$ rpki-client -vvf rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft File: UHRCEm0jxuW-SuMZdJsnbhcum1w.mft (raw, json) Hash identifier: FbNNlby0THdFPOCvQOWoxx4ELYK3ygryxFxVEfm3UWw= Subject key identifier: 3E:83:08:A7:CC:BF:4B:C8:08:F5:C7:B4:1E:AF:72:22:F3:49:E5:F4 Authority key identifier: 50:74:42:12:6D:23:C6:E5:BE:4A:E3:19:74:9B:27:6E:17:2E:9B:5C Certificate issuer: /CN=A91790ED/serialNumber=507442126D23C6E5BE4AE319749B276E172E9B5C Certificate serial: 0E4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHRCEm0jxuW-SuMZdJsnbhcum1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft Manifest number: 0E4A Signing time: Fri 30 May 2025 17:54:38 +0000 Manifest this update: Fri 30 May 2025 17:54:38 +0000 Manifest next update: Fri 06 Jun 2025 17:54:38 +0000 Files and hashes: 1: UHRCEm0jxuW-SuMZdJsnbhcum1w.crl (hash: PzJP2XPhBOFHeV2UFZBGxRY7lQNwv4w5MAjUPJIQqdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.crl rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHRCEm0jxuW-SuMZdJsnbhcum1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3658 (0xe4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91790ED, serialNumber=507442126D23C6E5BE4AE319749B276E172E9B5C Validity Not Before: May 30 17:54:38 2025 GMT Not After : Jun 6 17:54:38 2025 GMT Subject: CN=6839f0de-9d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:10:56:e0:40:21:e6:97:f7:1c:d4:76:09:6e: 57:c5:17:4b:cf:7d:18:ea:7c:1c:d4:a2:8a:62:07: 93:05:da:9c:84:49:bf:4c:df:f3:ee:47:b3:b2:1e: 45:a2:b8:31:5e:86:a7:35:55:8d:f7:2a:22:ba:78: bf:17:eb:ef:4b:95:f2:35:d5:fc:33:ff:7f:db:bc: 80:06:32:76:9f:d5:1f:19:6f:07:67:e6:07:97:a6: 51:71:33:97:ce:43:cd:63:af:d0:55:ac:eb:a9:02: d1:f4:31:42:4f:d1:0e:eb:c6:38:df:53:2c:95:f4: a3:94:ba:d2:eb:b1:00:e9:93:59:bf:5e:d4:6f:c0: c6:5d:d0:03:dc:74:5e:91:93:49:fc:7a:26:86:b8: b2:ca:57:5a:eb:08:61:90:80:66:96:09:01:c2:e1: ec:84:31:d6:7b:d4:6f:99:6c:f3:0f:16:f9:4b:7f: 73:cd:6f:c9:f9:41:fd:2f:8f:e5:b7:81:43:aa:52: 92:9b:42:c9:b6:df:c2:67:a2:7c:8f:05:1b:a7:b6: cd:68:c1:c4:36:a8:e5:d0:40:88:85:8b:95:17:3a: b4:73:cc:2a:04:2a:1a:77:c2:e1:f9:f4:62:ce:5c: 05:ad:4b:58:34:60:c3:64:a6:c2:43:f7:6d:ac:73: 5e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:83:08:A7:CC:BF:4B:C8:08:F5:C7:B4:1E:AF:72:22:F3:49:E5:F4 X509v3 Authority Key Identifier: keyid:50:74:42:12:6D:23:C6:E5:BE:4A:E3:19:74:9B:27:6E:17:2E:9B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHRCEm0jxuW-SuMZdJsnbhcum1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a9:e6:3c:d6:4a:c9:26:59:c5:22:31:1a:c8:44:17:f9:10: 5f:f3:b9:24:dc:f9:f4:3a:bf:91:5f:87:db:6f:bd:96:74:95: 18:27:d6:8b:f0:bd:68:9c:8a:39:61:60:c2:99:e8:49:31:73: 36:5b:08:ea:7b:4d:d4:1d:e8:4b:67:de:22:f7:10:3c:e0:8c: 96:59:d1:ab:a5:79:b5:a3:ed:a8:94:da:62:e1:17:c4:f5:a7: 2c:d9:da:b8:29:69:ad:59:ce:36:3a:ce:de:bf:e9:03:0f:3e: 06:92:84:4e:b8:53:d4:a8:6a:3d:ba:b8:da:65:89:05:57:a2: c4:75:03:e7:b3:b3:42:bb:3c:ce:90:cd:b1:89:af:7e:73:bb: ec:02:24:6a:c7:ee:cb:b4:a5:84:2f:a6:49:a0:62:d7:76:aa: 6f:ce:98:72:e1:27:30:1e:d5:9f:0a:8b:49:77:12:c7:b7:62: 1b:12:f9:a4:09:e8:97:64:e2:37:2f:ed:ea:ec:5e:e2:dd:a3: 3a:d2:fe:dc:44:07:07:1f:31:81:89:62:e9:eb:e3:38:a5:cd: 80:ec:b0:2f:f1:b9:82:9a:17:ef:60:75:be:e1:af:5f:a9:60: f4:81:8d:26:49:a7:42:6f:70:95:a2:8d:98:f9:4c:67:9e:32: ed:d6:8a:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzkwRUQxMTAvBgNVBAUTKDUwNzQ0MjEyNkQyM0M2RTVCRTRBRTMxOTc0OUIyNzZF MTcyRTlCNUMwHhcNMjUwNTMwMTc1NDM4WhcNMjUwNjA2MTc1NDM4WjAYMRYwFAYD VQQDEw02ODM5ZjBkZS05ZDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBBW4EAh5pf3HNR2CW5XxRdLz30Y6nwc1KKKYgeTBdqchEm/TN/z7kezsh5F orgxXoanNVWN9yoiuni/F+vvS5XyNdX8M/9/27yABjJ2n9UfGW8HZ+YHl6ZRcTOX zkPNY6/QVazrqQLR9DFCT9EO68Y431MslfSjlLrS67EA6ZNZv17Ub8DGXdAD3HRe kZNJ/Homhriyylda6whhkIBmlgkBwuHshDHWe9RvmWzzDxb5S39zzW/J+UH9L4/l t4FDqlKSm0LJtt/CZ6J8jwUbp7bNaMHENqjl0ECIhYuVFzq0c8wqBCoad8Lh+fRi zlwFrUtYNGDDZKbCQ/dtrHNeSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6DCKfM v0vICPXHtB6vciLzSeX0MB8GA1UdIwQYMBaAFFB0QhJtI8blvkrjGXSbJ24XLptc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTBFRC8wQUJCODY0MjlE MUIxMUU5QkRENkU1NzRDNEY5QUUwMi9VSFJDRW0wanh1Vy1TdU1aZEpzbmJoY3Vt MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIUkNFbTBqeHVXLVN1TVpkSnNuYmhjdW0xdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTBFRC8wQUJCODY0MjlEMUIxMUU5QkRENkU1NzRDNEY5QUUwMi9VSFJDRW0wanh1 Vy1TdU1aZEpzbmJoY3VtMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeqeY81krJJlnFIjEayEQX+RBf87kk3Pn0Or+RX4fbb72WdJUYJ9aL 8L1onIo5YWDCmehJMXM2Wwjqe03UHehLZ94i9xA84IyWWdGrpXm1o+2olNpi4RfE 9acs2dq4KWmtWc42Os7ev+kDDz4GkoROuFPUqGo9urjaZYkFV6LEdQPns7NCuzzO kM2xia9+c7vsAiRqx+7LtKWEL6ZJoGLXdqpvzphy4ScwHtWfCotJdxLHt2IbEvmk CeiXZOI3L+3q7F7i3aM60v7cRAcHHzGBiWLp6+M4pc2A7LAv8bmCmhfvYHW+4a9f qWD0gY0mSadCb3CVoo2Y+UxnnjLt1opb -----END CERTIFICATE-----Generated at Sat May 31 17:57:42 2025 by rpki-client