$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft File: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json) Hash identifier: Psg1qDX+z2adMiSjKDkZ7FAFi1jouANs+3EURKBMjV0= Subject key identifier: 95:53:80:93:12:C8:64:E1:2A:DE:61:7B:B3:3D:FF:62:3D:73:29:68 Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 Certificate issuer: /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Certificate serial: 2A17 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft Manifest number: 2A17 Signing time: Wed 04 Jun 2025 15:38:08 +0000 Manifest this update: Wed 04 Jun 2025 15:38:07 +0000 Manifest next update: Wed 11 Jun 2025 15:38:07 +0000 Files and hashes: 1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: 38/dDpNPHgiLg75IWCIz6jTgtsIJ3E1WzqC12jU8kxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 15:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10775 (0x2a17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Validity Not Before: Jun 4 15:38:07 2025 GMT Not After : Jun 11 15:38:07 2025 GMT Subject: CN=6840685f-39a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:94:da:f1:52:b0:75:c3:85:d5:83:42:c8:00: 78:26:77:8f:25:64:95:ca:e7:19:5d:94:ff:36:17: 13:84:dc:38:66:12:96:3a:90:0c:dd:66:6f:f4:97: 31:38:c5:80:a5:cc:26:94:01:7a:23:64:44:4b:da: da:29:4e:84:c3:0c:48:fc:6e:2a:cb:9b:9d:33:9b: 46:11:62:84:c1:d9:e9:1b:29:33:f7:81:fd:50:c9: 4c:af:f1:12:63:93:ac:6b:8e:c7:20:32:11:40:bd: 59:d4:25:b1:47:bd:a7:91:bd:23:aa:7c:4c:61:a4: 17:13:f3:30:8e:3f:28:33:d7:a2:b5:4f:04:da:a5: e4:4b:f3:d9:54:6b:43:c1:5b:9f:33:fb:a2:c6:6a: bd:99:fe:60:3c:3c:4b:a2:42:22:1b:7b:5d:ab:b6: 25:7e:2a:a2:5a:59:75:26:28:0b:3e:b4:23:10:fa: 26:82:9d:85:65:94:e7:bb:6e:56:e7:51:e1:3d:45: 93:6b:30:39:3d:94:77:91:01:c5:34:3e:5d:42:7b: 47:77:da:8f:24:61:fc:00:c1:50:e3:13:51:1c:75: 4b:59:28:23:88:37:46:e0:b0:82:4f:ba:64:67:07: 24:36:94:60:f1:6b:cb:b6:62:a8:8b:68:47:5c:53: c6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:53:80:93:12:C8:64:E1:2A:DE:61:7B:B3:3D:FF:62:3D:73:29:68 X509v3 Authority Key Identifier: keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:be:4f:c4:e4:26:d8:14:38:3d:a6:d0:87:8f:56:56:d6:dd: a9:29:3b:05:e1:19:f0:4e:6d:16:44:17:cf:c2:5b:55:75:6d: 34:16:7b:03:a1:fa:ff:ed:0f:03:c0:be:fa:21:91:77:f5:0b: 64:e6:cc:79:a9:ce:b4:47:8b:5d:1d:0c:e3:2a:06:8f:e9:4c: 0c:04:91:ca:85:59:42:61:08:9a:77:2c:a2:bc:c0:4d:25:d6: 30:0b:f4:08:ac:b0:56:2e:f8:13:04:09:2e:f9:28:eb:03:07: a5:12:16:b5:5f:ac:07:48:35:68:06:60:c5:03:d6:5d:d4:00: f1:61:68:4d:35:bc:9c:b8:ca:f0:aa:fb:6b:57:79:02:cf:b1: 2f:20:b2:f8:c2:0c:71:6b:0e:f7:84:69:cf:8a:ad:78:6d:ee: 09:e7:6c:09:52:9e:44:23:b4:45:23:b0:53:86:79:9b:73:7a: 0a:05:88:65:61:02:ca:06:a1:f4:6a:4c:9a:21:36:77:b0:e2: 09:e5:98:ab:f9:a6:c2:99:87:b1:c6:27:ef:b3:da:3f:51:78: df:f9:63:c0:a5:f9:06:9d:b4:a2:db:37:e8:f7:08:49:48:24: 7e:cc:75:f7:c5:67:49:a6:8b:c7:4e:12:ba:bf:7a:b4:fc:d4: 65:ff:c3:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKERENDkzMEUzRTQyREZFM0JGRkY0ODFCMTc5NzcwRDFB QjE1NzVCQzMwHhcNMjUwNjA0MTUzODA3WhcNMjUwNjExMTUzODA3WjAYMRYwFAYD VQQDEw02ODQwNjg1Zi0zOWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JTa8VKwdcOF1YNCyAB4JnePJWSVyucZXZT/NhcThNw4ZhKWOpAM3WZv9Jcx OMWApcwmlAF6I2RES9raKU6EwwxI/G4qy5udM5tGEWKEwdnpGykz94H9UMlMr/ES Y5Osa47HIDIRQL1Z1CWxR72nkb0jqnxMYaQXE/Mwjj8oM9eitU8E2qXkS/PZVGtD wVufM/uixmq9mf5gPDxLokIiG3tdq7YlfiqiWll1JigLPrQjEPomgp2FZZTnu25W 51HhPUWTazA5PZR3kQHFND5dQntHd9qPJGH8AMFQ4xNRHHVLWSgjiDdG4LCCT7pk ZwckNpRg8WvLtmKoi2hHXFPGkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVTgJMS yGThKt5he7M9/2I9cyloMB8GA1UdIwQYMBaAFN1JMOPkLf47//SBsXl3DRqxV1vD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9ENzg1OTlCQzMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9qdl85SUd4ZVhjTkdyRlhX OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNVa3c0LVF0X2p2XzlJR3hlWGNOR3JGWFc4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjIxNC9ENzg1OTlCQzMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9q dl85SUd4ZVhjTkdyRlhXOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIvk/E5CbYFDg9ptCHj1ZW1t2pKTsF4RnwTm0WRBfPwltVdW00FnsD ofr/7Q8DwL76IZF39Qtk5sx5qc60R4tdHQzjKgaP6UwMBJHKhVlCYQiadyyivMBN JdYwC/QIrLBWLvgTBAku+SjrAwelEha1X6wHSDVoBmDFA9Zd1ADxYWhNNbycuMrw qvtrV3kCz7EvILL4wgxxaw73hGnPiq14be4J52wJUp5EI7RFI7BThnmbc3oKBYhl YQLKBqH0akyaITZ3sOIJ5Zir+abCmYexxifvs9o/UXjf+WPApfkGnbSi2zfo9whJ SCR+zHX3xWdJpovHThK6v3q0/NRl/8Nh -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:26 2025 by rpki-client