$ rpki-client -vvf rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft File: UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft (raw, json) Hash identifier: kqnQZA4VcE52HNi2S4aa4UUnFpEl3MwenKCiyjnuy7g= Subject key identifier: 4D:8A:9A:1F:87:BA:D1:85:08:43:5E:64:4D:EE:33:DC:71:3A:E8:7B Authority key identifier: 52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36 Certificate issuer: /CN=A916B30C/serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft Manifest number: 011B Signing time: Sat 19 Jul 2025 04:58:30 +0000 Manifest this update: Sat 19 Jul 2025 04:58:29 +0000 Manifest next update: Sat 26 Jul 2025 04:58:29 +0000 Files and hashes: 1: UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl (hash: zTmXxoJ0EYFqTya881HKPE/f7PANRm7NDSZOEUo8q7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B30C, serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836 Validity Not Before: Jul 19 04:58:29 2025 GMT Not After : Jul 26 04:58:29 2025 GMT Subject: CN=687b25f5-b106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:5b:34:cf:14:d4:8a:fa:56:0d:bc:7d:90: 8c:8f:0e:3c:ce:21:80:e1:f5:e9:23:24:ef:cb:bb: bb:5c:fa:5c:a0:14:d8:75:6b:bf:68:db:c3:df:b1: d7:0a:37:59:aa:e5:59:43:6a:e5:f6:40:28:84:45: 7c:af:0b:f6:28:bb:42:20:c9:11:bf:f3:51:66:14: d7:1e:d4:52:67:ba:cb:4b:bb:f5:17:c6:28:30:93: 27:08:ed:1d:ec:d4:d0:02:57:11:df:50:7f:bb:95: 0f:f0:28:30:67:d8:b4:66:14:71:c0:50:25:2d:2b: 7b:aa:86:e6:02:5a:59:ad:55:16:12:9d:54:d6:39: d8:1e:3d:00:2c:66:c2:e3:82:a0:44:c9:e0:31:48: 41:72:bc:36:47:d5:05:53:fb:7a:2d:83:29:68:6d: e5:ab:af:ab:e4:ff:72:d4:f0:aa:33:c7:04:5c:a0: b9:9a:64:d5:b0:86:8c:48:1e:2b:ec:ea:a6:1d:e4: bc:3e:91:a1:2a:57:cd:65:08:22:78:65:a6:71:75: cd:01:62:68:50:fd:af:65:89:d7:ce:be:b2:81:03: 6f:b6:e8:bc:bf:f1:35:42:15:75:f8:c9:2f:1a:2a: 9d:4b:6c:3d:74:70:bd:f5:45:35:00:88:ad:2e:1b: 0a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8A:9A:1F:87:BA:D1:85:08:43:5E:64:4D:EE:33:DC:71:3A:E8:7B X509v3 Authority Key Identifier: keyid:52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:56:62:a5:9c:4c:33:27:a6:e0:8a:ef:a4:99:c5:dd:0b:79: 8f:79:9a:93:19:3c:39:80:59:7d:28:b2:69:31:54:b1:e3:a8: ea:65:ee:95:b7:8b:ee:55:19:96:3c:18:7e:2e:d4:af:1a:32: 4d:ab:4c:f6:de:d5:64:71:9d:89:f6:d5:7c:e2:85:50:ad:a9: 3d:14:d3:29:04:55:a4:4f:65:9d:62:50:91:a9:7d:fc:67:e8: 62:fc:fd:25:c4:a3:f3:c1:20:10:9e:f0:6e:d3:e7:0a:b0:0a: 8c:79:13:6a:82:b6:6f:f4:e3:6d:63:bf:54:3a:de:90:53:af: ce:a6:d1:8c:c6:a7:9f:2f:f4:4a:fe:c1:f3:f9:1e:3a:c1:51: 94:c1:46:d9:d6:b4:bd:db:93:95:22:33:e2:67:09:00:35:49: 9e:01:8b:7d:04:5f:8c:ff:61:28:7d:34:1e:58:3e:66:ef:02: 9d:05:40:ea:b3:39:0e:82:18:6c:37:d0:62:7d:43:46:3e:dc: bf:bb:76:53:08:47:04:48:f4:a3:2e:20:26:61:fb:6f:ca:d0: 0b:b5:95:be:6e:72:03:af:39:d5:4d:df:61:1b:f7:8d:0b:f5: 62:9e:97:d6:5f:1e:91:79:10:80:39:17:b8:d2:be:2f:e8:31: a3:9e:99:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIzMEMxMTAvBgNVBAUTKDUyQjNFODNCMTYyMUFGQjNEQ0NGMEFDRjY3RjI3RUUw QjFENkM4MzYwHhcNMjUwNzE5MDQ1ODI5WhcNMjUwNzI2MDQ1ODI5WjAYMRYwFAYD VQQDEw02ODdiMjVmNS1iMTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqF1bNM8U1Ir6Vg28fZCMjw48ziGA4fXpIyTvy7u7XPpcoBTYdWu/aNvD37HX CjdZquVZQ2rl9kAohEV8rwv2KLtCIMkRv/NRZhTXHtRSZ7rLS7v1F8YoMJMnCO0d 7NTQAlcR31B/u5UP8CgwZ9i0ZhRxwFAlLSt7qobmAlpZrVUWEp1U1jnYHj0ALGbC 44KgRMngMUhBcrw2R9UFU/t6LYMpaG3lq6+r5P9y1PCqM8cEXKC5mmTVsIaMSB4r 7OqmHeS8PpGhKlfNZQgieGWmcXXNAWJoUP2vZYnXzr6ygQNvtui8v/E1QhV1+Mkv GiqdS2w9dHC99UU1AIitLhsKIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2Kmh+H utGFCENeZE3uM9xxOuh7MB8GA1UdIwQYMBaAFFKz6DsWIa+z3M8Kz2fyfuCx1sg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMwQy85QTg3NTQzQUIw NUUxMUVFOTdDNzhCNzVDNEY5QUUwMi9VclBvT3hZaHI3UGN6d3JQWl9KLTRMSFd5 RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyUG9PeFlocjdQY3p3clBaX0otNExIV3lEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjMwQy85QTg3NTQzQUIwNUUxMUVFOTdDNzhCNzVDNEY5QUUwMi9VclBvT3hZaHI3 UGN6d3JQWl9KLTRMSFd5RFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfVmKlnEwzJ6bgiu+kmcXdC3mPeZqTGTw5gFl9KLJpMVSx46jqZe6V t4vuVRmWPBh+LtSvGjJNq0z23tVkcZ2J9tV84oVQrak9FNMpBFWkT2WdYlCRqX38 Z+hi/P0lxKPzwSAQnvBu0+cKsAqMeRNqgrZv9ONtY79UOt6QU6/OptGMxqefL/RK /sHz+R46wVGUwUbZ1rS925OVIjPiZwkANUmeAYt9BF+M/2EofTQeWD5m7wKdBUDq szkOghhsN9BifUNGPty/u3ZTCEcESPSjLiAmYftvytALtZW+bnIDrznVTd9hG/eN C/VinpfWXx6ReRCAORe40r4v6DGjnpnJ -----END CERTIFICATE-----Generated at Sun Jul 20 10:17:44 2025 by rpki-client