$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft File: Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft (raw, json) Hash identifier: 6qBtBllFjKmLSeGQ5lHvcL8HNn6QV5m3WhQ51HHVMB4= Subject key identifier: 4A:B8:7A:A0:CB:4F:9D:03:38:B2:88:4B:14:00:85:5A:E3:34:3A:9C Authority key identifier: 52:FE:2B:6B:7F:49:7F:94:F1:D4:92:D1:91:7B:48:64:78:BF:59:D6 Certificate issuer: /CN=A9125475/serialNumber=52FE2B6B7F497F94F1D492D1917B486478BF59D6 Certificate serial: 0237 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft Manifest number: 022E Signing time: Thu 24 Apr 2025 14:20:28 +0000 Manifest this update: Thu 24 Apr 2025 14:20:27 +0000 Manifest next update: Thu 01 May 2025 14:20:27 +0000 Files and hashes: 1: Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl (hash: VUgq2wBpMQUyempOd955utxd941VNu6WkpHWAHnTHBI=) 2: 84094296EF5E11EF81B0790EC4F9AE02.roa (hash: Ckg4hw6DabBO2d7okoEF2pancj6gViKBZRAEfAu13oo=) 3: DFA79FA2EFD811EE87F4440AC4F9AE02.roa (hash: hQScYTUNqe8SfNNwSXoRwPKv/1EvvMjHkzfsNEe+pKg=) 4: C3923CE6EFD811EEB93EE009C4F9AE02.roa (hash: EgTNqiKvmZXEy9LjOSG2dN0ynTpnYuhjXlrpPTL50KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=52FE2B6B7F497F94F1D492D1917B486478BF59D6 Validity Not Before: Apr 24 14:20:27 2025 GMT Not After : May 1 14:20:27 2025 GMT Subject: CN=680a48ac-de64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ca:79:97:27:17:81:11:ab:04:78:63:e1:b3: 6b:0c:d8:3d:c9:aa:35:35:fc:14:6c:ab:03:fa:12: 58:f6:23:5d:74:4e:06:41:fa:aa:3b:a5:fc:fd:be: 5b:c4:b8:2e:7b:8b:cb:c7:ab:24:cd:e8:84:a3:db: 58:f7:88:a9:cf:98:04:36:c6:1f:05:d2:f5:45:d9: 8e:da:dc:e9:b9:04:c7:1b:5e:53:f2:43:32:b3:f0: c4:92:fb:3f:c8:9f:67:3b:57:dc:6a:63:c2:07:4a: 52:be:40:68:fc:ae:40:44:fb:22:56:69:cb:90:37: 10:eb:9d:65:82:b9:fa:67:95:a4:86:9a:15:8d:23: cd:83:e3:2a:c9:2b:90:6f:a1:07:0b:26:df:00:7b: e8:e2:ac:dd:84:97:27:a8:33:97:92:3f:4f:d2:26: 75:de:74:92:10:ea:71:73:e5:39:35:1b:1e:64:37: 5b:cf:7f:33:fa:fb:05:68:f4:78:e6:47:5e:22:ef: 8a:75:dd:9c:49:8e:5d:d2:9f:db:61:99:60:50:3b: b3:ea:62:3f:ff:2c:6c:69:a8:41:bc:5e:02:78:fb: 75:a1:59:a0:b9:8b:6c:fd:d3:65:f4:6c:c0:cf:ec: a3:67:01:ae:64:6c:82:31:49:e3:a9:52:65:e3:3b: f7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B8:7A:A0:CB:4F:9D:03:38:B2:88:4B:14:00:85:5A:E3:34:3A:9C X509v3 Authority Key Identifier: keyid:52:FE:2B:6B:7F:49:7F:94:F1:D4:92:D1:91:7B:48:64:78:BF:59:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:6c:99:11:cc:59:4e:f8:22:74:84:d8:b1:f3:bb:9c:c1:fe: 00:f2:51:63:d9:41:96:e0:6d:bd:17:8f:8a:24:42:fe:d8:9e: 15:59:4c:e5:5e:fa:5a:51:a0:1e:1b:ca:9d:c2:b3:ca:a8:fb: ec:ac:32:51:b1:a0:73:18:7a:9b:39:55:ee:77:20:83:24:30: ce:e7:f7:cf:00:99:2e:f4:97:99:04:5c:5b:06:f6:bd:6f:f9: 41:46:25:3e:6d:b9:a1:ed:dd:b3:f7:be:13:0d:ba:eb:ef:da: 27:db:9f:b9:72:c6:72:c8:15:1a:c1:e9:ee:36:ab:92:8e:83: fd:65:c8:67:62:50:17:62:ee:77:9e:96:e6:5f:1a:59:92:d2: d5:7c:1b:2a:b6:3c:2b:e1:71:73:55:32:21:8f:9e:82:47:64: 13:3b:66:68:65:f1:6a:74:d6:24:e1:99:c5:2c:69:32:c6:11: 7a:e5:fa:50:c1:69:51:fd:0a:e9:95:78:02:3e:07:a9:65:c8: 8c:f0:0a:ee:f7:3d:79:27:8b:db:ea:5c:5f:52:8e:3c:72:1b: dd:63:55:4b:cd:79:98:69:12:18:cf:20:ee:e4:f9:ad:ad:53: 13:f1:fb:11:0f:0a:60:e4:eb:20:29:6a:f1:19:e0:eb:3f:88: 39:0a:05:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDUyRkUyQjZCN0Y0OTdGOTRGMUQ0OTJEMTkxN0I0ODY0 NzhCRjU5RDYwHhcNMjUwNDI0MTQyMDI3WhcNMjUwNTAxMTQyMDI3WjAYMRYwFAYD VQQDEw02ODBhNDhhYy1kZTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8p5lycXgRGrBHhj4bNrDNg9yao1NfwUbKsD+hJY9iNddE4GQfqqO6X8/b5b xLgue4vLx6skzeiEo9tY94ipz5gENsYfBdL1RdmO2tzpuQTHG15T8kMys/DEkvs/ yJ9nO1fcamPCB0pSvkBo/K5ARPsiVmnLkDcQ651lgrn6Z5WkhpoVjSPNg+MqySuQ b6EHCybfAHvo4qzdhJcnqDOXkj9P0iZ13nSSEOpxc+U5NRseZDdbz38z+vsFaPR4 5kdeIu+Kdd2cSY5d0p/bYZlgUDuz6mI//yxsaahBvF4CePt1oVmguYts/dNl9GzA z+yjZwGuZGyCMUnjqVJl4zv3KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEq4eqDL T50DOLKISxQAhVrjNDqcMB8GA1UdIwQYMBaAFFL+K2t/SX+U8dSS0ZF7SGR4v1nW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9DMTMxMTZGMjI4 RDMxMUVEOEZCRDZENkNDNEY5QUUwMi9VdjRyYTM5SmY1VHgxSkxSa1h0SVpIaV9X ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1V2NHJhMzlKZjVUeDFKTFJrWHRJWkhpX1dkWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS9DMTMxMTZGMjI4RDMxMUVEOEZCRDZENkNDNEY5QUUwMi9VdjRyYTM5SmY1 VHgxSkxSa1h0SVpIaV9XZFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRbJkRzFlO+CJ0hNix87ucwf4A8lFj2UGW4G29F4+KJEL+2J4VWUzl XvpaUaAeG8qdwrPKqPvsrDJRsaBzGHqbOVXudyCDJDDO5/fPAJku9JeZBFxbBva9 b/lBRiU+bbmh7d2z974TDbrr79on25+5csZyyBUawenuNquSjoP9ZchnYlAXYu53 npbmXxpZktLVfBsqtjwr4XFzVTIhj56CR2QTO2ZoZfFqdNYk4ZnFLGkyxhF65fpQ wWlR/QrplXgCPgepZciM8Aru9z15J4vb6lxfUo48chvdY1VLzXmYaRIYzyDu5Pmt rVMT8fsRDwpg5OsgKWrxGeDrP4g5CgUa -----END CERTIFICATE-----Generated at Sat Apr 26 15:22:17 2025 by rpki-client