$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft File: UHztrU5Y_M0K4JOTmGWG21g_B6I.mft (raw, json) Hash identifier: V/MArklzUigfY+oPx2vLP+lt/27pO0+TuHKTojk/Kkg= Subject key identifier: C9:3E:C1:7E:43:DC:47:A0:B9:1A:45:EB:BA:C4:55:51:B0:6C:57:74 Authority key identifier: 50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 Certificate issuer: /CN=A912C8FD/serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Certificate serial: 0B98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft Manifest number: 0B98 Signing time: Thu 24 Apr 2025 18:53:25 +0000 Manifest this update: Thu 24 Apr 2025 18:53:25 +0000 Manifest next update: Thu 01 May 2025 18:53:25 +0000 Files and hashes: 1: UHztrU5Y_M0K4JOTmGWG21g_B6I.crl (hash: ZtWt283faLCu9NOrrsUrs4fv1KRxH65G2+yDiZLjetI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:53:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2968 (0xb98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FD, serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Validity Not Before: Apr 24 18:53:25 2025 GMT Not After : May 1 18:53:25 2025 GMT Subject: CN=680a88a5-d119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d3:9b:9d:df:92:3d:af:b7:88:e9:2e:3e:dc: 11:2d:fd:3c:ae:9f:41:27:0a:3e:a9:fd:6d:12:f9: d5:f4:e3:6a:c9:aa:7b:df:3e:ea:6f:18:61:7f:45: 66:dd:fc:c9:e7:1c:8d:5b:8c:72:d2:b3:96:ce:04: 22:30:b3:9e:eb:39:2a:51:e7:df:41:27:3e:59:86: 5e:d6:fc:75:5f:63:48:3e:66:da:a7:44:ad:46:08: 92:8c:62:9f:1e:a3:f4:b7:a3:a6:b1:78:98:59:ce: a7:c4:a6:09:fd:47:14:61:36:63:5c:b2:6a:fc:1a: 82:4f:4a:ea:67:2a:b2:5f:de:7c:bd:12:e3:fb:dd: c1:aa:f5:8c:54:a2:08:e9:ae:82:18:59:50:f5:e8: 07:de:70:e2:75:02:67:d5:89:77:33:c0:03:ef:e1: 2d:20:f1:f3:30:97:30:b1:20:25:b8:16:ba:f4:17: eb:14:fc:9e:bf:0e:f9:18:71:ef:c4:5a:6e:ae:08: da:d7:7d:56:01:31:a4:f5:e2:21:75:45:c6:56:2b: 26:9d:19:3a:49:be:a7:28:f2:0b:38:45:66:7b:ce: 18:d5:ee:db:66:e8:c8:70:5c:8d:eb:78:ae:17:04: 09:ec:6e:c5:c1:19:d7:0a:66:e8:60:af:16:22:d5: d8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3E:C1:7E:43:DC:47:A0:B9:1A:45:EB:BA:C4:55:51:B0:6C:57:74 X509v3 Authority Key Identifier: keyid:50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:29:4c:d5:fb:44:29:7c:3d:b4:46:ea:a7:c6:75:3d:8a:55: 73:5b:f9:fe:9a:41:e6:b0:cb:4c:03:51:37:1f:10:b3:43:28: f0:21:28:8d:3d:1f:76:7d:16:82:d9:81:a9:72:a0:86:4f:74: de:4b:e6:6b:31:24:6f:a7:94:e5:75:7c:74:27:7c:ff:e6:09: 7e:ff:10:81:b0:97:28:78:50:26:43:79:08:83:7b:7a:5b:de: a6:e9:ad:5e:f0:e7:eb:84:8a:58:09:51:10:19:e4:f5:7e:bb: fc:3f:cc:27:71:a9:96:22:42:32:2e:73:a7:dd:8d:57:fa:09: 06:4f:c6:e4:cf:e7:08:75:e4:ca:a9:55:d9:bb:ef:fd:04:51: d8:12:93:c5:64:3c:6b:9c:a8:f3:06:55:1e:74:ee:38:72:be: e5:85:66:98:60:a3:33:6a:c4:c9:74:15:75:ba:f5:cd:7b:e3: 70:a7:7c:58:99:06:c2:bf:34:91:5e:c3:8b:b4:47:fa:e2:69: d8:eb:ff:0b:e5:8a:4c:b9:57:3a:52:41:b7:43:6f:65:56:68: f6:dd:58:3c:f9:d9:ac:f5:74:0d:bd:74:63:75:36:15:3a:d1: 58:ab:86:14:a9:fb:74:3d:a9:96:84:b0:85:00:89:7d:d8:d1: 3a:07:0b:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkQxMTAvBgNVBAUTKDUwN0NFREFENEU1OEZDQ0QwQUUwOTM5Mzk4NjU4NkRC NTgzRjA3QTIwHhcNMjUwNDI0MTg1MzI1WhcNMjUwNTAxMTg1MzI1WjAYMRYwFAYD VQQDEw02ODBhODhhNS1kMTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtObnd+SPa+3iOkuPtwRLf08rp9BJwo+qf1tEvnV9ONqyap73z7qbxhhf0Vm 3fzJ5xyNW4xy0rOWzgQiMLOe6zkqUeffQSc+WYZe1vx1X2NIPmbap0StRgiSjGKf HqP0t6OmsXiYWc6nxKYJ/UcUYTZjXLJq/BqCT0rqZyqyX958vRLj+93BqvWMVKII 6a6CGFlQ9egH3nDidQJn1Yl3M8AD7+EtIPHzMJcwsSAluBa69BfrFPyevw75GHHv xFpurgja131WATGk9eIhdUXGVismnRk6Sb6nKPILOEVme84Y1e7bZujIcFyN63iu FwQJ7G7FwRnXCmboYK8WItXYwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMk+wX5D 3EeguRpF67rEVVGwbFd0MB8GA1UdIwQYMBaAFFB87a1OWPzNCuCTk5hlhttYPwei MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGRC82NzRDRTJGMDIx NjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9NMEs0Sk9UbUdXRzIxZ19C NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIenRyVTVZX00wSzRKT1RtR1dHMjFnX0I2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGRC82NzRDRTJGMDIxNjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9N MEs0Sk9UbUdXRzIxZ19CNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiKUzV+0QpfD20RuqnxnU9ilVzW/n+mkHmsMtMA1E3HxCzQyjwISiN PR92fRaC2YGpcqCGT3TeS+ZrMSRvp5TldXx0J3z/5gl+/xCBsJcoeFAmQ3kIg3t6 W96m6a1e8OfrhIpYCVEQGeT1frv8P8wncamWIkIyLnOn3Y1X+gkGT8bkz+cIdeTK qVXZu+/9BFHYEpPFZDxrnKjzBlUedO44cr7lhWaYYKMzasTJdBV1uvXNe+Nwp3xY mQbCvzSRXsOLtEf64mnY6/8L5YpMuVc6UkG3Q29lVmj23Vg8+dms9XQNvXRjdTYV OtFYq4YUqft0PamWhLCFAIl92NE6BwuP -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:46 2025 by rpki-client