$ rpki-client -vvf rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft File: ufrcQefh-XVse8mz3jlyy_bPYLU.mft (raw, json) Hash identifier: 3VVzfDEDCBuUVy+38kjWpzcUwFbCyrAVBQGssNB5jjk= Subject key identifier: 70:C5:7F:3D:F6:82:6B:C9:F3:06:04:3E:29:75:72:F4:E9:85:60:D6 Authority key identifier: B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5 Certificate issuer: /CN=A9140562/serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft Manifest number: 35 Signing time: Sat 31 May 2025 07:10:36 +0000 Manifest this update: Sat 31 May 2025 07:10:36 +0000 Manifest next update: Sat 07 Jun 2025 07:10:36 +0000 Files and hashes: 1: ufrcQefh-XVse8mz3jlyy_bPYLU.crl (hash: x8TrVR0nXQeStB8Rjvq9I1iSQydvZmQkDIaoNo33ftY=) 2: 5FCE01D8EDFA11EF8193933AC4F9AE02.roa (hash: 97oa3zBzp7Gq4BpVUI5kKb706Ag3AZCc/4WlkzLjgfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140562, serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5 Validity Not Before: May 31 07:10:36 2025 GMT Not After : Jun 7 07:10:36 2025 GMT Subject: CN=683aab6c-10a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:08:6a:31:b2:d5:9a:95:54:ec:1b:87:04:71: be:c3:86:b4:55:f0:f1:a9:2d:a2:8b:2f:ec:ea:b8: 79:ca:7e:2c:24:9e:fd:8c:ba:30:fa:39:e1:b8:f3: ae:18:be:b0:d5:d2:46:37:a6:f3:f4:ac:01:b9:db: 0c:05:da:db:0e:f6:a8:f6:48:1d:8c:58:a2:e3:ee: 0e:c6:b5:66:3c:04:dd:52:1f:e2:2f:a6:76:cd:ad: 4b:60:02:26:fa:ff:79:d1:1d:c0:26:31:cf:b4:71: ac:e3:36:9d:ac:cc:fa:0a:bb:32:9e:7c:0b:c7:99: 60:b0:37:59:61:95:49:43:40:ce:9c:2f:2f:27:e0: 21:f7:76:1a:f2:ec:68:24:cd:6d:08:16:e5:f5:20: bd:00:4b:56:30:dd:9a:d1:57:16:51:76:44:cf:04: 95:04:ba:27:4e:a2:2c:f0:f3:b7:11:c7:ca:07:35: a8:a2:53:05:1c:c9:ac:05:46:4c:c1:f6:0a:16:24: 94:ac:4f:0e:6a:75:f4:62:74:6f:38:c6:e1:a7:b3: 57:24:62:fc:cc:28:23:48:23:e6:1a:c8:f6:fb:f7: b7:b8:d9:38:6b:53:97:a8:50:77:40:2f:7c:fc:c2: 28:43:8d:d4:0c:82:0b:b7:76:c7:94:27:71:ef:46: d5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C5:7F:3D:F6:82:6B:C9:F3:06:04:3E:29:75:72:F4:E9:85:60:D6 X509v3 Authority Key Identifier: keyid:B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:19:cd:8c:ac:1d:7f:88:fc:e3:55:cf:3f:20:9f:25:2e:56: 6a:6f:2b:61:65:0e:56:c9:2f:4a:6d:20:76:dd:ea:85:ef:dc: 21:8d:2d:ef:a8:40:82:50:0b:67:6e:08:59:b4:1a:6f:ac:11: d8:48:e3:bf:46:0d:35:c9:ae:b3:1e:74:d1:ff:24:6c:8f:86: 8c:35:cb:2e:b7:3d:f0:b8:4f:ae:eb:a1:8c:5d:33:8d:bb:87: ba:1c:1e:f6:29:e9:b6:c8:28:3a:84:12:5e:ba:53:8b:8a:f3: e6:c3:e3:e2:f1:9d:74:d7:5b:d3:62:8a:ad:2c:b9:1e:49:5a: b7:41:7e:8d:c3:f5:9e:72:9a:2b:80:87:0e:12:1b:b0:b7:c8: 9d:c8:5b:28:4e:b3:c4:a3:c9:65:21:cf:dd:02:57:0d:e4:91: 22:97:06:0a:de:8d:8c:8e:9f:61:a8:7b:79:58:97:bc:37:6b: 32:17:ad:e7:94:6b:c9:c0:f7:fe:9d:fd:0f:3f:3e:62:38:55: fe:a8:60:b0:9e:f2:8c:af:98:5b:00:9f:33:a7:5f:dc:24:ae: d0:02:a0:66:17:49:56:7a:32:c8:20:dd:24:85:39:3e:af:60: 35:91:26:e1:73:52:9b:05:79:b6:7c:6e:24:d0:29:f1:cc:9e: 24:3b:2d:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDU2MjExMC8GA1UEBRMoQjlGQURDNDFFN0UxRjk3NTZDN0JDOUIzREUzOTcyQ0JG NkNGNjBCNTAeFw0yNTA1MzEwNzEwMzZaFw0yNTA2MDcwNzEwMzZaMBgxFjAUBgNV BAMTDTY4M2FhYjZjLTEwYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoCGoxstWalVTsG4cEcb7DhrRV8PGpLaKLL+zquHnKfiwknv2MujD6OeG4864Y vrDV0kY3pvP0rAG52wwF2tsO9qj2SB2MWKLj7g7GtWY8BN1SH+IvpnbNrUtgAib6 /3nRHcAmMc+0cazjNp2szPoKuzKefAvHmWCwN1lhlUlDQM6cLy8n4CH3dhry7Ggk zW0IFuX1IL0AS1Yw3ZrRVxZRdkTPBJUEuidOoizw87cRx8oHNaiiUwUcyawFRkzB 9goWJJSsTw5qdfRidG84xuGns1ckYvzMKCNII+YayPb797e42ThrU5eoUHdAL3z8 wihDjdQMggu3dseUJ3HvRtVlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcMV/PfaC a8nzBgQ+KXVy9OmFYNYwHwYDVR0jBBgwFoAUufrcQefh+XVse8mz3jlyy/bPYLUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwNTYyLzY2QzNDOTdFRURG OTExRUZBOUNEQTgzOEM0RjlBRTAyL3VmcmNRZWZoLVhWc2U4bXozamx5eV9iUFlM VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWZyY1FlZmgtWFZzZThtejNqbHl5X2JQWUxVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw NTYyLzY2QzNDOTdFRURGOTExRUZBOUNEQTgzOEM0RjlBRTAyL3VmcmNRZWZoLVhW c2U4bXozamx5eV9iUFlMVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH4ZzYysHX+I/ONVzz8gnyUuVmpvK2FlDlbJL0ptIHbd6oXv3CGNLe+o QIJQC2duCFm0Gm+sEdhI479GDTXJrrMedNH/JGyPhow1yy63PfC4T67roYxdM427 h7ocHvYp6bbIKDqEEl66U4uK8+bD4+LxnXTXW9Niiq0suR5JWrdBfo3D9Z5ymiuA hw4SG7C3yJ3IWyhOs8SjyWUhz90CVw3kkSKXBgrejYyOn2Goe3lYl7w3azIXreeU a8nA9/6d/Q8/PmI4Vf6oYLCe8oyvmFsAnzOnX9wkrtACoGYXSVZ6Msgg3SSFOT6v YDWRJuFzUpsFebZ8biTQKfHMniQ7LbY= -----END CERTIFICATE-----Generated at Sat May 31 17:53:07 2025 by rpki-client