$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft File: UVabSMA4kUVORphTpn25Cb7CytY.mft (raw, json) Hash identifier: aHlphZTwnlvc0MX2ZO9oLgUQfH8E8wUwHwpAM/7Si10= Subject key identifier: 7C:B8:48:1F:86:B5:A2:74:2C:96:D0:17:37:5C:C6:24:F2:EF:7A:20 Authority key identifier: 51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6 Certificate issuer: /CN=A91C7672/serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6 Certificate serial: 1C2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft Manifest number: 1C22 Signing time: Mon 30 Jun 2025 16:24:00 +0000 Manifest this update: Mon 30 Jun 2025 16:23:59 +0000 Manifest next update: Mon 07 Jul 2025 16:23:59 +0000 Files and hashes: 1: UVabSMA4kUVORphTpn25Cb7CytY.crl (hash: aTludMTOihDJbqoq6ZgBCfrJIEk0hFu7PrUcOZd1WcI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7211 (0x1c2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7672, serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6 Validity Not Before: Jun 30 16:23:59 2025 GMT Not After : Jul 7 16:23:59 2025 GMT Subject: CN=6862ba20-73e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cc:70:9c:de:60:6d:b2:18:75:33:8d:f2:f7: b8:70:2e:b7:87:b7:f6:97:21:01:52:fe:4a:c3:04: d4:f3:08:83:9e:b2:5f:57:4a:41:ff:44:42:e0:16: a8:87:0d:cb:17:64:b9:11:fc:3b:b7:96:6a:c1:10: 4e:f7:c1:ac:e1:91:ae:51:eb:91:04:c3:9e:2f:b9: 20:6f:cc:fe:f5:04:a0:ce:c7:0c:22:c8:72:44:96: 31:2e:0f:24:9c:33:5c:71:ee:4a:0e:81:fe:6c:73: e3:e9:6b:c1:2d:62:3f:41:3c:95:d1:19:1f:3d:b5: 02:ac:42:e8:40:c8:3c:02:ff:a4:ed:ce:61:be:89: 34:e9:05:a1:9d:84:2a:be:6d:25:ef:00:a6:f2:b8: c2:0d:2c:a1:da:8a:4a:80:7c:46:d5:44:0f:4a:b8: 6b:00:8c:7d:c4:d8:fc:7f:cc:a3:0b:fd:69:18:27: 38:59:3b:8e:2e:18:ea:1d:a6:86:28:d6:99:52:e5: ab:f4:16:fa:18:05:4b:73:3e:d6:53:9d:8b:c8:97: 31:b9:d5:29:6b:14:3e:36:6b:25:b8:2b:04:60:d2: c6:e2:be:67:e3:a6:9e:09:65:34:0a:a5:7e:04:85: dc:9b:6a:aa:f1:82:30:0c:94:3c:6a:03:ed:de:33: 0d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B8:48:1F:86:B5:A2:74:2C:96:D0:17:37:5C:C6:24:F2:EF:7A:20 X509v3 Authority Key Identifier: keyid:51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:a4:3e:df:cb:a0:c2:36:63:16:bb:24:bb:8f:d9:25:45:18: 9a:42:61:e6:47:69:c4:fe:b3:33:d7:10:25:0a:16:1f:8f:e7: 4a:25:9a:86:b8:f7:5b:1d:d1:06:18:4a:83:90:ab:68:bd:99: 11:c5:3a:f7:b8:bf:16:0b:16:ad:65:48:e8:85:6f:39:f9:ce: cd:0f:aa:81:67:58:1c:9a:a7:ec:34:82:a3:9d:59:71:9b:07: 50:68:bc:e6:46:3b:38:17:3c:11:6b:c8:f8:d4:0b:07:78:7c: 61:6f:66:aa:0c:fa:4a:2a:6c:b0:c4:c2:a3:f3:ef:54:62:25: 79:cf:9e:38:62:b1:44:8c:e4:84:dc:9f:ca:29:8d:a8:e3:67: 5a:73:1b:55:e5:3b:4a:36:87:db:12:9a:34:9c:5f:f7:8d:57: f2:bf:41:1d:a2:f0:d1:87:9a:d7:79:da:87:e2:50:51:0c:47: b9:4a:38:09:0f:66:6f:d6:e6:83:65:03:0e:b6:7c:37:13:fb: 2e:4a:70:1d:2f:62:13:5d:e7:2a:63:19:39:c7:79:43:ee:91: 3b:1d:dc:97:04:0a:b2:0e:f8:12:9d:5b:e1:1f:b4:5c:df:e6: 70:f7:5a:d3:21:f2:28:f6:64:3f:16:e1:c4:f7:74:94:3f:79: aa:73:38:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc2NzIxMTAvBgNVBAUTKDUxNTY5QjQ4QzAzODkxNDU0RTQ2OTg1M0E2N0RCOTA5 QkVDMkNBRDYwHhcNMjUwNjMwMTYyMzU5WhcNMjUwNzA3MTYyMzU5WjAYMRYwFAYD VQQDEw02ODYyYmEyMC03M2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysxwnN5gbbIYdTON8ve4cC63h7f2lyEBUv5KwwTU8wiDnrJfV0pB/0RC4Bao hw3LF2S5Efw7t5ZqwRBO98Gs4ZGuUeuRBMOeL7kgb8z+9QSgzscMIshyRJYxLg8k nDNcce5KDoH+bHPj6WvBLWI/QTyV0RkfPbUCrELoQMg8Av+k7c5hvok06QWhnYQq vm0l7wCm8rjCDSyh2opKgHxG1UQPSrhrAIx9xNj8f8yjC/1pGCc4WTuOLhjqHaaG KNaZUuWr9Bb6GAVLcz7WU52LyJcxudUpaxQ+NmsluCsEYNLG4r5n46aeCWU0CqV+ BIXcm2qq8YIwDJQ8agPt3jMNUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHy4SB+G taJ0LJbQFzdcxiTy73ogMB8GA1UdIwQYMBaAFFFWm0jAOJFFTkaYU6Z9uQm+wsrW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzY3Mi80Mzc2NEJFQ0Y3 MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9VVmFiU01BNGtVVk9ScGhUcG4yNUNiN0N5 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VWYWJTTUE0a1VWT1JwaFRwbjI1Q2I3Q3l0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzY3Mi80Mzc2NEJFQ0Y3MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9VVmFiU01BNGtV Vk9ScGhUcG4yNUNiN0N5dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBipD7fy6DCNmMWuyS7j9klRRiaQmHmR2nE/rMz1xAlChYfj+dKJZqG uPdbHdEGGEqDkKtovZkRxTr3uL8WCxatZUjohW85+c7ND6qBZ1gcmqfsNIKjnVlx mwdQaLzmRjs4FzwRa8j41AsHeHxhb2aqDPpKKmywxMKj8+9UYiV5z544YrFEjOSE 3J/KKY2o42dacxtV5TtKNofbEpo0nF/3jVfyv0EdovDRh5rXedqH4lBRDEe5SjgJ D2Zv1uaDZQMOtnw3E/suSnAdL2ITXecqYxk5x3lD7pE7HdyXBAqyDvgSnVvhH7Rc 3+Zw91rTIfIo9mQ/FuHE93SUP3mqczjP -----END CERTIFICATE-----Generated at Tue Jul 1 21:40:15 2025 by rpki-client