$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft File: ULpjuT-CkSle5HAxuWtFzaXCSw0.mft (raw, json) Hash identifier: uiKQ/pHXcvEY1fknuj6tntaPXhJEzoDhVQotPScklow= Subject key identifier: 79:B7:F5:E0:78:AF:2C:62:8B:AF:7D:F6:B3:29:DC:EC:31:DD:29:9C Authority key identifier: 50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D Certificate issuer: /CN=A9199CFF/serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft Manifest number: 4A Signing time: Fri 13 Jun 2025 06:14:59 +0000 Manifest this update: Fri 13 Jun 2025 06:14:58 +0000 Manifest next update: Fri 20 Jun 2025 06:14:58 +0000 Files and hashes: 1: ULpjuT-CkSle5HAxuWtFzaXCSw0.crl (hash: KVcv5rNajvIHWbhOmpaRrXAoofdSw6ioKwPxh+9ZHOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CFF, serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D Validity Not Before: Jun 13 06:14:58 2025 GMT Not After : Jun 20 06:14:58 2025 GMT Subject: CN=684bc1e2-6918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9e:cb:c3:e0:29:86:df:a5:18:29:67:3c:31: 9e:72:6e:e4:38:87:3b:35:f8:a3:09:5f:0a:aa:a7: e6:08:ef:4e:11:75:26:43:98:cd:2c:01:37:5d:bc: 5f:c2:9e:86:c3:05:da:81:7a:71:c4:8a:17:72:22: 12:d1:a7:28:af:78:4a:f3:96:1b:e1:17:47:aa:5c: 46:a8:df:e4:06:34:e9:84:2a:ba:b0:ac:1c:c6:44: 39:30:d8:f0:4b:bb:05:f1:24:64:25:27:43:8a:76: 8f:5e:b5:69:c7:d7:50:a8:84:69:c0:48:c9:50:c1: 28:ce:dc:95:50:9b:0e:cb:86:02:74:0a:36:dc:45: 37:d4:c4:5c:76:9e:97:ef:69:11:f8:db:c7:1b:21: 43:82:b7:5a:87:a1:1f:52:6d:f1:71:00:5d:ba:f0: 73:30:e9:e2:af:1d:76:39:fd:34:cb:9c:9c:f8:91: eb:28:83:a1:45:be:a7:f9:d3:c6:74:fd:41:e5:88: 33:79:71:17:3d:85:23:24:27:de:51:2c:ad:c7:d2: 19:35:2d:0f:0e:eb:1c:ad:f4:b2:44:c4:7b:a1:8b: e8:c0:0c:e3:9e:3c:fa:c0:df:d5:5b:0a:94:48:48: 13:3b:8d:6b:35:6f:c6:46:b2:ce:8c:95:d6:85:11: 81:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B7:F5:E0:78:AF:2C:62:8B:AF:7D:F6:B3:29:DC:EC:31:DD:29:9C X509v3 Authority Key Identifier: keyid:50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f3:fd:5f:38:f2:8c:d0:d6:7c:38:af:73:18:6f:d5:2c:a2:32: be:4a:b3:56:80:94:69:2b:e2:e5:d9:a3:67:7b:5d:94:98:b2: db:82:6f:cb:35:46:6d:fe:8f:36:a4:5f:7b:13:3e:31:e9:e4: a8:26:a9:e2:04:79:c3:74:bf:7e:dd:fd:8d:e6:fc:79:72:c6: 07:c6:aa:cd:fd:9a:00:6c:79:bd:ad:09:50:79:e0:36:58:3a: 13:70:7b:f1:6a:b6:b0:f4:4f:89:13:d2:52:40:d2:36:eb:5c: de:44:54:f0:9f:35:d1:62:d2:c2:22:ef:22:f2:2b:60:c5:db: 4c:2a:7e:e9:f6:68:36:63:76:ab:c0:b3:cb:14:b9:45:9e:c5: 5f:9b:d8:27:75:f9:c1:70:9e:9e:cc:c5:33:ad:1d:67:69:9f: c0:bd:06:10:a0:e6:15:78:0e:b7:f6:fc:84:56:99:8a:7b:86: 3c:dd:c1:2e:e5:cf:e2:1c:1f:cc:85:2e:89:13:9a:cb:35:fd: 5d:51:02:17:9e:d6:ea:e0:30:28:8e:46:bd:4b:a2:01:5c:18: 69:e2:db:d9:4f:8b:c7:09:7d:c1:41:29:16:38:bf:fa:58:6d: bc:67:10:14:a6:f7:e3:49:05:1d:65:92:3e:64:af:50:4b:57: ae:3d:99:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUNGRjExMC8GA1UEBRMoNTBCQTYzQjkzRjgyOTEyOTVFRTQ3MDMxQjk2QjQ1Q0RB NUMyNEIwRDAeFw0yNTA2MTMwNjE0NThaFw0yNTA2MjAwNjE0NThaMBgxFjAUBgNV BAMTDTY4NGJjMWUyLTY5MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfnsvD4CmG36UYKWc8MZ5ybuQ4hzs1+KMJXwqqp+YI704RdSZDmM0sATddvF/C nobDBdqBenHEihdyIhLRpyiveErzlhvhF0eqXEao3+QGNOmEKrqwrBzGRDkw2PBL uwXxJGQlJ0OKdo9etWnH11CohGnASMlQwSjO3JVQmw7LhgJ0CjbcRTfUxFx2npfv aRH428cbIUOCt1qHoR9SbfFxAF268HMw6eKvHXY5/TTLnJz4kesog6FFvqf508Z0 /UHliDN5cRc9hSMkJ95RLK3H0hk1LQ8O6xyt9LJExHuhi+jADOOePPrA39VbCpRI SBM7jWs1b8ZGss6MldaFEYGnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUebf14Hiv LGKLr332sync7DHdKZwwHwYDVR0jBBgwFoAUULpjuT+CkSle5HAxuWtFzaXCSw0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5Q0ZGLzJBRTE2QTU4RDdF MDExRUY4QjE3M0QyRkM0RjlBRTAyL1VMcGp1VC1Da1NsZTVIQXh1V3RGemFYQ1N3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVUxwanVULUNrU2xlNUhBeHVXdEZ6YVhDU3cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 Q0ZGLzJBRTE2QTU4RDdFMDExRUY4QjE3M0QyRkM0RjlBRTAyL1VMcGp1VC1Da1Ns ZTVIQXh1V3RGemFYQ1N3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAPP9XzjyjNDWfDivcxhv1SyiMr5Ks1aAlGkr4uXZo2d7XZSYstuCb8s1 Rm3+jzakX3sTPjHp5KgmqeIEecN0v37d/Y3m/HlyxgfGqs39mgBseb2tCVB54DZY OhNwe/FqtrD0T4kT0lJA0jbrXN5EVPCfNdFi0sIi7yLyK2DF20wqfun2aDZjdqvA s8sUuUWexV+b2Cd1+cFwnp7MxTOtHWdpn8C9BhCg5hV4Drf2/IRWmYp7hjzdwS7l z+IcH8yFLokTmss1/V1RAhee1urgMCiORr1LogFcGGni29lPi8cJfcFBKRY4v/pY bbxnEBSm9+NJBR1lkj5kr1BLV649mfk= -----END CERTIFICATE-----Generated at Sat Jun 14 19:09:46 2025 by rpki-client