$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft File: uLRz022lJgglzQu_YvbsGQ00Ahg.mft (raw, json) Hash identifier: y9nOSfB+3Td6E9e8dweF81SdEgPggsGPx0V8EcKGvpM= Subject key identifier: 73:48:82:8C:A1:EB:04:A8:7A:D0:93:34:52:FE:19:85:BB:4A:7E:C8 Authority key identifier: B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18 Certificate issuer: /CN=A91C5D81/serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218 Certificate serial: 349E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft Manifest number: 3498 Signing time: Mon 16 Jun 2025 14:18:19 +0000 Manifest this update: Mon 16 Jun 2025 14:18:19 +0000 Manifest next update: Mon 23 Jun 2025 14:18:19 +0000 Files and hashes: 1: uLRz022lJgglzQu_YvbsGQ00Ahg.crl (hash: BifxZKGbepC6YZ2EAqWbULrBzNjhVl+W32sQTyuKKyQ=) 2: 75C18F96305811EB94E3192FC4F9AE02.roa (hash: oI8UmPtI+e/lNHKPjl/mA09y7Gr50NMbgC5wn6SXx2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 14:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13470 (0x349e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D81, serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218 Validity Not Before: Jun 16 14:18:19 2025 GMT Not After : Jun 23 14:18:19 2025 GMT Subject: CN=685027ab-ecb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:e2:be:fd:06:47:f3:7e:ba:8f:8f:7c:7b: ba:0a:af:43:51:de:d1:d1:05:ac:e9:ed:e4:2a:69: f5:ab:42:e7:f2:3a:68:d7:af:a9:2d:7f:eb:78:1f: bd:f1:a8:05:40:52:4e:50:30:ba:5b:86:f2:50:01: b1:38:f1:39:80:35:67:8f:26:c4:ae:70:16:62:50: bb:fc:53:52:a7:fd:8c:43:74:f8:e7:a5:63:96:a1: a5:cc:72:69:39:a7:a3:8d:1d:5d:ba:2a:c0:3c:7f: f3:05:e1:42:d2:e9:a6:04:e8:da:02:78:87:90:7f: a0:b6:34:80:58:2d:5a:a1:2d:27:c2:8d:13:70:b5: ee:0e:e0:11:f8:12:fe:3a:74:7d:fa:1c:c9:96:36: ce:9c:e4:93:8d:a2:4f:fe:51:c1:c6:3d:5f:39:d6: 81:ed:12:cf:cf:cc:ff:00:b2:74:64:38:13:f4:41: 13:1c:96:fa:41:de:28:68:52:04:d8:30:de:ff:75: 44:79:1b:69:1d:e1:e8:2a:eb:4e:50:0b:8c:59:85: 63:6d:e0:55:65:a3:ea:08:29:c4:b5:ef:ce:4f:b3: 11:0e:31:5d:68:3f:19:8d:c0:95:3d:34:7d:cc:9a: 30:ed:d6:cc:0a:6e:7b:c3:68:8f:c4:1f:29:61:b6: e2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:48:82:8C:A1:EB:04:A8:7A:D0:93:34:52:FE:19:85:BB:4A:7E:C8 X509v3 Authority Key Identifier: keyid:B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:84:04:ef:53:1d:e9:ab:d1:cf:37:08:88:b4:d3:9f:f1:25: 0b:d2:b7:ea:24:0a:96:dd:7b:e7:82:d4:4a:39:77:0f:76:40: a1:b3:28:36:62:b1:34:61:b6:cc:d9:4b:24:5e:7e:42:6a:fd: 1d:5f:54:4d:1b:cd:5c:c1:ea:e4:7f:6a:a5:55:df:00:ea:e6: 24:3f:75:c8:0e:a1:13:16:49:e2:ac:f4:58:59:f1:e4:99:88: 9b:6f:3f:fc:98:b6:67:80:15:54:29:a5:a7:8c:17:a7:92:2a: cd:fa:04:94:0b:d2:03:c8:9d:01:d8:52:42:4b:b0:57:73:07: 11:ff:5f:bd:ad:03:ff:0a:db:9e:b7:54:4d:d2:1f:02:6e:42: 55:3f:96:0d:0d:d3:18:bb:82:1b:b2:8c:c4:89:fd:cb:ff:02: 97:82:ab:6c:cd:af:b9:e9:e1:92:79:c5:c1:6a:04:71:f3:77: 99:d7:32:49:85:59:48:60:36:53:0a:2f:1b:01:92:2a:33:4a: 9f:1a:26:fa:fd:bd:ff:3d:d1:de:ea:64:08:3f:37:82:21:4e: 73:13:e4:9a:ed:90:33:80:7f:60:d4:bd:eb:12:b1:14:b8:01: e6:ec:11:25:4f:5f:5d:62:01:83:aa:a6:c9:16:cb:1c:c8:9e: d6:2e:52:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVEODExMTAvBgNVBAUTKEI4QjQ3M0QzNkRBNTI2MDgyNUNEMEJCRjYyRjZFQzE5 MEQzNDAyMTgwHhcNMjUwNjE2MTQxODE5WhcNMjUwNjIzMTQxODE5WjAYMRYwFAYD VQQDEw02ODUwMjdhYi1lY2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutzivv0GR/N+uo+PfHu6Cq9DUd7R0QWs6e3kKmn1q0Ln8jpo16+pLX/reB+9 8agFQFJOUDC6W4byUAGxOPE5gDVnjybErnAWYlC7/FNSp/2MQ3T456VjlqGlzHJp OaejjR1duirAPH/zBeFC0ummBOjaAniHkH+gtjSAWC1aoS0nwo0TcLXuDuAR+BL+ OnR9+hzJljbOnOSTjaJP/lHBxj1fOdaB7RLPz8z/ALJ0ZDgT9EETHJb6Qd4oaFIE 2DDe/3VEeRtpHeHoKutOUAuMWYVjbeBVZaPqCCnEte/OT7MRDjFdaD8ZjcCVPTR9 zJow7dbMCm57w2iPxB8pYbbiJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNIgoyh 6wSoetCTNFL+GYW7Sn7IMB8GA1UdIwQYMBaAFLi0c9NtpSYIJc0Lv2L27BkNNAIY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQ4MS80NzA1OUREODFE NkUxMUUyOUI3NkFBQUYwOEIwMkNEMi91TFJ6MDIybEpnZ2x6UXVfWXZic0dRMDBB aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VMUnowMjJsSmdnbHpRdV9ZdmJzR1EwMEFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQ4MS80NzA1OUREODFENkUxMUUyOUI3NkFBQUYwOEIwMkNEMi91TFJ6MDIybEpn Z2x6UXVfWXZic0dRMDBBaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRhATvUx3pq9HPNwiItNOf8SUL0rfqJAqW3XvngtRKOXcPdkChsyg2 YrE0YbbM2UskXn5Cav0dX1RNG81cwerkf2qlVd8A6uYkP3XIDqETFknirPRYWfHk mYibbz/8mLZngBVUKaWnjBenkirN+gSUC9IDyJ0B2FJCS7BXcwcR/1+9rQP/Ctue t1RN0h8CbkJVP5YNDdMYu4IbsozEif3L/wKXgqtsza+56eGSecXBagRx83eZ1zJJ hVlIYDZTCi8bAZIqM0qfGib6/b3/PdHe6mQIPzeCIU5zE+Sa7ZAzgH9g1L3rErEU uAHm7BElT19dYgGDqqbJFsscyJ7WLlJ9 -----END CERTIFICATE-----Generated at Wed Jun 18 10:07:24 2025 by rpki-client