$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft File: UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft (raw, json) Hash identifier: o5AE68H45Ft4UVPpxwdmf+zC0PDM3z1clL9CK+u3/3I= Subject key identifier: 00:C7:AA:21:A6:3F:35:5B:92:58:FE:C6:C7:BB:A9:6E:D3:C0:2C:0B Authority key identifier: 50:FB:B4:03:64:34:73:F9:91:27:36:26:27:7A:92:2C:07:06:AC:57 Certificate issuer: /CN=A9137242/serialNumber=50FBB403643473F991273626277A922C0706AC57 Certificate serial: 0D71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft Manifest number: 14FE Signing time: Thu 12 Jun 2025 17:50:07 +0000 Manifest this update: Thu 12 Jun 2025 17:50:07 +0000 Manifest next update: Thu 19 Jun 2025 17:50:07 +0000 Files and hashes: 1: UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl (hash: hGvPEVZv1ZdYLfrpfNnrAwkxB/YnPyOkDYjavB6ATzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3441 (0xd71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137242, serialNumber=50FBB403643473F991273626277A922C0706AC57 Validity Not Before: Jun 12 17:50:07 2025 GMT Not After : Jun 19 17:50:07 2025 GMT Subject: CN=684b134f-c0b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:86:39:ae:58:02:f7:6a:f5:2e:a6:9a:77:d4: 29:e1:de:4a:df:1c:1a:8c:2d:91:f8:4e:de:02:e1: 4e:b2:16:64:6d:5b:bb:d8:61:2f:4d:fb:31:6c:3d: 06:fc:8c:69:ae:6e:5d:2b:30:40:bb:dd:a8:b7:d5: 1f:77:03:36:4f:89:c6:94:29:9e:8d:95:46:cd:73: 19:e3:37:f3:96:b5:ac:7e:26:6b:32:57:0c:9e:de: b0:f3:53:ee:34:ae:fd:d8:62:4c:43:c7:87:29:f8: 34:c7:5f:58:ce:a7:b5:18:d6:c1:fd:cf:37:d3:c5: c4:88:1d:6b:6b:a5:5f:17:f6:1b:a4:ac:de:e1:f4: 3c:f9:bb:4c:7b:a4:39:a8:95:28:e2:f0:6f:94:6d: 62:56:32:00:50:2f:c5:c7:b7:6c:90:06:ae:72:f9: 79:af:2a:15:80:db:fb:9f:31:22:73:41:a7:1b:7d: 73:7b:28:e5:cc:8e:98:f5:c6:36:ec:c1:dd:b7:61: a2:f7:4a:37:8d:18:54:76:9b:f3:15:40:3d:f7:54: 20:33:9e:d0:0f:e9:6a:39:96:6b:e3:6b:af:4a:a1: 66:c7:79:88:df:78:cd:26:c1:eb:76:88:c5:30:c0: 49:1e:12:a6:79:16:68:80:01:40:f2:59:9c:e2:1e: 16:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C7:AA:21:A6:3F:35:5B:92:58:FE:C6:C7:BB:A9:6E:D3:C0:2C:0B X509v3 Authority Key Identifier: keyid:50:FB:B4:03:64:34:73:F9:91:27:36:26:27:7A:92:2C:07:06:AC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:41:06:0c:d9:22:52:18:e7:36:80:06:22:97:78:70:be:7b: 9d:46:47:b7:e3:0a:63:d8:a3:90:b9:29:42:eb:0f:b2:bf:e9: 5a:2c:44:b6:9e:fc:5e:c6:0e:f3:93:05:c6:22:e1:23:90:5e: ba:07:9a:ff:aa:d2:89:72:c6:8c:f7:5d:3f:62:af:85:90:94: 8f:47:86:61:c3:c5:28:6a:c0:f2:20:56:f4:a8:77:df:c9:71: d9:e8:eb:fd:f3:5a:d2:c0:66:ec:ba:f9:7a:ff:4a:7e:7d:96: 2b:03:9d:c9:ee:61:fa:d1:42:85:6f:2a:3a:28:19:1e:db:6d: 9d:aa:b2:02:b0:8d:d6:4b:71:04:38:f5:63:aa:0e:3b:46:95: 84:5b:fe:22:12:21:1a:13:f6:58:1c:4c:ba:87:82:bf:28:97: a9:57:64:29:80:0f:c0:7b:ff:13:27:c2:9a:e5:fb:b3:9e:d2: 84:36:e0:27:52:6a:93:cc:a8:c3:85:45:d0:07:13:79:29:2a: 68:34:48:ba:ee:03:85:77:3e:68:94:b3:e8:88:2d:ea:23:ca: 7b:1c:77:78:0a:e0:f0:92:e0:98:49:11:a0:58:fc:8b:7a:cc: ea:28:7e:cd:d3:fa:74:40:95:b7:ee:45:eb:f6:5e:a9:d0:fb: 65:2a:62:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzcyNDIxMTAvBgNVBAUTKDUwRkJCNDAzNjQzNDczRjk5MTI3MzYyNjI3N0E5MjJD MDcwNkFDNTcwHhcNMjUwNjEyMTc1MDA3WhcNMjUwNjE5MTc1MDA3WjAYMRYwFAYD VQQDEw02ODRiMTM0Zi1jMGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIY5rlgC92r1Lqaad9Qp4d5K3xwajC2R+E7eAuFOshZkbVu72GEvTfsxbD0G /Ixprm5dKzBAu92ot9UfdwM2T4nGlCmejZVGzXMZ4zfzlrWsfiZrMlcMnt6w81Pu NK792GJMQ8eHKfg0x19Yzqe1GNbB/c8308XEiB1ra6VfF/YbpKze4fQ8+btMe6Q5 qJUo4vBvlG1iVjIAUC/Fx7dskAaucvl5ryoVgNv7nzEic0GnG31zeyjlzI6Y9cY2 7MHdt2Gi90o3jRhUdpvzFUA991QgM57QD+lqOZZr42uvSqFmx3mI33jNJsHrdojF MMBJHhKmeRZogAFA8lmc4h4WxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADHqiGm PzVbklj+xse7qW7TwCwLMB8GA1UdIwQYMBaAFFD7tANkNHP5kSc2Jid6kiwHBqxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzI0Mi8wQjYwODc5NkNB MzQxMUU5QkM3NjkwNTVDNEY5QUUwMi9VUHUwQTJRMGNfbVJKelltSjNxU0xBY0dy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VQdTBBMlEwY19tUkp6WW1KM3FTTEFjR3JGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzI0Mi8wQjYwODc5NkNBMzQxMUU5QkM3NjkwNTVDNEY5QUUwMi9VUHUwQTJRMGNf bVJKelltSjNxU0xBY0dyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDQQYM2SJSGOc2gAYil3hwvnudRke34wpj2KOQuSlC6w+yv+laLES2 nvxexg7zkwXGIuEjkF66B5r/qtKJcsaM910/Yq+FkJSPR4Zhw8UoasDyIFb0qHff yXHZ6Ov981rSwGbsuvl6/0p+fZYrA53J7mH60UKFbyo6KBke222dqrICsI3WS3EE OPVjqg47RpWEW/4iEiEaE/ZYHEy6h4K/KJepV2QpgA/Ae/8TJ8Ka5fuzntKENuAn UmqTzKjDhUXQBxN5KSpoNEi67gOFdz5olLPoiC3qI8p7HHd4CuDwkuCYSRGgWPyL eszqKH7N0/p0QJW37kXr9l6p0PtlKmL3 -----END CERTIFICATE-----Generated at Sat Jun 14 18:28:09 2025 by rpki-client