$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft File: UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft (raw, json) Hash identifier: XD2Ji9ix/4QGaiHgDYKT8l3x6VeD2SL8q+J6FnmPGv0= Subject key identifier: 83:B9:91:BC:F3:F0:E6:14:38:91:03:70:82:8D:70:CC:BA:0A:2D:6D Authority key identifier: 50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23 Certificate issuer: /CN=A91FBDDF/serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft Manifest number: 0145 Signing time: Mon 21 Jul 2025 04:22:43 +0000 Manifest this update: Mon 21 Jul 2025 04:22:42 +0000 Manifest next update: Mon 28 Jul 2025 04:22:42 +0000 Files and hashes: 1: UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl (hash: 375Hxybs97HcxM1M60jl4h+gsHmWUYX7poVSOjn3u3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBDDF, serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023 Validity Not Before: Jul 21 04:22:42 2025 GMT Not After : Jul 28 04:22:42 2025 GMT Subject: CN=687dc093-9c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:52:27:b1:bc:75:b3:ba:2d:ba:51:d5:b2:97: e1:d7:0f:b9:11:6d:15:c8:76:6b:f6:99:92:e6:cd: 67:b8:98:42:c8:d4:8e:4d:42:be:80:f1:ed:44:a4: 81:2e:36:de:4b:af:b2:7d:ef:77:f6:c8:68:ba:f9: 7a:4a:2c:90:f5:ee:c8:2b:5d:d1:93:83:f7:92:2d: 0e:f6:c1:12:f7:69:9f:36:2f:40:3c:59:86:42:b7: 0b:5b:8d:bd:4b:63:7f:52:8a:7c:55:f7:ca:a7:3a: e9:04:27:4b:0c:68:38:6a:19:2d:1a:04:e9:60:62: 48:5d:1b:f2:03:64:81:a0:cf:f3:7d:ac:98:06:81: 9e:87:8e:61:09:e7:a4:fa:5e:97:73:fe:84:6c:24: bc:ba:32:51:d6:54:ab:dd:3b:7c:c2:4c:07:61:a5: 3c:ca:11:6d:38:12:9e:e1:e9:7b:28:34:83:ee:4b: 49:6e:2e:45:c4:d1:05:3b:ca:ee:71:56:b1:60:88: 1d:51:1a:59:f7:53:c8:07:43:20:8d:41:d6:f0:d2: d5:a1:98:c7:22:4e:c3:69:d9:77:d1:af:3e:10:a5: 2c:14:34:62:d1:78:5d:f2:eb:99:32:b1:2e:98:80: f3:a6:ec:48:60:a9:c7:b0:81:61:d3:4a:a0:4c:85: e8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B9:91:BC:F3:F0:E6:14:38:91:03:70:82:8D:70:CC:BA:0A:2D:6D X509v3 Authority Key Identifier: keyid:50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:68:fc:54:19:05:ba:e3:26:9c:23:24:00:39:5d:b2:86:b1: d6:12:2e:10:18:f8:11:cc:39:57:11:c9:25:f4:b8:22:54:51: 01:17:99:c4:7a:4e:75:c6:f7:ed:66:65:68:82:ab:37:e7:fd: 99:e2:81:44:bc:b0:70:64:f4:19:1f:c4:c5:db:17:1e:5f:ab: dd:c8:12:b0:4f:2f:03:0c:3f:b4:af:5b:80:40:74:6c:8a:ff: a1:03:48:33:1e:ac:33:3e:10:39:13:cf:db:ee:a4:d7:00:ab: 72:ef:a1:4f:b8:73:6f:85:72:fe:27:20:e0:e1:0c:41:35:9a: 99:90:d4:0b:6d:39:86:f2:7a:34:a6:1a:34:af:7e:7c:d3:c3: cb:e8:61:9a:0b:00:0a:a9:6b:c5:3e:e1:fd:e0:b3:1f:6f:94: 97:5a:b8:0d:a5:ca:56:27:eb:4f:65:83:ca:37:3c:9a:d6:de: d1:df:7f:fb:62:8e:e1:f6:43:0a:ca:a6:93:b3:58:98:e9:26: b7:b0:b6:0f:4d:3c:d7:39:c0:cb:95:39:a3:f2:dd:fe:ca:7d: 41:a1:e6:8a:90:99:77:62:eb:2d:b1:14:38:ae:8a:35:79:ec: 57:f6:91:33:12:19:65:b7:8f:79:50:ce:23:4c:a1:a2:28:ea: 15:d7:9c:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEREYxMTAvBgNVBAUTKDUwM0QxQkY1NkIyMjI5QjUyQUEzRkY2ODUzNDY5OUYw NkZEMjUwMjMwHhcNMjUwNzIxMDQyMjQyWhcNMjUwNzI4MDQyMjQyWjAYMRYwFAYD VQQDEw02ODdkYzA5My05YzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lInsbx1s7otulHVspfh1w+5EW0VyHZr9pmS5s1nuJhCyNSOTUK+gPHtRKSB LjbeS6+yfe939shouvl6SiyQ9e7IK13Rk4P3ki0O9sES92mfNi9APFmGQrcLW429 S2N/Uop8VffKpzrpBCdLDGg4ahktGgTpYGJIXRvyA2SBoM/zfayYBoGeh45hCeek +l6Xc/6EbCS8ujJR1lSr3Tt8wkwHYaU8yhFtOBKe4el7KDSD7ktJbi5FxNEFO8ru cVaxYIgdURpZ91PIB0MgjUHW8NLVoZjHIk7Dadl30a8+EKUsFDRi0Xhd8uuZMrEu mIDzpuxIYKnHsIFh00qgTIXodwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIO5kbzz 8OYUOJEDcIKNcMy6Ci1tMB8GA1UdIwQYMBaAFFA9G/VrIim1KqP/aFNGmfBv0lAj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkRERi80NzVDNjRCRTcy NDUxMUVFQUEyOUVDNzRDNEY5QUUwMi9VRDBiOVdzaUtiVXFvXzlvVTBhWjhHX1NV Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VEMGI5V3NpS2JVcW9fOW9VMGFaOEdfU1VDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkRERi80NzVDNjRCRTcyNDUxMUVFQUEyOUVDNzRDNEY5QUUwMi9VRDBiOVdzaUti VXFvXzlvVTBhWjhHX1NVQ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2aPxUGQW64yacIyQAOV2yhrHWEi4QGPgRzDlXEckl9LgiVFEBF5nE ek51xvftZmVogqs35/2Z4oFEvLBwZPQZH8TF2xceX6vdyBKwTy8DDD+0r1uAQHRs iv+hA0gzHqwzPhA5E8/b7qTXAKty76FPuHNvhXL+JyDg4QxBNZqZkNQLbTmG8no0 pho0r35808PL6GGaCwAKqWvFPuH94LMfb5SXWrgNpcpWJ+tPZYPKNzya1t7R33/7 Yo7h9kMKyqaTs1iY6Sa3sLYPTTzXOcDLlTmj8t3+yn1BoeaKkJl3YustsRQ4roo1 eexX9pEzEhllt495UM4jTKGiKOoV15wJ -----END CERTIFICATE-----Generated at Mon Jul 21 07:03:24 2025 by rpki-client