$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft File: UPqOjU4pl_9d5gjaeMrGVMzRabY.mft (raw, json) Hash identifier: EqCWVxoULr6he8gQY89WKlIlEJ4qyUflxcJGwqGmUHA= Subject key identifier: 75:EE:B1:F1:AA:24:44:64:60:12:0A:7F:92:E8:0B:4C:8B:8F:4C:20 Authority key identifier: 50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6 Certificate issuer: /CN=A91AEE26/serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6 Certificate serial: 08F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft Manifest number: 08EB Signing time: Mon 16 Jun 2025 20:13:17 +0000 Manifest this update: Mon 16 Jun 2025 20:13:16 +0000 Manifest next update: Mon 23 Jun 2025 20:13:16 +0000 Files and hashes: 1: UPqOjU4pl_9d5gjaeMrGVMzRabY.crl (hash: 6sccWW2Fi83slMtG2S6W5GWCl/+StTr2rcPX6iWK+60=) 2: CD095756AF1211EAA486D140C4F9AE02.roa (hash: Z259vozdwtPUaPkxXgMTZo8w1xwG+zonsUhvjUkyWKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 20:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2292 (0x8f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE26, serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6 Validity Not Before: Jun 16 20:13:16 2025 GMT Not After : Jun 23 20:13:16 2025 GMT Subject: CN=68507adc-3c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:3a:0d:2c:1e:68:d8:1b:4f:0a:51:b0:f8: 96:ee:88:41:14:c0:26:90:f7:d1:5a:bc:77:59:e8: ee:42:17:72:14:60:ac:5f:71:b4:b8:47:52:79:b3: b8:9c:79:dc:34:ae:1c:c9:00:d1:39:d1:f5:39:dd: 81:27:81:46:e3:d4:f3:43:09:6d:d2:d2:e5:7a:6b: 73:f4:a6:85:fc:8f:d8:36:32:6e:45:15:15:db:99: 86:20:65:70:79:f4:85:18:e5:34:ab:5f:f1:26:b5: 7f:49:ea:2d:5a:70:d3:49:31:ad:7f:35:fb:22:4a: 98:1b:3f:47:30:38:d2:4f:83:9d:46:a6:0a:22:6b: 12:9a:42:e9:1a:fa:58:c3:c0:de:94:cb:c1:51:0a: b8:40:38:30:1a:52:85:29:8e:db:b2:10:57:14:fa: ea:43:66:41:d0:bf:f6:96:2f:35:a8:27:91:8b:e3: 89:e8:0c:42:c2:9d:9d:7e:cc:79:28:c3:15:6b:a7: dd:74:11:63:c9:7f:cc:7a:77:22:c3:5d:c9:23:0e: cb:a3:5f:fe:bb:ce:98:ce:76:3b:bf:bc:df:e7:1b: 74:b4:8e:36:49:03:81:f0:cf:50:50:de:31:d6:bf: 3c:de:a0:17:fa:68:30:1e:c4:7b:c0:7a:86:3a:d7: ef:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EE:B1:F1:AA:24:44:64:60:12:0A:7F:92:E8:0B:4C:8B:8F:4C:20 X509v3 Authority Key Identifier: keyid:50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:dc:d6:bc:06:76:a9:4a:b9:a0:37:15:83:b2:7f:e5:29:6e: d6:5b:d3:e0:7e:98:ba:49:f5:a4:f2:0f:24:05:33:f9:04:05: fb:87:55:2a:2e:d1:60:2b:05:d0:45:35:c8:d3:df:5c:55:b0: 34:98:ef:b8:37:8c:98:a9:58:19:75:25:bc:00:02:b9:3e:0d: 6c:5c:ac:04:80:a7:7e:35:8b:d9:ca:96:91:4a:fe:c9:f3:31: 82:2f:6a:73:91:b7:69:04:a9:57:2f:e5:86:c2:68:c6:8a:45: 9a:43:fa:65:36:6c:d1:5b:53:16:b0:ee:23:47:a2:45:fe:c7: bb:5a:94:e5:d0:93:24:1b:66:5b:69:38:be:5f:5e:8a:97:84: ae:c7:4b:61:2b:aa:cb:25:f3:5c:d1:83:95:6a:83:5b:5c:ab: c7:bb:56:e9:45:62:ca:b5:e5:fb:31:0d:00:44:1b:ad:54:81: fa:d9:ef:ca:b2:a8:2e:ce:67:f3:e2:7c:a2:fe:19:b0:d8:11: ab:ce:81:15:1e:85:fe:56:2c:7b:e8:a0:b1:9d:8c:46:a7:c7: 39:09:fc:cf:b7:f3:ae:ec:5a:f7:41:a6:b3:7b:aa:93:a1:11: 82:ee:49:e7:ae:b7:67:6c:25:88:94:bf:e9:d0:0a:d2:9d:55: 59:49:14:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFMjYxMTAvBgNVBAUTKDUwRkE4RThENEUyOTk3RkY1REU2MDhEQTc4Q0FDNjU0 Q0NEMTY5QjYwHhcNMjUwNjE2MjAxMzE2WhcNMjUwNjIzMjAxMzE2WjAYMRYwFAYD VQQDEw02ODUwN2FkYy0zYzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLk6DSweaNgbTwpRsPiW7ohBFMAmkPfRWrx3WejuQhdyFGCsX3G0uEdSebO4 nHncNK4cyQDROdH1Od2BJ4FG49TzQwlt0tLlemtz9KaF/I/YNjJuRRUV25mGIGVw efSFGOU0q1/xJrV/SeotWnDTSTGtfzX7IkqYGz9HMDjST4OdRqYKImsSmkLpGvpY w8DelMvBUQq4QDgwGlKFKY7bshBXFPrqQ2ZB0L/2li81qCeRi+OJ6AxCwp2dfsx5 KMMVa6fddBFjyX/Menciw13JIw7Lo1/+u86YznY7v7zf5xt0tI42SQOB8M9QUN4x 1r883qAX+mgwHsR7wHqGOtfvYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXusfGq JERkYBIKf5LoC0yLj0wgMB8GA1UdIwQYMBaAFFD6jo1OKZf/XeYI2njKxlTM0Wm2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUUyNi9BN0MxNjEwQ0FG MTAxMUVBQkY2MUQzM0FDNEY5QUUwMi9VUHFPalU0cGxfOWQ1Z2phZU1yR1ZNelJh YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VQcU9qVTRwbF85ZDVnamFlTXJHVk16UmFiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUUyNi9BN0MxNjEwQ0FGMTAxMUVBQkY2MUQzM0FDNEY5QUUwMi9VUHFPalU0cGxf OWQ1Z2phZU1yR1ZNelJhYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR3Na8BnapSrmgNxWDsn/lKW7WW9Pgfpi6SfWk8g8kBTP5BAX7h1Uq LtFgKwXQRTXI099cVbA0mO+4N4yYqVgZdSW8AAK5Pg1sXKwEgKd+NYvZypaRSv7J 8zGCL2pzkbdpBKlXL+WGwmjGikWaQ/plNmzRW1MWsO4jR6JF/se7WpTl0JMkG2Zb aTi+X16Kl4Sux0thK6rLJfNc0YOVaoNbXKvHu1bpRWLKteX7MQ0ARButVIH62e/K sqguzmfz4nyi/hmw2BGrzoEVHoX+Vix76KCxnYxGp8c5CfzPt/Ou7Fr3Qaaze6qT oRGC7knnrrdnbCWIlL/p0ArSnVVZSRTB -----END CERTIFICATE-----Generated at Tue Jun 17 09:00:25 2025 by rpki-client