$ rpki-client -vvf rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft File: UoaLCQH1W0B4uRpzRRym0iMSyKs.mft (raw, json) Hash identifier: utrVtGfXdmcj6U54TZH8BI4DIO5C4lIEnr2hhE9LHa4= Subject key identifier: 43:65:1B:F8:42:41:C1:24:B7:CE:A1:00:C9:80:46:0B:0C:0F:63:E1 Authority key identifier: 52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB Certificate issuer: /CN=A913E2B3/serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB Certificate serial: 0BFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft Manifest number: 0BEE Signing time: Thu 24 Apr 2025 18:41:23 +0000 Manifest this update: Thu 24 Apr 2025 18:41:22 +0000 Manifest next update: Thu 01 May 2025 18:41:22 +0000 Files and hashes: 1: UoaLCQH1W0B4uRpzRRym0iMSyKs.crl (hash: 1pVMrOWHUB2AHoYn90whqy87ybQxW2/RRhKL4KlDgFE=) 2: 399AB6DA4ED511ED84336740C4F9AE02.roa (hash: xH17spaHhMO4029wjNj4ZW6FqoA9g6CON6QQbD7o3j0=) 3: 3AB1E0D44ED511ED84336740C4F9AE02.roa (hash: J+JzfdPnvnmB6Ay3Ml+qeWmcjb1XIfVxnUqGVNUN7Ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3068 (0xbfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E2B3, serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB Validity Not Before: Apr 24 18:41:22 2025 GMT Not After : May 1 18:41:22 2025 GMT Subject: CN=680a85d2-694b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bc:da:e4:32:ce:ff:ae:56:15:11:30:51:6f: ff:1a:bb:8d:aa:2d:6d:65:60:d9:f9:b5:33:bd:f1: 8b:5b:4b:f5:3c:b8:d3:4f:59:63:0e:31:33:40:8c: d2:e4:68:90:4d:5f:0d:ab:ee:e5:8f:cc:a4:0e:7c: 4f:07:e1:43:b9:03:54:d1:5e:f4:ff:3e:0f:23:79: 3c:d0:fb:64:1b:b8:3a:2f:aa:8d:ae:6c:cb:20:73: 32:60:3e:b6:15:97:f8:c3:0d:3c:c8:a1:33:0b:bb: c2:fc:bb:95:36:f8:9e:17:09:37:36:9d:75:d2:b5: 93:fb:aa:09:46:63:80:79:d6:3c:e9:33:a9:4d:59: eb:0b:a0:23:f5:55:e0:d5:5e:b2:ed:33:f4:5f:a9: 12:83:b5:ee:94:c3:d5:77:b7:8a:f9:bd:18:63:c9: 60:14:ba:41:e7:16:d4:6b:ea:23:a3:d3:95:a8:77: ba:e8:e8:da:c2:94:d6:4e:3e:7c:90:79:1f:8e:26: f6:bc:46:4d:46:4a:25:f4:9b:21:1e:92:f1:4a:4d: a1:1e:95:44:42:21:c3:6d:a5:0a:df:23:61:68:41: 1d:70:83:3d:50:c4:c5:b1:c5:e8:04:57:a5:15:84: 54:13:ae:de:4d:c3:9a:fe:54:f3:b2:b0:70:3f:e6: d9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:65:1B:F8:42:41:C1:24:B7:CE:A1:00:C9:80:46:0B:0C:0F:63:E1 X509v3 Authority Key Identifier: keyid:52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:0a:23:b6:b3:91:1e:c7:b5:d4:c6:5d:27:34:72:30:a1:05: 3f:a1:51:f1:73:bd:d3:94:7d:3f:a9:af:4b:86:0a:d0:66:bf: b5:a7:c8:4a:7d:02:2c:ac:5e:2b:31:7d:4e:02:0f:80:d1:ed: 92:37:c5:e9:c9:bd:9a:7c:4f:fe:d5:6f:85:66:8a:76:55:f9: 63:c0:05:53:a2:fe:57:cf:ad:08:4e:b0:cf:fd:a1:70:22:28: 7a:ad:c6:b2:28:4b:79:07:8b:a0:62:f7:35:c0:e2:a2:17:d3: 19:42:c1:bf:0f:b4:a4:05:0b:3f:71:3c:82:b5:6e:ef:86:20: b5:24:fb:e8:42:be:5b:a3:4e:8b:fe:33:79:f0:47:f6:86:c6: b1:10:01:f4:1e:7e:ae:26:c8:17:01:35:c7:74:58:93:72:0a: b2:57:61:d5:f9:2f:e1:e1:92:28:d0:1f:64:c8:99:d0:67:09: 6f:60:32:0f:58:00:4d:4d:0c:9f:c9:75:f0:ed:8b:13:ff:d9: ee:e7:4d:42:38:d8:8e:ed:2a:74:8e:a4:39:af:6e:22:21:6f: 08:32:9c:7f:bd:c2:fa:12:f8:ab:5f:97:22:9d:1e:f0:e9:5a: c9:26:6d:f7:4b:6c:91:ec:2f:f5:16:78:1d:71:f7:08:e1:be: 54:aa:fa:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UyQjMxMTAvBgNVBAUTKDUyODY4QjA5MDFGNTVCNDA3OEI5MUE3MzQ1MUNBNkQy MjMxMkM4QUIwHhcNMjUwNDI0MTg0MTIyWhcNMjUwNTAxMTg0MTIyWjAYMRYwFAYD VQQDEw02ODBhODVkMi02OTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlrza5DLO/65WFREwUW//GruNqi1tZWDZ+bUzvfGLW0v1PLjTT1ljDjEzQIzS 5GiQTV8Nq+7lj8ykDnxPB+FDuQNU0V70/z4PI3k80PtkG7g6L6qNrmzLIHMyYD62 FZf4ww08yKEzC7vC/LuVNvieFwk3Np110rWT+6oJRmOAedY86TOpTVnrC6Aj9VXg 1V6y7TP0X6kSg7XulMPVd7eK+b0YY8lgFLpB5xbUa+ojo9OVqHe66OjawpTWTj58 kHkfjib2vEZNRkol9JshHpLxSk2hHpVEQiHDbaUK3yNhaEEdcIM9UMTFscXoBFel FYRUE67eTcOa/lTzsrBwP+bZFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENlG/hC QcEkt86hAMmARgsMD2PhMB8GA1UdIwQYMBaAFFKGiwkB9VtAeLkac0UcptIjEsir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTJCMy8yMEU2N0REODEy RjQxMUVBODk0MjA0MzBDNEY5QUUwMi9Vb2FMQ1FIMVcwQjR1UnB6UlJ5bTBpTVN5 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvYUxDUUgxVzBCNHVScHpSUnltMGlNU3lLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTJCMy8yMEU2N0REODEyRjQxMUVBODk0MjA0MzBDNEY5QUUwMi9Vb2FMQ1FIMVcw QjR1UnB6UlJ5bTBpTVN5S3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKCiO2s5Eex7XUxl0nNHIwoQU/oVHxc73TlH0/qa9LhgrQZr+1p8hK fQIsrF4rMX1OAg+A0e2SN8Xpyb2afE/+1W+FZop2VfljwAVTov5Xz60ITrDP/aFw Iih6rcayKEt5B4ugYvc1wOKiF9MZQsG/D7SkBQs/cTyCtW7vhiC1JPvoQr5bo06L /jN58Ef2hsaxEAH0Hn6uJsgXATXHdFiTcgqyV2HV+S/h4ZIo0B9kyJnQZwlvYDIP WABNTQyfyXXw7YsT/9nu501CONiO7Sp0jqQ5r24iIW8IMpx/vcL6EvirX5cinR7w 6VrJJm33S2yR7C/1FngdcfcI4b5Uqvq/ -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:47 2025 by rpki-client