$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft File: UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft (raw, json) Hash identifier: IDrUgtnV6pbAfyS4pklh3O9zrVKBwx+RPqXXkc6RtHU= Subject key identifier: 1C:68:B5:8C:3B:D7:FD:CD:28:24:00:DA:D3:0B:2C:93:8A:88:41:26 Authority key identifier: 50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A Certificate issuer: /CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A Certificate serial: 192A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft Manifest number: 192A Signing time: Mon 02 Jun 2025 16:36:41 +0000 Manifest this update: Mon 02 Jun 2025 16:36:40 +0000 Manifest next update: Mon 09 Jun 2025 16:36:40 +0000 Files and hashes: 1: UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl (hash: ADURyXhTfDxxq0CPFkVNKHNX4YCatRXjTe70rt0Bux0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 16:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6442 (0x192a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18, serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A Validity Not Before: Jun 2 16:36:40 2025 GMT Not After : Jun 9 16:36:40 2025 GMT Subject: CN=683dd318-e8a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4e:9b:ce:f0:94:3b:8e:31:3c:45:aa:77:47: 73:8c:7d:c3:0b:0f:0b:5e:52:58:b3:48:c9:aa:40: 99:0e:7b:ce:a6:93:a5:dd:57:9e:2f:af:b6:be:e2: 5e:df:97:25:3e:fc:8b:e9:5b:a7:45:d6:96:67:f2: 6e:62:44:6c:6c:37:d7:50:07:67:a7:71:0f:f3:73: b1:c7:61:29:46:64:db:e3:84:70:5d:00:22:22:c3: 6e:cc:3b:73:2a:f2:bb:22:a6:37:e9:1d:7c:5e:51: d3:ce:2b:e4:2a:31:5e:8f:6f:38:59:05:33:87:d0: 31:e5:41:77:ff:ea:cb:87:f0:7e:24:f6:46:ef:4a: 36:9b:a3:b6:66:f9:48:d4:dd:1c:da:d1:7b:e0:d7: 5f:74:1c:04:41:33:ff:24:b0:fc:65:5a:f7:e1:4f: e5:d3:03:66:05:85:ee:08:23:af:25:7f:6b:33:87: 1d:ca:4d:19:fb:af:7f:80:71:90:20:3b:85:4a:d8: 32:e4:41:56:90:87:b9:5a:98:01:dd:77:26:c1:7c: af:e0:90:87:9e:75:36:7f:95:a7:62:b7:67:a3:49: cb:61:67:7a:26:a0:2c:59:28:ee:2a:85:7e:e2:24: 75:df:24:31:c2:79:ec:bb:04:7b:58:43:ff:be:cf: a8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:68:B5:8C:3B:D7:FD:CD:28:24:00:DA:D3:0B:2C:93:8A:88:41:26 X509v3 Authority Key Identifier: keyid:50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:6f:f3:35:19:a5:9f:eb:44:ec:3a:97:be:44:1e:1a:d2:d9: 21:33:3d:ee:cf:4c:bc:5d:e1:8f:2f:ec:5c:86:7a:40:41:b6: 8c:95:eb:6b:f5:fd:ec:21:08:70:78:e2:83:35:57:d0:46:6a: c5:75:0d:d1:2a:62:85:a0:67:e6:bd:10:61:89:81:e2:29:49: f2:3f:d3:32:a0:d1:57:53:80:58:54:42:c6:dd:49:59:68:db: 3f:0b:dc:0b:51:66:d2:2b:2b:a2:c0:5f:42:14:0b:47:fd:20: 5e:63:63:3d:2c:7c:58:3b:74:da:3b:e1:43:3b:7d:36:be:22: 6c:13:d5:d8:32:3d:e3:68:17:27:a8:17:67:0a:ef:b0:fa:b1: 90:85:7e:98:22:15:6a:dc:85:48:b3:93:ea:0a:98:d2:50:82: f3:f0:03:89:79:90:73:e2:be:19:f5:dc:63:91:6b:6a:7f:a7: ca:12:25:ac:aa:73:44:55:eb:b8:84:ba:da:96:29:da:f2:08: 6a:4d:d5:7e:8f:66:b0:62:04:4a:1f:63:6a:f4:62:a4:9b:5d: c5:71:e1:7a:b0:e8:9a:e0:5b:e9:74:1a:8c:c5:a4:e1:28:29: b2:11:2a:90:c3:bf:8d:98:6f:42:01:64:78:d0:7d:40:34:f0: 12:64:8d:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDUwM0QyNzY1MTEzQ0I2RDEzQjk4NkZCQjRDQjc5RkYx OENBQjc3NUEwHhcNMjUwNjAyMTYzNjQwWhcNMjUwNjA5MTYzNjQwWjAYMRYwFAYD VQQDEw02ODNkZDMxOC1lOGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqk6bzvCUO44xPEWqd0dzjH3DCw8LXlJYs0jJqkCZDnvOppOl3VeeL6+2vuJe 35clPvyL6VunRdaWZ/JuYkRsbDfXUAdnp3EP83Oxx2EpRmTb44RwXQAiIsNuzDtz KvK7IqY36R18XlHTzivkKjFej284WQUzh9Ax5UF3/+rLh/B+JPZG70o2m6O2ZvlI 1N0c2tF74NdfdBwEQTP/JLD8ZVr34U/l0wNmBYXuCCOvJX9rM4cdyk0Z+69/gHGQ IDuFStgy5EFWkIe5WpgB3XcmwXyv4JCHnnU2f5WnYrdno0nLYWd6JqAsWSjuKoV+ 4iR13yQxwnnsuwR7WEP/vs+oOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxotYw7 1/3NKCQA2tMLLJOKiEEmMB8GA1UdIwQYMBaAFFA9J2URPLbRO5hvu0y3n/GMq3da MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GNzI3RkU5RTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0RTdtRy03VExlZjhZeXJk MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VEMG5aUkU4dHRFN21HLTdUTGVmOFl5cmQxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQxOC9GNzI3RkU5RTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0 RTdtRy03VExlZjhZeXJkMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsb/M1GaWf60TsOpe+RB4a0tkhMz3uz0y8XeGPL+xchnpAQbaMletr 9f3sIQhweOKDNVfQRmrFdQ3RKmKFoGfmvRBhiYHiKUnyP9MyoNFXU4BYVELG3UlZ aNs/C9wLUWbSKyuiwF9CFAtH/SBeY2M9LHxYO3TaO+FDO302viJsE9XYMj3jaBcn qBdnCu+w+rGQhX6YIhVq3IVIs5PqCpjSUILz8AOJeZBz4r4Z9dxjkWtqf6fKEiWs qnNEVeu4hLralina8ghqTdV+j2awYgRKH2Nq9GKkm13FceF6sOia4FvpdBqMxaTh KCmyESqQw7+NmG9CAWR40H1ANPASZI1W -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:49 2025 by rpki-client