$ rpki-client -vvf rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft File: UHF-n6DMN8QGf4M-kPt-chDzxZM.mft (raw, json) Hash identifier: IWpFoApt+i0zZgS2hI89m8Tka8AVNkbl2ixexzBCSE8= Subject key identifier: F7:EF:78:00:81:F1:AB:6D:C5:D9:40:00:5F:3D:9E:1B:E1:41:C7:A8 Authority key identifier: 50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93 Certificate issuer: /CN=A917552B/serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593 Certificate serial: 076E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft Manifest number: 0768 Signing time: Sat 14 Jun 2025 21:20:24 +0000 Manifest this update: Sat 14 Jun 2025 21:20:23 +0000 Manifest next update: Sat 21 Jun 2025 21:20:23 +0000 Files and hashes: 1: UHF-n6DMN8QGf4M-kPt-chDzxZM.crl (hash: LY1wVOfUNXwLWgvozGmrYOYzOO4TBmEqq8nu7B8iIL8=) 2: BDAC3ACA1E7111EB93874336C4F9AE02.roa (hash: nkmWs3iqAu0OPxxjsFN0b2stVXj3stQjYTM1Oq4SJSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1902 (0x76e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917552B, serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593 Validity Not Before: Jun 14 21:20:23 2025 GMT Not After : Jun 21 21:20:23 2025 GMT Subject: CN=684de797-fb44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ab:33:f0:69:6b:4a:a4:8d:d8:c3:75:eb:c8: 99:e1:bf:02:c0:2c:d5:6a:27:be:65:5a:a0:0e:c1: 30:d8:f3:25:c1:a7:ed:02:7f:6a:cf:05:05:d7:05: bf:d7:6b:2e:6e:b5:98:42:bc:02:0d:c9:79:cb:fd: 4f:a2:2d:40:43:df:3c:35:84:a9:50:e3:44:0c:79: f2:b1:cc:bb:ea:d6:4c:9b:61:74:47:66:71:08:d9: 9a:1b:80:24:37:82:f6:38:f3:d3:d3:e1:3e:26:e5: 5a:d9:87:37:c1:74:63:ff:75:5a:df:13:38:eb:01: 6e:25:b3:53:7b:41:0a:3b:ea:35:68:03:7f:96:97: 5d:48:5c:30:14:70:4a:d7:8f:f6:9d:ce:59:36:30: 45:6f:f3:0a:a0:f8:f6:37:97:8d:30:80:53:3e:28: 93:cb:80:aa:60:5d:d1:78:7a:03:8b:89:71:ad:d1: 9e:bd:e3:ab:c5:c4:34:2f:f5:70:d6:11:01:ff:18: fe:d2:3e:e7:3c:9d:83:d9:3e:e4:8e:6e:37:fb:93: 7b:46:96:6c:aa:1f:b8:cb:7a:f6:a7:a3:1e:2a:88: 28:21:46:04:18:35:8e:45:b8:53:e7:bb:95:18:83: 09:ac:28:44:58:2c:bd:a8:9e:53:9e:52:99:19:c1: ff:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EF:78:00:81:F1:AB:6D:C5:D9:40:00:5F:3D:9E:1B:E1:41:C7:A8 X509v3 Authority Key Identifier: keyid:50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:fb:7b:7f:e4:7d:07:61:c4:f7:49:87:85:fc:e8:4b:45:5d: 65:7e:13:f6:c1:f1:6b:99:10:5f:36:37:26:45:1d:78:71:54: f0:ec:dc:8d:9b:d8:88:fe:49:43:48:21:29:9b:ac:45:66:24: 00:ce:39:03:ab:c5:3b:2b:f2:4a:eb:7a:2c:0a:3d:92:47:ee: 2e:f3:fe:5e:e6:3d:e6:0c:93:6e:7e:29:31:12:b4:ab:e8:7c: 0e:00:f1:54:6c:5f:a0:e0:57:50:62:a1:90:6f:c2:4e:8a:91: d7:a3:0e:4a:4e:d3:61:d5:12:59:bd:ed:09:25:90:5a:41:fd: 61:78:6d:35:11:d7:05:af:fc:98:8a:fe:82:fa:1d:c5:5d:f3: d8:b2:9c:74:76:f5:b3:ce:75:7e:28:b6:40:86:ab:5d:5b:95: 2a:8b:23:4c:9c:91:43:71:8b:1d:26:4e:0d:dd:29:b3:52:b5: 5c:4e:65:b7:b6:89:3e:ed:93:de:f5:dd:0b:7b:8d:98:61:24: 30:16:52:14:f1:8d:17:b8:8a:d1:20:a4:91:88:be:f5:4f:30: eb:b8:a8:0b:66:21:07:4e:41:bd:b4:db:0a:09:fe:6d:69:b4: 8c:67:ed:30:b3:ee:c1:e1:3d:0f:73:45:6f:cd:67:9f:86:c6: 9e:df:30:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1MkIxMTAvBgNVBAUTKDUwNzE3RTlGQTBDQzM3QzQwNjdGODMzRTkwRkI3RTcy MTBGM0M1OTMwHhcNMjUwNjE0MjEyMDIzWhcNMjUwNjIxMjEyMDIzWjAYMRYwFAYD VQQDEw02ODRkZTc5Ny1mYjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKsz8GlrSqSN2MN168iZ4b8CwCzVaie+ZVqgDsEw2PMlwaftAn9qzwUF1wW/ 12subrWYQrwCDcl5y/1Poi1AQ988NYSpUONEDHnyscy76tZMm2F0R2ZxCNmaG4Ak N4L2OPPT0+E+JuVa2Yc3wXRj/3Va3xM46wFuJbNTe0EKO+o1aAN/lpddSFwwFHBK 14/2nc5ZNjBFb/MKoPj2N5eNMIBTPiiTy4CqYF3ReHoDi4lxrdGeveOrxcQ0L/Vw 1hEB/xj+0j7nPJ2D2T7kjm43+5N7RpZsqh+4y3r2p6MeKogoIUYEGDWORbhT57uV GIMJrChEWCy9qJ5TnlKZGcH/GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfveACB 8attxdlAAF89nhvhQceoMB8GA1UdIwQYMBaAFFBxfp+gzDfEBn+DPpD7fnIQ88WT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTUyQi9EODNENjI5NDFF NkYxMUVCQUExMzlFMzNDNEY5QUUwMi9VSEYtbjZETU44UUdmNE0ta1B0LWNoRHp4 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIRi1uNkRNTjhRR2Y0TS1rUHQtY2hEenhaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTUyQi9EODNENjI5NDFFNkYxMUVCQUExMzlFMzNDNEY5QUUwMi9VSEYtbjZETU44 UUdmNE0ta1B0LWNoRHp4Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2+3t/5H0HYcT3SYeF/OhLRV1lfhP2wfFrmRBfNjcmRR14cVTw7NyN m9iI/klDSCEpm6xFZiQAzjkDq8U7K/JK63osCj2SR+4u8/5e5j3mDJNufikxErSr 6HwOAPFUbF+g4FdQYqGQb8JOipHXow5KTtNh1RJZve0JJZBaQf1heG01EdcFr/yY iv6C+h3FXfPYspx0dvWzznV+KLZAhqtdW5UqiyNMnJFDcYsdJk4N3SmzUrVcTmW3 tok+7ZPe9d0Le42YYSQwFlIU8Y0XuIrRIKSRiL71TzDruKgLZiEHTkG9tNsKCf5t abSMZ+0ws+7B4T0Pc0VvzWefhsae3zCl -----END CERTIFICATE-----Generated at Sun Jun 15 10:23:57 2025 by rpki-client