$ rpki-client -vvf rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft File: UudzDz1hVWPrWMn6dZKhvYBbWjU.mft (raw, json) Hash identifier: jLASKs0OMmZiNRvpan1QRF73OvykPWkPRXjQWp/Kgp0= Subject key identifier: B0:D0:1F:3E:87:31:B4:AD:EF:68:46:33:B4:74:B0:C3:4A:FF:EF:9D Authority key identifier: 52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 Certificate issuer: /CN=A914D9BE/serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft Manifest number: 01E8 Signing time: Sat 05 Jul 2025 02:51:23 +0000 Manifest this update: Sat 05 Jul 2025 02:51:23 +0000 Manifest next update: Sat 12 Jul 2025 02:51:23 +0000 Files and hashes: 1: UudzDz1hVWPrWMn6dZKhvYBbWjU.crl (hash: L0Y8JwH+K0FfdRwC718Iqb8FP5IFwTYec2Tx5tTSsdU=) 2: AE148B2A6BB911ED97343873C4F9AE02.roa (hash: h7PFINLKglbbD51solfuF7q/5uroEa7Bk3jUBzQnwh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D9BE, serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Validity Not Before: Jul 5 02:51:23 2025 GMT Not After : Jul 12 02:51:23 2025 GMT Subject: CN=6868932b-4a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:68:a8:1f:57:36:92:93:a4:02:01:8f:16:72: fa:7a:4b:a1:5e:4a:9a:60:2a:0c:f2:9d:b9:b0:10: 38:58:76:b6:10:e7:3e:c9:35:1f:03:65:8a:5f:90: a9:be:4f:a0:63:d8:25:b8:98:80:c9:0c:b8:eb:25: df:78:04:0f:ba:8b:13:40:63:50:88:62:59:b9:31: e4:10:57:aa:86:fd:9b:ba:f7:1a:ff:1d:96:ae:ad: 8f:9c:6f:e7:10:68:0d:af:13:d8:24:ce:09:35:2a: a3:22:58:e1:54:0d:2e:73:f2:8f:d5:52:2a:03:3b: 6c:fa:6a:94:92:db:fb:35:10:44:e3:3b:8b:3e:f9: a1:a3:93:5c:d1:1d:f1:2c:6a:87:c9:9e:83:f5:c7: 33:05:4c:a5:f2:58:7a:d8:66:52:c9:7b:a9:0f:af: 4b:fd:82:30:a3:c6:d7:e8:58:3c:fc:2e:e5:df:45: 29:5d:5d:37:66:3e:e4:c0:41:21:00:31:cb:fd:d8: fc:0b:85:8f:b1:79:21:1d:71:ae:2e:26:62:c9:91: 07:ca:6b:2a:aa:11:b2:94:20:c2:85:06:cd:63:d0: d7:38:70:d0:4b:73:35:57:e5:aa:4d:16:7f:72:69: 2e:ee:25:27:87:79:59:3c:76:3a:05:2c:7d:b0:ad: f3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D0:1F:3E:87:31:B4:AD:EF:68:46:33:B4:74:B0:C3:4A:FF:EF:9D X509v3 Authority Key Identifier: keyid:52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:37:80:14:4a:1b:1a:ab:dc:73:54:30:c2:f5:07:22:e3:ed: ac:4b:3f:c6:b3:51:52:8c:96:c1:10:fd:64:b6:27:b8:96:a3: 29:d4:76:5f:92:14:db:70:66:7c:07:36:8d:2a:43:4c:d1:b2: 9a:d2:06:c3:3b:70:f8:6e:70:d0:8c:2e:47:95:fd:a0:4d:14: b8:ff:3f:83:75:31:37:48:01:04:45:4e:12:7f:e3:90:c4:cb: ae:f8:f8:6e:3d:45:03:bb:f9:9f:a8:31:29:40:cc:38:1a:e1: ab:a5:ec:f0:bf:f8:d2:ce:45:1b:d3:9a:0d:b1:f2:22:86:33: 2d:72:03:f9:63:6e:ae:45:b6:d5:46:fc:5d:55:44:a1:71:b4: 17:ec:71:bd:9e:d3:71:7e:64:fa:36:2d:c7:5b:d1:f1:bc:81: e8:55:dc:94:68:2d:4c:5b:ba:a7:5a:9a:8d:e8:22:4e:a0:4e: 99:96:1a:87:3a:1b:74:15:a5:55:18:48:9a:1d:fe:df:ac:b5: 82:cf:91:c6:5f:0a:dd:51:cb:4c:3a:fb:01:d2:86:ae:c8:54: 87:b9:99:90:72:82:3d:cb:ef:56:f8:d7:85:12:30:d0:00:de: 8c:8f:dd:cf:c3:71:a3:e7:6c:e4:16:fb:bc:23:38:0f:43:92: 4f:fc:03:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ5QkUxMTAvBgNVBAUTKDUyRTc3MzBGM0Q2MTU1NjNFQjU4QzlGQTc1OTJBMUJE ODA1QjVBMzUwHhcNMjUwNzA1MDI1MTIzWhcNMjUwNzEyMDI1MTIzWjAYMRYwFAYD VQQDEw02ODY4OTMyYi00YTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlmioH1c2kpOkAgGPFnL6ekuhXkqaYCoM8p25sBA4WHa2EOc+yTUfA2WKX5Cp vk+gY9gluJiAyQy46yXfeAQPuosTQGNQiGJZuTHkEFeqhv2buvca/x2Wrq2PnG/n EGgNrxPYJM4JNSqjIljhVA0uc/KP1VIqAzts+mqUktv7NRBE4zuLPvmho5Nc0R3x LGqHyZ6D9cczBUyl8lh62GZSyXupD69L/YIwo8bX6Fg8/C7l30UpXV03Zj7kwEEh ADHL/dj8C4WPsXkhHXGuLiZiyZEHymsqqhGylCDChQbNY9DXOHDQS3M1V+WqTRZ/ cmku7iUnh3lZPHY6BSx9sK3zPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDQHz6H MbSt72hGM7R0sMNK/++dMB8GA1UdIwQYMBaAFFLncw89YVVj61jJ+nWSob2AW1o1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDlCRS82RkNGQjg2NjZC QjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZXUHJXTW42ZFpLaHZZQmJX alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V1ZHpEejFoVldQcldNbjZkWktodllCYldqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDlCRS82RkNGQjg2NjZCQjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZX UHJXTW42ZFpLaHZZQmJXalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmN4AUShsaq9xzVDDC9Qci4+2sSz/Gs1FSjJbBEP1ktie4lqMp1HZf khTbcGZ8BzaNKkNM0bKa0gbDO3D4bnDQjC5Hlf2gTRS4/z+DdTE3SAEERU4Sf+OQ xMuu+PhuPUUDu/mfqDEpQMw4GuGrpezwv/jSzkUb05oNsfIihjMtcgP5Y26uRbbV RvxdVUShcbQX7HG9ntNxfmT6Ni3HW9HxvIHoVdyUaC1MW7qnWpqN6CJOoE6ZlhqH Oht0FaVVGEiaHf7frLWCz5HGXwrdUctMOvsB0oauyFSHuZmQcoI9y+9W+NeFEjDQ AN6Mj93Pw3Gj52zkFvu8IzgPQ5JP/APT -----END CERTIFICATE-----Generated at Sun Jul 6 00:49:55 2025 by rpki-client