$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft File: UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft (raw, json) Hash identifier: T+DTYoFrl1GFqsz3pcHycVtO33Al7NyHC3vHQkc2GIA= Subject key identifier: D8:31:64:90:8E:24:A2:51:96:42:ED:B7:78:0D:C9:BA:D2:D4:37:27 Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4 Certificate issuer: /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft Manifest number: 10 Signing time: Tue 01 Jul 2025 08:53:14 +0000 Manifest this update: Tue 01 Jul 2025 08:53:13 +0000 Manifest next update: Tue 08 Jul 2025 08:53:13 +0000 Files and hashes: 1: UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl (hash: KYt0EN3iVYQQbgd0L2JJYNrSrQ383aQqi+HCk+Ge+N0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4 Validity Not Before: Jul 1 08:53:13 2025 GMT Not After : Jul 8 08:53:13 2025 GMT Subject: CN=6863a1fa-3937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:33:d8:fa:16:9e:51:c8:6b:8f:e1:2d:3d:03: bf:81:8c:31:07:d5:51:71:23:a3:81:a1:b0:34:dd: 45:36:82:62:27:4a:f1:d7:e9:87:4c:ab:53:5b:79: 40:0d:ba:a0:05:7d:4a:29:b9:19:10:8d:97:3e:4e: d8:6a:d7:96:6d:6d:2f:df:50:40:22:1a:69:0a:f0: 25:3e:8a:b1:cb:fd:65:f9:dc:58:c4:19:fc:f4:1c: 88:cc:76:4b:8c:f4:6a:74:b0:8b:d1:49:1f:af:3b: a7:a0:7b:3e:05:f0:89:e1:b6:0a:f8:4a:01:93:d5: 49:ae:ed:bb:c1:8f:73:50:07:c1:ad:d4:b7:16:66: b2:17:36:c2:ee:b5:fc:08:69:8a:26:c0:f9:40:84: c7:af:9f:e1:5c:9f:5f:51:a6:09:83:11:0f:89:ef: 2e:cc:4d:fd:fe:17:b6:8f:f3:2b:8c:77:c8:76:98: 46:2c:1f:15:ce:be:8c:83:4f:bd:0c:87:6e:2a:fb: 01:04:25:c0:57:22:53:62:fb:9d:32:c2:cf:cf:ad: 5c:1c:b8:7d:57:44:12:48:06:3d:03:ce:04:2a:ca: 19:c4:60:dc:a2:d4:ff:ba:a6:5a:4f:85:31:03:51: ed:50:bb:95:76:9f:a5:de:b2:1b:a5:e7:c4:a9:45: 8e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:31:64:90:8E:24:A2:51:96:42:ED:B7:78:0D:C9:BA:D2:D4:37:27 X509v3 Authority Key Identifier: keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:ad:d6:ed:d1:7a:22:55:19:bf:5f:4d:7c:b4:dc:19:a9:cc: d1:dc:ed:ce:e2:d2:87:a9:2e:fe:ef:5f:1a:ba:84:01:9a:17: 00:a0:6f:c6:5c:23:c9:57:04:dd:ac:ab:5f:9e:4d:37:6d:24: ec:69:03:be:92:31:ff:f1:ae:bf:7b:41:3a:b3:75:e1:cb:d4: da:31:6d:d0:75:bc:f4:25:34:52:18:fc:72:fa:65:72:0d:4e: 4a:12:6d:3f:d8:6c:72:6b:3a:be:34:d4:ad:78:a4:61:2b:66: 82:92:2e:f2:32:9d:e0:39:36:d1:35:a6:03:9f:22:95:17:2e: 89:c1:58:af:76:03:5b:ef:2b:1e:85:d0:23:d0:5e:fe:ab:bb: 22:d5:5a:b6:ca:31:b4:ab:2f:0c:d5:08:93:b5:f6:09:f6:4a: e4:3c:44:02:a8:5d:c7:d9:16:d2:99:01:7e:48:c7:73:43:b5: 2c:89:44:95:f8:b2:2a:9e:06:8f:04:e6:c5:db:7f:83:a7:74: bc:de:34:55:40:48:cb:10:d2:03:a9:b7:ad:0c:bd:ef:e2:51: 3a:69:17:34:40:86:fa:3c:d8:29:e8:1f:87:22:01:75:c7:fa: 57:85:4a:03:d5:82:75:15:c3:58:85:67:99:9f:e6:71:8b:35: 6b:ca:e2:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 REU2QzExMC8GA1UEBRMoNTBBQUZDNkEzRUY3NUIyMkI3NjgzQ0FCNjNEODRCRTQy OTE5NTRCNDAeFw0yNTA3MDEwODUzMTNaFw0yNTA3MDgwODUzMTNaMBgxFjAUBgNV BAMTDTY4NjNhMWZhLTM5MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBM9j6Fp5RyGuP4S09A7+BjDEH1VFxI6OBobA03UU2gmInSvHX6YdMq1NbeUAN uqAFfUopuRkQjZc+Tthq15ZtbS/fUEAiGmkK8CU+irHL/WX53FjEGfz0HIjMdkuM 9Gp0sIvRSR+vO6egez4F8Inhtgr4SgGT1Umu7bvBj3NQB8Gt1LcWZrIXNsLutfwI aYomwPlAhMevn+Fcn19RpgmDEQ+J7y7MTf3+F7aP8yuMd8h2mEYsHxXOvoyDT70M h24q+wEEJcBXIlNi+50yws/PrVwcuH1XRBJIBj0DzgQqyhnEYNyi1P+6plpPhTED Ue1Qu5V2n6Xeshul58SpRY5RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2DFkkI4k olGWQu23eA3JutLUNycwHwYDVR0jBBgwFoAUUKr8aj73WyK3aDyrY9hL5CkZVLQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVERTZDLzZCQzM3NUIwNDNE NDExRjA5MEI0NzY2OEM0RjlBRTAyL1VLcjhhajczV3lLM2FEeXJZOWhMNUNrWlZM US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVUtyOGFqNzNXeUszYUR5clk5aEw1Q2taVkxRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE RTZDLzZCQzM3NUIwNDNENDExRjA5MEI0NzY2OEM0RjlBRTAyL1VLcjhhajczV3lL M2FEeXJZOWhMNUNrWlZMUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFat1u3ReiJVGb9fTXy03BmpzNHc7c7i0oepLv7vXxq6hAGaFwCgb8Zc I8lXBN2sq1+eTTdtJOxpA76SMf/xrr97QTqzdeHL1NoxbdB1vPQlNFIY/HL6ZXIN TkoSbT/YbHJrOr401K14pGErZoKSLvIyneA5NtE1pgOfIpUXLonBWK92A1vvKx6F 0CPQXv6ruyLVWrbKMbSrLwzVCJO19gn2SuQ8RAKoXcfZFtKZAX5Ix3NDtSyJRJX4 siqeBo8E5sXbf4OndLzeNFVASMsQ0gOpt60Mve/iUTppFzRAhvo82CnoH4ciAXXH +leFSgPVgnUVw1iFZ5mf5nGLNWvK4lI= -----END CERTIFICATE-----Generated at Wed Jul 2 13:24:16 2025 by rpki-client