$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft File: UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft (raw, json) Hash identifier: 6BqKScKOeudykoD2W3UEMColZlJb9YrCjZyKBOgqdOQ= Subject key identifier: 68:88:1D:2E:83:54:A2:5A:A5:59:9D:24:F0:FE:97:22:AF:04:92:6F Authority key identifier: 50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23 Certificate issuer: /CN=A91FBDDF/serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft Manifest number: 0133 Signing time: Sun 15 Jun 2025 03:41:10 +0000 Manifest this update: Sun 15 Jun 2025 03:41:10 +0000 Manifest next update: Sun 22 Jun 2025 03:41:10 +0000 Files and hashes: 1: UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl (hash: SLo8HXKkkZaO7WX1ypSmb4Yu9tn9sg5GN34P3TQYPFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBDDF, serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023 Validity Not Before: Jun 15 03:41:10 2025 GMT Not After : Jun 22 03:41:10 2025 GMT Subject: CN=684e40d6-8814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1c:e3:bd:20:fa:a4:c7:0e:ac:0c:72:44:cb: 34:09:c4:92:75:5b:c4:c2:3d:0b:3c:2b:47:de:d9: 20:27:6a:8c:59:42:81:13:01:f5:2d:87:e2:60:27: d1:0b:4e:68:e5:e4:21:05:a8:e4:1d:cc:b1:9d:2c: fe:eb:23:37:ff:20:2d:f9:a5:d5:14:85:8f:1e:b0: 7a:d4:9b:6c:64:9a:af:2e:75:75:5b:14:53:e5:9f: 3f:b2:ff:bf:87:d4:2f:07:de:a6:94:81:d2:e8:dc: c7:9c:0f:c9:cc:f9:e6:ba:94:a4:d6:09:8f:50:15: a2:72:82:ce:13:7e:e3:dc:37:57:3d:09:87:a8:55: d2:2b:7b:50:fd:5c:01:39:28:e0:2d:99:21:81:ec: 0c:72:8d:cc:66:f0:81:de:ee:e1:0a:41:92:a7:36: 73:01:a8:4f:02:37:b2:42:48:ca:ae:92:fd:c2:d6: 7b:a2:66:38:dd:09:76:eb:5c:c0:5b:10:e2:1f:ad: af:89:1f:9e:c7:8b:ba:48:b2:3c:a3:78:e9:74:ca: b2:d6:d9:4f:23:69:31:2e:71:6b:40:d0:e5:3d:d3: 6d:3c:56:87:6a:7e:15:b3:4d:8e:23:1a:80:4e:86: aa:63:9a:fa:cf:76:40:ad:fa:56:01:37:0d:b7:6a: e1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:88:1D:2E:83:54:A2:5A:A5:59:9D:24:F0:FE:97:22:AF:04:92:6F X509v3 Authority Key Identifier: keyid:50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:01:55:75:f8:80:67:79:cd:82:41:27:11:dc:a4:97:3c:96: 00:88:bc:b8:bc:82:2c:d9:28:a2:7b:07:c3:4f:02:bb:87:b6: 44:3f:f7:8f:b5:fe:df:8f:ca:54:79:53:ff:87:a1:7c:9d:57: 0b:3c:97:31:0a:63:39:89:54:84:63:d2:eb:45:58:73:9d:fe: b7:ba:f5:e1:3c:15:81:b9:87:99:02:7e:47:f9:af:fe:28:6b: 0b:df:35:ee:79:b9:6c:0f:3f:a4:8a:70:c2:b3:f4:82:cb:6f: 29:4a:f0:5d:e9:51:73:d7:71:8f:1a:10:b8:8c:f5:61:ff:48: ed:3e:76:e7:c5:79:67:b7:28:a9:b3:84:77:e0:50:d9:11:65: eb:35:d4:6c:a0:0a:1c:a7:49:a8:01:74:e0:07:12:fb:39:18: cb:2d:fb:0a:17:a9:e5:bd:68:fb:83:4d:87:94:fb:ad:82:94: 84:6d:8c:25:ff:d6:99:1e:58:fd:8e:31:e2:dc:1e:e4:37:aa: c9:90:9a:32:98:57:88:af:33:8d:6a:ba:03:11:a5:8b:31:e8: ab:a8:a3:c3:b4:4a:2f:45:e5:6f:22:1d:70:c7:82:16:88:fe: 9f:84:ac:98:f9:ef:4c:65:d2:ab:ef:8e:14:b0:33:13:e8:6c: d0:47:15:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEREYxMTAvBgNVBAUTKDUwM0QxQkY1NkIyMjI5QjUyQUEzRkY2ODUzNDY5OUYw NkZEMjUwMjMwHhcNMjUwNjE1MDM0MTEwWhcNMjUwNjIyMDM0MTEwWjAYMRYwFAYD VQQDEw02ODRlNDBkNi04ODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxzjvSD6pMcOrAxyRMs0CcSSdVvEwj0LPCtH3tkgJ2qMWUKBEwH1LYfiYCfR C05o5eQhBajkHcyxnSz+6yM3/yAt+aXVFIWPHrB61JtsZJqvLnV1WxRT5Z8/sv+/ h9QvB96mlIHS6NzHnA/JzPnmupSk1gmPUBWicoLOE37j3DdXPQmHqFXSK3tQ/VwB OSjgLZkhgewMco3MZvCB3u7hCkGSpzZzAahPAjeyQkjKrpL9wtZ7omY43Ql261zA WxDiH62viR+ex4u6SLI8o3jpdMqy1tlPI2kxLnFrQNDlPdNtPFaHan4Vs02OIxqA ToaqY5r6z3ZArfpWATcNt2rhfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiIHS6D VKJapVmdJPD+lyKvBJJvMB8GA1UdIwQYMBaAFFA9G/VrIim1KqP/aFNGmfBv0lAj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkRERi80NzVDNjRCRTcy NDUxMUVFQUEyOUVDNzRDNEY5QUUwMi9VRDBiOVdzaUtiVXFvXzlvVTBhWjhHX1NV Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VEMGI5V3NpS2JVcW9fOW9VMGFaOEdfU1VDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkRERi80NzVDNjRCRTcyNDUxMUVFQUEyOUVDNzRDNEY5QUUwMi9VRDBiOVdzaUti VXFvXzlvVTBhWjhHX1NVQ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmAVV1+IBnec2CQScR3KSXPJYAiLy4vIIs2SiiewfDTwK7h7ZEP/eP tf7fj8pUeVP/h6F8nVcLPJcxCmM5iVSEY9LrRVhznf63uvXhPBWBuYeZAn5H+a/+ KGsL3zXueblsDz+kinDCs/SCy28pSvBd6VFz13GPGhC4jPVh/0jtPnbnxXlntyip s4R34FDZEWXrNdRsoAocp0moAXTgBxL7ORjLLfsKF6nlvWj7g02HlPutgpSEbYwl /9aZHlj9jjHi3B7kN6rJkJoymFeIrzONaroDEaWLMeirqKPDtEovReVvIh1wx4IW iP6fhKyY+e9MZdKr744UsDMT6GzQRxWr -----END CERTIFICATE-----Generated at Sun Jun 15 08:48:40 2025 by rpki-client