$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft File: UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft (raw, json) Hash identifier: IEvI3B7W0FNjsRUVZDoekAErTGQV9/RyJPRMeupMfMg= Subject key identifier: A4:6C:73:44:D6:9B:FA:5B:DB:88:89:3E:B3:44:2F:6A:69:3C:F5:50 Authority key identifier: 50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5 Certificate issuer: /CN=A91F65FA/serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5 Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft Manifest number: 028B Signing time: Sat 31 May 2025 01:47:07 +0000 Manifest this update: Sat 31 May 2025 01:47:06 +0000 Manifest next update: Sat 07 Jun 2025 01:47:06 +0000 Files and hashes: 1: UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl (hash: dQhFvnX0ezklTvTILx6/mOGiqE6f6hrP2PY+1dPd8Vw=) 2: 84365644062E11EDA95B3143C4F9AE02.roa (hash: zA/5PEhgjN/BvDw/xl3w8dV/RMsq+gylEcRkytviDsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65FA, serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5 Validity Not Before: May 31 01:47:06 2025 GMT Not After : Jun 7 01:47:06 2025 GMT Subject: CN=683a5f9a-2f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8f:b3:70:e7:1e:71:fc:44:0d:60:c3:2d:48: 6b:78:85:f1:d0:ac:e8:84:d7:8c:f2:b5:43:a4:9c: 75:d8:7d:ab:3c:bb:d7:8f:50:71:b1:8e:57:a2:a5: e4:65:a3:84:4b:02:f0:f9:c2:6b:41:10:6f:4d:a6: 94:93:ad:16:f4:10:76:5c:b0:d9:63:e1:e7:d6:e9: 46:95:37:39:83:01:f2:4b:07:9b:3a:46:7b:0c:b1: 7a:cf:a5:6d:2f:69:a6:36:37:a7:df:79:03:e4:14: 08:6a:c6:4b:cb:03:07:0b:b6:e8:9b:22:e9:cf:d9: 2c:68:14:aa:c2:2f:76:42:77:c6:d5:86:f6:02:d5: ab:f8:48:c4:7a:e4:67:0a:d9:9d:02:09:bd:d4:f9: 9a:05:45:fb:85:16:21:5e:f5:53:d2:db:4f:12:6d: 8a:f6:3d:3f:66:51:fb:1f:f3:58:49:8c:4e:fd:d0: cf:60:ad:5b:83:db:bc:f4:c6:f2:67:eb:3b:dd:ca: fd:16:9d:f4:e8:13:78:7d:7e:06:44:80:64:f7:fb: f6:da:56:50:10:60:38:01:09:a3:71:5b:4f:f8:3f: 6f:8e:de:58:1f:bd:fc:a0:f1:a0:d6:da:39:90:65: 38:f0:2e:c7:02:ac:e0:8c:0a:76:3a:7a:87:db:68: c6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6C:73:44:D6:9B:FA:5B:DB:88:89:3E:B3:44:2F:6A:69:3C:F5:50 X509v3 Authority Key Identifier: keyid:50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:64:71:ff:1d:5f:e0:a8:d4:88:95:78:b6:51:b4:c3:38:20: 42:80:c5:da:2f:10:58:a0:d9:9c:d9:fc:62:41:e4:3d:0e:bf: 5a:6f:08:51:5c:c6:f9:6a:23:41:82:7f:7b:db:a3:71:16:9d: 2b:b9:58:01:1e:83:20:c7:ae:40:93:82:30:bd:f1:b3:9d:c5: 75:e2:73:2a:03:0b:8d:b3:bf:b4:68:28:5c:15:1b:2e:3c:00: ca:80:26:14:ab:6c:14:3d:ab:85:1b:1a:5b:f9:3a:65:17:79: 37:d2:bc:98:7a:ba:e7:2a:88:1d:63:f1:98:e6:76:09:ce:67: 75:43:16:1f:d2:3f:b9:79:fb:5d:27:7c:7a:f7:27:1f:73:75: 91:28:10:cc:52:29:4b:c7:60:2d:df:16:a1:a5:7b:e8:5a:91: bc:e8:22:81:6c:52:f5:3a:54:12:c2:65:6f:58:05:01:ff:ab: 88:ac:3c:dd:90:78:ca:ef:a5:31:d5:57:45:ce:2a:ac:f2:c9: ec:0e:28:dd:2f:44:00:76:d2:98:70:48:d4:9f:be:d6:a8:80: 9c:35:f0:a4:4c:6c:f7:5c:c3:1c:f6:1d:b7:d4:c7:c4:1e:87: 49:36:a0:b6:ad:80:2c:fd:ac:57:58:40:c4:57:00:ba:34:48: b5:50:51:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1RkExMTAvBgNVBAUTKDUwM0I5MjQxNDY0REY5N0QyQTAwOTk5NjNFNjMzRTEw ODdFRkREQzUwHhcNMjUwNTMxMDE0NzA2WhcNMjUwNjA3MDE0NzA2WjAYMRYwFAYD VQQDEw02ODNhNWY5YS0yZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA64+zcOcecfxEDWDDLUhreIXx0KzohNeM8rVDpJx12H2rPLvXj1BxsY5XoqXk ZaOESwLw+cJrQRBvTaaUk60W9BB2XLDZY+Hn1ulGlTc5gwHySwebOkZ7DLF6z6Vt L2mmNjen33kD5BQIasZLywMHC7bomyLpz9ksaBSqwi92QnfG1Yb2AtWr+EjEeuRn CtmdAgm91PmaBUX7hRYhXvVT0ttPEm2K9j0/ZlH7H/NYSYxO/dDPYK1bg9u89Mby Z+s73cr9Fp306BN4fX4GRIBk9/v22lZQEGA4AQmjcVtP+D9vjt5YH738oPGg1to5 kGU48C7HAqzgjAp2OnqH22jGlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRsc0TW m/pb24iJPrNEL2ppPPVQMB8GA1UdIwQYMBaAFFA7kkFGTfl9KgCZlj5jPhCH793F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVGQS85QTcwMjYyMjA2 MkIxMUVEQUExRUVDM0RDNEY5QUUwMi9VRHVTUVVaTi1YMHFBSm1XUG1NLUVJZnYz Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VEdVNRVVpOLVgwcUFKbVdQbU0tRUlmdjNjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVGQS85QTcwMjYyMjA2MkIxMUVEQUExRUVDM0RDNEY5QUUwMi9VRHVTUVVaTi1Y MHFBSm1XUG1NLUVJZnYzY1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPZHH/HV/gqNSIlXi2UbTDOCBCgMXaLxBYoNmc2fxiQeQ9Dr9abwhR XMb5aiNBgn9726NxFp0ruVgBHoMgx65Ak4IwvfGzncV14nMqAwuNs7+0aChcFRsu PADKgCYUq2wUPauFGxpb+TplF3k30ryYerrnKogdY/GY5nYJzmd1QxYf0j+5eftd J3x69ycfc3WRKBDMUilLx2At3xahpXvoWpG86CKBbFL1OlQSwmVvWAUB/6uIrDzd kHjK76Ux1VdFziqs8snsDijdL0QAdtKYcEjUn77WqICcNfCkTGz3XMMc9h231MfE HodJNqC2rYAs/axXWEDEVwC6NEi1UFEI -----END CERTIFICATE-----Generated at Sat May 31 17:04:48 2025 by rpki-client