$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft File: UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft (raw, json) Hash identifier: idSAnZ9Yh8HSa6sZrddrmg6dyp6NCd9ZQsk7lNNbqh0= Subject key identifier: B9:74:BE:A2:2F:F2:B4:80:3C:BE:D8:B9:F3:A1:DA:44:5C:31:5C:0A Authority key identifier: 50:FB:B4:03:64:34:73:F9:91:27:36:26:27:7A:92:2C:07:06:AC:57 Certificate issuer: /CN=A9137242/serialNumber=50FBB403643473F991273626277A922C0706AC57 Certificate serial: 0D59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft Manifest number: 14CE Signing time: Thu 24 Apr 2025 17:56:37 +0000 Manifest this update: Thu 24 Apr 2025 17:56:36 +0000 Manifest next update: Thu 01 May 2025 17:56:36 +0000 Files and hashes: 1: UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl (hash: 3gADWynzlqMF0znoBmEA5YSwMQoc6CDKukRANuGuXnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3417 (0xd59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137242, serialNumber=50FBB403643473F991273626277A922C0706AC57 Validity Not Before: Apr 24 17:56:36 2025 GMT Not After : May 1 17:56:36 2025 GMT Subject: CN=680a7b55-9afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d3:fc:ef:f2:59:9b:08:0e:7d:07:be:f1:f1: f3:63:7b:6b:19:46:26:21:9e:e8:cd:f9:40:2f:1c: 5a:ef:95:31:70:c5:48:03:05:2d:09:0c:45:2e:96: f4:77:bc:ba:7c:2a:a0:3e:cf:a3:52:2e:2d:d9:5c: b6:50:2b:5e:4c:14:8e:a1:b7:27:1e:5a:01:61:8e: d6:62:c8:73:51:55:6a:13:f2:c7:5f:8e:f1:87:40: 62:f1:b8:34:fe:4c:09:ce:34:01:ae:8b:a5:d5:40: 39:81:89:e2:83:30:45:48:1f:aa:95:ef:9c:fc:9f: 6c:fe:72:0d:4a:03:b3:63:1f:26:21:56:b8:21:3b: b9:53:5b:b0:8d:b0:30:1f:b1:8b:3f:98:b2:44:d3: b1:d4:eb:a1:2a:a7:7d:be:7e:1a:58:f4:c4:04:0a: af:05:b0:3b:8c:46:88:43:83:25:48:02:39:eb:4b: d8:bf:f3:ca:a1:54:fd:f1:c4:be:06:d6:8b:81:89: 63:1a:81:a8:24:60:00:8f:2e:b0:cc:d4:61:03:d0: 0d:da:cb:93:7a:62:5d:bb:be:1e:b0:22:7c:d5:24: 12:fd:30:75:e6:31:a0:1b:9e:f4:1d:2d:90:2a:6b: 99:84:51:56:4c:01:73:12:b7:c2:69:9e:0a:3e:a9: 96:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:74:BE:A2:2F:F2:B4:80:3C:BE:D8:B9:F3:A1:DA:44:5C:31:5C:0A X509v3 Authority Key Identifier: keyid:50:FB:B4:03:64:34:73:F9:91:27:36:26:27:7A:92:2C:07:06:AC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:40:78:93:b2:9b:bd:44:4c:b2:27:59:d1:fc:a3:34:f5:e5: 2b:6e:96:fa:43:07:2b:8f:15:1f:dc:b8:24:c2:bd:7b:00:39: e0:3d:fe:4f:4f:a1:d6:8d:41:56:a0:c7:0d:dd:7c:e1:1d:2a: 6d:9f:7f:59:6e:b6:91:89:90:24:1f:98:3f:57:99:3a:97:a6: e4:7f:ab:9b:76:e8:4d:be:2f:eb:0f:10:d3:04:5a:0e:60:30: 23:6a:78:9b:69:6c:41:d1:1f:2d:9d:1e:42:ae:f3:51:4c:59: 05:ab:1c:6b:12:75:f0:d0:c3:99:ed:c0:94:2b:e8:ec:cf:e2: a7:4b:64:9b:ab:bf:c6:f5:5a:9d:72:04:b5:1b:b9:b3:a2:fb: c0:1f:6f:d0:dd:5b:90:ae:06:09:2d:54:74:bb:dd:64:19:1b: b8:c3:53:a8:73:3d:42:ce:9e:6d:5c:20:5a:df:f7:36:5f:8b: 72:39:28:5f:ab:d8:fc:3c:e0:26:6e:b3:8e:91:d0:87:28:27: b9:22:4e:d5:3e:71:e6:75:65:57:ee:21:bb:8e:19:0d:fd:d2: 18:6d:fc:4c:0e:e2:05:1e:e1:a8:53:e8:e6:11:30:ca:db:20: 55:64:37:07:9e:a2:19:fe:0d:c3:e4:06:17:e8:6d:d7:8e:15: 8a:a8:f0:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzcyNDIxMTAvBgNVBAUTKDUwRkJCNDAzNjQzNDczRjk5MTI3MzYyNjI3N0E5MjJD MDcwNkFDNTcwHhcNMjUwNDI0MTc1NjM2WhcNMjUwNTAxMTc1NjM2WjAYMRYwFAYD VQQDEw02ODBhN2I1NS05YWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9P87/JZmwgOfQe+8fHzY3trGUYmIZ7ozflALxxa75UxcMVIAwUtCQxFLpb0 d7y6fCqgPs+jUi4t2Vy2UCteTBSOobcnHloBYY7WYshzUVVqE/LHX47xh0Bi8bg0 /kwJzjQBroul1UA5gYnigzBFSB+qle+c/J9s/nINSgOzYx8mIVa4ITu5U1uwjbAw H7GLP5iyRNOx1OuhKqd9vn4aWPTEBAqvBbA7jEaIQ4MlSAI560vYv/PKoVT98cS+ BtaLgYljGoGoJGAAjy6wzNRhA9AN2suTemJdu74esCJ81SQS/TB15jGgG570HS2Q KmuZhFFWTAFzErfCaZ4KPqmWPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLl0vqIv 8rSAPL7YufOh2kRcMVwKMB8GA1UdIwQYMBaAFFD7tANkNHP5kSc2Jid6kiwHBqxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzI0Mi8wQjYwODc5NkNB MzQxMUU5QkM3NjkwNTVDNEY5QUUwMi9VUHUwQTJRMGNfbVJKelltSjNxU0xBY0dy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VQdTBBMlEwY19tUkp6WW1KM3FTTEFjR3JGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzI0Mi8wQjYwODc5NkNBMzQxMUU5QkM3NjkwNTVDNEY5QUUwMi9VUHUwQTJRMGNf bVJKelltSjNxU0xBY0dyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpQHiTspu9REyyJ1nR/KM09eUrbpb6QwcrjxUf3Lgkwr17ADngPf5P T6HWjUFWoMcN3XzhHSptn39ZbraRiZAkH5g/V5k6l6bkf6ubduhNvi/rDxDTBFoO YDAjanibaWxB0R8tnR5CrvNRTFkFqxxrEnXw0MOZ7cCUK+jsz+KnS2Sbq7/G9Vqd cgS1G7mzovvAH2/Q3VuQrgYJLVR0u91kGRu4w1Oocz1Czp5tXCBa3/c2X4tyOShf q9j8POAmbrOOkdCHKCe5Ik7VPnHmdWVX7iG7jhkN/dIYbfxMDuIFHuGoU+jmETDK 2yBVZDcHnqIZ/g3D5AYX6G3XjhWKqPBo -----END CERTIFICATE-----Generated at Sat Apr 26 05:07:56 2025 by rpki-client