:52:96:e9:5c: 76:a2:4a:4b:83:aa:f4:14:6e:f7:df:7a:8f:d0:07: a2:7c:7e:a0:c6:15:35:b9:32:03:2d:05:de:cf:68: 8e:ae:67:42:31:8c:24:67:7f:8e:0a:74:c2:96:42: cf:df:2c:6f:bf:44:0f:bd:ae:18:fe:d3:85:68:c5: bf:63:69:9c:c4:ba:91:54:f7:45:4b:93:2c:37:46: e5:bd:62:aa:aa:b3:c6:98:97:0d:c4:66:d0:34:45: 97:b9:af:0f:d8:65:bb:a5:8d:b0:c8:dd:f6:4d:f8: 68:1e:79:ed:a0:cc:0b:67:d8:4d:8f:c4:79:3d:ac: 98:9b:5e:8e:3b:c5:60:80:27:c3:b9:2d:93:e0:cf: 8c:ea:f9:c0:b5:7e:0d:b6:20:2c:e8:56:f6:59:fb: 10:73:af:9e:91:c5:27:04:c0:70:0a:37:40:32:64: a4:ef:a7:eb:ff:41:45:51:6a:56:c5:79:29:e4:ae: 43:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:83:C7:C9:5A:36:98:B7:C6:2A:63:9A:C6:1D:4C:9F:CE:4D:5F:13 X509v3 Authority Key Identifier: keyid:B8:32:05:B9:B2:C7:40:63:E3:76:F3:71:15:83:97:05:ED:BB:EC:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:3c:c3:65:28:2e:8a:96:fc:d4:78:f9:4e:00:9a:37:49:aa: 75:67:fe:b2:0f:ae:26:68:1c:29:84:d9:07:26:16:64:48:fe: 78:e8:3b:a9:a5:ae:48:31:e7:ec:18:40:d3:b4:1c:68:49:ca: fd:1f:c7:fe:26:79:3d:eb:8e:ae:8a:cf:4d:ae:45:21:4f:8c: 1b:e8:9c:9d:e9:7c:d4:68:c6:c4:5b:bf:07:ce:b6:56:cc:3f: 6a:6b:39:67:2b:e7:1c:c9:12:03:83:23:f3:14:a0:67:24:f5: 7e:e4:c2:c4:24:66:4e:d9:cb:f9:1c:f8:df:41:da:be:be:ce: c7:b5:c5:d5:68:66:cc:5f:f0:06:ab:b5:af:88:61:d6:a5:9d: 60:46:44:81:3c:18:db:c3:a8:d5:18:8b:47:23:ce:8c:8f:bc: a7:50:d0:68:0e:44:90:56:7a:d3:1f:03:ed:b6:e7:0e:9d:19: 2c:cc:ff:74:b5:e9:86:48:c7:33:23:87:4c:77:fc:da:9c:a0: 45:74:e3:34:ac:14:f2:5b:f5:3d:b4:d7:e9:07:e6:81:f6:a8: e2:0c:97:70:e3:54:a5:72:fc:03:34:af:21:94:70:32:d4:e3: 7e:00:c6:14:54:09:f3:c3:f6:52:45:57:a6:52:26:5f:6f:3c: 06:9e:9c:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMzgxMTAvBgNVBAUTKEI4MzIwNUI5QjJDNzQwNjNFMzc2RjM3MTE1ODM5NzA1 RURCQkVDRDgwHhcNMjUwNzAzMDEyMjQ3WhcNMjUwNzEwMDEyMjQ3WjAYMRYwFAYD VQQDEw02ODY1ZGI2Ny1lZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxHqN9rf63lWX6YMF7WvMVnAz8/uscnB1EOz8PT9S01paxANw2fpC/flEND0 5E5+FKR8OO322TsCXpiwL7SdbtPW/TRJEFKW6Vx2okpLg6r0FG7333qP0AeifH6g xhU1uTIDLQXez2iOrmdCMYwkZ3+OCnTClkLP3yxvv0QPva4Y/tOFaMW/Y2mcxLqR VPdFS5MsN0blvWKqqrPGmJcNxGbQNEWXua8P2GW7pY2wyN32TfhoHnntoMwLZ9hN j8R5PayYm16OO8VggCfDuS2T4M+M6vnAtX4NtiAs6Fb2WfsQc6+ekcUnBMBwCjdA MmSk76fr/0FFUWpWxXkp5K5DcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuDx8la Npi3xipjmsYdTJ/OTV8TMB8GA1UdIwQYMBaAFLgyBbmyx0Bj43bzcRWDlwXtu+zY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEzOC81OUZCQTJCMkM0 N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi91RElGdWJMSFFHUGpkdk54RllPWEJlMjc3 TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3VESUZ1YkxIUUdQamR2TnhGWU9YQmUyNzdOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDEzOC81OUZCQTJCMkM0N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi91RElGdWJMSFFH UGpkdk54RllPWEJlMjc3TmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClPMNlKC6KlvzUePlOAJo3Sap1Z/6yD64maBwphNkHJhZkSP546Dup pa5IMefsGEDTtBxoScr9H8f+Jnk9646uis9NrkUhT4wb6Jyd6XzUaMbEW78HzrZW zD9qazlnK+ccyRIDgyPzFKBnJPV+5MLEJGZO2cv5HPjfQdq+vs7HtcXVaGbMX/AG q7WviGHWpZ1gRkSBPBjbw6jVGItHI86Mj7ynUNBoDkSQVnrTHwPttucOnRkszP90 temGSMczI4dMd/zanKBFdOM0rBTyW/U9tNfpB+aB9qjiDJdw41SlcvwDNK8hlHAy 1ON+AMYUVAnzw/ZSRVemUiZfbzwGnpw8 -----END CERTIFICATE-----Generated at Fri Jul 4 18:39:29 2025 by rpki-client