$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft File: UK5xbz02ub7q4n8QBo-eNqIzq5E.mft (raw, json) Hash identifier: 3DYhqCxSv0EMbcullX52pqjqPQPS1rr/7O8zqhVME3Q= Subject key identifier: 57:11:F9:CF:07:2C:7C:1E:EC:CC:F7:C6:7E:5C:5E:DF:BA:B7:04:33 Authority key identifier: 50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91 Certificate issuer: /CN=A91CB4E9/serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft Manifest number: 10 Signing time: Sun 29 Jun 2025 07:05:34 +0000 Manifest this update: Sun 29 Jun 2025 07:05:33 +0000 Manifest next update: Sun 06 Jul 2025 07:05:33 +0000 Files and hashes: 1: UK5xbz02ub7q4n8QBo-eNqIzq5E.crl (hash: 8uXSgQHUbnBDH0VEiLIMnnm0TAelQol3HSLr/EX4Pyk=) 2: 539EAC9440EF11F08CFAFB1CC4F9AE02.roa (hash: WcSNu1HK0gGCU7aORSHhSulUdwLctmKgMDS1dq0RYbQ=) 3: BA23C0E440EF11F099D6761DC4F9AE02.roa (hash: pgsw/lIIAC86SHOBUAFVHyyezuLYZcEiwQh3Fbl1fpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 07:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB4E9, serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91 Validity Not Before: Jun 29 07:05:33 2025 GMT Not After : Jul 6 07:05:33 2025 GMT Subject: CN=6860e5be-5024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5b:b9:fb:b4:df:9e:2f:b0:a7:18:c4:f0:d4: 67:3b:f8:59:65:4d:2a:f2:50:11:3d:8b:c7:8a:3b: 32:a2:47:a9:ae:61:5a:86:76:73:06:fd:79:96:4d: 5e:b3:a6:c1:94:76:68:a4:85:74:91:b2:30:6e:d1: 22:12:e0:24:c3:f1:1d:c2:71:b6:0e:03:08:0f:30: a5:04:a6:56:0e:c3:28:3d:48:dc:56:93:24:a4:c4: 8c:33:9a:f0:47:12:b9:3e:38:0d:b8:35:d9:09:4a: a8:00:b7:c1:59:5d:1e:3c:f2:aa:9c:53:b8:a4:7e: 01:dc:20:b9:ad:f2:ff:27:68:90:79:d3:a8:49:f9: e5:c4:88:34:90:5d:ed:09:9d:0c:dd:fc:dc:4a:08: cc:f6:92:28:61:11:a7:55:c6:be:d6:ea:6c:1e:9d: 08:b4:aa:54:57:31:ff:b8:1d:7e:3d:c2:85:ad:c5: dd:78:33:00:26:b0:84:05:39:25:92:e2:a0:cd:3c: 0e:9f:de:dc:7b:03:89:17:c7:49:2f:3e:12:cd:09: f1:1f:81:41:9d:0e:d1:4b:d3:fe:62:25:5f:d9:9d: 91:81:c8:b1:b0:d7:f5:ea:4f:9d:53:40:ce:39:78: cb:b1:df:07:08:75:1c:21:68:dd:01:a6:85:8a:7a: 42:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:11:F9:CF:07:2C:7C:1E:EC:CC:F7:C6:7E:5C:5E:DF:BA:B7:04:33 X509v3 Authority Key Identifier: keyid:50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:ee:e2:e0:4e:34:ce:18:6b:b8:06:85:91:e6:75:e8:0e:9d: 17:ba:5f:71:80:5c:14:41:2a:11:86:7b:5f:28:b7:9d:d3:3a: dc:a3:29:26:fa:55:f8:15:ce:1a:48:c8:f6:22:b9:6e:eb:71: b4:4c:9d:58:c9:a1:6d:c9:0d:77:1f:22:9f:da:63:6f:25:9e: 9a:3c:89:fd:d3:bf:4b:7a:e0:f5:eb:3d:83:08:bf:2a:83:68: c3:07:e3:be:cc:c5:e8:59:d1:40:cf:19:f2:06:76:df:ea:65: 3f:1c:06:8a:86:46:90:be:00:01:8f:2f:a2:b7:7d:5f:c2:2d: c6:f3:08:7c:1d:c4:a2:d0:55:0d:ca:cd:cf:b9:ec:2e:22:77: 7a:4e:01:e9:54:87:55:95:21:77:8a:0a:4b:34:b3:32:50:51: 7e:4f:b3:ad:be:c0:c0:e5:c0:24:da:be:8f:c5:bc:e9:35:3e: 14:2d:6a:40:d8:70:1b:2f:72:9e:a8:53:9a:72:42:f4:c5:1a: 37:51:50:9d:af:56:48:35:5f:03:64:5b:66:0d:ed:84:b1:f1: c5:36:e1:6f:6a:02:c3:9e:34:94:dc:41:c9:c6:66:42:52:d8: 86:76:76:4b:e5:4c:24:73:21:c4:4b:34:07:57:97:8b:20:ce: 8a:36:53:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjRFOTExMC8GA1UEBRMoNTBBRTcxNkYzRDM2QjlCRUVBRTI3RjEwMDY4RjlFMzZB MjMzQUI5MTAeFw0yNTA2MjkwNzA1MzNaFw0yNTA3MDYwNzA1MzNaMBgxFjAUBgNV BAMTDTY4NjBlNWJlLTUwMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6W7n7tN+eL7CnGMTw1Gc7+FllTSryUBE9i8eKOzKiR6muYVqGdnMG/XmWTV6z psGUdmikhXSRsjBu0SIS4CTD8R3CcbYOAwgPMKUEplYOwyg9SNxWkySkxIwzmvBH Erk+OA24NdkJSqgAt8FZXR488qqcU7ikfgHcILmt8v8naJB506hJ+eXEiDSQXe0J nQzd/NxKCMz2kihhEadVxr7W6mwenQi0qlRXMf+4HX49woWtxd14MwAmsIQFOSWS 4qDNPA6f3tx7A4kXx0kvPhLNCfEfgUGdDtFL0/5iJV/ZnZGByLGw1/XqT51TQM45 eMux3wcIdRwhaN0BpoWKekKFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVxH5zwcs fB7szPfGflxe37q3BDMwHwYDVR0jBBgwFoAUUK5xbz02ub7q4n8QBo+eNqIzq5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNEU5L0QzODYxMzQ0NDBF RTExRjA5RTkzMzUxQ0M0RjlBRTAyL1VLNXhiejAydWI3cTRuOFFCby1lTnFJenE1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVUs1eGJ6MDJ1YjdxNG44UUJvLWVOcUl6cTVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NEU5L0QzODYxMzQ0NDBFRTExRjA5RTkzMzUxQ0M0RjlBRTAyL1VLNXhiejAydWI3 cTRuOFFCby1lTnFJenE1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAETu4uBONM4Ya7gGhZHmdegOnRe6X3GAXBRBKhGGe18ot53TOtyjKSb6 VfgVzhpIyPYiuW7rcbRMnVjJoW3JDXcfIp/aY28lnpo8if3Tv0t64PXrPYMIvyqD aMMH477MxehZ0UDPGfIGdt/qZT8cBoqGRpC+AAGPL6K3fV/CLcbzCHwdxKLQVQ3K zc+57C4id3pOAelUh1WVIXeKCks0szJQUX5Ps62+wMDlwCTavo/FvOk1PhQtakDY cBsvcp6oU5pyQvTFGjdRUJ2vVkg1XwNkW2YN7YSx8cU24W9qAsOeNJTcQcnGZkJS 2IZ2dkvlTCRzIcRLNAdXl4sgzoo2U6g= -----END CERTIFICATE-----Generated at Tue Jul 1 08:13:56 2025 by rpki-client