$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft File: UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft (raw, json) Hash identifier: /uyJDJJpQ7DQaXLjVjSxmDoFRnkFgmhk9TJt2HnwdTg= Subject key identifier: A4:68:C6:2C:0C:59:A9:3B:26:09:DD:27:17:DB:82:F7:CD:1C:F3:35 Authority key identifier: 50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23 Certificate issuer: /CN=A91FBDDF/serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft Manifest number: 012B Signing time: Sat 31 May 2025 04:14:05 +0000 Manifest this update: Sat 31 May 2025 04:14:04 +0000 Manifest next update: Sat 07 Jun 2025 04:14:04 +0000 Files and hashes: 1: UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl (hash: EksIzsQVjn2Lfs4FIRHlKlPmLzFrVxV8JQ6SHSGoUSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBDDF, serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023 Validity Not Before: May 31 04:14:04 2025 GMT Not After : Jun 7 04:14:04 2025 GMT Subject: CN=683a820c-2f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:08:a8:f9:40:44:24:94:5a:86:1a:04:98:f5: 31:45:45:de:af:42:71:5e:74:51:f2:e3:19:24:4c: dd:a0:d5:a8:c8:31:09:2f:83:38:ff:79:42:99:2b: 58:dd:52:28:68:81:e6:f1:63:6b:40:bc:e4:1e:90: 8c:3d:be:99:de:ff:05:72:4b:26:0d:64:b4:a4:8d: 24:09:a5:6b:9e:67:67:ee:ab:56:b2:a1:f1:55:61: bd:10:ce:c1:78:eb:de:de:22:32:ac:06:be:1c:6a: 55:5d:81:11:ac:74:29:21:5d:42:1a:f0:1e:01:60: ba:ce:fa:94:1d:4c:0f:e3:17:44:ec:f2:72:d1:2a: 7d:c2:f7:e7:8d:b4:fc:0a:23:9e:a2:35:4b:3c:85: b2:88:7f:56:23:9f:6d:5b:85:64:be:7b:99:d5:b0: 7e:d4:98:c2:ad:02:03:ea:19:3f:4c:86:db:61:bb: 7f:7f:b4:2a:4b:6a:42:18:59:46:ab:b5:44:3d:a9: db:76:c3:8b:70:80:ce:da:47:50:47:45:ca:01:36: 2c:97:01:a2:d9:85:b3:e6:94:e9:a5:c8:48:7f:d3: 9b:39:f5:99:c1:98:46:ea:96:ad:71:57:38:55:fd: 81:ad:eb:26:0c:26:f3:d7:28:e1:e5:74:bd:77:34: 06:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:68:C6:2C:0C:59:A9:3B:26:09:DD:27:17:DB:82:F7:CD:1C:F3:35 X509v3 Authority Key Identifier: keyid:50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:51:cd:7f:8e:cc:1f:20:fc:f8:04:fc:57:71:d8:74:3f:77: 96:57:a2:e8:72:fa:09:0b:dc:c4:c6:61:8c:96:96:be:87:29: 0e:56:af:0a:3f:fc:5c:da:01:b1:c8:b9:82:3f:e5:64:de:ba: 6a:f8:d6:07:29:d6:88:56:ba:40:fd:f1:1c:b0:89:b7:2c:9e: 1d:0f:4a:cd:89:f2:94:ac:9c:03:23:9c:f7:9d:c2:a4:e9:b2: f8:3f:ae:c3:5f:38:28:95:91:bb:d5:85:97:a5:26:ab:6c:b9: 1a:d2:33:50:cb:50:45:4f:28:e9:3f:aa:97:de:df:db:93:32: 4f:b1:34:26:65:16:28:4a:66:6e:bb:08:38:da:1a:64:08:5a: 6a:79:af:b2:3f:ad:13:3e:74:aa:77:e8:f4:f9:1c:a6:99:3d: 1f:a5:55:c4:2e:d5:e7:04:08:8b:7d:86:0a:b8:f0:0e:8b:a9: 2f:75:12:50:9a:c2:24:e3:cc:1e:03:06:63:ca:8b:fe:d9:a4: fc:f0:24:b7:03:d3:59:f7:65:73:cd:83:7b:df:3b:6b:3a:7e: 06:ca:9d:5e:ea:2a:4d:51:82:b8:ec:07:0a:ba:35:a9:f0:1d: 00:79:ea:c7:a2:e1:2b:23:8d:82:60:e6:8e:55:35:61:f0:cf: 61:dd:ea:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEREYxMTAvBgNVBAUTKDUwM0QxQkY1NkIyMjI5QjUyQUEzRkY2ODUzNDY5OUYw NkZEMjUwMjMwHhcNMjUwNTMxMDQxNDA0WhcNMjUwNjA3MDQxNDA0WjAYMRYwFAYD VQQDEw02ODNhODIwYy0yZjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwio+UBEJJRahhoEmPUxRUXer0JxXnRR8uMZJEzdoNWoyDEJL4M4/3lCmStY 3VIoaIHm8WNrQLzkHpCMPb6Z3v8FcksmDWS0pI0kCaVrnmdn7qtWsqHxVWG9EM7B eOve3iIyrAa+HGpVXYERrHQpIV1CGvAeAWC6zvqUHUwP4xdE7PJy0Sp9wvfnjbT8 CiOeojVLPIWyiH9WI59tW4VkvnuZ1bB+1JjCrQID6hk/TIbbYbt/f7QqS2pCGFlG q7VEPanbdsOLcIDO2kdQR0XKATYslwGi2YWz5pTppchIf9ObOfWZwZhG6patcVc4 Vf2BresmDCbz1yjh5XS9dzQGowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRoxiwM Wak7JgndJxfbgvfNHPM1MB8GA1UdIwQYMBaAFFA9G/VrIim1KqP/aFNGmfBv0lAj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkRERi80NzVDNjRCRTcy NDUxMUVFQUEyOUVDNzRDNEY5QUUwMi9VRDBiOVdzaUtiVXFvXzlvVTBhWjhHX1NV Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VEMGI5V3NpS2JVcW9fOW9VMGFaOEdfU1VDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkRERi80NzVDNjRCRTcyNDUxMUVFQUEyOUVDNzRDNEY5QUUwMi9VRDBiOVdzaUti VXFvXzlvVTBhWjhHX1NVQ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJUc1/jswfIPz4BPxXcdh0P3eWV6LocvoJC9zExmGMlpa+hykOVq8K P/xc2gGxyLmCP+Vk3rpq+NYHKdaIVrpA/fEcsIm3LJ4dD0rNifKUrJwDI5z3ncKk 6bL4P67DXzgolZG71YWXpSarbLka0jNQy1BFTyjpP6qX3t/bkzJPsTQmZRYoSmZu uwg42hpkCFpqea+yP60TPnSqd+j0+RymmT0fpVXELtXnBAiLfYYKuPAOi6kvdRJQ msIk48weAwZjyov+2aT88CS3A9NZ92VzzYN73ztrOn4Gyp1e6ipNUYK47AcKujWp 8B0AeerHouErI42CYOaOVTVh8M9h3ep9 -----END CERTIFICATE-----Generated at Sat May 31 17:11:27 2025 by rpki-client