$ rpki-client -vvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft File: UxdJCV5En9gqodtQ2oNAFyML3RM.mft (raw, json) Hash identifier: gKVKbPBIjh6wnFGyzYib+XcUyrTpf9vMGMLJm+mjnXo= Subject key identifier: 3A:0B:AA:61:F5:29:27:B2:52:D8:92:2C:26:EE:57:9A:32:EE:31:55 Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 Certificate issuer: /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Certificate serial: 0B6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft Manifest number: 0B65 Signing time: Thu 24 Apr 2025 18:59:23 +0000 Manifest this update: Thu 24 Apr 2025 18:59:22 +0000 Manifest next update: Thu 01 May 2025 18:59:22 +0000 Files and hashes: 1: UxdJCV5En9gqodtQ2oNAFyML3RM.crl (hash: UGif12zN50PjhecgBeo9SScDPP/FcweyLozROJnr2UQ=) 2: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (hash: b6SG981ws9YTohF7YJYfD6V/fAmms72gE/FD/yHhvRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2924 (0xb6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117754, serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Validity Not Before: Apr 24 18:59:22 2025 GMT Not After : May 1 18:59:22 2025 GMT Subject: CN=680a8a0a-48cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:20:b7:8e:91:f4:f1:85:b1:c8:1d:11:45:88: b8:88:21:ac:ba:37:40:9d:45:f2:38:8d:96:da:f8: 14:53:65:27:74:b7:7b:e6:44:f9:29:32:7d:a6:5b: 6b:91:2e:f6:57:ee:5a:21:31:fd:2e:c4:b6:db:da: 42:01:e9:94:f6:4e:da:db:cb:7b:e4:6f:b7:fa:9b: 63:61:db:00:9c:f8:83:fe:c4:7a:6a:41:bf:0a:81: 59:14:47:85:92:9a:f7:e0:76:9c:e0:d0:59:e4:04: db:f4:aa:bb:f8:66:ad:e9:5c:7f:6d:47:cd:85:72: 62:6d:e6:7e:8f:98:4f:b6:fc:6c:ca:36:5a:3a:36: 0b:58:3a:38:f3:7c:fa:fa:9c:15:a1:d7:71:fa:c8: c6:97:b8:f6:14:c8:cd:de:e9:ae:65:e8:9d:b7:99: dc:89:34:ba:1c:9d:4f:8f:87:c7:7b:8d:2c:20:aa: 4e:29:ba:3a:96:90:a5:6f:e7:53:cb:44:b1:67:78: 66:18:d3:82:be:6d:f7:eb:e4:2b:2b:86:92:2b:b2: 09:64:59:23:a5:8e:d5:b4:39:d3:a6:fe:a2:b9:e1: e6:89:a8:cd:21:9e:9c:39:73:e9:a1:bf:72:c2:8d: c4:8e:65:23:eb:3e:d2:eb:c2:b9:9d:31:dc:30:9e: 9a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0B:AA:61:F5:29:27:B2:52:D8:92:2C:26:EE:57:9A:32:EE:31:55 X509v3 Authority Key Identifier: keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:17:24:fb:98:54:69:b8:e1:5f:58:4e:ef:92:b6:da:5a:81: 88:ca:7a:d2:49:ca:a2:27:0f:ee:6b:dc:a6:c7:e3:22:b9:b8: cc:03:52:32:49:b5:e4:14:44:a8:d2:1f:59:b5:b2:e0:98:6e: d6:d2:1b:6f:f0:d9:c4:49:d7:dd:ea:e3:d8:9c:43:21:87:08: 8b:76:0d:bd:77:e9:27:63:65:d3:c9:bc:63:d0:89:8f:46:40: 8f:58:62:69:5f:07:97:40:77:f8:d3:5e:9a:57:d3:75:bc:ad: 6c:fe:62:ae:f7:cc:3f:a5:59:09:69:36:ff:34:63:4d:65:d4: c4:8f:41:ba:1e:ba:d8:64:26:95:48:e6:47:13:98:01:a6:28: 18:9b:91:92:34:fa:ef:3d:c6:36:d2:b7:df:80:0f:51:20:67: eb:cc:ba:25:81:a4:e9:18:48:62:76:f3:85:9d:42:46:ac:f8: 92:b3:c4:45:7d:20:a5:bd:7d:3c:ec:77:d6:af:3f:15:ca:cc: ea:54:cf:63:93:fd:4f:5d:34:25:e9:90:a3:44:66:5b:42:76: c8:9c:b0:06:d5:53:ee:ca:92:73:ef:4d:95:ec:3d:62:dc:bf: 8a:a6:a0:a8:a9:4e:d8:c5:ad:8a:7f:e1:14:f4:e5:8f:c7:ec: 19:cc:3a:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3NTQxMTAvBgNVBAUTKDUzMTc0OTA5NUU0NDlGRDgyQUExREI1MERBODM0MDE3 MjMwQkREMTMwHhcNMjUwNDI0MTg1OTIyWhcNMjUwNTAxMTg1OTIyWjAYMRYwFAYD VQQDEw02ODBhOGEwYS00OGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2yC3jpH08YWxyB0RRYi4iCGsujdAnUXyOI2W2vgUU2UndLd75kT5KTJ9pltr kS72V+5aITH9LsS229pCAemU9k7a28t75G+3+ptjYdsAnPiD/sR6akG/CoFZFEeF kpr34Hac4NBZ5ATb9Kq7+Gat6Vx/bUfNhXJibeZ+j5hPtvxsyjZaOjYLWDo483z6 +pwVoddx+sjGl7j2FMjN3umuZeidt5nciTS6HJ1Pj4fHe40sIKpOKbo6lpClb+dT y0SxZ3hmGNOCvm336+QrK4aSK7IJZFkjpY7VtDnTpv6iueHmiajNIZ6cOXPpob9y wo3EjmUj6z7S68K5nTHcMJ6anwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoLqmH1 KSeyUtiSLCbuV5oy7jFVMB8GA1UdIwQYMBaAFFMXSQleRJ/YKqHbUNqDQBcjC90T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzc1NC84QjMxNDVBRTJD OEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45Z3FvZHRRMm9OQUZ5TUwz Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4ZEpDVjVFbjlncW9kdFEyb05BRnlNTDNSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzc1NC84QjMxNDVBRTJDOEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45 Z3FvZHRRMm9OQUZ5TUwzUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbFyT7mFRpuOFfWE7vkrbaWoGIynrSScqiJw/ua9ymx+MiubjMA1Iy SbXkFESo0h9ZtbLgmG7W0htv8NnESdfd6uPYnEMhhwiLdg29d+knY2XTybxj0ImP RkCPWGJpXweXQHf4016aV9N1vK1s/mKu98w/pVkJaTb/NGNNZdTEj0G6HrrYZCaV SOZHE5gBpigYm5GSNPrvPcY20rffgA9RIGfrzLolgaTpGEhidvOFnUJGrPiSs8RF fSClvX087HfWrz8VyszqVM9jk/1PXTQl6ZCjRGZbQnbInLAG1VPuypJz702V7D1i 3L+KpqCoqU7Yxa2Kf+EU9OWPx+wZzDqf -----END CERTIFICATE-----Generated at Sat Apr 26 17:16:17 2025 by rpki-client