$ rpki-client -vvf rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft File: uIPha7zTcVtWFzExa6Gw70BTwS4.mft (raw, json) Hash identifier: a3PnKxIX5SvH+8LUV8GgwWzQfAE+8abyH5AB7XaMU3s= Subject key identifier: 2D:5A:6F:0D:9E:83:4A:B3:46:67:E7:C9:B4:69:25:DC:18:B2:29:A2 Authority key identifier: B8:83:E1:6B:BC:D3:71:5B:56:17:31:31:6B:A1:B0:EF:40:53:C1:2E Certificate issuer: /CN=A914B05F/serialNumber=B883E16BBCD3715B561731316BA1B0EF4053C12E Certificate serial: 183A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft Manifest number: 182F Signing time: Thu 24 Apr 2025 16:32:48 +0000 Manifest this update: Thu 24 Apr 2025 16:32:47 +0000 Manifest next update: Thu 01 May 2025 16:32:47 +0000 Files and hashes: 1: uIPha7zTcVtWFzExa6Gw70BTwS4.crl (hash: J4EX9S4FmlYmTEqmxemr16vUDy9M+c8QFaT3OSf9z5Y=) 2: 3482BB06AB3E11E7B15D1874C4F9AE02.roa (hash: f/iGCTTWKgyC6GDNoG48hLtnpOGko6TY6XeoD7uohtY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.crl rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6202 (0x183a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B05F, serialNumber=B883E16BBCD3715B561731316BA1B0EF4053C12E Validity Not Before: Apr 24 16:32:47 2025 GMT Not After : May 1 16:32:47 2025 GMT Subject: CN=680a67af-6bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:98:a7:14:ca:41:6d:cd:d7:55:1f:b3:c6:ee: bb:ba:b7:cc:e8:0a:1a:fd:10:ab:47:31:8a:89:16: bb:70:1a:de:11:7c:c4:96:53:e6:5f:e4:d0:e6:d0: 2f:8d:5a:c7:d6:8d:96:cd:40:6b:b5:58:32:da:06: 36:17:c1:58:65:3b:80:94:2c:47:ff:6a:1d:ff:bb: e6:74:27:2e:6f:e8:1a:29:d5:67:51:dc:be:7d:56: 99:97:2b:e1:d1:6c:6e:0d:02:74:b2:7d:90:9b:c7: 4c:ec:db:2d:b8:6a:20:35:31:d3:db:4f:bc:47:20: c9:50:78:18:83:d4:73:cd:4c:ff:2f:9e:03:fe:c2: 43:ca:a9:a1:72:7d:2b:15:73:a6:06:15:20:d3:10: 2c:07:f2:42:83:4b:f1:39:62:39:15:2b:5d:f4:31: b9:0d:e7:d2:bc:f9:81:80:96:b5:dd:76:1e:dd:05: 19:46:d0:d9:28:a9:ff:82:cc:a8:6f:30:00:5f:17: 5d:85:12:fb:50:3e:d8:49:2c:ad:88:1b:12:8e:0a: bc:5f:6a:f8:91:8f:0a:08:14:40:97:4a:f8:9c:42: 30:f5:27:40:8e:b8:ef:43:c8:e7:a3:6a:22:5e:a3: 16:72:e7:1e:5e:15:e1:53:eb:52:3f:d3:3f:58:5c: 2d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5A:6F:0D:9E:83:4A:B3:46:67:E7:C9:B4:69:25:DC:18:B2:29:A2 X509v3 Authority Key Identifier: keyid:B8:83:E1:6B:BC:D3:71:5B:56:17:31:31:6B:A1:B0:EF:40:53:C1:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:6e:a1:33:b2:b0:a8:54:8e:6e:3e:01:45:86:96:62:39:55: b7:b1:c6:38:59:b1:92:3f:9b:c3:04:98:a2:ce:4f:82:3a:e8: 8c:16:77:8b:de:c5:f1:ca:15:87:6b:4f:49:d2:aa:d6:71:75: 44:41:f5:f6:86:8c:19:8b:c0:97:6f:e4:5d:8b:65:fa:d1:d3: 12:bf:b2:a8:27:86:99:1f:da:9d:83:0b:24:66:f6:c8:24:f1: 71:38:87:f2:e0:6b:02:69:9a:75:0a:9d:31:b7:f2:6b:21:ac: 47:15:e8:23:6d:3e:43:44:8a:f3:73:0f:de:b5:68:20:a2:f0: f2:ff:ff:da:b7:b9:b8:f0:5c:a2:95:b3:f6:5b:3f:b1:7f:d1: 12:49:a8:17:90:9d:ef:d7:5a:a4:c5:d5:16:3a:ea:5f:e0:61: 42:21:d2:8b:5a:12:e9:fe:df:6d:14:bb:fa:c2:f3:5f:83:fd: 99:24:40:98:5e:29:9b:93:69:e7:e2:ba:d5:8d:f0:c7:d6:8b: 4f:86:d4:d9:7b:ac:74:31:62:77:e2:27:d2:1b:15:44:2f:8e: 39:dd:1d:65:f2:bc:69:f3:70:81:35:c7:b4:d3:a2:93:b2:0f: 66:f0:40:f0:87:de:ab:fa:50:b9:60:3c:4b:9e:82:00:0a:72: d8:c7:ee:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwNUYxMTAvBgNVBAUTKEI4ODNFMTZCQkNEMzcxNUI1NjE3MzEzMTZCQTFCMEVG NDA1M0MxMkUwHhcNMjUwNDI0MTYzMjQ3WhcNMjUwNTAxMTYzMjQ3WjAYMRYwFAYD VQQDEw02ODBhNjdhZi02YmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJinFMpBbc3XVR+zxu67urfM6Aoa/RCrRzGKiRa7cBreEXzEllPmX+TQ5tAv jVrH1o2WzUBrtVgy2gY2F8FYZTuAlCxH/2od/7vmdCcub+gaKdVnUdy+fVaZlyvh 0WxuDQJ0sn2Qm8dM7NstuGogNTHT20+8RyDJUHgYg9RzzUz/L54D/sJDyqmhcn0r FXOmBhUg0xAsB/JCg0vxOWI5FStd9DG5DefSvPmBgJa13XYe3QUZRtDZKKn/gsyo bzAAXxddhRL7UD7YSSytiBsSjgq8X2r4kY8KCBRAl0r4nEIw9SdAjrjvQ8jno2oi XqMWcuceXhXhU+tSP9M/WFwtRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1abw2e g0qzRmfnybRpJdwYsimiMB8GA1UdIwQYMBaAFLiD4Wu803FbVhcxMWuhsO9AU8Eu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjA1Ri8zMzUxMjA0MEFC M0IxMUU3QkFBQjBENkJDNEY5QUUwMi91SVBoYTd6VGNWdFdGekV4YTZHdzcwQlR3 UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VJUGhhN3pUY1Z0V0Z6RXhhNkd3NzBCVHdTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjA1Ri8zMzUxMjA0MEFCM0IxMUU3QkFBQjBENkJDNEY5QUUwMi91SVBoYTd6VGNW dFdGekV4YTZHdzcwQlR3UzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7bqEzsrCoVI5uPgFFhpZiOVW3scY4WbGSP5vDBJiizk+COuiMFneL 3sXxyhWHa09J0qrWcXVEQfX2howZi8CXb+Rdi2X60dMSv7KoJ4aZH9qdgwskZvbI JPFxOIfy4GsCaZp1Cp0xt/JrIaxHFegjbT5DRIrzcw/etWggovDy///at7m48Fyi lbP2Wz+xf9ESSagXkJ3v11qkxdUWOupf4GFCIdKLWhLp/t9tFLv6wvNfg/2ZJECY Ximbk2nn4rrVjfDH1otPhtTZe6x0MWJ34ifSGxVEL4453R1l8rxp83CBNce006KT sg9m8EDwh96r+lC5YDxLnoIACnLYx+6I -----END CERTIFICATE-----Generated at Sat Apr 26 12:25:21 2025 by rpki-client