$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft File: uDIFubLHQGPjdvNxFYOXBe277Ng.mft (raw, json) Hash identifier: oJ0XKkNiKNUWJsnvYtysT6tNIlvfVU0ei4pDP9gs6vg= Subject key identifier: 83:46:27:62:41:6B:47:19:28:EC:58:3A:8E:72:C8:C1:B8:FC:0E:A5 Authority key identifier: B8:32:05:B9:B2:C7:40:63:E3:76:F3:71:15:83:97:05:ED:BB:EC:D8 Certificate issuer: /CN=A9130138/serialNumber=B83205B9B2C74063E376F37115839705EDBBECD8 Certificate serial: 0340 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft Manifest number: 033C Signing time: Thu 19 Jun 2025 00:52:40 +0000 Manifest this update: Thu 19 Jun 2025 00:52:39 +0000 Manifest next update: Thu 26 Jun 2025 00:52:39 +0000 Files and hashes: 1: uDIFubLHQGPjdvNxFYOXBe277Ng.crl (hash: iZqgv2cIFqLfQcKRPtx1Ym/lgbwRJ0TmVM/dAFyCRRQ=) 2: A7DEA0DAC47D11ECB544A26DC4F9AE02.roa (hash: 4+Xf3NTfI2/0BNoXkOgB9ryKoXY/WbTftiAI2ds4gB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.crl rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 00:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 832 (0x340) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130138, serialNumber=B83205B9B2C74063E376F37115839705EDBBECD8 Validity Not Before: Jun 19 00:52:39 2025 GMT Not After : Jun 26 00:52:39 2025 GMT Subject: CN=68535f57-4303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3b:ff:3e:5f:8d:e3:0e:02:17:a1:8a:d5:38: 76:99:86:c9:ef:d7:67:ff:c5:32:dc:a6:e8:bb:b5: 16:05:39:3e:89:22:7e:a9:2a:e9:d4:87:63:ce:4e: f3:d7:ad:90:a3:c2:d1:76:b2:e1:16:40:f7:4c:15: f1:13:9e:68:c4:6a:57:d6:a3:66:44:f2:8b:54:b2: 36:cb:f6:06:1b:74:9d:80:46:0f:d0:93:44:65:20: b7:51:b9:c2:17:2f:8c:cf:a5:16:d4:cc:28:b0:d8: a9:67:7c:d4:0a:d1:95:13:00:ef:e7:cc:3a:ce:60: 7f:c9:1e:fa:9b:fb:75:24:c6:1a:da:28:ae:6e:d7: 0e:33:18:56:61:aa:16:75:88:7f:27:83:8b:c8:46: 5a:9f:94:9f:86:e4:ea:16:51:64:a0:94:7d:c5:52: a7:b8:c6:bf:15:d9:a5:6c:96:f1:12:51:e9:c9:1e: 42:f3:5c:63:eb:5c:24:d8:2f:52:ca:d9:1e:07:8d: 6c:e4:0f:e9:bb:0f:59:ae:61:36:97:28:60:d2:47: f2:0a:ee:bf:62:76:ba:52:f2:52:cb:5f:48:b6:c0: f0:96:51:39:74:d4:3a:2f:f9:ba:13:0c:14:ce:b6: eb:35:06:2d:c8:1b:a7:43:8a:68:61:a2:87:80:6c: 6d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:46:27:62:41:6B:47:19:28:EC:58:3A:8E:72:C8:C1:B8:FC:0E:A5 X509v3 Authority Key Identifier: keyid:B8:32:05:B9:B2:C7:40:63:E3:76:F3:71:15:83:97:05:ED:BB:EC:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:de:80:f6:58:60:fe:b8:d9:d4:a9:1f:db:a1:ab:6d:f7:47: 00:23:bb:7f:7a:78:7d:d1:e6:5c:32:e0:e2:da:ac:53:73:38: 12:40:8d:ba:4b:07:31:44:30:7a:4f:ef:1a:e4:03:af:c0:96: b5:43:eb:b4:71:a0:a5:dd:af:32:64:83:b7:4c:91:ee:a2:2a: cc:bb:d2:b6:30:0f:00:68:19:7e:7e:a0:3f:d6:81:1b:3a:f2: 01:95:20:97:c7:26:8b:bd:01:e3:bf:b4:e3:39:ca:14:20:8c: 61:6b:f8:58:cf:eb:8f:e1:2e:f6:d4:19:7b:7a:eb:ac:89:60: 75:1a:b0:bd:7d:8a:bb:8e:3c:87:c8:ad:9e:81:e7:9c:ac:06: bf:ec:a9:81:f5:38:b6:6f:f2:25:91:8a:f0:ad:13:1e:26:43: d9:79:71:11:33:3f:0f:73:e3:54:8d:4e:d5:78:1a:38:07:f3: df:2d:56:d0:e5:0d:51:5c:8f:d8:a1:1c:4d:98:e2:3d:dd:71: b5:3a:9d:6f:17:f6:1c:83:dc:35:d8:01:e4:74:f8:dd:1e:a6: 7c:2f:df:a1:5c:25:d1:fb:28:ae:5d:7d:47:ad:aa:9e:cc:46: d1:eb:b1:b3:7f:7e:3f:b8:93:99:6d:18:cd:ab:c9:bb:a3:4f: e9:8d:f1:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMzgxMTAvBgNVBAUTKEI4MzIwNUI5QjJDNzQwNjNFMzc2RjM3MTE1ODM5NzA1 RURCQkVDRDgwHhcNMjUwNjE5MDA1MjM5WhcNMjUwNjI2MDA1MjM5WjAYMRYwFAYD VQQDEw02ODUzNWY1Ny00MzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTv/Pl+N4w4CF6GK1Th2mYbJ79dn/8Uy3Kbou7UWBTk+iSJ+qSrp1Idjzk7z 162Qo8LRdrLhFkD3TBXxE55oxGpX1qNmRPKLVLI2y/YGG3SdgEYP0JNEZSC3UbnC Fy+Mz6UW1MwosNipZ3zUCtGVEwDv58w6zmB/yR76m/t1JMYa2iiubtcOMxhWYaoW dYh/J4OLyEZan5SfhuTqFlFkoJR9xVKnuMa/FdmlbJbxElHpyR5C81xj61wk2C9S ytkeB41s5A/puw9ZrmE2lyhg0kfyCu6/Yna6UvJSy19ItsDwllE5dNQ6L/m6EwwU zrbrNQYtyBunQ4poYaKHgGxtSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINGJ2JB a0cZKOxYOo5yyMG4/A6lMB8GA1UdIwQYMBaAFLgyBbmyx0Bj43bzcRWDlwXtu+zY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEzOC81OUZCQTJCMkM0 N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi91RElGdWJMSFFHUGpkdk54RllPWEJlMjc3 TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3VESUZ1YkxIUUdQamR2TnhGWU9YQmUyNzdOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDEzOC81OUZCQTJCMkM0N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi91RElGdWJMSFFH UGpkdk54RllPWEJlMjc3TmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw3oD2WGD+uNnUqR/boatt90cAI7t/enh90eZcMuDi2qxTczgSQI26 SwcxRDB6T+8a5AOvwJa1Q+u0caCl3a8yZIO3TJHuoirMu9K2MA8AaBl+fqA/1oEb OvIBlSCXxyaLvQHjv7TjOcoUIIxha/hYz+uP4S721Bl7euusiWB1GrC9fYq7jjyH yK2egeecrAa/7KmB9Ti2b/IlkYrwrRMeJkPZeXERMz8Pc+NUjU7VeBo4B/PfLVbQ 5Q1RXI/YoRxNmOI93XG1Op1vF/Ycg9w12AHkdPjdHqZ8L9+hXCXR+yiuXX1Hraqe zEbR67Gzf34/uJOZbRjNq8m7o0/pjfHT -----END CERTIFICATE-----Generated at Fri Jun 20 23:43:06 2025 by rpki-client