$ rpki-client -vvf rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft File: UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft (raw, json) Hash identifier: /bEKz2/H18HHlvfscyIaW+XlaS19eShsvfpF/Irx1ps= Subject key identifier: F5:70:74:85:CB:34:3C:82:B5:6C:34:99:8C:DC:64:6B:3D:1D:13:F7 Authority key identifier: 53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 Certificate issuer: /CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Certificate serial: 01FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft Manifest number: 01F7 Signing time: Sun 27 Apr 2025 01:41:42 +0000 Manifest this update: Sun 27 Apr 2025 01:41:42 +0000 Manifest next update: Sun 04 May 2025 01:41:42 +0000 Files and hashes: 1: UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl (hash: l+sAw9YM3N49bJanv5hUgFuAPewsYTs6IIeuHVchAp0=) 2: 58CA2F840D3E11F08AA20980C4F9AE02.roa (hash: o3WxnMuTVoZ5sDv98g86AWu9+ZVPEihcJKRFXeclwGE=) 3: ABBB590C0D3E11F081E68E80C4F9AE02.roa (hash: 21Xud0yuR+X8V9kV1r27e1DSMw9xVQDdRdNBmOLAKOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BAD6, serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Validity Not Before: Apr 27 01:41:42 2025 GMT Not After : May 4 01:41:42 2025 GMT Subject: CN=680d8b56-4e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b0:d6:1b:a0:91:7a:73:1c:34:1d:63:b3:5a: c9:b7:a8:0b:8c:60:7e:c4:31:10:9e:0a:d8:b2:95: 03:94:dc:43:7a:5d:a6:06:79:58:1f:4b:7c:4f:c1: 9a:46:fe:98:d3:6c:3b:9d:47:ee:fc:82:15:ba:0a: 1b:ac:c1:91:3b:67:3c:e0:49:6f:88:1f:ab:09:14: 7d:0d:1f:61:86:a0:9c:cc:0a:62:5c:41:08:68:fa: e6:8e:bd:3f:b0:aa:5a:86:79:a9:75:82:55:96:78: e4:47:94:d0:a2:db:74:e9:02:9f:17:df:b3:b8:b5: 90:94:bb:f9:17:9c:f1:0c:5a:42:2e:23:38:87:84: 1e:1f:8f:26:e1:e0:cf:35:1e:2d:a2:68:9b:69:fa: 2d:3d:1c:8d:9d:da:1d:7c:eb:9b:67:25:59:ba:fb: e4:f9:6e:bf:3d:34:6f:22:7b:57:f3:40:a5:ca:69: 11:a8:0f:51:83:f3:f0:56:15:2e:5a:c2:e8:e2:0a: 2e:2c:59:aa:0d:17:01:41:72:3f:40:95:ea:85:2a: 15:62:77:a1:74:f5:19:d2:62:75:e0:f5:0f:5b:34: 99:c7:ed:f5:39:ff:f8:66:ac:4a:c2:32:12:5c:08: 63:80:5b:99:25:c0:84:05:c0:6f:e9:f5:67:da:71: 5e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:70:74:85:CB:34:3C:82:B5:6C:34:99:8C:DC:64:6B:3D:1D:13:F7 X509v3 Authority Key Identifier: keyid:53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:a1:89:77:dd:3a:6a:ef:8e:2a:8e:f4:07:87:6d:63:4a:8c: a9:b0:a6:94:6a:dc:d5:0a:b7:10:e8:66:c2:70:4a:2c:ed:cd: 5c:46:de:41:b2:79:5f:34:4d:38:21:a8:9b:ce:1a:c0:c4:9d: 9d:15:1c:fc:f6:ea:e0:94:2e:80:ad:6a:2d:fe:ec:f3:85:df: 7c:46:60:a8:2a:ea:74:28:fa:82:a8:31:f4:6b:20:0f:06:f1: 8c:a0:ad:fc:df:65:c9:25:04:6e:16:2a:08:18:39:ba:4d:92: 83:6e:bd:c6:3e:47:66:31:2f:59:11:b7:31:33:16:97:83:e0: 3f:30:15:19:81:b9:71:d6:3c:1b:ac:92:49:1d:67:ea:99:6e: 7e:96:19:ec:d5:39:74:0e:d9:e8:46:7f:69:7d:1e:fe:11:a9: 59:00:3f:c4:52:83:54:f1:2d:bf:8a:5f:e6:ad:96:ef:a4:34: 95:28:8a:3e:b6:c4:09:79:75:85:c8:65:d3:3c:94:88:a0:9f: 52:60:69:cf:18:5b:d9:a5:7c:24:ab:ea:4c:31:54:a0:cf:a6: aa:1a:b1:90:0b:9c:38:9a:dd:50:42:cf:d9:cb:b8:45:e2:9a: 8d:93:7d:1d:ed:09:a0:a8:cd:e5:3d:04:da:45:6b:98:0e:fc: 29:45:10:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJBRDYxMTAvBgNVBAUTKDUzMzJGOUFGMzA1MkNGM0Y4NUVBQkREMEFBRDY4MTUy Mzk1MkU2NTYwHhcNMjUwNDI3MDE0MTQyWhcNMjUwNTA0MDE0MTQyWjAYMRYwFAYD VQQDEw02ODBkOGI1Ni00ZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybDWG6CRenMcNB1js1rJt6gLjGB+xDEQngrYspUDlNxDel2mBnlYH0t8T8Ga Rv6Y02w7nUfu/IIVugobrMGRO2c84ElviB+rCRR9DR9hhqCczApiXEEIaPrmjr0/ sKpahnmpdYJVlnjkR5TQott06QKfF9+zuLWQlLv5F5zxDFpCLiM4h4QeH48m4eDP NR4tomibafotPRyNndodfOubZyVZuvvk+W6/PTRvIntX80ClymkRqA9Rg/PwVhUu WsLo4gouLFmqDRcBQXI/QJXqhSoVYnehdPUZ0mJ14PUPWzSZx+31Of/4ZqxKwjIS XAhjgFuZJcCEBcBv6fVn2nFe+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVwdIXL NDyCtWw0mYzcZGs9HRP3MB8GA1UdIwQYMBaAFFMy+a8wUs8/heq90KrWgVI5UuZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkFENi9ENjRGNEU5QzNB RjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6LUY2cjNRcXRhQlVqbFM1 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6TDVyekJTenotRjZyM1FxdGFCVWpsUzVsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkFENi9ENjRGNEU5QzNBRjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6 LUY2cjNRcXRhQlVqbFM1bFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBoYl33Tpq744qjvQHh21jSoypsKaUatzVCrcQ6GbCcEos7c1cRt5B snlfNE04IaibzhrAxJ2dFRz89urglC6ArWot/uzzhd98RmCoKup0KPqCqDH0ayAP BvGMoK3832XJJQRuFioIGDm6TZKDbr3GPkdmMS9ZEbcxMxaXg+A/MBUZgblx1jwb rJJJHWfqmW5+lhns1Tl0DtnoRn9pfR7+EalZAD/EUoNU8S2/il/mrZbvpDSVKIo+ tsQJeXWFyGXTPJSIoJ9SYGnPGFvZpXwkq+pMMVSgz6aqGrGQC5w4mt1QQs/Zy7hF 4pqNk30d7QmgqM3lPQTaRWuYDvwpRRCG -----END CERTIFICATE-----Generated at Mon Apr 28 03:22:12 2025 by rpki-client