$ rpki-client -vvf rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft File: U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft (raw, json) Hash identifier: u+p+RSZIRNSl9rxubEzpCRahlJzi2rAYP1AcajW5Rmw= Subject key identifier: E8:F7:8E:98:E6:53:BB:E4:2A:BD:58:1E:DD:9E:D4:45:16:94:1D:AA Authority key identifier: 53:C0:8B:DA:04:BC:05:32:21:EB:27:3A:A2:15:CC:D9:5C:00:C3:92 Certificate issuer: /CN=A9187325/serialNumber=53C08BDA04BC053221EB273AA215CCD95C00C392 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft Manifest number: 64 Signing time: Sat 07 Jun 2025 06:30:19 +0000 Manifest this update: Sat 07 Jun 2025 06:30:19 +0000 Manifest next update: Sat 14 Jun 2025 06:30:19 +0000 Files and hashes: 1: U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl (hash: Mi2yQUlkpPNFxtA4OZ0ZUrw5liYVIXhC2RqWNFR/KAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 04:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187325, serialNumber=53C08BDA04BC053221EB273AA215CCD95C00C392 Validity Not Before: Jun 7 06:30:19 2025 GMT Not After : Jun 14 06:30:19 2025 GMT Subject: CN=6843dc7b-fc40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:af:08:0c:c2:71:fb:3e:df:7b:ad:ef:45:4c: 50:94:fc:17:17:a4:76:30:82:66:fe:36:f0:92:b0: 79:15:75:2b:21:70:11:2c:35:d3:c6:91:7d:a0:fd: f8:c2:91:1d:36:e7:67:45:31:b8:69:d0:59:31:e7: 63:c1:0f:41:8a:64:24:7a:c2:f3:46:3a:77:fd:c1: 48:5c:b2:26:fb:4a:04:78:e0:5a:ef:e3:18:d5:53: 94:34:1e:ad:bb:de:03:5c:e8:21:34:b3:ca:77:bc: bb:cc:9f:87:14:c8:b1:4f:a7:8e:63:29:0e:56:da: 64:80:e1:4b:3e:3f:61:e3:45:7a:e9:27:32:03:03: df:0b:71:7d:26:95:74:51:63:b6:0e:41:73:3e:98: 9f:35:76:c3:69:dc:ae:a6:e9:61:3b:0c:98:c7:18: 44:c4:c7:0b:13:1b:d1:0b:60:f6:7c:5e:16:9a:3d: 09:db:ed:c1:1f:2a:03:a1:30:71:be:92:36:a1:04: ee:8c:3c:40:d6:b2:98:e0:a4:2e:0a:2d:6e:38:9b: ae:b7:6b:e0:8b:32:c7:fa:36:6a:a3:e2:08:48:d1: 55:d6:db:34:c8:77:d5:db:11:48:e8:6b:bc:5c:35: f6:c7:a0:93:55:1a:5f:60:a3:42:ee:2a:b0:10:b1: c7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F7:8E:98:E6:53:BB:E4:2A:BD:58:1E:DD:9E:D4:45:16:94:1D:AA X509v3 Authority Key Identifier: keyid:53:C0:8B:DA:04:BC:05:32:21:EB:27:3A:A2:15:CC:D9:5C:00:C3:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:35:c0:2c:28:77:2f:62:e0:da:e3:ce:14:c3:09:b8:1f:a8: 84:83:17:64:4e:33:d2:ff:cb:aa:7e:c8:01:30:5c:4b:60:b1: 68:8d:bb:20:2d:15:ce:10:da:6c:9c:b8:14:79:a9:e3:ca:b2: 90:e4:91:51:05:7f:d1:c2:b4:01:92:32:06:aa:09:36:b2:36: fe:5f:50:a4:99:9b:72:6c:63:cd:59:20:42:1c:1f:02:06:fa: 1f:c1:e7:4f:b4:84:c2:09:e0:ef:f7:0b:a0:ba:fd:fa:d3:5a: 69:31:ba:85:d7:34:c6:81:ce:99:26:13:8f:86:da:5e:8a:e5: 56:58:70:12:cb:c5:30:e0:37:81:1a:9e:b1:bc:ff:94:ea:0c: 89:8b:2b:24:53:48:ca:f9:24:bd:a6:8c:ba:7e:75:08:c6:4a: 40:b5:46:0e:25:95:8a:ca:af:6d:fd:ba:cb:0e:32:e8:a1:79: 98:22:f2:6b:ab:6c:b5:58:b1:c5:e7:df:9c:99:ca:79:5c:ea: 5d:d4:64:69:9a:38:54:a2:ea:57:c0:16:23:90:17:df:1f:e7: 0b:5d:bf:59:a8:20:30:10:d2:90:68:0e:08:f5:ba:6c:ff:8d: fc:1f:b3:7b:39:cd:80:d5:a0:1e:27:7a:6f:3d:14:1f:55:d7: 40:51:bb:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzMyNTExMC8GA1UEBRMoNTNDMDhCREEwNEJDMDUzMjIxRUIyNzNBQTIxNUNDRDk1 QzAwQzM5MjAeFw0yNTA2MDcwNjMwMTlaFw0yNTA2MTQwNjMwMTlaMBgxFjAUBgNV BAMTDTY4NDNkYzdiLWZjNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcrwgMwnH7Pt97re9FTFCU/BcXpHYwgmb+NvCSsHkVdSshcBEsNdPGkX2g/fjC kR0252dFMbhp0Fkx52PBD0GKZCR6wvNGOnf9wUhcsib7SgR44Frv4xjVU5Q0Hq27 3gNc6CE0s8p3vLvMn4cUyLFPp45jKQ5W2mSA4Us+P2HjRXrpJzIDA98LcX0mlXRR Y7YOQXM+mJ81dsNp3K6m6WE7DJjHGETExwsTG9ELYPZ8XhaaPQnb7cEfKgOhMHG+ kjahBO6MPEDWspjgpC4KLW44m663a+CLMsf6Nmqj4ghI0VXW2zTId9XbEUjoa7xc NfbHoJNVGl9go0LuKrAQscfRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6PeOmOZT u+QqvVge3Z7URRaUHaowHwYDVR0jBBgwFoAUU8CL2gS8BTIh6yc6ohXM2VwAw5Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3MzI1LzgzMzhDNEQ2QUFF OTExRUZCNzIxQzI1REM0RjlBRTAyL1U4Q0wyZ1M4QlRJaDZ5YzZvaFhNMlZ3QXc1 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVThDTDJnUzhCVEloNnljNm9oWE0yVndBdzVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 MzI1LzgzMzhDNEQ2QUFFOTExRUZCNzIxQzI1REM0RjlBRTAyL1U4Q0wyZ1M4QlRJ aDZ5YzZvaFhNMlZ3QXc1SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJY1wCwody9i4NrjzhTDCbgfqISDF2ROM9L/y6p+yAEwXEtgsWiNuyAt Fc4Q2mycuBR5qePKspDkkVEFf9HCtAGSMgaqCTayNv5fUKSZm3JsY81ZIEIcHwIG +h/B50+0hMIJ4O/3C6C6/frTWmkxuoXXNMaBzpkmE4+G2l6K5VZYcBLLxTDgN4Ea nrG8/5TqDImLKyRTSMr5JL2mjLp+dQjGSkC1Rg4llYrKr239ussOMuiheZgi8mur bLVYscXn35yZynlc6l3UZGmaOFSi6lfAFiOQF98f5wtdv1moIDAQ0pBoDgj1umz/ jfwfs3s5zYDVoB4nem89FB9V10BRu5Q= -----END CERTIFICATE-----Generated at Sat Jun 7 12:30:29 2025 by rpki-client