$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft File: UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft (raw, json) Hash identifier: YLFvoOGyyLE+WZbylxTvU0qEkT5rxXzrcQl93OhKRXE= Subject key identifier: B6:E8:D2:AC:64:F9:91:AA:AE:36:5B:5F:76:FA:FE:1C:39:8B:50:B0 Authority key identifier: 50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23 Certificate issuer: /CN=A91FBDDF/serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft Manifest number: 014F Signing time: Sat 09 Aug 2025 04:34:21 +0000 Manifest this update: Sat 09 Aug 2025 04:34:20 +0000 Manifest next update: Sat 16 Aug 2025 04:34:20 +0000 Files and hashes: 1: UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl (hash: C6DOxW/btTnqOfQfJtrHHMavjdyTYgZhWi7DeUAhX3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBDDF, serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023 Validity Not Before: Aug 9 04:34:20 2025 GMT Not After : Aug 16 04:34:20 2025 GMT Subject: CN=6896cfcc-402e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fe:dc:d6:3f:be:13:bc:fa:4d:38:33:07:bf: 12:20:d9:22:86:f2:54:87:72:66:ae:8a:01:c2:52: 37:43:07:a8:aa:64:fe:6a:9e:e6:e9:41:3e:f4:cc: 0c:03:30:67:75:01:b2:ba:dc:03:a2:df:7d:33:22: b0:b2:9d:00:6e:b9:9c:63:8c:d1:ff:cd:72:02:7a: a7:33:80:20:32:66:bd:68:ed:57:96:d2:a5:37:04: 53:6b:e9:04:8f:51:7f:e1:5f:70:69:01:93:55:0c: cd:25:8d:d2:32:b5:28:db:66:8f:5c:b9:f3:b2:c3: 7f:91:a0:c3:06:f6:24:a6:fd:d4:75:e0:b5:fc:7e: 65:0b:2c:e7:1e:6f:b4:ce:74:49:9d:93:73:3c:6c: 4a:88:ab:d6:ab:43:51:fe:71:b6:77:ae:c4:65:bc: 79:e2:d5:6e:1b:b7:e0:4b:e4:79:1e:93:cc:47:36: 5d:e1:1a:e6:3f:50:f3:da:7a:20:9d:48:1e:22:db: ef:7a:29:60:61:64:2a:33:a6:78:a7:ea:d4:86:1c: 07:4f:0b:cc:13:16:ca:fc:34:cb:c1:af:b8:ea:3d: 53:1c:27:0d:84:53:58:d8:bd:78:45:9c:d9:cf:93: 77:c8:b5:ee:fe:ee:a2:8d:c0:ea:e9:ed:a4:09:02: 6c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E8:D2:AC:64:F9:91:AA:AE:36:5B:5F:76:FA:FE:1C:39:8B:50:B0 X509v3 Authority Key Identifier: keyid:50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:8c:1a:0f:94:ea:c0:31:89:50:a3:60:02:f7:67:4e:c8:37: 63:37:24:e7:2d:21:e1:f3:d9:cc:b8:a4:f9:3d:be:5f:da:fc: 33:6c:15:b0:87:b1:74:95:1b:f6:69:f5:d7:70:74:7d:f8:97: 19:0a:46:c1:03:d4:50:6b:ec:b3:16:d0:82:0f:b0:7a:75:ab: a0:10:00:a7:4c:68:53:8d:8e:52:f7:c6:0f:73:0f:a5:83:91: ba:7c:ef:04:8f:51:34:1f:d0:ed:6c:11:a7:2d:08:a4:f2:f9: 5a:f1:4e:f7:87:a1:7a:8d:20:58:06:49:77:4c:cf:3b:14:07: f5:0a:6a:f7:61:78:76:2f:a6:a6:bc:de:32:e2:70:00:0d:39: aa:f1:62:e0:c5:da:6e:a9:75:c1:43:48:03:6b:a1:0b:2c:2d: b3:01:f8:64:86:a2:34:ca:57:2d:a7:e8:47:fd:44:e5:eb:4d: 72:35:d3:cf:7d:87:bc:91:dd:5a:11:09:d4:86:99:30:85:f6: 7b:58:d9:b4:9c:22:fe:9c:07:16:fc:69:d7:c5:1d:21:64:ca: 52:da:d4:dd:11:c5:49:51:65:43:c0:56:94:e6:c0:5b:64:85: fb:ca:14:26:3c:dd:7b:38:8b:57:7a:81:b5:f8:05:95:97:fa: c1:e5:68:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEREYxMTAvBgNVBAUTKDUwM0QxQkY1NkIyMjI5QjUyQUEzRkY2ODUzNDY5OUYw NkZEMjUwMjMwHhcNMjUwODA5MDQzNDIwWhcNMjUwODE2MDQzNDIwWjAYMRYwFAYD VQQDEw02ODk2Y2ZjYy00MDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2P7c1j++E7z6TTgzB78SINkihvJUh3JmrooBwlI3QweoqmT+ap7m6UE+9MwM AzBndQGyutwDot99MyKwsp0AbrmcY4zR/81yAnqnM4AgMma9aO1XltKlNwRTa+kE j1F/4V9waQGTVQzNJY3SMrUo22aPXLnzssN/kaDDBvYkpv3UdeC1/H5lCyznHm+0 znRJnZNzPGxKiKvWq0NR/nG2d67EZbx54tVuG7fgS+R5HpPMRzZd4RrmP1Dz2nog nUgeItvveilgYWQqM6Z4p+rUhhwHTwvMExbK/DTLwa+46j1THCcNhFNY2L14RZzZ z5N3yLXu/u6ijcDq6e2kCQJsOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbo0qxk +ZGqrjZbX3b6/hw5i1CwMB8GA1UdIwQYMBaAFFA9G/VrIim1KqP/aFNGmfBv0lAj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkRERi80NzVDNjRCRTcy NDUxMUVFQUEyOUVDNzRDNEY5QUUwMi9VRDBiOVdzaUtiVXFvXzlvVTBhWjhHX1NV Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VEMGI5V3NpS2JVcW9fOW9VMGFaOEdfU1VDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkRERi80NzVDNjRCRTcyNDUxMUVFQUEyOUVDNzRDNEY5QUUwMi9VRDBiOVdzaUti VXFvXzlvVTBhWjhHX1NVQ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9jBoPlOrAMYlQo2AC92dOyDdjNyTnLSHh89nMuKT5Pb5f2vwzbBWw h7F0lRv2afXXcHR9+JcZCkbBA9RQa+yzFtCCD7B6daugEACnTGhTjY5S98YPcw+l g5G6fO8Ej1E0H9DtbBGnLQik8vla8U73h6F6jSBYBkl3TM87FAf1Cmr3YXh2L6am vN4y4nAADTmq8WLgxdpuqXXBQ0gDa6ELLC2zAfhkhqI0ylctp+hH/UTl601yNdPP fYe8kd1aEQnUhpkwhfZ7WNm0nCL+nAcW/GnXxR0hZMpS2tTdEcVJUWVDwFaU5sBb ZIX7yhQmPN17OItXeoG1+AWVl/rB5WjK -----END CERTIFICATE-----Generated at Sun Aug 10 16:10:03 2025 by rpki-client