$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft File: UHztrU5Y_M0K4JOTmGWG21g_B6I.mft (raw, json) Hash identifier: Dr+vO8NZaV4U761ARdAc6ooMZ9WjVCviKxYOsn2H83M= Subject key identifier: C4:B5:02:C1:8B:81:99:FD:67:F9:A9:1F:D9:F3:63:86:4B:C7:4B:34 Authority key identifier: 50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 Certificate issuer: /CN=A912C8FD/serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Certificate serial: 0BA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft Manifest number: 0BA9 Signing time: Fri 30 May 2025 19:08:48 +0000 Manifest this update: Fri 30 May 2025 19:08:48 +0000 Manifest next update: Fri 06 Jun 2025 19:08:48 +0000 Files and hashes: 1: UHztrU5Y_M0K4JOTmGWG21g_B6I.crl (hash: oep6JMws2Qze/6iB/pd93NcI9obfV/4210f6GR/6Spw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2985 (0xba9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FD, serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Validity Not Before: May 30 19:08:48 2025 GMT Not After : Jun 6 19:08:48 2025 GMT Subject: CN=683a0240-3253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ef:fa:b0:14:66:3b:df:e7:b2:9f:02:7c:d6: e6:ce:f9:98:f9:b0:31:6f:52:23:a4:e5:c9:f9:ae: 81:5f:5b:e2:6b:6c:fa:f7:4b:64:6b:6a:ef:9a:3e: e9:04:57:f0:f3:29:a2:3d:02:73:62:cd:3c:33:f4: a7:0f:28:d4:f5:c5:ac:d4:30:a8:72:ac:63:f3:9a: 9a:f6:cf:12:60:7b:ec:e0:e6:9c:a1:a9:8d:f6:57: 2d:6b:d1:01:26:46:0f:5a:74:b5:0e:81:82:7a:fe: 41:68:99:7d:d2:1b:9f:ce:b8:5b:cf:6b:e3:72:7d: 8d:94:46:f0:95:13:70:4c:37:c4:12:11:29:0c:c1: 6c:2f:15:c4:e5:77:e6:5b:e1:29:69:39:fd:d8:79: 67:1f:31:ed:a7:0f:4c:bb:b4:a6:9a:49:a2:ce:7d: f7:d5:42:f5:a9:07:20:13:99:dd:51:6c:0f:09:f0: 67:d3:00:92:a1:25:61:aa:13:47:a2:7b:19:5e:21: 1d:32:9e:b9:84:66:0a:e5:36:07:08:86:b6:bf:5f: 95:72:6b:5e:44:0f:ce:4c:03:d6:9c:aa:46:fd:61: ff:8e:c7:da:df:7e:d9:8f:56:f8:11:f4:d0:97:cc: a3:76:e6:cc:61:ec:c3:ef:b2:6f:38:81:3e:b7:bd: 6b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B5:02:C1:8B:81:99:FD:67:F9:A9:1F:D9:F3:63:86:4B:C7:4B:34 X509v3 Authority Key Identifier: keyid:50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:fa:c7:a3:10:4d:6f:ad:46:5a:a7:6d:20:00:9e:47:6e:00: 9c:e0:01:b8:d6:fb:74:38:e2:80:e0:1a:e1:0f:b7:88:44:38: 72:0a:06:cf:a1:44:af:57:77:dd:af:0e:1e:d0:f1:93:14:9d: 06:6e:a4:31:20:34:47:8e:9f:87:b0:c8:c9:4e:98:c3:47:5f: 21:a1:78:eb:08:78:92:f7:8a:3d:02:31:92:62:9a:b3:f1:a0: 18:78:dc:7b:20:b4:72:87:38:7e:1c:05:e0:1d:57:44:15:43: f9:b7:88:8b:25:69:2c:30:99:97:ff:3a:58:b6:0c:b1:be:0f: 44:c3:25:6c:ff:ef:f7:b5:c6:4b:a1:cb:8e:f8:97:0c:ae:98: f0:0c:56:d2:aa:4a:90:db:fd:f6:85:62:53:cc:29:21:e0:46: f7:8f:7e:ab:e6:ea:de:d9:89:f8:18:1e:81:d3:d4:41:38:ed: 86:27:d6:98:ea:4d:0f:e0:89:86:e2:e6:f1:fa:6a:96:09:d3: 98:ee:64:32:95:03:e0:cc:47:e1:be:8d:fb:d0:99:58:32:69: 34:b9:d8:6a:12:74:0c:e1:89:41:ae:cb:8b:d3:0e:64:d0:a0: c4:a0:0c:c8:ad:fe:03:87:39:85:bd:6c:88:72:4f:92:88:69: 14:4d:66:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkQxMTAvBgNVBAUTKDUwN0NFREFENEU1OEZDQ0QwQUUwOTM5Mzk4NjU4NkRC NTgzRjA3QTIwHhcNMjUwNTMwMTkwODQ4WhcNMjUwNjA2MTkwODQ4WjAYMRYwFAYD VQQDEw02ODNhMDI0MC0zMjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0e/6sBRmO9/nsp8CfNbmzvmY+bAxb1IjpOXJ+a6BX1via2z690tka2rvmj7p BFfw8ymiPQJzYs08M/SnDyjU9cWs1DCocqxj85qa9s8SYHvs4OacoamN9lcta9EB JkYPWnS1DoGCev5BaJl90hufzrhbz2vjcn2NlEbwlRNwTDfEEhEpDMFsLxXE5Xfm W+EpaTn92HlnHzHtpw9Mu7Smmkmizn331UL1qQcgE5ndUWwPCfBn0wCSoSVhqhNH onsZXiEdMp65hGYK5TYHCIa2v1+VcmteRA/OTAPWnKpG/WH/jsfa337Zj1b4EfTQ l8yjdubMYezD77JvOIE+t71rLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMS1AsGL gZn9Z/mpH9nzY4ZLx0s0MB8GA1UdIwQYMBaAFFB87a1OWPzNCuCTk5hlhttYPwei MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGRC82NzRDRTJGMDIx NjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9NMEs0Sk9UbUdXRzIxZ19C NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIenRyVTVZX00wSzRKT1RtR1dHMjFnX0I2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGRC82NzRDRTJGMDIxNjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9N MEs0Sk9UbUdXRzIxZ19CNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP+sejEE1vrUZap20gAJ5HbgCc4AG41vt0OOKA4BrhD7eIRDhyCgbP oUSvV3fdrw4e0PGTFJ0GbqQxIDRHjp+HsMjJTpjDR18hoXjrCHiS94o9AjGSYpqz 8aAYeNx7ILRyhzh+HAXgHVdEFUP5t4iLJWksMJmX/zpYtgyxvg9EwyVs/+/3tcZL ocuO+JcMrpjwDFbSqkqQ2/32hWJTzCkh4Eb3j36r5ure2Yn4GB6B09RBOO2GJ9aY 6k0P4ImG4ubx+mqWCdOY7mQylQPgzEfhvo370JlYMmk0udhqEnQM4YlBrsuL0w5k 0KDEoAzIrf4DhzmFvWyIck+SiGkUTWah -----END CERTIFICATE-----Generated at Sat May 31 16:57:52 2025 by rpki-client