$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft File: ULpjuT-CkSle5HAxuWtFzaXCSw0.mft (raw, json) Hash identifier: /y9wD4yob73F4ymBlPhwr9Xn6/043oo1834AHfJumrA= Subject key identifier: AF:75:93:90:23:7C:57:66:E8:F0:3D:85:AD:EB:09:23:87:8A:8D:D0 Authority key identifier: 50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D Certificate issuer: /CN=A9199CFF/serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft Manifest number: 53 Signing time: Tue 01 Jul 2025 08:00:31 +0000 Manifest this update: Tue 01 Jul 2025 08:00:30 +0000 Manifest next update: Tue 08 Jul 2025 08:00:30 +0000 Files and hashes: 1: ULpjuT-CkSle5HAxuWtFzaXCSw0.crl (hash: 1fny0HT8MW10WuGk/tkUAzPI/mhR8Op6l2emjs8Kftk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CFF, serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D Validity Not Before: Jul 1 08:00:30 2025 GMT Not After : Jul 8 08:00:30 2025 GMT Subject: CN=6863959f-a537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:56:c1:2d:8b:55:ff:12:b8:9a:0c:f0:20: a3:c6:0d:b4:e7:69:a8:ad:c2:d1:6e:8d:cb:40:a2: 9f:e2:35:c2:31:d3:6c:d5:6d:86:5a:3f:1d:79:43: 5f:59:c7:fa:a7:b4:24:eb:02:d3:84:50:62:bd:41: de:73:41:fd:c5:0b:94:9a:47:2b:96:57:d6:65:f4: c1:ff:77:d0:1f:d3:b2:28:eb:44:a3:68:ac:5c:d6: 17:4f:7e:08:68:8d:ff:51:71:25:35:f2:09:c9:36: 22:4e:5e:bc:b1:3b:88:0f:19:93:5d:64:92:0c:48: 95:09:f0:66:32:b7:66:b9:ea:f3:7c:eb:a5:56:b8: 9f:03:16:37:ec:45:c0:17:12:9e:89:1f:37:a0:5a: 95:14:26:4d:6f:1c:a1:70:ee:74:9f:4e:77:cc:d8: db:d1:ac:3d:43:1a:00:fc:f6:b1:c4:31:ca:2c:03: 90:92:bb:4f:a9:67:6e:86:f0:a2:fe:d7:cb:93:8b: 84:a0:ef:58:15:7b:15:a8:40:9a:3f:85:49:e7:20: 9f:79:86:a2:dd:b2:92:77:93:5a:e0:23:9d:80:b5: 3a:cd:03:f4:d1:33:4e:ce:8f:11:e2:9c:3f:e4:29: 2b:a9:18:fb:23:de:54:4e:66:35:cd:5c:84:3f:bc: 48:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:75:93:90:23:7C:57:66:E8:F0:3D:85:AD:EB:09:23:87:8A:8D:D0 X509v3 Authority Key Identifier: keyid:50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:fb:45:54:25:77:c2:a7:a1:a4:78:17:b7:23:10:8d:6f:dd: 25:e4:29:23:60:a8:86:8f:78:9a:d1:34:36:db:98:d0:25:31: 3e:60:22:b0:9e:a6:c6:8d:2d:71:bd:f3:64:3c:83:ec:d8:6a: f1:ad:0f:f8:0a:d4:b3:ab:24:db:62:7e:1a:45:bd:39:bc:70: 6a:5a:00:92:b6:24:a1:7b:13:83:31:4a:de:24:f7:de:71:3b: 66:5f:32:7e:0a:82:7e:e7:b8:21:1f:31:5f:4f:b8:a4:ce:ce: f4:3e:f0:07:b8:8d:14:94:72:6a:3f:8a:fa:ea:4f:0e:13:49: 8e:0e:e7:d6:82:f4:fe:4d:6d:5e:b9:73:d6:37:a2:8a:c3:14: 8d:75:89:99:39:c1:0c:87:e4:19:a4:d1:80:77:d7:d3:72:ba: 34:b6:43:ef:8d:ea:10:b9:5f:f5:fb:07:7e:0d:21:87:1f:52: 6c:37:91:c8:0e:0e:fa:70:29:f4:31:7e:ca:6b:d5:98:61:ba: e5:bb:8c:c1:e6:88:23:3c:31:6e:04:ec:b1:4e:1a:f9:57:d2: ed:f7:aa:86:a0:cb:a5:cf:47:28:4f:76:48:ca:0d:69:3f:6d: ce:7b:b7:69:e1:ad:60:de:54:aa:2d:32:55:5c:09:36:36:99: 20:4a:02:8d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUNGRjExMC8GA1UEBRMoNTBCQTYzQjkzRjgyOTEyOTVFRTQ3MDMxQjk2QjQ1Q0RB NUMyNEIwRDAeFw0yNTA3MDEwODAwMzBaFw0yNTA3MDgwODAwMzBaMBgxFjAUBgNV BAMTDTY4NjM5NTlmLWE1MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRAVbBLYtV/xK4mgzwIKPGDbTnaaitwtFujctAop/iNcIx02zVbYZaPx15Q19Z x/qntCTrAtOEUGK9Qd5zQf3FC5SaRyuWV9Zl9MH/d9Af07Io60SjaKxc1hdPfgho jf9RcSU18gnJNiJOXryxO4gPGZNdZJIMSJUJ8GYyt2a56vN866VWuJ8DFjfsRcAX Ep6JHzegWpUUJk1vHKFw7nSfTnfM2NvRrD1DGgD89rHEMcosA5CSu0+pZ26G8KL+ 18uTi4Sg71gVexWoQJo/hUnnIJ95hqLdspJ3k1rgI52AtTrNA/TRM07OjxHinD/k KSupGPsj3lROZjXNXIQ/vEibAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUr3WTkCN8 V2bo8D2FresJI4eKjdAwHwYDVR0jBBgwFoAUULpjuT+CkSle5HAxuWtFzaXCSw0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5Q0ZGLzJBRTE2QTU4RDdF MDExRUY4QjE3M0QyRkM0RjlBRTAyL1VMcGp1VC1Da1NsZTVIQXh1V3RGemFYQ1N3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVUxwanVULUNrU2xlNUhBeHVXdEZ6YVhDU3cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 Q0ZGLzJBRTE2QTU4RDdFMDExRUY4QjE3M0QyRkM0RjlBRTAyL1VMcGp1VC1Da1Ns ZTVIQXh1V3RGemFYQ1N3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADn7RVQld8KnoaR4F7cjEI1v3SXkKSNgqIaPeJrRNDbbmNAlMT5gIrCe psaNLXG982Q8g+zYavGtD/gK1LOrJNtifhpFvTm8cGpaAJK2JKF7E4MxSt4k995x O2ZfMn4Kgn7nuCEfMV9PuKTOzvQ+8Ae4jRSUcmo/ivrqTw4TSY4O59aC9P5NbV65 c9Y3oorDFI11iZk5wQyH5Bmk0YB319NyujS2Q++N6hC5X/X7B34NIYcfUmw3kcgO DvpwKfQxfspr1ZhhuuW7jMHmiCM8MW4E7LFOGvlX0u33qoagy6XPRyhPdkjKDWk/ bc57t2nhrWDeVKotMlVcCTY2mSBKAo0= -----END CERTIFICATE-----Generated at Wed Jul 2 20:42:32 2025 by rpki-client