$ rpki-client -vvf rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft File: UudzDz1hVWPrWMn6dZKhvYBbWjU.mft (raw, json) Hash identifier: GMhxjtiVpE7cjm8u6sHYn5d4xqt9sANKr/+EjI1v790= Subject key identifier: 95:66:13:D1:A7:19:D0:7E:E5:7A:1C:91:DB:C5:D3:B2:B6:C5:75:98 Authority key identifier: 52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 Certificate issuer: /CN=A914D9BE/serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft Manifest number: 01E0 Signing time: Thu 19 Jun 2025 02:06:39 +0000 Manifest this update: Thu 19 Jun 2025 02:06:39 +0000 Manifest next update: Thu 26 Jun 2025 02:06:39 +0000 Files and hashes: 1: UudzDz1hVWPrWMn6dZKhvYBbWjU.crl (hash: NNgl7Wk6a9sf27gfA2e4Z8QsJl2bVC345BWPA3yxba4=) 2: AE148B2A6BB911ED97343873C4F9AE02.roa (hash: h7PFINLKglbbD51solfuF7q/5uroEa7Bk3jUBzQnwh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D9BE, serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Validity Not Before: Jun 19 02:06:39 2025 GMT Not After : Jun 26 02:06:39 2025 GMT Subject: CN=685370af-298d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c8:3e:c9:6b:1a:4f:ad:80:54:89:ff:2e:18: 20:3e:5d:ad:40:aa:13:e2:8d:f0:15:c6:90:8f:e1: d8:db:72:25:fe:16:19:d2:80:cf:8c:35:68:4b:d1: 5f:d2:fa:6a:16:70:ce:12:1c:76:95:f1:19:fd:db: 93:bb:67:71:0a:23:4b:c8:b8:63:aa:ff:f8:5e:9d: 38:40:34:eb:ad:5a:f9:92:91:41:f5:8c:9d:5f:da: a0:fb:af:75:41:4c:58:f7:80:21:aa:74:d1:41:ff: fe:13:41:30:5c:c9:14:3b:f8:f2:68:36:55:04:c7: ef:9a:ea:35:fc:9e:f4:d6:38:7f:16:39:5c:5f:f2: 7f:bd:64:44:9c:39:27:40:21:1d:8c:fe:3f:c8:47: 73:04:1e:74:52:ad:5d:a2:70:78:12:c7:9b:7a:58: b9:08:a5:f0:b5:ca:66:6e:d9:1d:0b:0a:cb:95:6d: 6a:aa:d9:95:e1:2a:11:f9:3a:cf:cd:a7:67:7b:59: fd:94:d8:93:c2:28:9b:3d:cc:a0:b9:38:28:53:59: a3:ec:69:f8:d6:bb:9d:cc:e6:54:5c:49:eb:79:63: 74:2d:79:f3:2d:64:83:77:bc:88:19:ab:3e:de:71: d1:bd:e5:c8:19:12:38:6c:49:67:8b:d6:a3:e3:0c: 58:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:66:13:D1:A7:19:D0:7E:E5:7A:1C:91:DB:C5:D3:B2:B6:C5:75:98 X509v3 Authority Key Identifier: keyid:52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:a9:ed:c0:0f:dc:60:da:de:4d:bd:3e:56:31:bf:be:9a:e3: 2a:53:33:55:53:d7:bb:eb:cb:6b:b7:59:3b:de:06:0e:3e:ce: d6:db:89:cd:70:6b:ca:7f:73:5e:c3:3a:4b:42:68:de:9d:d0: 5b:fb:c1:d2:7f:05:78:ff:d7:d6:58:6c:26:2b:89:63:40:e3: 09:23:b5:0c:81:fc:99:a7:a1:fc:5b:0b:8a:55:e8:43:83:e7: 3c:1a:c4:41:14:36:1b:47:a5:44:d2:7b:d4:d3:22:18:b0:c8: 72:43:6d:c9:53:f4:8e:00:41:f1:2e:ff:6c:14:19:c4:b9:e6: c4:03:6f:e3:13:d6:44:74:fc:bb:3f:ea:bf:4c:29:c6:86:02: fa:0a:36:ea:32:c0:ad:74:78:95:f4:38:a7:8c:34:f9:ad:b0: 38:4f:96:51:3d:12:f5:9b:01:ec:60:9a:2a:58:dd:fe:53:ad: 0e:46:4f:17:5d:91:6d:ad:95:eb:bd:df:08:dd:91:7b:80:d8: 38:ad:ae:c8:33:fd:00:e5:e4:69:f8:6f:21:8b:4a:e0:c4:a2: f7:a1:62:8d:1c:8a:d0:f7:f3:e4:e1:13:7f:ef:8b:c7:fd:ac: f4:8b:27:e0:80:6d:32:00:65:2d:c3:15:03:90:e3:39:0b:fc: 65:d6:46:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ5QkUxMTAvBgNVBAUTKDUyRTc3MzBGM0Q2MTU1NjNFQjU4QzlGQTc1OTJBMUJE ODA1QjVBMzUwHhcNMjUwNjE5MDIwNjM5WhcNMjUwNjI2MDIwNjM5WjAYMRYwFAYD VQQDEw02ODUzNzBhZi0yOThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcg+yWsaT62AVIn/LhggPl2tQKoT4o3wFcaQj+HY23Il/hYZ0oDPjDVoS9Ff 0vpqFnDOEhx2lfEZ/duTu2dxCiNLyLhjqv/4Xp04QDTrrVr5kpFB9YydX9qg+691 QUxY94AhqnTRQf/+E0EwXMkUO/jyaDZVBMfvmuo1/J701jh/FjlcX/J/vWREnDkn QCEdjP4/yEdzBB50Uq1donB4Esebeli5CKXwtcpmbtkdCwrLlW1qqtmV4SoR+TrP zadne1n9lNiTwiibPcyguTgoU1mj7Gn41rudzOZUXEnreWN0LXnzLWSDd7yIGas+ 3nHRveXIGRI4bElni9aj4wxYOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVmE9Gn GdB+5XockdvF07K2xXWYMB8GA1UdIwQYMBaAFFLncw89YVVj61jJ+nWSob2AW1o1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDlCRS82RkNGQjg2NjZC QjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZXUHJXTW42ZFpLaHZZQmJX alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V1ZHpEejFoVldQcldNbjZkWktodllCYldqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDlCRS82RkNGQjg2NjZCQjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZX UHJXTW42ZFpLaHZZQmJXalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgqe3AD9xg2t5NvT5WMb++muMqUzNVU9e768trt1k73gYOPs7W24nN cGvKf3NewzpLQmjendBb+8HSfwV4/9fWWGwmK4ljQOMJI7UMgfyZp6H8WwuKVehD g+c8GsRBFDYbR6VE0nvU0yIYsMhyQ23JU/SOAEHxLv9sFBnEuebEA2/jE9ZEdPy7 P+q/TCnGhgL6CjbqMsCtdHiV9DinjDT5rbA4T5ZRPRL1mwHsYJoqWN3+U60ORk8X XZFtrZXrvd8I3ZF7gNg4ra7IM/0A5eRp+G8hi0rgxKL3oWKNHIrQ9/Pk4RN/74vH /az0iyfggG0yAGUtwxUDkOM5C/xl1kZw -----END CERTIFICATE-----Generated at Thu Jun 19 22:03:13 2025 by rpki-client