$ rpki-client -vvf rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft File: ufrcQefh-XVse8mz3jlyy_bPYLU.mft (raw, json) Hash identifier: 6AqbVJgomnEW94rZ0TpdCVC7+HapdvcpsI9KT4egK+A= Subject key identifier: 35:29:5D:16:67:94:08:DC:37:C5:B2:D1:13:EE:3D:92:F3:7B:94:DB Authority key identifier: B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5 Certificate issuer: /CN=A9140562/serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft Manifest number: 46 Signing time: Thu 03 Jul 2025 07:38:25 +0000 Manifest this update: Thu 03 Jul 2025 07:38:25 +0000 Manifest next update: Thu 10 Jul 2025 07:38:25 +0000 Files and hashes: 1: ufrcQefh-XVse8mz3jlyy_bPYLU.crl (hash: u/18zbXHlQk3Bu0bVGdLWwaCerI1SGks9NkI+GGcHq8=) 2: 5FCE01D8EDFA11EF8193933AC4F9AE02.roa (hash: 97oa3zBzp7Gq4BpVUI5kKb706Ag3AZCc/4WlkzLjgfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140562, serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5 Validity Not Before: Jul 3 07:38:25 2025 GMT Not After : Jul 10 07:38:25 2025 GMT Subject: CN=68663371-4753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:af:c7:0b:50:27:e5:54:8e:50:3a:18:8f: dc:27:a3:6d:73:6d:77:7d:28:24:bf:c3:8d:a6:27: ac:96:8b:e7:e6:60:49:78:87:9c:d0:58:93:77:f9: e9:da:54:47:12:4b:91:68:56:e3:37:ae:fa:a4:2e: f0:7d:73:37:84:2f:06:f9:30:af:41:f9:98:ee:c5: 59:d6:00:8e:85:2d:1b:34:87:bc:de:a5:f1:d1:c9: d5:91:10:09:66:14:9c:6c:8b:cc:c0:44:e1:81:5a: 8d:3d:32:8c:bb:e3:32:2d:bd:d1:dc:c7:a4:0a:3d: 8b:e7:70:9b:33:6c:f9:53:ed:fd:c0:3b:66:d7:e9: a0:a1:16:ea:19:81:53:48:90:43:08:7b:3d:0c:a3: d9:cf:09:7a:52:e7:99:f1:2e:3b:cf:a1:44:b9:91: e3:92:97:80:e3:98:33:a0:29:64:50:b9:18:44:77: 89:01:e2:20:39:51:a6:bc:04:5d:20:cf:4d:86:8d: 6c:2e:ab:18:9f:bc:c7:7d:79:40:57:a0:0b:95:42: 81:9d:43:f8:a9:3d:fe:85:83:53:28:28:cd:c4:75: 0c:78:b7:19:bc:ae:44:bc:14:c3:1a:66:30:66:d9: 85:f8:1e:d0:3e:b7:34:d7:76:af:2d:2f:35:4b:df: 96:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:29:5D:16:67:94:08:DC:37:C5:B2:D1:13:EE:3D:92:F3:7B:94:DB X509v3 Authority Key Identifier: keyid:B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c2:9f:91:45:eb:3e:de:fd:d5:59:ed:11:f8:1b:85:80:50: 4f:a0:5d:99:66:09:bb:46:aa:2a:9a:ad:1c:f6:8a:a7:93:c6: 66:4a:b4:5f:cc:f4:a2:67:6d:90:35:14:f8:df:63:dd:4d:ba: ec:9c:c4:97:60:24:42:5e:1d:f6:8f:c7:cc:46:f3:b1:6e:e7: 80:ae:e3:a5:67:2e:97:eb:f5:5e:30:2c:cb:35:87:1a:be:44: 3a:45:fc:ca:71:16:d0:b9:e8:cb:e8:16:5a:54:ef:dd:53:f5: b2:1c:4a:3b:16:d1:64:e4:54:ab:84:ba:3b:f8:3a:ef:d7:3d: 90:dc:5a:1b:85:77:89:4d:dc:a3:6f:4f:af:32:96:a1:0c:3b: e1:f3:8a:ab:dd:94:ed:e4:ba:71:04:9f:4a:21:80:29:18:0e: 80:e8:1f:ad:f3:b8:f9:86:89:32:1d:8c:72:a4:51:db:2d:fe: b0:0d:0d:aa:dd:d6:01:85:cd:ff:e5:ef:75:34:1f:dd:29:fb: 1a:23:e1:c1:e2:db:a1:2a:30:e8:20:27:11:09:bc:e4:17:b5: 69:0f:21:07:cf:e9:0e:b0:25:31:e6:5f:23:55:0c:81:be:2e: 64:b1:0c:45:d6:06:28:13:34:52:fb:f6:25:d9:9d:a5:81:20: f2:86:f2:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDU2MjExMC8GA1UEBRMoQjlGQURDNDFFN0UxRjk3NTZDN0JDOUIzREUzOTcyQ0JG NkNGNjBCNTAeFw0yNTA3MDMwNzM4MjVaFw0yNTA3MTAwNzM4MjVaMBgxFjAUBgNV BAMTDTY4NjYzMzcxLTQ3NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHTq/HC1An5VSOUDoYj9wno21zbXd9KCS/w42mJ6yWi+fmYEl4h5zQWJN3+ena VEcSS5FoVuM3rvqkLvB9czeELwb5MK9B+ZjuxVnWAI6FLRs0h7zepfHRydWREAlm FJxsi8zAROGBWo09Moy74zItvdHcx6QKPYvncJszbPlT7f3AO2bX6aChFuoZgVNI kEMIez0Mo9nPCXpS55nxLjvPoUS5keOSl4DjmDOgKWRQuRhEd4kB4iA5Uaa8BF0g z02GjWwuqxifvMd9eUBXoAuVQoGdQ/ipPf6Fg1MoKM3EdQx4txm8rkS8FMMaZjBm 2YX4HtA+tzTXdq8tLzVL35ZvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNSldFmeU CNw3xbLRE+49kvN7lNswHwYDVR0jBBgwFoAUufrcQefh+XVse8mz3jlyy/bPYLUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwNTYyLzY2QzNDOTdFRURG OTExRUZBOUNEQTgzOEM0RjlBRTAyL3VmcmNRZWZoLVhWc2U4bXozamx5eV9iUFlM VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWZyY1FlZmgtWFZzZThtejNqbHl5X2JQWUxVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw NTYyLzY2QzNDOTdFRURGOTExRUZBOUNEQTgzOEM0RjlBRTAyL3VmcmNRZWZoLVhW c2U4bXozamx5eV9iUFlMVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ7Cn5FF6z7e/dVZ7RH4G4WAUE+gXZlmCbtGqiqarRz2iqeTxmZKtF/M 9KJnbZA1FPjfY91NuuycxJdgJEJeHfaPx8xG87Fu54Cu46VnLpfr9V4wLMs1hxq+ RDpF/MpxFtC56MvoFlpU791T9bIcSjsW0WTkVKuEujv4Ou/XPZDcWhuFd4lN3KNv T68ylqEMO+HziqvdlO3kunEEn0ohgCkYDoDoH63zuPmGiTIdjHKkUdst/rANDard 1gGFzf/l73U0H90p+xoj4cHi26EqMOggJxEJvOQXtWkPIQfP6Q6wJTHmXyNVDIG+ LmSxDEXWBigTNFL79iXZnaWBIPKG8s4= -----END CERTIFICATE-----Generated at Thu Jul 3 18:15:52 2025 by rpki-client