$ rpki-client -vvf rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft File: rU1lO4NcTh3pjsZjdoiamoN2SwI.mft (raw, json) Hash identifier: gIXCDOhIaDebt6PzHnD+sCpwaIBUSlN+5Zv8kcRqk64= Subject key identifier: 62:31:03:83:BC:C0:26:0A:5D:1F:0E:A6:AB:42:DB:29:9F:49:60:AA Authority key identifier: AD:4D:65:3B:83:5C:4E:1D:E9:8E:C6:63:76:88:9A:9A:83:76:4B:02 Certificate issuer: /CN=A914B669/serialNumber=AD4D653B835C4E1DE98EC66376889A9A83764B02 Certificate serial: 3489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft Manifest number: 3489 Signing time: Sat 14 Jun 2025 14:43:56 +0000 Manifest this update: Sat 14 Jun 2025 14:43:56 +0000 Manifest next update: Sat 21 Jun 2025 14:43:56 +0000 Files and hashes: 1: rU1lO4NcTh3pjsZjdoiamoN2SwI.crl (hash: IS5DTQwroS/bFxkahZw48BubNIhNeIjuRii5RJkXcLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.crl rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13449 (0x3489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B669, serialNumber=AD4D653B835C4E1DE98EC66376889A9A83764B02 Validity Not Before: Jun 14 14:43:56 2025 GMT Not After : Jun 21 14:43:56 2025 GMT Subject: CN=684d8aac-c29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:57:17:a2:8e:8a:26:e9:9e:36:cb:80:95: 2b:bf:90:4a:1d:66:c8:e8:68:87:dc:67:14:fb:ed: c6:de:ff:ce:97:f3:79:6b:8f:bb:e2:a1:26:a9:f8: 06:81:86:6a:0f:e3:28:5a:00:8c:c1:5b:92:9d:13: 9c:67:39:c1:9d:ba:f0:02:e1:bc:cf:8d:f5:37:73: 46:6d:7c:f2:c5:1d:27:6e:f0:a4:91:bf:67:9a:8c: a1:87:54:11:4f:36:96:5f:08:36:5f:13:7c:77:c2: 6c:9e:3e:45:95:43:2e:c6:f7:81:91:0c:20:55:d4: 4d:37:d8:f1:9e:ba:ae:56:7f:69:2d:50:a3:91:7f: cc:77:2f:f2:f4:1c:2a:9b:ee:f2:e5:6c:ed:46:03: e8:59:c3:da:21:24:e6:0d:dc:98:1f:1a:0d:ec:ba: 32:04:58:15:cd:59:cc:4e:a3:5e:0a:c0:c7:42:3b: d0:15:a7:ef:48:5f:57:9f:8e:c5:5d:75:b5:7f:f0: e6:56:5a:ef:cc:30:c6:5e:51:c1:53:6b:cb:03:3f: 67:4a:37:8b:03:a4:33:1f:52:2e:99:d8:c6:5e:97: 3a:f0:a1:21:55:97:3f:47:7a:c6:d4:b3:7c:d7:6e: f2:fb:0e:9f:0a:d7:56:29:91:e6:43:d4:34:29:d8: 58:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:31:03:83:BC:C0:26:0A:5D:1F:0E:A6:AB:42:DB:29:9F:49:60:AA X509v3 Authority Key Identifier: keyid:AD:4D:65:3B:83:5C:4E:1D:E9:8E:C6:63:76:88:9A:9A:83:76:4B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:33:37:04:34:55:81:41:80:cb:d4:23:5a:03:b0:1b:6b:92: a0:43:1f:28:5b:a1:e5:95:41:6e:8b:e5:b0:a5:75:d9:97:3d: 62:38:4f:5b:e5:4f:5b:1c:74:d8:69:3b:19:6e:86:ce:6f:74: bf:ed:5a:67:e2:54:f2:7e:f8:3e:ee:5e:ce:50:ba:9d:b7:a9: 42:62:c4:95:48:c0:31:bd:90:fd:07:e0:7b:ae:02:1c:03:fe: 78:61:be:6e:30:f0:7f:90:ab:94:d7:74:18:55:92:45:01:6a: 0c:a4:d3:9a:56:73:49:2a:a3:46:a3:f7:71:f9:ea:37:77:b6: 29:e9:56:c7:d9:7c:18:6a:23:5e:4a:09:f4:58:01:df:27:8d: 31:13:2b:8c:af:d7:63:ff:10:f5:8c:04:97:df:4c:d3:92:e6: 05:3a:7a:58:e1:aa:af:09:90:c8:b8:e5:2a:86:ba:54:b1:c8: eb:83:c6:a0:61:c8:cc:67:7b:4b:40:50:c8:db:f5:5c:f7:2e: 88:8a:e3:3b:3d:5a:a4:ca:a2:52:12:ef:53:a1:5c:ed:56:f5: 85:a8:fc:61:6c:7a:4e:93:17:f1:cd:b6:01:1d:b3:44:bc:01: c6:db:17:bb:ae:de:c1:0a:dc:27:07:b5:18:9b:ba:39:16:e2: a6:11:61:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI2NjkxMTAvBgNVBAUTKEFENEQ2NTNCODM1QzRFMURFOThFQzY2Mzc2ODg5QTlB ODM3NjRCMDIwHhcNMjUwNjE0MTQ0MzU2WhcNMjUwNjIxMTQ0MzU2WjAYMRYwFAYD VQQDEw02ODRkOGFhYy1jMjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCVXF6KOiibpnjbLgJUrv5BKHWbI6GiH3GcU++3G3v/Ol/N5a4+74qEmqfgG gYZqD+MoWgCMwVuSnROcZznBnbrwAuG8z431N3NGbXzyxR0nbvCkkb9nmoyhh1QR TzaWXwg2XxN8d8Jsnj5FlUMuxveBkQwgVdRNN9jxnrquVn9pLVCjkX/Mdy/y9Bwq m+7y5WztRgPoWcPaISTmDdyYHxoN7LoyBFgVzVnMTqNeCsDHQjvQFafvSF9Xn47F XXW1f/DmVlrvzDDGXlHBU2vLAz9nSjeLA6QzH1IumdjGXpc68KEhVZc/R3rG1LN8 127y+w6fCtdWKZHmQ9Q0KdhYzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIxA4O8 wCYKXR8OpqtC2ymfSWCqMB8GA1UdIwQYMBaAFK1NZTuDXE4d6Y7GY3aImpqDdksC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjY2OS85RDVCRjZGRTFE OTIxMUUyODg2RUFBRjUwOEIwMkNEMi9yVTFsTzROY1RoM3Bqc1pqZG9pYW1vTjJT d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JVMWxPNE5jVGgzcGpzWmpkb2lhbW9OMlN3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjY2OS85RDVCRjZGRTFEOTIxMUUyODg2RUFBRjUwOEIwMkNEMi9yVTFsTzROY1Ro M3Bqc1pqZG9pYW1vTjJTd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjMzcENFWBQYDL1CNaA7Aba5KgQx8oW6HllUFui+WwpXXZlz1iOE9b 5U9bHHTYaTsZbobOb3S/7Vpn4lTyfvg+7l7OULqdt6lCYsSVSMAxvZD9B+B7rgIc A/54Yb5uMPB/kKuU13QYVZJFAWoMpNOaVnNJKqNGo/dx+eo3d7Yp6VbH2XwYaiNe Sgn0WAHfJ40xEyuMr9dj/xD1jASX30zTkuYFOnpY4aqvCZDIuOUqhrpUscjrg8ag YcjMZ3tLQFDI2/Vc9y6IiuM7PVqkyqJSEu9ToVztVvWFqPxhbHpOkxfxzbYBHbNE vAHG2xe7rt7BCtwnB7UYm7o5FuKmEWG/ -----END CERTIFICATE-----Generated at Sat Jun 14 19:35:12 2025 by rpki-client