$ rpki-client -vvf rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft File: UjrFjamEDQscqom9_54NzkZ2fEo.mft (raw, json) Hash identifier: kxIDBTAfdlZQeH9pyLD3hk5XetZ1ORzmNQI1JDS3Wp0= Subject key identifier: C8:E0:EB:66:08:D8:87:BB:87:B6:04:57:F9:1D:6E:45:90:AF:13:97 Authority key identifier: 52:3A:C5:8D:A9:84:0D:0B:1C:AA:89:BD:FF:9E:0D:CE:46:76:7C:4A Certificate issuer: /CN=A9124B27/serialNumber=523AC58DA9840D0B1CAA89BDFF9E0DCE46767C4A Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft Manifest number: 58 Signing time: Thu 05 Jun 2025 06:37:13 +0000 Manifest this update: Thu 05 Jun 2025 06:37:13 +0000 Manifest next update: Thu 12 Jun 2025 06:37:13 +0000 Files and hashes: 1: UjrFjamEDQscqom9_54NzkZ2fEo.crl (hash: yC/ZgK5BCQLMZ2h/3J9RAYKTPnCLVAwPOUQsZCFfzns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.crl rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 06:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B27, serialNumber=523AC58DA9840D0B1CAA89BDFF9E0DCE46767C4A Validity Not Before: Jun 5 06:37:13 2025 GMT Not After : Jun 12 06:37:13 2025 GMT Subject: CN=68413b19-9917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8e:31:84:88:cd:9a:37:4c:3d:4a:30:ae:99: f1:df:42:47:9a:64:be:c4:97:29:71:b7:0c:04:5f: 0b:0d:8f:43:a8:06:79:fa:40:63:54:12:39:62:90: 08:14:f7:a7:a1:33:33:a6:a6:a9:57:4e:72:1e:de: 7e:be:82:aa:20:51:ae:48:71:c8:35:db:94:06:89: e6:97:60:65:7e:de:bd:a5:2f:f2:91:75:ea:b1:18: 9d:3c:1d:b4:1e:07:f1:57:c3:a6:fd:9b:a9:e5:b2: ea:c5:af:e7:5a:31:a5:3c:13:8b:be:8a:38:5b:93: 10:2a:7c:d6:18:95:4e:c8:b3:be:c8:4a:11:00:16: a7:20:33:5a:c4:74:7e:cf:0e:8f:43:5b:6e:58:f8: 52:2e:5f:a9:2c:54:c4:45:61:b1:c5:4f:d7:34:0c: 6d:42:46:5c:26:4d:d5:36:66:58:9e:06:d6:7d:82: 02:3c:7a:fb:0a:fb:87:36:b8:7b:43:99:68:0b:58: 73:ba:8d:4d:db:7c:e2:f9:03:a1:ca:36:0d:1a:7b: 7c:a9:7a:7e:6e:f7:d4:de:2a:4b:f3:87:ef:f0:d8: 1a:96:a6:30:6f:b5:fa:e0:2f:30:33:05:11:b9:6e: 41:d4:e9:3e:bb:f0:73:cf:29:2a:a6:2c:57:36:e6: 06:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E0:EB:66:08:D8:87:BB:87:B6:04:57:F9:1D:6E:45:90:AF:13:97 X509v3 Authority Key Identifier: keyid:52:3A:C5:8D:A9:84:0D:0B:1C:AA:89:BD:FF:9E:0D:CE:46:76:7C:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:71:11:f9:b4:d2:66:af:2d:d5:6e:f3:c7:96:b6:39:30:b7: 43:25:c2:8d:f0:58:68:b0:47:ca:a2:b9:aa:1c:2e:fa:e1:96: 39:0e:d1:a2:02:ba:bf:30:c3:a6:2e:19:33:af:a2:d8:5b:95: 1a:0d:52:46:ef:d3:9b:5b:57:c4:de:a3:df:1e:3b:81:03:9b: 81:c8:5c:f4:2c:64:a9:8f:d1:4b:9c:e0:8e:e6:c0:09:5a:b6: 2e:5c:3d:d0:bb:19:33:c0:90:0e:52:24:a9:a0:18:d3:20:77: 8c:e5:3e:e8:dd:f0:0c:3a:ed:d5:16:dd:c1:87:a6:93:b9:c4: 5a:de:bb:85:14:68:0f:01:97:ea:fe:12:55:08:17:24:27:bc: 95:75:e8:5b:31:38:dc:f1:fc:00:e8:1e:09:99:97:7a:23:b9: a0:71:c8:4b:58:ef:8c:ce:2a:0f:c4:7f:aa:61:95:d9:f4:1c: 51:97:3b:2e:0a:86:c9:24:f5:7f:e3:46:f2:62:ac:2b:49:bc: 6b:d8:df:31:0f:3f:a2:c2:b9:dd:c2:23:ae:2b:04:80:71:da: 40:9f:8c:e1:0e:79:72:d3:b5:d5:21:2d:d2:ac:a4:44:3a:0a: 1a:fd:fe:76:dc:33:21:65:2c:54:e2:98:43:48:82:82:57:50: 41:ef:82:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NEIyNzExMC8GA1UEBRMoNTIzQUM1OERBOTg0MEQwQjFDQUE4OUJERkY5RTBEQ0U0 Njc2N0M0QTAeFw0yNTA2MDUwNjM3MTNaFw0yNTA2MTIwNjM3MTNaMBgxFjAUBgNV BAMTDTY4NDEzYjE5LTk5MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUjjGEiM2aN0w9SjCumfHfQkeaZL7ElylxtwwEXwsNj0OoBnn6QGNUEjlikAgU 96ehMzOmpqlXTnIe3n6+gqogUa5Iccg125QGieaXYGV+3r2lL/KRdeqxGJ08HbQe B/FXw6b9m6nlsurFr+daMaU8E4u+ijhbkxAqfNYYlU7Is77IShEAFqcgM1rEdH7P Do9DW25Y+FIuX6ksVMRFYbHFT9c0DG1CRlwmTdU2ZlieBtZ9ggI8evsK+4c2uHtD mWgLWHO6jU3bfOL5A6HKNg0ae3ypen5u99TeKkvzh+/w2BqWpjBvtfrgLzAzBRG5 bkHU6T678HPPKSqmLFc25gZLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyODrZgjY h7uHtgRX+R1uRZCvE5cwHwYDVR0jBBgwFoAUUjrFjamEDQscqom9/54NzkZ2fEow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0QjI3LzUwMDYxOERDQzZF ODExRUY4N0FFNjkwREM0RjlBRTAyL1VqckZqYW1FRFFzY3FvbTlfNTROemtaMmZF by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVWpyRmphbUVEUXNjcW9tOV81NE56a1oyZkVvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 QjI3LzUwMDYxOERDQzZFODExRUY4N0FFNjkwREM0RjlBRTAyL1VqckZqYW1FRFFz Y3FvbTlfNTROemtaMmZFby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ9xEfm00mavLdVu88eWtjkwt0Mlwo3wWGiwR8qiuaocLvrhljkO0aIC ur8ww6YuGTOvothblRoNUkbv05tbV8Teo98eO4EDm4HIXPQsZKmP0Uuc4I7mwAla ti5cPdC7GTPAkA5SJKmgGNMgd4zlPujd8Aw67dUW3cGHppO5xFreu4UUaA8Bl+r+ ElUIFyQnvJV16FsxONzx/ADoHgmZl3ojuaBxyEtY74zOKg/Ef6phldn0HFGXOy4K hskk9X/jRvJirCtJvGvY3zEPP6LCud3CI64rBIBx2kCfjOEOeXLTtdUhLdKspEQ6 Chr9/nbcMyFlLFTimENIgoJXUEHvgg4= -----END CERTIFICATE-----Generated at Fri Jun 6 17:16:02 2025 by rpki-client