$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft File: ujgt6jovW4xMIgXskp9gG-NP538.mft (raw, json) Hash identifier: GPddIxQ9f/fEYEpIpOdTFP7vlRjouXwjpk6w+hp/+Hw= Subject key identifier: 3D:AB:CB:2F:D8:D8:E2:56:0C:FE:B1:57:E7:64:ED:BE:66:A2:C9:9A Authority key identifier: BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F Certificate issuer: /CN=A91B7B34/serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F Certificate serial: 0C50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft Manifest number: 0C46 Signing time: Mon 16 Jun 2025 18:24:47 +0000 Manifest this update: Mon 16 Jun 2025 18:24:47 +0000 Manifest next update: Mon 23 Jun 2025 18:24:47 +0000 Files and hashes: 1: ujgt6jovW4xMIgXskp9gG-NP538.crl (hash: sTMjUk+Jz7uUqxwQkxXA99lKG289HCgmYGhzXD3CpN0=) 2: 52E56FA806C711EA84978821C4F9AE02.roa (hash: pC6YASmlOW3gbC5Njuzzo1yhASqi/WroinaiHpfVYXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 18:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3152 (0xc50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B34, serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F Validity Not Before: Jun 16 18:24:47 2025 GMT Not After : Jun 23 18:24:47 2025 GMT Subject: CN=6850616f-018b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8f:cc:b4:6f:95:f3:b4:ab:8a:21:3a:1c:17: 78:99:5a:39:a7:15:29:04:43:5a:17:df:8c:73:05: a3:52:81:c4:26:0b:6a:59:49:6b:14:e1:37:3d:0d: fe:5f:10:20:42:35:9e:34:12:52:87:7f:40:8d:51: b1:20:d4:31:63:06:25:cb:f3:64:97:be:1b:19:bd: 85:3f:8d:66:e3:6f:55:28:6f:f8:d1:1d:b6:cd:1c: 30:13:f7:80:91:b5:52:7d:8a:cb:8f:c7:50:fa:cd: bf:3a:4c:5f:67:e6:a6:9b:91:f6:6d:3c:de:69:83: e8:99:41:e2:f9:64:51:27:5a:05:ac:bf:a5:2b:c2: 4f:27:bf:06:d4:3c:f2:b7:ac:13:ff:65:bc:92:97: ea:4c:14:0b:26:d1:d0:a1:6a:c1:60:1d:24:32:a3: f9:cf:90:3c:50:c9:c1:08:bb:4c:1c:8f:db:55:91: 58:50:08:b8:aa:74:52:57:dd:bc:fe:d9:a3:68:db: 58:41:b8:04:f9:ad:d2:69:02:eb:b5:00:b3:08:b7: 11:96:29:f3:07:c7:35:71:6d:c6:87:cf:7c:76:08: bb:74:8c:b9:78:55:85:37:e5:ba:03:b3:fe:4b:41: 4d:f5:45:49:af:d6:b9:31:6f:c8:ac:aa:28:cc:67: 0c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AB:CB:2F:D8:D8:E2:56:0C:FE:B1:57:E7:64:ED:BE:66:A2:C9:9A X509v3 Authority Key Identifier: keyid:BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:23:38:95:d7:b2:d5:3b:a4:84:c8:61:0f:c6:47:ed:c9:d2: 1e:0b:fb:f0:f9:73:db:75:6b:a3:30:76:62:b9:8f:53:09:99: c9:f2:a7:b5:53:39:c7:2f:6f:b4:11:cb:7a:a5:17:e5:7a:79: 04:30:bb:ec:04:cb:e2:c3:e5:71:c6:f1:64:da:b2:cc:07:27: 7f:b8:22:ac:99:2f:16:8c:7c:77:cb:51:d9:6d:cf:f7:6f:18: ca:19:9c:60:f4:af:ad:f4:56:1d:bd:d2:34:bc:9b:3c:11:30: 02:42:77:93:0f:8b:b4:6d:1e:3b:01:34:ea:f0:0b:b2:9d:b3: 01:65:c0:4b:8b:89:ae:74:fb:98:d5:77:9c:af:65:65:7c:04: a8:b0:01:72:a6:20:83:61:62:86:18:1a:16:10:dd:b0:12:51: db:13:64:cf:13:77:cb:ad:83:62:6b:c9:7c:da:71:93:a1:96: a6:d2:aa:75:73:a7:bd:4c:98:39:32:02:70:ed:ac:1c:70:cb: f9:9c:88:1b:0e:36:60:ce:0a:56:51:52:5f:38:c4:c4:8e:98: 94:c0:93:36:7c:6c:d2:6e:f2:dd:90:9b:c0:38:28:3d:f3:a4: d7:b9:a2:e4:fd:ef:06:65:bb:98:f5:b5:21:62:40:c7:63:c0: 25:88:84:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMzQxMTAvBgNVBAUTKEJBMzgyREVBM0EyRjVCOEM0QzIyMDVFQzkyOUY2MDFC RTM0RkU3N0YwHhcNMjUwNjE2MTgyNDQ3WhcNMjUwNjIzMTgyNDQ3WjAYMRYwFAYD VQQDEw02ODUwNjE2Zi0wMThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2o/MtG+V87SriiE6HBd4mVo5pxUpBENaF9+McwWjUoHEJgtqWUlrFOE3PQ3+ XxAgQjWeNBJSh39AjVGxINQxYwYly/Nkl74bGb2FP41m429VKG/40R22zRwwE/eA kbVSfYrLj8dQ+s2/OkxfZ+amm5H2bTzeaYPomUHi+WRRJ1oFrL+lK8JPJ78G1Dzy t6wT/2W8kpfqTBQLJtHQoWrBYB0kMqP5z5A8UMnBCLtMHI/bVZFYUAi4qnRSV928 /tmjaNtYQbgE+a3SaQLrtQCzCLcRlinzB8c1cW3Gh898dgi7dIy5eFWFN+W6A7P+ S0FN9UVJr9a5MW/IrKoozGcMgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2ryy/Y 2OJWDP6xV+dk7b5mosmaMB8GA1UdIwQYMBaAFLo4Leo6L1uMTCIF7JKfYBvjT+d/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IzNC9ERUNFM0VCQTA2 QzYxMUVBQTUxQTYwMjFDNEY5QUUwMi91amd0Nmpvdlc0eE1JZ1hza3A5Z0ctTlA1 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VqZ3Q2am92VzR4TUlnWHNrcDlnRy1OUDUzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IzNC9ERUNFM0VCQTA2QzYxMUVBQTUxQTYwMjFDNEY5QUUwMi91amd0Nmpvdlc0 eE1JZ1hza3A5Z0ctTlA1MzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANIziV17LVO6SEyGEPxkftydIeC/vw+XPbdWujMHZiuY9TCZnJ8qe1 UznHL2+0Ect6pRflenkEMLvsBMviw+VxxvFk2rLMByd/uCKsmS8WjHx3y1HZbc/3 bxjKGZxg9K+t9FYdvdI0vJs8ETACQneTD4u0bR47ATTq8AuynbMBZcBLi4mudPuY 1Xecr2VlfASosAFypiCDYWKGGBoWEN2wElHbE2TPE3fLrYNia8l82nGToZam0qp1 c6e9TJg5MgJw7awccMv5nIgbDjZgzgpWUVJfOMTEjpiUwJM2fGzSbvLdkJvAOCg9 86TXuaLk/e8GZbuY9bUhYkDHY8AliISI -----END CERTIFICATE-----Generated at Wed Jun 18 06:46:50 2025 by rpki-client