$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft File: uhYFabkV4kxq5sJIlNBPnUo5FpI.mft (raw, json) Hash identifier: tGSqMzjBqwde3aU0eo9/g3EZRPg/NtnA0WOtmSqZ9zs= Subject key identifier: B6:2F:39:C5:D4:9D:9E:FD:5C:07:3D:07:C7:B2:9B:B6:2F:23:A0:BB Authority key identifier: BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92 Certificate issuer: /CN=A912CDCB/serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692 Certificate serial: 04C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft Manifest number: 04BD Signing time: Thu 24 Apr 2025 23:37:45 +0000 Manifest this update: Thu 24 Apr 2025 23:37:45 +0000 Manifest next update: Thu 01 May 2025 23:37:45 +0000 Files and hashes: 1: uhYFabkV4kxq5sJIlNBPnUo5FpI.crl (hash: DBIZ+xGVQdibo72OieAZ4U9LEgQP/txqFljrGUdU/oc=) 2: DAF98AAA20F111EC89E7D668C4F9AE02.roa (hash: LH3JZfkASioifJ898UuwmPenAKd90H/13hB5MxOGBgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1217 (0x4c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDCB, serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692 Validity Not Before: Apr 24 23:37:45 2025 GMT Not After : May 1 23:37:45 2025 GMT Subject: CN=680acb49-f67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:22:94:76:f6:b7:3f:f2:d9:ba:61:02:3b:3b: b2:c8:5e:ae:a9:8f:9c:04:51:c2:b7:03:ec:c1:86: d9:a5:51:9c:51:21:d0:16:0b:fb:5b:66:e3:4e:14: 7f:52:e5:f8:62:02:71:f6:fa:12:42:0d:5d:15:37: 5f:23:cc:dd:87:7c:8a:15:27:76:f1:86:9f:c0:92: 60:7e:6c:c7:5e:90:5b:0a:a4:0f:cc:7a:2d:f2:79: 62:d6:ac:76:46:a4:26:4a:7e:a6:21:0e:bc:15:8d: 73:22:6c:23:ac:1d:39:f1:d2:4b:0d:0b:bb:41:1f: f8:aa:42:f2:76:ff:39:f5:a6:7f:90:41:2c:7a:01: e2:71:60:96:d3:67:81:94:89:c8:da:d7:00:46:30: a1:06:3d:54:bc:3b:e3:49:cd:68:bb:16:57:d2:23: a9:d4:be:54:e2:78:23:b4:1c:fd:c1:46:42:10:fa: 39:27:3b:67:06:70:76:fc:5f:57:3d:59:91:8e:8f: 0e:40:95:5c:45:5a:8f:6f:f3:4e:b1:0a:ba:37:1b: 45:c9:73:c7:61:e7:c1:17:35:46:c0:6d:d3:44:bd: a3:b9:e3:1b:1b:30:a8:34:5e:c7:29:51:44:64:a4: 37:6e:d6:13:e6:35:88:aa:17:76:2f:bb:57:75:cc: 85:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2F:39:C5:D4:9D:9E:FD:5C:07:3D:07:C7:B2:9B:B6:2F:23:A0:BB X509v3 Authority Key Identifier: keyid:BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:f2:4b:16:cc:e5:67:60:23:5e:57:a0:42:1c:5a:70:d2:4c: ee:17:bd:d0:ff:42:af:e0:8f:d3:6a:2a:f5:ad:30:fc:7f:ee: e1:d3:17:ca:d9:83:c0:ec:0a:d9:94:a6:9c:bf:56:1c:ba:4d: b1:b0:84:fb:40:9a:0a:8a:dd:01:f5:d7:b0:88:9d:5c:1d:d4: 5b:7f:a9:84:62:1b:df:cd:1e:e7:d2:ed:00:7f:88:d3:48:91: e5:08:c7:e7:70:9e:b4:2c:e5:42:d2:0e:98:a3:af:9e:12:1e: be:aa:7a:32:3b:48:7b:d1:18:8c:b4:ee:67:88:7c:60:6e:0b: 52:d2:9d:dc:92:f0:b5:d8:6b:5e:aa:c6:b4:ae:d9:02:ca:f1: 0f:ed:62:d2:8c:16:34:68:0b:b8:c7:b4:4a:7c:db:a0:fa:9a: ab:00:c5:bb:a2:ce:f1:5b:42:9b:6d:dd:6b:a0:df:d2:b4:8e: 96:ef:ff:74:0e:de:06:20:0f:9e:39:e3:3f:83:33:3a:d7:2a: c4:39:31:c5:42:e6:63:07:25:36:15:36:db:ac:7c:c5:d6:ba: f8:fb:ff:5e:cc:f9:9c:e2:41:09:cf:32:33:56:01:82:bb:0c: 78:e7:e8:b3:1f:ed:cb:31:c7:d6:ea:ac:35:93:56:8f:47:eb: bc:af:7e:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQ0IxMTAvBgNVBAUTKEJBMTYwNTY5QjkxNUUyNEM2QUU2QzI0ODk0RDA0RjlE NEEzOTE2OTIwHhcNMjUwNDI0MjMzNzQ1WhcNMjUwNTAxMjMzNzQ1WjAYMRYwFAYD VQQDEw02ODBhY2I0OS1mNjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3iKUdva3P/LZumECOzuyyF6uqY+cBFHCtwPswYbZpVGcUSHQFgv7W2bjThR/ UuX4YgJx9voSQg1dFTdfI8zdh3yKFSd28YafwJJgfmzHXpBbCqQPzHot8nli1qx2 RqQmSn6mIQ68FY1zImwjrB058dJLDQu7QR/4qkLydv859aZ/kEEsegHicWCW02eB lInI2tcARjChBj1UvDvjSc1ouxZX0iOp1L5U4ngjtBz9wUZCEPo5JztnBnB2/F9X PVmRjo8OQJVcRVqPb/NOsQq6NxtFyXPHYefBFzVGwG3TRL2jueMbGzCoNF7HKVFE ZKQ3btYT5jWIqhd2L7tXdcyF0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYvOcXU nZ79XAc9B8eym7YvI6C7MB8GA1UdIwQYMBaAFLoWBWm5FeJMaubCSJTQT51KORaS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDQi84QTgyMDk0NDIw RUMxMUVDOUQ1RDMxM0JDNEY5QUUwMi91aFlGYWJrVjRreHE1c0pJbE5CUG5VbzVG cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VoWUZhYmtWNGt4cTVzSklsTkJQblVvNUZwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDQi84QTgyMDk0NDIwRUMxMUVDOUQ1RDMxM0JDNEY5QUUwMi91aFlGYWJrVjRr eHE1c0pJbE5CUG5VbzVGcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA48ksWzOVnYCNeV6BCHFpw0kzuF73Q/0Kv4I/Tair1rTD8f+7h0xfK 2YPA7ArZlKacv1Ycuk2xsIT7QJoKit0B9dewiJ1cHdRbf6mEYhvfzR7n0u0Af4jT SJHlCMfncJ60LOVC0g6Yo6+eEh6+qnoyO0h70RiMtO5niHxgbgtS0p3ckvC12Gte qsa0rtkCyvEP7WLSjBY0aAu4x7RKfNug+pqrAMW7os7xW0Kbbd1roN/StI6W7/90 Dt4GIA+eOeM/gzM61yrEOTHFQuZjByU2FTbbrHzF1rr4+/9ezPmc4kEJzzIzVgGC uwx45+izH+3LMcfW6qw1k1aPR+u8r35I -----END CERTIFICATE-----Generated at Sat Apr 26 12:37:32 2025 by rpki-client