$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft File: UPqOjU4pl_9d5gjaeMrGVMzRabY.mft (raw, json) Hash identifier: 4VERHwVTnh7uG08YTg/eWxLtS3vSgeVe39HXfW2+iJo= Subject key identifier: BA:AC:24:23:ED:62:EE:FF:E2:06:7D:3C:F4:CD:6D:15:DA:DF:EF:47 Authority key identifier: 50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6 Certificate issuer: /CN=A91AEE26/serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6 Certificate serial: 08FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft Manifest number: 08F2 Signing time: Mon 30 Jun 2025 20:33:28 +0000 Manifest this update: Mon 30 Jun 2025 20:33:27 +0000 Manifest next update: Mon 07 Jul 2025 20:33:27 +0000 Files and hashes: 1: UPqOjU4pl_9d5gjaeMrGVMzRabY.crl (hash: Ws0O3wlIiWA9HTE31Osc9tQGMkIfmtVcDKMVAC6WRfY=) 2: CD095756AF1211EAA486D140C4F9AE02.roa (hash: Z259vozdwtPUaPkxXgMTZo8w1xwG+zonsUhvjUkyWKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2299 (0x8fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE26, serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6 Validity Not Before: Jun 30 20:33:27 2025 GMT Not After : Jul 7 20:33:27 2025 GMT Subject: CN=6862f498-0e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:84:67:6b:d8:ca:db:1b:52:3c:6e:a4:72: 75:9a:87:6f:40:a0:4d:7f:9e:69:30:0d:f1:ba:b0: 80:29:37:77:ab:1d:0f:ee:6c:72:07:dd:fa:a2:d4: 0f:e4:a9:68:52:de:d0:11:26:c3:e3:1b:46:1e:c3: b0:e9:ed:73:26:66:15:45:cd:e9:40:7c:55:d2:ab: c9:0d:93:a0:d0:ed:ef:9f:fc:76:b2:f8:2c:bc:4a: d4:6b:ae:46:42:b4:9e:05:08:7d:4e:72:db:4a:d6: 2a:49:21:80:72:52:b8:62:e0:9f:21:47:78:e1:d3: 41:f6:74:02:8b:37:28:f7:d0:2c:3e:39:38:72:f0: 61:c9:eb:40:90:a9:c0:b6:5f:b2:a9:c2:15:e2:c9: c2:bf:9b:91:90:bc:f1:50:b0:67:f3:40:7b:04:cc: 6c:ae:df:47:87:0c:5a:d4:95:2c:83:f1:fc:f9:80: 40:6e:d5:64:35:4c:d4:2b:d2:01:b5:8b:de:ad:f1: 19:28:25:b5:d8:ca:dc:3b:c4:96:57:d8:b2:6c:0f: 9c:b7:75:21:ac:35:c7:92:2e:86:49:a7:bd:85:04: 42:90:da:88:e4:ed:da:98:27:b3:1f:30:74:ff:48: 90:b7:44:4e:7d:a1:6c:b0:aa:1f:c2:86:4e:81:41: b7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AC:24:23:ED:62:EE:FF:E2:06:7D:3C:F4:CD:6D:15:DA:DF:EF:47 X509v3 Authority Key Identifier: keyid:50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:1b:69:06:90:3d:20:11:f3:89:2d:1a:d7:66:e9:95:23:da: 04:1f:dc:6e:b5:08:14:97:62:f4:bf:12:7f:1f:7c:8b:b4:b5: 8f:d8:43:ad:7f:8c:8e:c7:84:97:2c:0d:6c:55:90:a4:e7:2d: e9:fc:9d:8f:0d:1f:a6:27:78:11:02:62:be:0e:cf:fa:4a:e0: 1b:ad:20:c7:08:1c:7a:38:02:99:8d:ab:33:eb:79:11:94:81: 94:d9:92:6d:30:57:6b:e8:10:6f:e9:9e:5f:84:46:4b:66:a3: ed:a8:62:bb:5b:5b:75:f6:9a:93:31:c7:26:00:ca:cf:e3:05: 48:4c:e6:af:b0:53:c4:0c:a1:e5:64:88:53:b1:50:a4:95:c7: ce:37:17:19:cf:07:35:70:95:55:4f:d0:e3:17:87:ad:d6:97: 1c:bb:96:8a:50:77:64:2d:54:5b:ea:df:43:b7:00:ad:25:5e: db:71:cb:43:31:c3:4a:37:4d:61:33:5d:96:ca:21:a6:ae:64: 19:9b:ed:21:14:4f:b4:e2:1f:9a:0d:bb:f0:7b:d9:e7:18:38: 3f:b1:ba:43:a9:5a:7d:15:08:38:97:62:5d:94:66:0b:a0:67: 65:00:16:62:3a:a3:b6:f6:44:fa:0d:ca:48:8d:f9:80:4b:c3: 81:75:3c:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFMjYxMTAvBgNVBAUTKDUwRkE4RThENEUyOTk3RkY1REU2MDhEQTc4Q0FDNjU0 Q0NEMTY5QjYwHhcNMjUwNjMwMjAzMzI3WhcNMjUwNzA3MjAzMzI3WjAYMRYwFAYD VQQDEw02ODYyZjQ5OC0wZTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRqEZ2vYytsbUjxupHJ1modvQKBNf55pMA3xurCAKTd3qx0P7mxyB936otQP 5KloUt7QESbD4xtGHsOw6e1zJmYVRc3pQHxV0qvJDZOg0O3vn/x2svgsvErUa65G QrSeBQh9TnLbStYqSSGAclK4YuCfIUd44dNB9nQCizco99AsPjk4cvBhyetAkKnA tl+yqcIV4snCv5uRkLzxULBn80B7BMxsrt9Hhwxa1JUsg/H8+YBAbtVkNUzUK9IB tYverfEZKCW12MrcO8SWV9iybA+ct3UhrDXHki6GSae9hQRCkNqI5O3amCezHzB0 /0iQt0ROfaFssKofwoZOgUG3TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqsJCPt Yu7/4gZ9PPTNbRXa3+9HMB8GA1UdIwQYMBaAFFD6jo1OKZf/XeYI2njKxlTM0Wm2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUUyNi9BN0MxNjEwQ0FG MTAxMUVBQkY2MUQzM0FDNEY5QUUwMi9VUHFPalU0cGxfOWQ1Z2phZU1yR1ZNelJh YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VQcU9qVTRwbF85ZDVnamFlTXJHVk16UmFiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUUyNi9BN0MxNjEwQ0FGMTAxMUVBQkY2MUQzM0FDNEY5QUUwMi9VUHFPalU0cGxf OWQ1Z2phZU1yR1ZNelJhYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzG2kGkD0gEfOJLRrXZumVI9oEH9xutQgUl2L0vxJ/H3yLtLWP2EOt f4yOx4SXLA1sVZCk5y3p/J2PDR+mJ3gRAmK+Ds/6SuAbrSDHCBx6OAKZjasz63kR lIGU2ZJtMFdr6BBv6Z5fhEZLZqPtqGK7W1t19pqTMccmAMrP4wVITOavsFPEDKHl ZIhTsVCklcfONxcZzwc1cJVVT9DjF4et1pccu5aKUHdkLVRb6t9DtwCtJV7bcctD McNKN01hM12WyiGmrmQZm+0hFE+04h+aDbvwe9nnGDg/sbpDqVp9FQg4l2JdlGYL oGdlABZiOqO29kT6DcpIjfmAS8OBdTyp -----END CERTIFICATE-----Generated at Wed Jul 2 15:04:31 2025 by rpki-client