$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft File: UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft (raw, json) Hash identifier: DjPx06GIRNASVl9A4FsWBxklVDod8DrXCbCMiqVr9TU= Subject key identifier: C6:2B:7C:15:D5:78:D3:6E:50:EC:43:8A:C3:3B:07:D0:9D:32:48:FD Authority key identifier: 50:FB:B4:03:64:34:73:F9:91:27:36:26:27:7A:92:2C:07:06:AC:57 Certificate issuer: /CN=A9137242/serialNumber=50FBB403643473F991273626277A922C0706AC57 Certificate serial: 0D90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft Manifest number: 153D Signing time: Sun 10 Aug 2025 17:56:32 +0000 Manifest this update: Sun 10 Aug 2025 17:56:31 +0000 Manifest next update: Sun 17 Aug 2025 17:56:31 +0000 Files and hashes: 1: UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl (hash: XSUX+VmiFpYL3FNyB7XardEx6X2mJsK0YbXUzqlLDhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3472 (0xd90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137242, serialNumber=50FBB403643473F991273626277A922C0706AC57 Validity Not Before: Aug 10 17:56:31 2025 GMT Not After : Aug 17 17:56:31 2025 GMT Subject: CN=6898dd4f-15c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:95:46:40:a5:29:20:fe:77:d0:fd:b3:5b:c2: 99:2b:23:75:03:53:71:76:6e:5e:82:38:2b:c9:58: c9:96:19:d4:0c:47:64:10:09:c4:74:8f:47:63:1e: 92:e2:e9:d0:6b:fe:1a:83:6e:5c:1f:85:0c:17:21: 73:68:9e:d8:85:37:29:cd:88:9e:2e:da:5c:22:a9: cd:26:bc:6a:eb:ff:83:eb:50:c9:3d:fb:77:f0:ff: cc:85:d2:93:ef:4f:da:de:e0:57:54:85:bd:6f:58: 98:2b:eb:81:a8:48:92:08:70:ae:74:00:d8:07:fd: 94:a2:5c:31:8a:74:82:d8:93:ca:8a:98:a9:a4:05: 61:31:eb:7a:fc:9b:ef:bd:cd:24:91:70:b0:4f:ad: 33:c4:08:4c:a1:b9:a2:e4:d4:c8:5c:22:71:f2:d7: 78:aa:02:57:03:25:1a:85:92:41:33:3e:a2:00:e2: 4b:35:37:c3:4c:a0:5e:97:74:ab:3f:d8:87:58:5f: 84:c3:24:1c:10:ab:54:4b:1d:4b:c5:30:07:66:92: 0b:aa:d1:4b:41:52:19:82:6d:e1:3f:71:07:f5:9e: 91:c3:20:86:48:ed:6e:fc:4a:46:cf:b7:96:b4:96: dc:99:4f:fc:2b:99:9e:be:14:b6:b8:f5:d4:ae:43: 28:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2B:7C:15:D5:78:D3:6E:50:EC:43:8A:C3:3B:07:D0:9D:32:48:FD X509v3 Authority Key Identifier: keyid:50:FB:B4:03:64:34:73:F9:91:27:36:26:27:7A:92:2C:07:06:AC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:6f:02:8f:3c:54:05:82:fb:6f:85:95:ea:6a:8e:87:3e:44: 6b:30:7d:6f:65:ec:fd:b6:df:97:ad:4d:86:30:0e:06:b2:f6: 23:96:39:7a:6d:3e:1d:18:c4:cf:e1:dd:f9:ad:54:a7:bc:1c: 44:f8:b9:37:d0:19:59:a6:33:d7:88:eb:b1:26:98:32:38:bc: f7:9b:77:a9:fd:9a:33:25:07:52:b3:6a:82:4b:f6:92:d0:28: 35:79:01:5f:03:c1:fe:c4:99:48:0c:80:2b:b1:7a:f0:f5:e6: fc:44:c9:72:29:ae:36:12:a4:5d:c8:e5:21:c0:66:f5:46:a8: 31:17:52:4d:14:eb:39:87:8d:69:ac:79:35:d1:f0:96:a6:08: 47:2f:c9:b9:59:40:4e:4f:39:4b:c2:9f:49:cd:61:78:93:6b: 76:21:10:dd:58:ec:ee:33:09:04:12:58:29:c7:58:f4:0a:97: b3:cc:2f:b2:b0:ba:15:97:ba:e3:43:db:27:1e:f0:70:8a:02: 16:db:f3:68:e9:18:9f:d5:f4:71:e9:fe:8b:ee:4e:fa:06:6f: b5:b6:ae:dd:39:58:70:d9:35:b6:bb:a0:18:d8:13:4a:25:ff: 31:57:64:94:0e:70:dd:c0:60:30:a3:9c:ab:da:3a:69:16:10: 76:fd:be:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzcyNDIxMTAvBgNVBAUTKDUwRkJCNDAzNjQzNDczRjk5MTI3MzYyNjI3N0E5MjJD MDcwNkFDNTcwHhcNMjUwODEwMTc1NjMxWhcNMjUwODE3MTc1NjMxWjAYMRYwFAYD VQQDEw02ODk4ZGQ0Zi0xNWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5VGQKUpIP530P2zW8KZKyN1A1Nxdm5egjgryVjJlhnUDEdkEAnEdI9HYx6S 4unQa/4ag25cH4UMFyFzaJ7YhTcpzYieLtpcIqnNJrxq6/+D61DJPft38P/MhdKT 70/a3uBXVIW9b1iYK+uBqEiSCHCudADYB/2UolwxinSC2JPKipippAVhMet6/Jvv vc0kkXCwT60zxAhMobmi5NTIXCJx8td4qgJXAyUahZJBMz6iAOJLNTfDTKBel3Sr P9iHWF+EwyQcEKtUSx1LxTAHZpILqtFLQVIZgm3hP3EH9Z6RwyCGSO1u/EpGz7eW tJbcmU/8K5mevhS2uPXUrkMonQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYrfBXV eNNuUOxDisM7B9CdMkj9MB8GA1UdIwQYMBaAFFD7tANkNHP5kSc2Jid6kiwHBqxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzI0Mi8wQjYwODc5NkNB MzQxMUU5QkM3NjkwNTVDNEY5QUUwMi9VUHUwQTJRMGNfbVJKelltSjNxU0xBY0dy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VQdTBBMlEwY19tUkp6WW1KM3FTTEFjR3JGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzI0Mi8wQjYwODc5NkNBMzQxMUU5QkM3NjkwNTVDNEY5QUUwMi9VUHUwQTJRMGNf bVJKelltSjNxU0xBY0dyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHbwKPPFQFgvtvhZXqao6HPkRrMH1vZez9tt+XrU2GMA4GsvYjljl6 bT4dGMTP4d35rVSnvBxE+Lk30BlZpjPXiOuxJpgyOLz3m3ep/ZozJQdSs2qCS/aS 0Cg1eQFfA8H+xJlIDIArsXrw9eb8RMlyKa42EqRdyOUhwGb1RqgxF1JNFOs5h41p rHk10fCWpghHL8m5WUBOTzlLwp9JzWF4k2t2IRDdWOzuMwkEElgpx1j0CpezzC+y sLoVl7rjQ9snHvBwigIW2/No6Rif1fRx6f6L7k76Bm+1tq7dOVhw2TW2u6AY2BNK Jf8xV2SUDnDdwGAwo5yr2jppFhB2/b5a -----END CERTIFICATE-----Generated at Sun Aug 10 19:01:18 2025 by rpki-client