$ rpki-client -vvf rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft File: ufrcQefh-XVse8mz3jlyy_bPYLU.mft (raw, json) Hash identifier: xrlBsE16jCHGodLfYx1UXX4prvS1HGpkhhhsauQGkIo= Subject key identifier: 6F:9E:FD:2B:5A:FF:CD:AA:EE:47:C9:BD:BF:72:16:37:89:12:44:4F Authority key identifier: B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5 Certificate issuer: /CN=A9140562/serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft Manifest number: 3C Signing time: Fri 13 Jun 2025 06:26:01 +0000 Manifest this update: Fri 13 Jun 2025 06:26:01 +0000 Manifest next update: Fri 20 Jun 2025 06:26:01 +0000 Files and hashes: 1: ufrcQefh-XVse8mz3jlyy_bPYLU.crl (hash: WPYUXR2rPPNKmluw9GATU/dqNfPbmzabtdIBgkvHn/s=) 2: 5FCE01D8EDFA11EF8193933AC4F9AE02.roa (hash: 97oa3zBzp7Gq4BpVUI5kKb706Ag3AZCc/4WlkzLjgfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140562, serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5 Validity Not Before: Jun 13 06:26:01 2025 GMT Not After : Jun 20 06:26:01 2025 GMT Subject: CN=684bc479-57c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b7:66:94:a7:9b:27:4e:a8:09:c2:92:a5:dd: f3:94:39:ca:45:9c:77:66:6c:66:1d:4f:8b:c8:62: d4:d5:a8:cf:2d:0e:1a:41:10:fa:ca:24:6a:45:0f: e5:88:05:e3:f5:47:71:31:4b:22:6f:72:6a:3e:a7: 6d:fa:77:2c:61:bf:69:b9:70:8c:2e:5d:5f:cb:ce: ee:26:18:ee:19:6f:a4:af:3d:ef:ce:87:64:fc:8d: b9:db:0f:65:0f:b6:7c:03:94:72:39:8c:55:30:4e: 33:e3:a3:e1:6e:f4:87:0f:f6:39:d3:3d:aa:76:86: ba:03:0a:0a:58:3c:dd:4d:9c:91:21:42:fe:4f:35: 47:55:58:4a:12:29:6c:76:a0:e4:a3:a9:1a:23:d1: 08:ab:ac:6f:67:20:78:fc:56:83:cf:3b:31:15:aa: 56:b8:c5:15:91:41:7a:23:d9:da:6b:0b:54:7a:e2: 06:c0:fc:bd:83:79:eb:69:2a:78:bb:86:5f:eb:c3: 9f:ca:c3:1a:9c:88:ea:f6:9e:fc:70:93:ea:44:40: 88:0a:cb:02:31:ef:98:ef:d6:96:e7:34:b8:e4:3c: ee:5f:ab:c9:f2:b2:f5:0f:67:de:60:a6:05:35:96: 33:44:30:e6:c7:d4:43:58:8f:fa:e3:6e:0e:39:af: e3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:9E:FD:2B:5A:FF:CD:AA:EE:47:C9:BD:BF:72:16:37:89:12:44:4F X509v3 Authority Key Identifier: keyid:B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:08:86:af:9c:d2:3c:3d:07:5f:77:2d:c7:81:be:c1:8d:88: 1a:5b:77:3b:f1:60:95:0c:e4:02:56:f3:3a:f7:ad:65:4f:0d: d8:c5:f2:51:5e:a7:fb:05:52:c2:50:9a:21:86:b0:0e:e5:42: 5b:36:5e:4a:d9:0c:7b:53:07:7b:01:f8:82:e5:c3:b9:cc:75: a6:1e:21:db:a4:18:60:2d:7e:01:5e:b1:67:31:29:95:63:6d: 30:2c:a8:3c:50:b5:33:1d:86:95:82:c3:97:60:7e:c8:2b:a7: 9a:07:5a:b5:c8:ee:76:4e:c9:5f:e7:69:35:06:03:cf:33:85: 9a:70:d6:36:a2:99:29:d0:8d:87:62:33:d5:c8:4a:88:89:a4: 81:e9:58:1c:f4:66:dd:39:ee:5c:48:bc:7b:b6:87:32:16:9d: 4a:eb:f1:d2:65:e5:ec:40:bf:6e:6c:47:7d:79:78:61:b9:fe: 13:0b:cc:33:bc:c2:cc:9b:be:79:06:09:2e:2f:be:3f:cf:d0: 81:21:a9:4d:9b:f5:82:ad:cb:f1:59:ef:47:1a:5e:18:16:cb: b7:3f:85:85:45:57:a6:46:9b:38:9f:9b:c0:83:51:c5:ce:2f: 15:69:5f:86:45:52:18:6e:bb:7d:ae:f8:3b:28:0c:cf:9d:86: 5a:53:a9:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDU2MjExMC8GA1UEBRMoQjlGQURDNDFFN0UxRjk3NTZDN0JDOUIzREUzOTcyQ0JG NkNGNjBCNTAeFw0yNTA2MTMwNjI2MDFaFw0yNTA2MjAwNjI2MDFaMBgxFjAUBgNV BAMTDTY4NGJjNDc5LTU3YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6t2aUp5snTqgJwpKl3fOUOcpFnHdmbGYdT4vIYtTVqM8tDhpBEPrKJGpFD+WI BeP1R3ExSyJvcmo+p236dyxhv2m5cIwuXV/Lzu4mGO4Zb6SvPe/Oh2T8jbnbD2UP tnwDlHI5jFUwTjPjo+Fu9IcP9jnTPap2hroDCgpYPN1NnJEhQv5PNUdVWEoSKWx2 oOSjqRoj0QirrG9nIHj8VoPPOzEVqla4xRWRQXoj2dprC1R64gbA/L2DeetpKni7 hl/rw5/KwxqciOr2nvxwk+pEQIgKywIx75jv1pbnNLjkPO5fq8nysvUPZ95gpgU1 ljNEMObH1ENYj/rjbg45r+PrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb579K1r/ zaruR8m9v3IWN4kSRE8wHwYDVR0jBBgwFoAUufrcQefh+XVse8mz3jlyy/bPYLUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwNTYyLzY2QzNDOTdFRURG OTExRUZBOUNEQTgzOEM0RjlBRTAyL3VmcmNRZWZoLVhWc2U4bXozamx5eV9iUFlM VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWZyY1FlZmgtWFZzZThtejNqbHl5X2JQWUxVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw NTYyLzY2QzNDOTdFRURGOTExRUZBOUNEQTgzOEM0RjlBRTAyL3VmcmNRZWZoLVhW c2U4bXozamx5eV9iUFlMVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADUIhq+c0jw9B193LceBvsGNiBpbdzvxYJUM5AJW8zr3rWVPDdjF8lFe p/sFUsJQmiGGsA7lQls2XkrZDHtTB3sB+ILlw7nMdaYeIdukGGAtfgFesWcxKZVj bTAsqDxQtTMdhpWCw5dgfsgrp5oHWrXI7nZOyV/naTUGA88zhZpw1jaimSnQjYdi M9XISoiJpIHpWBz0Zt057lxIvHu2hzIWnUrr8dJl5exAv25sR315eGG5/hMLzDO8 wsybvnkGCS4vvj/P0IEhqU2b9YKty/FZ70caXhgWy7c/hYVFV6ZGmzifm8CDUcXO LxVpX4ZFUhhuu32u+DsoDM+dhlpTqek= -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:56 2025 by rpki-client