$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft File: UlhBQeXpBP16_D4Noo2QCKGvkhI.mft (raw, json) Hash identifier: ge4Rjv3UghsGmIOx0NfVLNWuyiD/i8fTTNN3zrmbIOM= Subject key identifier: B4:83:11:84:AA:71:9B:4C:05:70:23:6D:72:BB:14:B0:ED:90:40:4E Authority key identifier: 52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12 Certificate issuer: /CN=A91C2CCD/serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft Manifest number: 015B Signing time: Sat 31 May 2025 03:42:15 +0000 Manifest this update: Sat 31 May 2025 03:42:14 +0000 Manifest next update: Sat 07 Jun 2025 03:42:14 +0000 Files and hashes: 1: UlhBQeXpBP16_D4Noo2QCKGvkhI.crl (hash: g5OChkTkOABKeHxYhWjBzUK+Wk4NkLgLx+4t9bgvr8U=) 2: 41D133CC2B5911EE85AD762BC4F9AE02.roa (hash: 2h3iteWHWvj7eGZvRPLFqMA2o9nj7836hPNLX4DVTdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CCD, serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212 Validity Not Before: May 31 03:42:14 2025 GMT Not After : Jun 7 03:42:14 2025 GMT Subject: CN=683a7a96-b3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:32:a3:35:dd:47:51:80:5a:d0:79:e0:d6:0b: 84:2b:3e:74:51:04:8f:ef:34:be:ab:71:30:c2:90: cf:01:7b:01:f1:ea:20:fb:92:a2:9a:85:37:17:72: e9:81:06:e1:00:7a:66:60:48:f7:1b:53:9c:54:64: b9:64:2f:05:8b:d4:b2:ef:fd:c4:8e:f9:80:e6:d0: 5c:9d:85:be:08:58:74:6c:f2:30:dd:6c:8e:56:d0: b6:80:cd:7f:8d:71:66:dd:93:1d:3e:e1:bb:d9:c1: 9a:00:f7:13:1a:90:72:73:13:f8:53:e7:fc:57:8d: 77:22:db:3f:ed:fe:fd:46:e8:d4:2f:2f:33:31:4f: 89:79:f6:d1:8f:3e:65:26:f7:81:7b:87:8a:89:c1: 4e:3e:ab:dd:46:da:ab:68:78:b3:17:ba:b1:d9:cd: 31:b4:ba:c1:04:99:e5:c4:93:27:77:19:0f:5b:3a: 6f:47:ff:58:e5:8d:b2:8c:e2:80:4a:79:dc:f0:32: 5f:2e:9d:5a:1a:53:b9:3b:bd:74:05:ad:23:a0:71: 4e:9e:05:7d:77:ee:30:55:91:af:3d:01:6d:0f:af: 71:64:1c:8a:8d:db:ce:4e:c4:42:49:c3:20:4b:24: 76:1e:89:f0:9f:df:11:91:74:36:3e:d1:15:b1:bd: e1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:83:11:84:AA:71:9B:4C:05:70:23:6D:72:BB:14:B0:ED:90:40:4E X509v3 Authority Key Identifier: keyid:52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:ab:c6:a6:f3:73:e7:59:c9:77:5a:f1:8d:f4:57:81:82:13: 0f:9c:4c:9a:8a:12:e5:d2:bd:41:50:d6:82:c6:55:ad:f5:94: e0:f2:50:52:6d:2e:28:d6:67:90:7d:2b:34:2b:b1:a3:d2:c0: 94:32:85:28:f6:69:47:2c:fa:8c:8c:8b:3e:89:60:a8:d7:58: f1:0c:c0:0a:d7:56:d9:69:ab:00:ed:63:bd:04:47:bb:ed:08: 6a:08:2c:f6:94:b5:6a:c1:d6:ba:1c:73:5b:c1:fc:39:aa:09: 6b:eb:b8:44:d4:a4:29:24:86:be:eb:b7:07:95:d8:aa:98:2d: 4f:8c:0b:86:8c:46:02:de:de:f8:4b:e7:bb:d6:8d:de:53:1f: bc:a4:9e:af:9f:f5:b5:03:7f:6b:1e:32:68:46:20:39:88:7a: 19:8b:80:b7:a3:d1:b6:17:0e:be:ed:9c:22:61:84:e5:46:93: 28:91:a6:f6:b6:50:c9:59:c8:79:ff:b8:55:7e:b4:98:1a:ee: a5:0e:cd:03:b5:66:d7:1f:fa:b3:78:79:6b:40:c2:19:e6:75: 50:2d:3a:2e:a0:23:8a:59:35:f9:64:b6:a2:41:cd:be:88:cf: c6:0d:1b:db:9a:42:b1:c0:b4:1a:b7:98:8e:4f:1b:cb:1f:99: 5b:54:fb:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDQ0QxMTAvBgNVBAUTKDUyNTg0MTQxRTVFOTA0RkQ3QUZDM0UwREEyOEQ5MDA4 QTFBRjkyMTIwHhcNMjUwNTMxMDM0MjE0WhcNMjUwNjA3MDM0MjE0WjAYMRYwFAYD VQQDEw02ODNhN2E5Ni1iM2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTKjNd1HUYBa0Hng1guEKz50UQSP7zS+q3EwwpDPAXsB8eog+5KimoU3F3Lp gQbhAHpmYEj3G1OcVGS5ZC8Fi9Sy7/3EjvmA5tBcnYW+CFh0bPIw3WyOVtC2gM1/ jXFm3ZMdPuG72cGaAPcTGpBycxP4U+f8V413Its/7f79RujULy8zMU+JefbRjz5l JveBe4eKicFOPqvdRtqraHizF7qx2c0xtLrBBJnlxJMndxkPWzpvR/9Y5Y2yjOKA Snnc8DJfLp1aGlO5O710Ba0joHFOngV9d+4wVZGvPQFtD69xZByKjdvOTsRCScMg SyR2Honwn98RkXQ2PtEVsb3hBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSDEYSq cZtMBXAjbXK7FLDtkEBOMB8GA1UdIwQYMBaAFFJYQUHl6QT9evw+DaKNkAihr5IS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDRC9EQzM1MkI1RTJC NTgxMUVFQjdDMkRFMkFDNEY5QUUwMi9VbGhCUWVYcEJQMTZfRDROb28yUUNLR3Zr aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VsaEJRZVhwQlAxNl9ENE5vbzJRQ0tHdmtoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNDRC9EQzM1MkI1RTJCNTgxMUVFQjdDMkRFMkFDNEY5QUUwMi9VbGhCUWVYcEJQ MTZfRDROb28yUUNLR3ZraEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiq8am83PnWcl3WvGN9FeBghMPnEyaihLl0r1BUNaCxlWt9ZTg8lBS bS4o1meQfSs0K7Gj0sCUMoUo9mlHLPqMjIs+iWCo11jxDMAK11bZaasA7WO9BEe7 7QhqCCz2lLVqwda6HHNbwfw5qglr67hE1KQpJIa+67cHldiqmC1PjAuGjEYC3t74 S+e71o3eUx+8pJ6vn/W1A39rHjJoRiA5iHoZi4C3o9G2Fw6+7ZwiYYTlRpMokab2 tlDJWch5/7hVfrSYGu6lDs0DtWbXH/qzeHlrQMIZ5nVQLTouoCOKWTX5ZLaiQc2+ iM/GDRvbmkKxwLQat5iOTxvLH5lbVPu0 -----END CERTIFICATE-----Generated at Sat May 31 16:30:31 2025 by rpki-client