$ rpki-client -vvf rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft File: UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft (raw, json) Hash identifier: N29P607+YpzAz7+9hFvhVtSTc1mO91pMcpksL/uwVtg= Subject key identifier: E6:AB:CB:AD:F9:E2:98:F2:98:11:FB:94:17:DD:05:67:7A:98:E7:F4 Authority key identifier: 52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36 Certificate issuer: /CN=A916B30C/serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft Manifest number: 0112 Signing time: Tue 01 Jul 2025 05:21:45 +0000 Manifest this update: Tue 01 Jul 2025 05:21:45 +0000 Manifest next update: Tue 08 Jul 2025 05:21:45 +0000 Files and hashes: 1: UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl (hash: oIdTWSo2KwGhIdT1PjvXNfzfkWaX0DO4iX5w3yQO+U4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B30C, serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836 Validity Not Before: Jul 1 05:21:45 2025 GMT Not After : Jul 8 05:21:45 2025 GMT Subject: CN=68637069-ebd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:73:3f:45:b3:f2:c5:8a:cf:86:8a:ea:30:8b: 9e:77:4f:55:bd:54:70:6b:7b:ad:a2:87:35:a5:d8: db:74:71:35:fa:98:8c:d7:4a:7c:5f:d8:c3:82:24: b8:26:dc:07:5f:7a:05:59:73:fc:7d:77:43:06:89: f4:44:4d:17:06:5b:55:51:74:bf:f8:d5:32:8a:1c: 67:70:db:00:41:c6:8a:35:f6:ca:47:54:2e:3a:ec: 6f:4c:b5:1d:20:94:a8:f9:46:52:0a:6c:d7:72:7a: 52:a2:1b:84:8d:66:a4:56:1c:65:b4:a5:8a:c9:ea: d2:07:91:19:2d:ee:00:0c:14:34:95:8f:a2:99:90: 18:cc:2c:88:36:e6:4d:58:2e:2d:cd:c3:fb:6f:e3: d2:16:60:ca:18:09:d5:fa:55:82:29:8d:75:f1:eb: 06:cc:7a:5e:ae:b6:5e:f8:59:8a:99:4e:fe:0b:33: 69:96:67:7d:3a:86:41:f7:33:77:ba:97:24:ff:a8: cb:24:e2:07:b1:00:ff:85:7f:69:59:7d:a7:b1:46: fa:c8:88:4f:e9:2a:11:b1:01:6c:8f:29:95:ed:17: d2:37:82:e2:41:f3:36:a9:97:28:66:db:74:54:3f: fd:04:c1:c0:a9:6b:32:45:b3:c5:cf:22:69:3e:41: 1e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AB:CB:AD:F9:E2:98:F2:98:11:FB:94:17:DD:05:67:7A:98:E7:F4 X509v3 Authority Key Identifier: keyid:52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:d7:13:a1:25:fe:4f:9a:49:b0:b5:38:9a:d3:91:14:0c:99: d6:80:ef:d5:a4:30:37:e7:6f:b7:84:f2:45:b4:1a:db:b6:32: 38:96:33:d7:fa:24:3d:0b:ed:bd:fe:94:54:c2:d0:ac:04:e5: e2:8d:a2:34:88:3d:ae:3d:4e:db:ba:4f:70:9a:93:f6:3b:0d: 00:72:c5:18:32:12:81:dd:bc:b2:30:42:77:3f:e9:90:25:30: a9:85:3c:4d:33:ca:bf:9e:69:ae:48:0a:23:12:4e:b7:9a:6c: 19:08:58:71:44:41:d2:dc:d8:5e:5d:33:1c:78:ba:e5:47:ed: 9d:d3:1d:cc:2d:63:e0:db:88:96:92:ce:47:da:06:f6:dc:9d: f3:9e:3e:d7:5e:85:de:78:c6:b6:8d:56:da:f5:23:51:ca:ca: de:cf:5c:a6:08:37:f3:f1:1e:28:c1:8e:a8:9a:c4:94:ee:d0: 27:08:9c:d5:9b:9e:89:55:de:47:c9:89:17:cd:78:c6:a7:1a: 91:50:af:b2:90:76:68:8d:c8:5b:8a:9c:78:9e:20:fd:d8:90: 44:27:ae:e6:53:95:6e:de:bd:02:bc:79:8e:15:e2:2c:85:4b: ad:71:0b:0b:e7:61:76:dd:e8:a5:b3:76:d4:cb:63:0c:8b:dd: d9:f0:96:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIzMEMxMTAvBgNVBAUTKDUyQjNFODNCMTYyMUFGQjNEQ0NGMEFDRjY3RjI3RUUw QjFENkM4MzYwHhcNMjUwNzAxMDUyMTQ1WhcNMjUwNzA4MDUyMTQ1WjAYMRYwFAYD VQQDEw02ODYzNzA2OS1lYmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXM/RbPyxYrPhorqMIued09VvVRwa3utooc1pdjbdHE1+piM10p8X9jDgiS4 JtwHX3oFWXP8fXdDBon0RE0XBltVUXS/+NUyihxncNsAQcaKNfbKR1QuOuxvTLUd IJSo+UZSCmzXcnpSohuEjWakVhxltKWKyerSB5EZLe4ADBQ0lY+imZAYzCyINuZN WC4tzcP7b+PSFmDKGAnV+lWCKY118esGzHperrZe+FmKmU7+CzNplmd9OoZB9zN3 upck/6jLJOIHsQD/hX9pWX2nsUb6yIhP6SoRsQFsjymV7RfSN4LiQfM2qZcoZtt0 VD/9BMHAqWsyRbPFzyJpPkEeWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOary635 4pjymBH7lBfdBWd6mOf0MB8GA1UdIwQYMBaAFFKz6DsWIa+z3M8Kz2fyfuCx1sg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMwQy85QTg3NTQzQUIw NUUxMUVFOTdDNzhCNzVDNEY5QUUwMi9VclBvT3hZaHI3UGN6d3JQWl9KLTRMSFd5 RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyUG9PeFlocjdQY3p3clBaX0otNExIV3lEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjMwQy85QTg3NTQzQUIwNUUxMUVFOTdDNzhCNzVDNEY5QUUwMi9VclBvT3hZaHI3 UGN6d3JQWl9KLTRMSFd5RFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj1xOhJf5PmkmwtTia05EUDJnWgO/VpDA352+3hPJFtBrbtjI4ljPX +iQ9C+29/pRUwtCsBOXijaI0iD2uPU7buk9wmpP2Ow0AcsUYMhKB3byyMEJ3P+mQ JTCphTxNM8q/nmmuSAojEk63mmwZCFhxREHS3NheXTMceLrlR+2d0x3MLWPg24iW ks5H2gb23J3znj7XXoXeeMa2jVba9SNRysrez1ymCDfz8R4owY6omsSU7tAnCJzV m56JVd5HyYkXzXjGpxqRUK+ykHZojchbipx4niD92JBEJ67mU5Vu3r0CvHmOFeIs hUutcQsL52F23eils3bUy2MMi93Z8Jbr -----END CERTIFICATE-----Generated at Thu Jul 3 05:52:39 2025 by rpki-client