$ rpki-client -vvf rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft File: UBJV6QF6Y3iSbTaute_xnEXWV04.mft (raw, json) Hash identifier: WaxNCND6lySIKTWjHuWBAzCUuB/kb9G4AMLiZw+aqtQ= Subject key identifier: A9:C5:20:44:75:C5:32:DA:E7:4B:EF:98:EE:A0:A8:6F:6E:7F:A0:6F Authority key identifier: 50:12:55:E9:01:7A:63:78:92:6D:36:AE:B5:EF:F1:9C:45:D6:57:4E Certificate issuer: /CN=A916523A/serialNumber=501255E9017A6378926D36AEB5EFF19C45D6574E Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft Manifest number: 0B Signing time: Tue 01 Jul 2025 08:57:51 +0000 Manifest this update: Tue 01 Jul 2025 08:57:50 +0000 Manifest next update: Tue 08 Jul 2025 08:57:50 +0000 Files and hashes: 1: UBJV6QF6Y3iSbTaute_xnEXWV04.crl (hash: CHbuhBVVEXvNDOl6Ev05BbmJyORK5n7OOgGjeQ8l8Rw=) 2: 6654FB224CDE11F092AD8884C4F9AE02.roa (hash: liQT4xahQ5o7fJUAyQXDum5T6VsmCHKLCFUQqV7AJDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.crl rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916523A, serialNumber=501255E9017A6378926D36AEB5EFF19C45D6574E Validity Not Before: Jul 1 08:57:50 2025 GMT Not After : Jul 8 08:57:50 2025 GMT Subject: CN=6863a30e-eaa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4d:40:f0:20:bf:59:c4:91:d1:a1:e1:b5:79: 87:10:3f:4b:78:12:d3:a3:aa:6a:a3:f5:ef:1a:cd: 22:e8:80:0e:42:88:6b:ab:37:ba:7c:10:12:13:73: eb:69:dc:7e:97:f5:e1:26:0d:c5:ab:4e:e6:bf:f1: 37:31:31:21:12:b6:2a:f8:3c:54:91:6b:28:65:88: 81:94:4b:e3:6d:54:9b:60:a3:71:66:e9:69:c9:48: 24:04:ef:9d:61:ab:95:9a:6a:ec:6f:85:ec:e2:01: ac:6f:b0:12:4c:3a:2f:69:87:ea:9f:bd:23:37:ac: eb:69:b0:31:37:ee:92:e3:fe:71:72:83:f5:d9:b9: 7d:97:9f:e6:18:97:1b:2c:f4:86:08:05:77:db:88: d1:ca:94:ff:5a:94:7b:9e:fb:2a:1e:82:e0:c9:c8: d5:28:02:84:98:a6:cd:5d:04:ac:d0:28:54:a6:e8: 8b:6f:05:94:09:70:41:c5:bc:6c:31:86:80:44:2e: c5:70:76:06:be:eb:30:c9:1e:ae:07:91:22:e3:4a: 27:56:e1:88:4f:0c:38:70:3d:d4:da:32:d0:56:2e: d0:c5:90:72:36:92:d5:27:39:59:cc:f7:5e:54:34: 25:ee:c9:32:a6:bb:0c:5c:d3:44:f8:0e:dd:2a:79: df:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C5:20:44:75:C5:32:DA:E7:4B:EF:98:EE:A0:A8:6F:6E:7F:A0:6F X509v3 Authority Key Identifier: keyid:50:12:55:E9:01:7A:63:78:92:6D:36:AE:B5:EF:F1:9C:45:D6:57:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9f:c6:51:06:74:c9:be:e6:b3:a7:da:02:84:99:02:86:fe: 36:4a:49:65:05:4e:3f:4a:5c:8a:8e:44:f9:ff:28:87:a3:0f: 99:a1:44:1d:11:fa:5a:f0:3a:f5:4e:65:7e:80:be:63:3a:64: 38:53:31:bb:60:5c:17:7c:0a:70:ee:88:cd:cb:cf:52:0a:49: 80:08:ed:e7:bc:f3:cb:88:2f:ae:cb:7e:24:fd:df:a9:d4:13: 1b:24:f9:35:f0:b0:a3:72:e9:42:10:6c:b5:88:90:1b:ba:df: 55:2c:59:4e:3f:0d:35:72:ce:fd:6a:bc:27:05:ec:b7:ff:46: 1a:a3:0d:6a:5c:78:16:8f:98:45:06:61:f7:10:17:fb:21:83: 63:b6:17:9c:3d:49:5c:d5:e8:ac:b5:52:b7:92:fa:96:d2:d4: 3f:ec:ef:d4:1f:15:f2:85:07:05:43:b5:17:6d:c6:b2:0c:e7: 72:3f:87:0b:bb:8a:e7:32:6f:c1:f7:39:80:92:93:82:02:4d: 4d:b2:8b:85:92:c1:02:62:be:55:97:64:9c:fb:16:27:3c:ae: 2d:1a:47:31:02:6a:83:bf:ac:bd:cf:f1:7c:a8:7f:4c:1a:26: 07:8b:3b:fb:27:e5:5f:1c:62:5f:aa:9e:22:70:1c:38:ca:c2: 2b:1a:49:d2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTIzQTExMC8GA1UEBRMoNTAxMjU1RTkwMTdBNjM3ODkyNkQzNkFFQjVFRkYxOUM0 NUQ2NTc0RTAeFw0yNTA3MDEwODU3NTBaFw0yNTA3MDgwODU3NTBaMBgxFjAUBgNV BAMTDTY4NjNhMzBlLWVhYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNTUDwIL9ZxJHRoeG1eYcQP0t4EtOjqmqj9e8azSLogA5CiGurN7p8EBITc+tp 3H6X9eEmDcWrTua/8TcxMSEStir4PFSRayhliIGUS+NtVJtgo3Fm6WnJSCQE751h q5WaauxvheziAaxvsBJMOi9ph+qfvSM3rOtpsDE37pLj/nFyg/XZuX2Xn+YYlxss 9IYIBXfbiNHKlP9alHue+yoeguDJyNUoAoSYps1dBKzQKFSm6ItvBZQJcEHFvGwx hoBELsVwdga+6zDJHq4HkSLjSidW4YhPDDhwPdTaMtBWLtDFkHI2ktUnOVnM915U NCXuyTKmuwxc00T4Dt0qed+7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqcUgRHXF MtrnS++Y7qCob25/oG8wHwYDVR0jBBgwFoAUUBJV6QF6Y3iSbTaute/xnEXWV04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1MjNBL0RFODJDQjQ4NENE RDExRjBCRkEwOEY4MEM0RjlBRTAyL1VCSlY2UUY2WTNpU2JUYXV0ZV94bkVYV1Yw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVUJKVjZRRjZZM2lTYlRhdXRlX3huRVhXVjA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 MjNBL0RFODJDQjQ4NENERDExRjBCRkEwOEY4MEM0RjlBRTAyL1VCSlY2UUY2WTNp U2JUYXV0ZV94bkVYV1YwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE6fxlEGdMm+5rOn2gKEmQKG/jZKSWUFTj9KXIqORPn/KIejD5mhRB0R +lrwOvVOZX6AvmM6ZDhTMbtgXBd8CnDuiM3Lz1IKSYAI7ee888uIL67LfiT936nU Exsk+TXwsKNy6UIQbLWIkBu631UsWU4/DTVyzv1qvCcF7Lf/RhqjDWpceBaPmEUG YfcQF/shg2O2F5w9SVzV6Ky1UreS+pbS1D/s79QfFfKFBwVDtRdtxrIM53I/hwu7 iucyb8H3OYCSk4ICTU2yi4WSwQJivlWXZJz7Fic8ri0aRzECaoO/rL3P8Xyof0wa JgeLO/sn5V8cYl+qniJwHDjKwisaSdI= -----END CERTIFICATE-----Generated at Wed Jul 2 15:45:22 2025 by rpki-client