$ rpki-client -vvf rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft File: uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft (raw, json) Hash identifier: IRdCNsx0qJySRm0ensOlSmn+1evexy2GmmYp+p99WWo= Subject key identifier: 3E:9D:5B:B4:DE:66:61:3B:F1:43:AE:BE:FA:95:82:07:22:F0:49:D4 Authority key identifier: BB:30:07:8C:F6:87:78:7D:3A:5B:3E:53:4C:08:97:16:A8:6B:13:BB Certificate issuer: /CN=A9113217/serialNumber=BB30078CF687787D3A5B3E534C089716A86B13BB Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft Manifest number: 0152 Signing time: Fri 25 Apr 2025 03:17:29 +0000 Manifest this update: Fri 25 Apr 2025 03:17:28 +0000 Manifest next update: Fri 02 May 2025 03:17:28 +0000 Files and hashes: 1: uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl (hash: 3WEAL96+lUmxFsnAHF9bJm3R43rZD13Dvtc3gDf0Dm8=) 2: 859871F2215D11EE963E9A52C4F9AE02.roa (hash: HHHOwt/fdM7W7+F6fEKQDH5IL/vBD99o4H9HkpME2xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113217, serialNumber=BB30078CF687787D3A5B3E534C089716A86B13BB Validity Not Before: Apr 25 03:17:28 2025 GMT Not After : May 2 03:17:28 2025 GMT Subject: CN=680afec8-6f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:93:c5:85:1a:e7:35:3c:a8:61:68:c0:fb:5e: 31:29:95:4a:c1:d6:ea:f4:4d:9e:54:f6:59:52:95: 99:fe:92:36:72:bd:2c:ab:78:03:f8:a5:8a:5c:56: 8f:34:22:f2:29:bc:8d:c6:dd:09:d0:d5:cd:bd:b3: 98:29:4a:57:0e:ad:3a:9e:1a:7c:bd:9f:43:78:b4: 8e:21:d6:1a:1a:3f:a0:32:4c:7b:04:f5:bf:28:ce: e2:37:e9:11:e6:e8:f1:4f:d9:41:f9:c7:04:4d:43: 37:6d:fd:60:3d:c5:51:08:20:b3:7e:b3:a1:3d:39: 1c:32:92:de:b1:a2:28:d9:f0:65:43:7e:05:19:9a: 3c:57:24:ee:91:43:5a:32:de:7c:1a:81:a4:1b:83: 0f:02:77:7b:dc:5e:6c:ae:e1:9a:de:a8:99:f4:e5: dd:ae:f0:66:b0:0d:2f:f5:af:3d:ce:9f:c1:0f:d7: 3d:0f:67:f7:7c:7e:c2:22:44:01:ae:8a:cd:c8:75: 5c:ee:43:4e:0c:c7:66:dd:dd:b2:9b:5c:a8:2e:99: 67:ec:12:02:f3:45:5d:39:12:ef:cd:94:f1:89:90: 74:8e:66:cf:9d:cb:03:e9:cd:25:e8:05:35:c5:45: 58:97:fc:54:da:11:08:88:a7:75:f8:bd:dd:7f:ef: f6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9D:5B:B4:DE:66:61:3B:F1:43:AE:BE:FA:95:82:07:22:F0:49:D4 X509v3 Authority Key Identifier: keyid:BB:30:07:8C:F6:87:78:7D:3A:5B:3E:53:4C:08:97:16:A8:6B:13:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1e:a5:3b:d2:5c:73:44:5d:84:82:4b:84:2d:bd:4a:97:7a: 2a:2e:16:a3:97:1e:3f:79:65:15:9f:94:95:03:58:e3:39:66: 67:b9:6c:46:fe:8f:be:76:9c:a3:f2:45:80:92:d1:58:9e:47: f0:d2:dd:f0:dd:3f:7a:8e:90:e4:6e:49:e5:b9:4e:87:0b:ba: da:81:5a:04:b4:b5:f5:81:44:cf:2d:35:a2:85:d0:5a:e5:9a: 48:f1:40:1d:8f:6e:9d:a4:4d:70:89:04:35:54:2d:c6:4e:6d: 8d:ba:37:e9:66:18:f9:a0:a8:90:a1:75:83:84:1c:c8:ab:4a: 74:7e:cc:d7:c6:dd:17:0b:fe:06:37:a9:d5:c9:7b:d1:3b:f8: 80:33:dd:78:e9:9d:ce:89:d0:4f:1c:36:b7:45:61:b6:b3:2d: 4c:d6:9e:cd:7a:63:66:28:ab:37:55:4e:4e:6c:a3:b6:c9:e7: cc:30:db:3d:c7:da:e5:ee:71:ba:b9:f0:fd:8c:55:22:27:55: 61:8e:e6:2f:0b:6e:03:b3:4e:b4:e1:8a:9e:44:b8:f4:51:4c: ea:2f:31:f3:1d:33:9f:87:a6:5b:75:fb:c6:c5:3f:39:70:a4: b7:7b:5f:39:ef:5d:00:d1:aa:cf:74:8e:25:e9:4e:4b:24:63: 43:2f:e2:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTMyMTcxMTAvBgNVBAUTKEJCMzAwNzhDRjY4Nzc4N0QzQTVCM0U1MzRDMDg5NzE2 QTg2QjEzQkIwHhcNMjUwNDI1MDMxNzI4WhcNMjUwNTAyMDMxNzI4WjAYMRYwFAYD VQQDEw02ODBhZmVjOC02ZjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJPFhRrnNTyoYWjA+14xKZVKwdbq9E2eVPZZUpWZ/pI2cr0sq3gD+KWKXFaP NCLyKbyNxt0J0NXNvbOYKUpXDq06nhp8vZ9DeLSOIdYaGj+gMkx7BPW/KM7iN+kR 5ujxT9lB+ccETUM3bf1gPcVRCCCzfrOhPTkcMpLesaIo2fBlQ34FGZo8VyTukUNa Mt58GoGkG4MPAnd73F5sruGa3qiZ9OXdrvBmsA0v9a89zp/BD9c9D2f3fH7CIkQB rorNyHVc7kNODMdm3d2ym1yoLpln7BIC80VdORLvzZTxiZB0jmbPncsD6c0l6AU1 xUVYl/xU2hEIiKd1+L3df+/2RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6dW7Te ZmE78UOuvvqVggci8EnUMB8GA1UdIwQYMBaAFLswB4z2h3h9Ols+U0wIlxaoaxO7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzIxNy9ENzIxOTZEMDIx NUMxMUVFQkNCNUIyNEVDNEY5QUUwMi91ekFIalBhSGVIMDZXejVUVEFpWEZxaHJF N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V6QUhqUGFIZUgwNld6NVRUQWlYRnFockU3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzIxNy9ENzIxOTZEMDIxNUMxMUVFQkNCNUIyNEVDNEY5QUUwMi91ekFIalBhSGVI MDZXejVUVEFpWEZxaHJFN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9HqU70lxzRF2EgkuELb1Kl3oqLhajlx4/eWUVn5SVA1jjOWZnuWxG /o++dpyj8kWAktFYnkfw0t3w3T96jpDkbknluU6HC7ragVoEtLX1gUTPLTWihdBa 5ZpI8UAdj26dpE1wiQQ1VC3GTm2NujfpZhj5oKiQoXWDhBzIq0p0fszXxt0XC/4G N6nVyXvRO/iAM9146Z3OidBPHDa3RWG2sy1M1p7NemNmKKs3VU5ObKO2yefMMNs9 x9rl7nG6ufD9jFUiJ1VhjuYvC24Ds0604YqeRLj0UUzqLzHzHTOfh6ZbdfvGxT85 cKS3e185710A0arPdI4l6U5LJGNDL+Ib -----END CERTIFICATE-----Generated at Sat Apr 26 12:37:52 2025 by rpki-client