$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft File: UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft (raw, json) Hash identifier: c5IkFMoWH0n1ejzmsS1Pvc/J85yQr6ErgCZRdw70Fa0= Subject key identifier: 30:6D:EB:70:3F:52:DF:71:6D:70:7F:F8:97:62:BE:CD:F3:18:7A:48 Authority key identifier: 52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78 Certificate issuer: /CN=A9136D7D/serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78 Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft Manifest number: 0228 Signing time: Fri 25 Apr 2025 01:42:51 +0000 Manifest this update: Fri 25 Apr 2025 01:42:51 +0000 Manifest next update: Fri 02 May 2025 01:42:51 +0000 Files and hashes: 1: UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl (hash: q+XYdSRmhXQIlc8G6/BExeE+bnsH/jzbFkKLmK69TLU=) 2: A9E3A5041C3411EFBF05095BC4F9AE02.roa (hash: DS6aoQLqOLSS763BWHIUmquh48JGAfBdAQCJMqSDzPU=) 3: E4A016C01CD211EFB606D514C4F9AE02.roa (hash: yMapl0YXXAfKwoBzESq2p7IfMt1+B0piySrxnFgxgIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136D7D, serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78 Validity Not Before: Apr 25 01:42:51 2025 GMT Not After : May 2 01:42:51 2025 GMT Subject: CN=680ae89b-535b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:37:60:36:1b:1c:31:40:b6:72:ef:7d:db:29: 6e:62:79:69:61:a2:40:cf:bd:95:88:91:1f:e3:57: 3c:b2:cf:11:42:56:52:c0:6d:1a:fc:2e:51:5b:98: 7f:79:ed:13:03:30:06:dd:51:6c:dc:9d:ca:52:2a: a1:ec:d9:c1:b1:49:7a:e5:5a:a9:bb:3b:6d:16:97: b9:1f:fb:c8:c1:d9:d6:3a:fa:a8:11:4c:c1:d8:6c: 5b:29:81:75:09:07:e0:4d:da:23:e2:7a:d2:3d:88: ea:24:7d:68:0e:b5:9d:b3:7e:b9:a7:90:0e:64:c3: ec:66:17:ca:48:72:43:f2:5c:80:ee:b4:b2:a6:bd: 04:a4:42:df:2f:66:87:2e:97:c7:ed:85:90:52:d7: a0:1e:a5:79:cc:d0:b7:db:77:da:b6:f2:32:9b:ab: d8:bd:f2:79:f3:4f:8b:52:64:cf:7a:b8:1c:3e:f5: 6d:cf:c0:35:ed:2a:cb:29:58:50:11:14:c4:bd:24: 95:96:02:d1:3c:35:76:db:8d:8d:a3:4f:f0:eb:28: d5:53:aa:d4:79:8a:48:ee:2c:3f:fd:42:6f:b5:7b: cc:1e:2b:02:7f:7e:50:bb:dc:ff:49:c7:dd:47:2b: 8a:b6:42:5d:12:bc:3f:44:e6:3d:b8:85:df:f2:b9: a0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6D:EB:70:3F:52:DF:71:6D:70:7F:F8:97:62:BE:CD:F3:18:7A:48 X509v3 Authority Key Identifier: keyid:52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:d2:e9:ab:ae:2d:a1:c4:0a:0e:fe:5c:03:03:7f:1f:1d:45: 2f:f1:23:ba:ac:7f:a8:57:89:37:8e:a6:78:ea:50:22:ea:b5: 3e:1a:48:4e:04:70:87:25:7f:cd:29:ca:65:dc:43:56:49:58: 3a:6d:f5:19:da:e9:70:eb:5c:75:77:df:b5:2f:98:0c:6e:98: 0e:36:c7:5b:37:22:28:38:a5:76:b9:91:e3:42:e2:3c:76:0a: 95:c2:13:9e:9b:e0:5c:50:7b:23:7f:ac:aa:21:d1:68:c2:46: b3:9e:26:95:07:0e:5a:d6:d3:f0:6c:4e:6f:ab:dc:58:56:e1: 4a:66:2f:4c:11:df:6d:05:cb:37:1f:0b:fa:54:0e:f2:28:76: 67:c6:2c:f1:34:fe:30:32:3f:f0:d3:4b:4b:26:66:7d:27:b7: af:aa:54:0e:9a:6c:a7:01:20:7c:99:39:f6:fe:ac:90:e1:52: 00:2b:c3:d6:d9:f4:17:26:94:eb:59:40:a7:18:4b:f8:4a:64: 63:f6:f9:18:18:38:cc:eb:ee:93:84:de:68:6c:a7:49:4e:37: e3:c0:71:23:ae:8e:33:eb:9a:29:94:49:58:97:6e:c4:95:b5: 39:51:ef:e4:66:33:3b:1c:71:12:f5:e4:0b:1b:73:44:ec:be: d9:51:3a:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZEN0QxMTAvBgNVBAUTKDUyMjJBMTYxOURGRkYwNENCMDk3QkI1MTZBMDc0Q0NE MURBRkZDNzgwHhcNMjUwNDI1MDE0MjUxWhcNMjUwNTAyMDE0MjUxWjAYMRYwFAYD VQQDEw02ODBhZTg5Yi01MzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTdgNhscMUC2cu992yluYnlpYaJAz72ViJEf41c8ss8RQlZSwG0a/C5RW5h/ ee0TAzAG3VFs3J3KUiqh7NnBsUl65VqpuzttFpe5H/vIwdnWOvqoEUzB2GxbKYF1 CQfgTdoj4nrSPYjqJH1oDrWds365p5AOZMPsZhfKSHJD8lyA7rSypr0EpELfL2aH LpfH7YWQUtegHqV5zNC323fatvIym6vYvfJ580+LUmTPergcPvVtz8A17SrLKVhQ ERTEvSSVlgLRPDV2242No0/w6yjVU6rUeYpI7iw//UJvtXvMHisCf35Qu9z/Scfd RyuKtkJdErw/ROY9uIXf8rmgcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBt63A/ Ut9xbXB/+Jdivs3zGHpIMB8GA1UdIwQYMBaAFFIioWGd//BMsJe7UWoHTM0dr/x4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkQ3RC9BMzM5NjMwRTI3 NTAxMUVEOTE0N0IyNzNDNEY5QUUwMi9VaUtoWVozXzhFeXdsN3RSYWdkTXpSMnZf SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VpS2hZWjNfOEV5d2w3dFJhZ2RNelIydl9IZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkQ3RC9BMzM5NjMwRTI3NTAxMUVEOTE0N0IyNzNDNEY5QUUwMi9VaUtoWVozXzhF eXdsN3RSYWdkTXpSMnZfSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC50umrri2hxAoO/lwDA38fHUUv8SO6rH+oV4k3jqZ46lAi6rU+GkhO BHCHJX/NKcpl3ENWSVg6bfUZ2ulw61x1d9+1L5gMbpgONsdbNyIoOKV2uZHjQuI8 dgqVwhOem+BcUHsjf6yqIdFowkazniaVBw5a1tPwbE5vq9xYVuFKZi9MEd9tBcs3 Hwv6VA7yKHZnxizxNP4wMj/w00tLJmZ9J7evqlQOmmynASB8mTn2/qyQ4VIAK8PW 2fQXJpTrWUCnGEv4SmRj9vkYGDjM6+6ThN5obKdJTjfjwHEjro4z65oplElYl27E lbU5Ue/kZjM7HHES9eQLG3NE7L7ZUTpJ -----END CERTIFICATE-----Generated at Sat Apr 26 03:49:48 2025 by rpki-client