$ rpki-client -vvf rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft File: ufrcQefh-XVse8mz3jlyy_bPYLU.mft (raw, json) Hash identifier: Seeosv3Lrx2lZIQmRKD0ewhurqi46CqF+3I+tKbbsrU= Subject key identifier: 3D:E9:60:86:A2:B2:32:6D:EE:F9:38:FE:1C:D1:7B:99:66:AE:22:63 Authority key identifier: B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5 Certificate issuer: /CN=A9140562/serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft Manifest number: 24 Signing time: Fri 25 Apr 2025 06:48:05 +0000 Manifest this update: Fri 25 Apr 2025 06:48:04 +0000 Manifest next update: Fri 02 May 2025 06:48:04 +0000 Files and hashes: 1: ufrcQefh-XVse8mz3jlyy_bPYLU.crl (hash: K49CEzIB4IOaQCc0VXN4GQgHrQF0EsR6NdSUba7REIA=) 2: 5FCE01D8EDFA11EF8193933AC4F9AE02.roa (hash: 97oa3zBzp7Gq4BpVUI5kKb706Ag3AZCc/4WlkzLjgfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140562, serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5 Validity Not Before: Apr 25 06:48:04 2025 GMT Not After : May 2 06:48:04 2025 GMT Subject: CN=680b3025-eb4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:50:92:e8:a3:63:04:b5:32:c7:f0:9d:b2:24: 69:80:8c:2d:f4:97:34:a5:d7:21:62:29:ae:ab:63: 34:13:ef:9d:82:9c:88:65:73:d4:04:6d:95:98:61: 85:72:d1:b3:9a:05:7c:47:71:df:97:cf:aa:73:8d: 10:79:b7:99:9c:6d:1b:3f:6d:27:89:a8:8d:24:e4: 10:ae:d6:80:83:f2:51:2d:1e:4b:88:ca:a1:c6:1d: f0:2a:76:b1:5a:84:3e:75:c4:ef:1a:a8:99:51:90: 10:d0:67:e7:98:9a:95:8b:5d:4c:a9:02:d9:74:be: 7c:ca:af:f8:bc:74:ac:fa:83:28:3a:79:57:e1:03: 80:be:97:3b:51:fa:34:4c:71:46:40:1a:71:94:af: 6d:58:10:e4:5f:07:54:6c:eb:3e:7e:13:c3:2b:ff: f7:50:8d:8d:62:ec:ed:64:ec:8e:1f:98:41:cf:62: 2a:77:00:44:57:14:8b:7d:af:c2:6b:b4:13:c8:7b: 8c:02:5d:db:e9:53:86:a7:18:65:82:c2:b4:76:f3: a1:a5:3c:d2:23:dd:38:4a:ed:83:43:58:80:82:d0: 5b:d0:ba:aa:5b:2a:72:55:52:ca:a4:50:ba:27:06: a0:d4:17:8d:fc:1a:3c:39:58:14:06:38:29:84:33: 18:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E9:60:86:A2:B2:32:6D:EE:F9:38:FE:1C:D1:7B:99:66:AE:22:63 X509v3 Authority Key Identifier: keyid:B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:77:3f:71:df:9f:ce:fd:aa:1c:c6:53:5f:90:94:43:a0:3e: 28:5e:89:fd:d4:c3:de:e1:32:a1:ef:f3:f7:f6:26:08:f2:81: 51:75:0d:5b:62:4a:4c:76:8f:37:01:5e:06:f1:72:97:f3:29: f2:1d:d2:e7:e5:b5:1d:22:01:2f:37:0e:45:63:e2:63:f9:be: 8a:d7:29:6d:15:6c:08:97:e9:b2:c8:13:9c:8d:81:1e:a1:9e: 8f:ad:c9:37:7f:a8:3a:63:27:54:9e:e2:47:b7:11:d1:ad:a4: 28:ee:14:a7:11:dd:db:27:30:20:f5:c2:b6:01:ce:2b:f8:eb: f1:bd:a3:26:46:3a:00:c8:5b:6a:74:a0:8f:a9:e1:e4:63:f4: 33:7b:9a:89:42:0b:32:bb:a0:2b:94:df:b8:97:88:e1:e5:43: 7c:84:42:75:06:4d:be:03:45:ea:e9:c7:d0:d2:4b:88:4c:56: 90:ab:70:06:6e:5a:39:a4:10:3c:36:62:fe:47:98:48:0b:68: d5:f3:6c:2e:7d:8d:7a:c7:e8:63:94:21:b6:d1:8f:68:20:74: 69:81:d7:6f:f5:0f:0f:4b:e4:b7:3b:27:ef:3e:02:40:c0:cf: 18:3f:6d:e4:3c:7d:a5:14:9d:b5:28:91:48:ba:76:dd:7b:07: 39:48:74:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDU2MjExMC8GA1UEBRMoQjlGQURDNDFFN0UxRjk3NTZDN0JDOUIzREUzOTcyQ0JG NkNGNjBCNTAeFw0yNTA0MjUwNjQ4MDRaFw0yNTA1MDIwNjQ4MDRaMBgxFjAUBgNV BAMTDTY4MGIzMDI1LWViNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHUJLoo2MEtTLH8J2yJGmAjC30lzSl1yFiKa6rYzQT752CnIhlc9QEbZWYYYVy 0bOaBXxHcd+Xz6pzjRB5t5mcbRs/bSeJqI0k5BCu1oCD8lEtHkuIyqHGHfAqdrFa hD51xO8aqJlRkBDQZ+eYmpWLXUypAtl0vnzKr/i8dKz6gyg6eVfhA4C+lztR+jRM cUZAGnGUr21YEORfB1Rs6z5+E8Mr//dQjY1i7O1k7I4fmEHPYip3AERXFIt9r8Jr tBPIe4wCXdvpU4anGGWCwrR286GlPNIj3ThK7YNDWICC0FvQuqpbKnJVUsqkULon BqDUF438Gjw5WBQGOCmEMxhPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPelghqKy Mm3u+Tj+HNF7mWauImMwHwYDVR0jBBgwFoAUufrcQefh+XVse8mz3jlyy/bPYLUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwNTYyLzY2QzNDOTdFRURG OTExRUZBOUNEQTgzOEM0RjlBRTAyL3VmcmNRZWZoLVhWc2U4bXozamx5eV9iUFlM VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWZyY1FlZmgtWFZzZThtejNqbHl5X2JQWUxVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw NTYyLzY2QzNDOTdFRURGOTExRUZBOUNEQTgzOEM0RjlBRTAyL3VmcmNRZWZoLVhW c2U4bXozamx5eV9iUFlMVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJt3P3Hfn879qhzGU1+QlEOgPiheif3Uw97hMqHv8/f2JgjygVF1DVti Skx2jzcBXgbxcpfzKfId0ufltR0iAS83DkVj4mP5vorXKW0VbAiX6bLIE5yNgR6h no+tyTd/qDpjJ1Se4ke3EdGtpCjuFKcR3dsnMCD1wrYBziv46/G9oyZGOgDIW2p0 oI+p4eRj9DN7molCCzK7oCuU37iXiOHlQ3yEQnUGTb4DRerpx9DSS4hMVpCrcAZu WjmkEDw2Yv5HmEgLaNXzbC59jXrH6GOUIbbRj2ggdGmB12/1Dw9L5Lc7J+8+AkDA zxg/beQ8faUUnbUokUi6dt17BzlIdEw= -----END CERTIFICATE-----Generated at Sat Apr 26 15:23:01 2025 by rpki-client