$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft File: UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft (raw, json) Hash identifier: xeLmVRFmiOYDOrIZV4jrLkWg3vqccYlR8foRwm4lI5A= Subject key identifier: 57:87:70:BD:93:B6:EA:C3:C5:C7:ED:C1:A8:0B:A8:49:FB:89:D8:C0 Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4 Certificate issuer: /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft Manifest number: 32 Signing time: Fri 05 Sep 2025 08:10:32 +0000 Manifest this update: Fri 05 Sep 2025 08:10:32 +0000 Manifest next update: Fri 12 Sep 2025 08:10:32 +0000 Files and hashes: 1: UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl (hash: ODifNo6rcty7p/jRCEZRncLyC0LDG3+2ZwuqTgLp4Ps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4 Validity Not Before: Sep 5 08:10:32 2025 GMT Not After : Sep 12 08:10:32 2025 GMT Subject: CN=68ba9af8-af2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9b:50:6c:c1:ba:62:12:76:c3:b5:51:fb:89: e7:40:70:d3:21:2f:ae:19:ca:8c:6c:52:f5:48:a7: c5:8b:ce:26:f1:2d:0c:3c:1b:f7:1a:14:28:94:9c: 77:5e:7b:4b:c4:eb:ad:f4:eb:f9:11:a9:b0:bb:eb: 9b:36:dd:8c:ec:2f:5c:e7:67:d0:65:de:f0:72:de: 18:7d:20:fd:75:be:f1:71:12:fd:88:04:3f:19:6e: 0e:96:df:9f:11:be:a7:3f:74:47:fd:95:08:f4:fa: 42:eb:c6:4b:e0:c1:12:14:26:60:c4:95:98:05:da: 11:6c:16:68:b2:1f:b4:fb:5b:72:d3:6e:34:67:32: 74:f8:56:5b:92:d0:5a:f1:3d:f6:86:eb:c4:a1:f0: 2a:b3:6e:9d:c1:51:50:0e:c7:6e:58:b4:8b:f9:06: 80:48:45:97:19:c2:fc:2d:28:1d:a0:12:4f:8e:c1: c6:1c:0e:1b:10:7f:cd:cd:17:6c:85:61:af:d5:49: 4c:36:f9:70:2c:45:ab:b9:1e:c7:e0:d5:be:b8:54: 7e:42:e4:74:9d:65:97:7e:b8:62:1b:31:59:7a:e6: 8f:23:63:82:30:3f:81:10:e0:c0:a1:ba:44:f4:1c: b8:f3:0d:65:2b:cc:72:e7:e4:fd:bc:06:0b:9e:23: fe:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:87:70:BD:93:B6:EA:C3:C5:C7:ED:C1:A8:0B:A8:49:FB:89:D8:C0 X509v3 Authority Key Identifier: keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:5e:3f:93:18:58:40:0b:3b:bf:6c:b4:ad:7b:39:da:cc:5b: f2:8b:52:75:4a:b2:bc:6a:90:77:59:a3:bf:4e:39:ab:b7:88: 86:3a:5a:ba:94:9b:16:c4:80:9c:d3:5a:6f:53:b8:35:be:30: 3c:28:14:fa:b8:2a:de:dc:8f:30:87:e4:b8:c4:be:3d:bb:5f: 31:07:37:10:40:63:6c:66:a2:46:0b:85:55:22:0a:d1:a0:b2: 70:dd:5f:8b:4c:cb:c7:6d:2d:57:6a:d7:10:fb:d2:97:ab:0d: 59:bc:d9:d5:fe:ee:ca:c2:9e:a0:1f:c2:49:ca:a2:f6:bf:dc: 16:17:ff:43:f2:ff:1c:f7:97:7f:2f:0d:53:62:6d:55:a9:ac: 7c:8c:f3:4e:6d:84:6a:98:16:41:65:3e:d4:d9:be:df:0c:fa: 39:14:a5:b9:a3:9a:2b:5a:20:d4:d8:f4:1a:4b:ca:ea:05:cd: 59:32:38:de:03:86:e0:78:09:2e:61:f7:f0:a7:22:a4:25:0a: 27:24:5a:be:50:1b:1d:09:d1:6a:3c:9e:20:e1:c0:52:9a:5f: de:25:85:ea:69:a7:79:25:a5:1e:59:bd:39:6a:91:20:a3:25: 33:b7:f2:42:62:cf:ae:2f:05:bf:99:7a:4b:dd:4e:5c:ec:a3: 61:67:b4:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 REU2QzExMC8GA1UEBRMoNTBBQUZDNkEzRUY3NUIyMkI3NjgzQ0FCNjNEODRCRTQy OTE5NTRCNDAeFw0yNTA5MDUwODEwMzJaFw0yNTA5MTIwODEwMzJaMBgxFjAUBgNV BAMTDTY4YmE5YWY4LWFmMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXm1BswbpiEnbDtVH7iedAcNMhL64ZyoxsUvVIp8WLzibxLQw8G/caFCiUnHde e0vE66306/kRqbC765s23YzsL1znZ9Bl3vBy3hh9IP11vvFxEv2IBD8Zbg6W358R vqc/dEf9lQj0+kLrxkvgwRIUJmDElZgF2hFsFmiyH7T7W3LTbjRnMnT4VluS0Frx PfaG68Sh8Cqzbp3BUVAOx25YtIv5BoBIRZcZwvwtKB2gEk+OwcYcDhsQf83NF2yF Ya/VSUw2+XAsRau5Hsfg1b64VH5C5HSdZZd+uGIbMVl65o8jY4IwP4EQ4MChukT0 HLjzDWUrzHLn5P28BgueI/71AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV4dwvZO2 6sPFx+3BqAuoSfuJ2MAwHwYDVR0jBBgwFoAUUKr8aj73WyK3aDyrY9hL5CkZVLQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVERTZDLzZCQzM3NUIwNDNE NDExRjA5MEI0NzY2OEM0RjlBRTAyL1VLcjhhajczV3lLM2FEeXJZOWhMNUNrWlZM US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVUtyOGFqNzNXeUszYUR5clk5aEw1Q2taVkxRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE RTZDLzZCQzM3NUIwNDNENDExRjA5MEI0NzY2OEM0RjlBRTAyL1VLcjhhajczV3lL M2FEeXJZOWhMNUNrWlZMUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADJeP5MYWEALO79stK17OdrMW/KLUnVKsrxqkHdZo79OOau3iIY6WrqU mxbEgJzTWm9TuDW+MDwoFPq4Kt7cjzCH5LjEvj27XzEHNxBAY2xmokYLhVUiCtGg snDdX4tMy8dtLVdq1xD70perDVm82dX+7srCnqAfwknKova/3BYX/0Py/xz3l38v DVNibVWprHyM805thGqYFkFlPtTZvt8M+jkUpbmjmitaINTY9BpLyuoFzVkyON4D huB4CS5h9/CnIqQlCickWr5QGx0J0Wo8niDhwFKaX94lheppp3klpR5ZvTlqkSCj JTO38kJiz64vBb+ZekvdTlzso2FntFQ= -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:59 2025 by rpki-client