$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft File: UZQtJe28pR36Vs4J7TYet6JtvSU.mft (raw, json) Hash identifier: Wozp8FtBh6OWz7pUhKnDG76tcHTmlCG1LsCzUxxofp0= Subject key identifier: FB:2A:C6:99:CB:D2:51:C7:30:1E:D0:94:5A:78:0A:C3:44:C6:6E:28 Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25 Certificate issuer: /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25 Certificate serial: 0928 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft Manifest number: 090D Signing time: Thu 24 Apr 2025 20:18:00 +0000 Manifest this update: Thu 24 Apr 2025 20:17:59 +0000 Manifest next update: Thu 01 May 2025 20:17:59 +0000 Files and hashes: 1: UZQtJe28pR36Vs4J7TYet6JtvSU.crl (hash: ngY0+5Ofcoak02VPgbpBh+Nm5pw6UWBBFMiAVEZkWkU=) 2: 11DBC0ACEB3211EFBDFC3E0FC4F9AE02.roa (hash: 7ik/Y3+kX1yRXlZXLbjaM5LHJI+MSrRXDGW5L+9buCE=) 3: 6602AEE2CD7411EFB3DC8110C4F9AE02.roa (hash: o30eNhjoxZ8FSPolycjRhI/R0tGnW0OcwMartfSl8R0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2344 (0x928) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25 Validity Not Before: Apr 24 20:17:59 2025 GMT Not After : May 1 20:17:59 2025 GMT Subject: CN=680a9c77-7a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:63:95:42:20:d9:88:d9:b4:fa:e0:2a:c6: 0c:8f:4e:a7:d3:b1:76:15:32:ce:c5:d9:6f:81:3f: 11:ca:78:db:3c:22:01:a4:e1:2e:83:ee:08:2d:81: 69:22:41:c1:f9:63:25:80:3e:f8:ad:f8:23:08:53: ac:38:53:e4:0c:7e:bd:85:47:8a:47:ca:31:f1:fa: 10:5f:29:55:d8:d9:f0:83:be:be:d9:ca:73:ca:61: 9e:15:0e:33:fc:88:9c:9e:f5:6b:a9:c7:6b:ae:77: 57:82:b6:b0:ea:61:3d:f0:9c:92:30:e7:7e:08:63: 13:a3:d1:3e:0f:65:11:ac:e9:d3:23:f7:80:61:d9: 4a:1c:bd:e5:a1:41:b4:d9:2e:a2:7d:94:5f:02:c4: ae:cd:20:fb:9f:79:a0:95:ef:5d:90:ad:f6:7a:1a: dd:05:5c:9f:34:92:4a:d8:9e:19:b8:4e:01:d3:b8: 26:c7:a5:9a:36:ef:1b:39:8b:71:49:57:b5:dd:09: 79:0d:88:b5:29:d3:97:5c:3d:42:62:9e:56:ce:ca: 3d:a1:00:0f:85:e7:38:03:56:25:71:a2:69:e3:9c: aa:72:75:63:1e:a8:f0:0c:87:d3:4d:20:1c:46:01: e3:b4:8c:cf:6f:76:ab:0f:c6:c8:e1:bd:e6:35:e9: 04:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2A:C6:99:CB:D2:51:C7:30:1E:D0:94:5A:78:0A:C3:44:C6:6E:28 X509v3 Authority Key Identifier: keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:15:0f:2b:54:80:dc:62:f5:9f:7d:0a:d2:2e:cb:dc:6b:91: 6c:d5:57:e8:5e:98:bb:3e:11:5d:a8:59:f4:6c:06:70:0e:fc: 73:47:00:42:0b:42:37:c8:26:23:10:bc:db:df:4e:06:05:c9: 70:ae:6d:ed:f6:8b:27:a4:21:70:ae:78:28:d5:98:f2:ed:ba: fd:07:2a:bb:41:60:ba:09:cf:3a:24:77:41:c0:7f:a3:c3:b3: ed:6d:5e:bb:21:67:71:d4:9c:e6:82:12:14:be:96:a6:4a:ef: a5:65:58:c3:e8:5c:e2:bb:6a:a4:88:b3:98:9d:df:84:f5:e8: 46:56:d5:fa:d1:94:0d:9e:10:dd:bf:74:1a:99:23:cb:12:af: b2:90:a6:dd:c6:11:72:47:27:84:53:5a:12:25:e1:e1:cf:ac: f5:88:d4:38:58:d0:1f:d4:79:7c:b7:4c:2c:64:90:f3:2b:0c: 52:f6:f7:89:fe:b3:98:fe:3d:47:a7:10:39:eb:5f:77:0e:49: 81:76:42:b5:d2:1f:52:cf:5f:4b:9b:86:6e:8a:23:5e:60:4b: ae:70:09:44:32:6e:8d:e6:63:28:be:d8:bc:56:a5:31:5a:b8: bb:24:99:63:e3:97:0e:e9:02:fe:07:b2:a7:36:71:f3:aa:a2: 9f:9e:97:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGQTQxMTAvBgNVBAUTKDUxOTQyRDI1RURCQ0E1MURGQTU2Q0UwOUVEMzYxRUI3 QTI2REJEMjUwHhcNMjUwNDI0MjAxNzU5WhcNMjUwNTAxMjAxNzU5WjAYMRYwFAYD VQQDEw02ODBhOWM3Ny03YThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwJjlUIg2YjZtPrgKsYMj06n07F2FTLOxdlvgT8RynjbPCIBpOEug+4ILYFp IkHB+WMlgD74rfgjCFOsOFPkDH69hUeKR8ox8foQXylV2Nnwg76+2cpzymGeFQ4z /IicnvVrqcdrrndXgraw6mE98JySMOd+CGMTo9E+D2URrOnTI/eAYdlKHL3loUG0 2S6ifZRfAsSuzSD7n3mgle9dkK32ehrdBVyfNJJK2J4ZuE4B07gmx6WaNu8bOYtx SVe13Ql5DYi1KdOXXD1CYp5Wzso9oQAPhec4A1YlcaJp45yqcnVjHqjwDIfTTSAc RgHjtIzPb3arD8bI4b3mNekEywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsqxpnL 0lHHMB7QlFp4CsNExm4oMB8GA1UdIwQYMBaAFFGULSXtvKUd+lbOCe02Hreibb0l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUZBNC9CNjc4NjJGQUFC OTUxMUVBQjI1NTlDNUJDNEY5QUUwMi9VWlF0SmUyOHBSMzZWczRKN1RZZXQ2SnR2 U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VaUXRKZTI4cFIzNlZzNEo3VFlldDZKdHZTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUZBNC9CNjc4NjJGQUFCOTUxMUVBQjI1NTlDNUJDNEY5QUUwMi9VWlF0SmUyOHBS MzZWczRKN1RZZXQ2SnR2U1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSFQ8rVIDcYvWffQrSLsvca5Fs1VfoXpi7PhFdqFn0bAZwDvxzRwBC C0I3yCYjELzb304GBclwrm3t9osnpCFwrngo1Zjy7br9Byq7QWC6Cc86JHdBwH+j w7PtbV67IWdx1JzmghIUvpamSu+lZVjD6Fziu2qkiLOYnd+E9ehGVtX60ZQNnhDd v3QamSPLEq+ykKbdxhFyRyeEU1oSJeHhz6z1iNQ4WNAf1Hl8t0wsZJDzKwxS9veJ /rOY/j1HpxA56193DkmBdkK10h9Sz19Lm4ZuiiNeYEuucAlEMm6N5mMovti8VqUx Wri7JJlj45cO6QL+B7KnNnHzqqKfnpdS -----END CERTIFICATE-----Generated at Sat Apr 26 17:00:09 2025 by rpki-client