$ rpki-client -vvf rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft File: sUCvBJGbRROCWm6lfhq55UN548g.mft (raw, json) Hash identifier: +rTyne/AFxB/2KCf1dmHLPJlbQ/UXkBRoCNhhRvdneA= Subject key identifier: 4E:DD:36:FF:EE:3A:36:A9:90:F0:3D:AC:2C:92:CB:24:FE:6E:A1:76 Authority key identifier: B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8 Certificate issuer: /CN=A913EBFD/serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8 Certificate serial: 0B25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft Manifest number: 0B1F Signing time: Thu 24 Apr 2025 19:06:45 +0000 Manifest this update: Thu 24 Apr 2025 19:06:44 +0000 Manifest next update: Thu 01 May 2025 19:06:44 +0000 Files and hashes: 1: sUCvBJGbRROCWm6lfhq55UN548g.crl (hash: v0XMGIHHQhOWIMj0HYCFrVFZg2eQTS7gvu7EpLy6mbY=) 2: B6EF8F5E3A9011EA957A6A34C4F9AE02.roa (hash: MMg6miblGYwiWs8actEKJcMi2SqNBUoJuKwgQQDzl38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2853 (0xb25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EBFD, serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8 Validity Not Before: Apr 24 19:06:44 2025 GMT Not After : May 1 19:06:44 2025 GMT Subject: CN=680a8bc5-0b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:18:b3:83:16:bf:00:99:ef:68:6c:0c:c2:d5: fb:f2:c9:8f:05:06:c2:45:fb:d9:3d:3f:d2:6d:f3: 0e:e5:3c:48:cb:14:cb:2b:74:e2:8a:f7:ef:6d:a2: ef:5c:8e:4a:aa:35:70:0d:41:50:63:b0:38:32:2a: e7:a9:94:dd:5d:92:06:7d:af:62:1b:75:23:cd:f7: 83:6a:76:88:d6:fc:cf:08:93:c7:d1:40:19:2b:c7: d5:4b:f8:ff:73:b6:e4:8e:d5:bd:6a:82:75:7e:2f: 18:03:96:4d:18:fb:4a:82:ff:2e:4c:63:f7:e7:22: 0f:10:50:22:82:50:3e:65:c7:ec:25:6f:69:d0:8f: 5d:d9:7e:ce:9b:a2:ba:7d:85:9e:68:eb:03:7e:6d: aa:8c:05:d1:b3:af:16:46:d6:b8:22:a1:e5:7d:b3: 2f:83:d7:79:39:18:50:d9:99:63:31:b8:02:e1:74: fe:7e:17:c2:25:07:5c:b5:0f:01:55:23:74:1c:b8: 68:be:c6:3b:9f:19:1c:7e:93:d6:84:20:85:7c:5c: 48:24:e5:dc:f7:9d:89:44:58:52:28:84:56:6a:2e: d2:13:4d:b8:76:de:00:dd:5d:e6:91:08:53:78:2e: 0d:05:25:ed:ce:cb:23:5f:84:b0:e0:23:f8:2c:02: 3d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DD:36:FF:EE:3A:36:A9:90:F0:3D:AC:2C:92:CB:24:FE:6E:A1:76 X509v3 Authority Key Identifier: keyid:B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:15:2a:94:52:c4:6f:0a:c6:9b:e5:ca:ba:d8:c8:31:b6:c0: 0f:54:39:fe:1d:7d:3a:7a:17:8e:eb:ff:9c:6b:35:a5:c2:93: 85:94:ef:18:51:9e:e6:74:58:0c:91:73:b0:9e:ae:98:70:56: ec:bd:71:b7:ca:07:17:61:00:cd:61:e7:60:ce:55:20:fd:0d: 21:f7:77:04:8e:26:ec:32:63:b1:71:31:c7:41:3d:c1:ca:31: 41:c2:ea:e7:d7:a3:b4:7f:30:f4:e9:b5:c6:66:f7:84:5a:63: 91:fd:20:3a:58:6d:13:aa:12:16:8d:87:6f:7a:0e:4c:9f:68: db:35:31:20:d4:1e:31:27:ba:90:3b:d9:c1:39:60:00:85:e1: 65:21:69:c4:f2:d2:b6:3b:ab:7e:a7:65:40:63:8f:5e:cb:f0: b1:34:b4:b8:ff:18:c2:a7:67:71:a8:74:f7:fb:b5:74:d3:16: 7c:1f:78:72:f1:03:ab:13:4d:d1:70:ed:20:27:06:e5:40:fa: 7f:9b:fe:ef:9c:c5:84:e6:5a:d9:ac:ce:02:08:8c:83:09:36: b0:c5:43:72:18:60:d0:f3:48:bc:f0:39:d2:5e:a9:0c:0a:a4: f6:cd:11:e0:be:33:34:83:ce:3f:fc:0a:f0:fb:38:de:d1:30: d9:af:9d:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VCRkQxMTAvBgNVBAUTKEIxNDBBRjA0OTE5QjQ1MTM4MjVBNkVBNTdFMUFCOUU1 NDM3OUUzQzgwHhcNMjUwNDI0MTkwNjQ0WhcNMjUwNTAxMTkwNjQ0WjAYMRYwFAYD VQQDEw02ODBhOGJjNS0wYjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Rizgxa/AJnvaGwMwtX78smPBQbCRfvZPT/SbfMO5TxIyxTLK3TiivfvbaLv XI5KqjVwDUFQY7A4MirnqZTdXZIGfa9iG3UjzfeDanaI1vzPCJPH0UAZK8fVS/j/ c7bkjtW9aoJ1fi8YA5ZNGPtKgv8uTGP35yIPEFAiglA+ZcfsJW9p0I9d2X7Om6K6 fYWeaOsDfm2qjAXRs68WRta4IqHlfbMvg9d5ORhQ2ZljMbgC4XT+fhfCJQdctQ8B VSN0HLhovsY7nxkcfpPWhCCFfFxIJOXc952JRFhSKIRWai7SE024dt4A3V3mkQhT eC4NBSXtzssjX4Sw4CP4LAI9NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7dNv/u OjapkPA9rCySyyT+bqF2MB8GA1UdIwQYMBaAFLFArwSRm0UTglpupX4aueVDeePI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUJGRC9GN0NFNjI5QTNB OEUxMUVBODBBRjBFMzFDNEY5QUUwMi9zVUN2QkpHYlJST0NXbTZsZmhxNTVVTjU0 OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVQ3ZCSkdiUlJPQ1dtNmxmaHE1NVVONTQ4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUJGRC9GN0NFNjI5QTNBOEUxMUVBODBBRjBFMzFDNEY5QUUwMi9zVUN2QkpHYlJS T0NXbTZsZmhxNTVVTjU0OGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxFSqUUsRvCsab5cq62MgxtsAPVDn+HX06eheO6/+cazWlwpOFlO8Y UZ7mdFgMkXOwnq6YcFbsvXG3ygcXYQDNYedgzlUg/Q0h93cEjibsMmOxcTHHQT3B yjFBwurn16O0fzD06bXGZveEWmOR/SA6WG0TqhIWjYdveg5Mn2jbNTEg1B4xJ7qQ O9nBOWAAheFlIWnE8tK2O6t+p2VAY49ey/CxNLS4/xjCp2dxqHT3+7V00xZ8H3hy 8QOrE03RcO0gJwblQPp/m/7vnMWE5lrZrM4CCIyDCTawxUNyGGDQ80i88DnSXqkM CqT2zRHgvjM0g84//Arw+zje0TDZr53g -----END CERTIFICATE-----Generated at Sat Apr 26 03:43:55 2025 by rpki-client