$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft File: UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft (raw, json) Hash identifier: VJU8M0Sh7PHDNeCyiL9jyq/e8HQyyShjQgXEBTDcCcY= Subject key identifier: 18:85:3B:FD:27:C5:10:FF:F5:C9:43:05:67:B8:72:76:EE:A7:ED:8B Authority key identifier: 50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23 Certificate issuer: /CN=A91FBDDF/serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft Manifest number: 0163 Signing time: Wed 17 Sep 2025 04:31:30 +0000 Manifest this update: Wed 17 Sep 2025 04:31:29 +0000 Manifest next update: Wed 24 Sep 2025 04:31:29 +0000 Files and hashes: 1: UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl (hash: Qw2K7v3T8OFGnSn8R4BXorRid8N6pSoE7rHSTwDgN8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBDDF, serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023 Validity Not Before: Sep 17 04:31:29 2025 GMT Not After : Sep 24 04:31:29 2025 GMT Subject: CN=68ca39a2-507a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a1:73:5f:4b:20:6d:a0:b6:c4:51:eb:aa:e4: 8f:1e:13:cc:7c:a5:00:13:4d:3d:59:d3:08:66:49: eb:07:f3:77:c2:ab:62:26:2e:c3:63:67:8d:1d:79: b4:d6:62:3d:7c:77:57:66:7e:f3:66:dd:4c:a3:11: d1:42:96:1a:00:e1:d8:6b:24:cd:41:5f:69:ae:8d: 1a:44:45:31:23:ab:a1:f8:6a:d3:fa:ec:a1:67:82: 85:0a:7c:60:56:ff:49:69:e9:0c:3b:07:3e:c9:18: 26:70:47:c8:d6:0e:dc:b7:e9:50:5d:3c:74:0f:db: d0:cb:fa:78:e8:59:ab:78:7c:5d:62:e0:b0:d6:0c: 3d:7c:22:93:84:dc:dd:11:e6:2f:0d:a4:3e:c2:59: 01:3a:d8:98:d5:b5:fb:d1:cd:01:a4:b8:6a:ee:52: 4b:96:6f:13:77:04:21:3d:f8:35:3c:21:f1:a0:00: b5:93:d6:5c:db:bd:9e:8f:fb:a8:94:5b:9a:d5:e2: 22:62:e5:5c:c8:e4:84:18:ff:53:2b:73:fb:4e:2e: 6c:35:4e:f1:60:51:77:de:e5:c0:fd:d9:fb:f4:15: 8a:8f:2c:ba:d7:3c:b9:e3:4c:f5:a5:05:f3:c3:3d: 73:35:99:67:de:1a:05:1b:25:c5:30:80:bc:7a:43: 93:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:85:3B:FD:27:C5:10:FF:F5:C9:43:05:67:B8:72:76:EE:A7:ED:8B X509v3 Authority Key Identifier: keyid:50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:a6:75:5d:28:96:64:11:64:63:8b:b6:b9:72:3e:6e:05:ed: c4:e6:09:8a:d8:a1:b8:bc:18:df:15:52:05:32:ea:1e:47:ac: e0:5d:c2:94:00:c8:11:8f:d0:3d:5c:e1:6f:e0:94:24:17:63: 3a:4b:db:07:58:44:6c:6f:dc:b4:12:37:c6:e0:9c:70:5a:c6: 8f:ac:ad:0c:71:6b:5b:72:55:ba:03:62:f1:ff:7c:3a:95:13: 0d:e2:6c:dd:76:54:5a:42:78:9a:1f:38:9a:91:b4:1f:32:44: 61:7f:a2:7c:51:fe:1d:16:b7:25:1b:1b:97:a0:ac:d8:90:ac: 45:81:d9:c8:6d:0c:fa:9b:45:50:bb:92:7c:74:6f:5e:c3:42: e4:77:26:f0:f7:9a:71:62:3d:99:fa:6d:c5:17:24:ab:9d:c6: 47:37:c6:33:e0:af:22:e2:14:88:61:fd:d3:97:be:06:a0:51: d1:ee:be:b9:53:46:0a:fc:be:98:a7:29:f8:74:49:8b:5b:a2: e1:46:e7:0f:41:9f:da:cf:e0:b1:b6:6a:37:3d:5a:0f:71:09: ef:fe:25:69:14:6b:fe:7b:cf:f0:85:c3:dd:2c:92:67:52:a1: 43:cf:19:14:98:2a:a6:b2:c8:89:74:57:2a:04:dc:46:d8:76: 7b:3c:ca:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEREYxMTAvBgNVBAUTKDUwM0QxQkY1NkIyMjI5QjUyQUEzRkY2ODUzNDY5OUYw NkZEMjUwMjMwHhcNMjUwOTE3MDQzMTI5WhcNMjUwOTI0MDQzMTI5WjAYMRYwFAYD VQQDEw02OGNhMzlhMi01MDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26FzX0sgbaC2xFHrquSPHhPMfKUAE009WdMIZknrB/N3wqtiJi7DY2eNHXm0 1mI9fHdXZn7zZt1MoxHRQpYaAOHYayTNQV9pro0aREUxI6uh+GrT+uyhZ4KFCnxg Vv9JaekMOwc+yRgmcEfI1g7ct+lQXTx0D9vQy/p46FmreHxdYuCw1gw9fCKThNzd EeYvDaQ+wlkBOtiY1bX70c0BpLhq7lJLlm8TdwQhPfg1PCHxoAC1k9Zc272ej/uo lFua1eIiYuVcyOSEGP9TK3P7Ti5sNU7xYFF33uXA/dn79BWKjyy61zy540z1pQXz wz1zNZln3hoFGyXFMIC8ekOTJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiFO/0n xRD/9clDBWe4cnbup+2LMB8GA1UdIwQYMBaAFFA9G/VrIim1KqP/aFNGmfBv0lAj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkRERi80NzVDNjRCRTcy NDUxMUVFQUEyOUVDNzRDNEY5QUUwMi9VRDBiOVdzaUtiVXFvXzlvVTBhWjhHX1NV Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VEMGI5V3NpS2JVcW9fOW9VMGFaOEdfU1VDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkRERi80NzVDNjRCRTcyNDUxMUVFQUEyOUVDNzRDNEY5QUUwMi9VRDBiOVdzaUti VXFvXzlvVTBhWjhHX1NVQ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATpnVdKJZkEWRji7a5cj5uBe3E5gmK2KG4vBjfFVIFMuoeR6zgXcKU AMgRj9A9XOFv4JQkF2M6S9sHWERsb9y0EjfG4JxwWsaPrK0McWtbclW6A2Lx/3w6 lRMN4mzddlRaQniaHziakbQfMkRhf6J8Uf4dFrclGxuXoKzYkKxFgdnIbQz6m0VQ u5J8dG9ew0Lkdybw95pxYj2Z+m3FFySrncZHN8Yz4K8i4hSIYf3Tl74GoFHR7r65 U0YK/L6Ypyn4dEmLW6LhRucPQZ/az+Cxtmo3PVoPcQnv/iVpFGv+e8/whcPdLJJn UqFDzxkUmCqmssiJdFcqBNxG2HZ7PMoE -----END CERTIFICATE-----Generated at Fri Sep 19 00:38:49 2025 by rpki-client