$ rpki-client -vvf rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft File: UudzDz1hVWPrWMn6dZKhvYBbWjU.mft (raw, json) Hash identifier: DSVs1DPCvMu6NCHhO/eg2fXE0oiskDeTcG6cZP3n+QM= Subject key identifier: 43:EC:D9:6F:66:E5:67:E1:20:47:68:FD:58:D3:66:88:B7:84:88:15 Authority key identifier: 52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 Certificate issuer: /CN=A914D9BE/serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft Manifest number: 01C9 Signing time: Sat 03 May 2025 02:25:07 +0000 Manifest this update: Sat 03 May 2025 02:25:06 +0000 Manifest next update: Sat 10 May 2025 02:25:06 +0000 Files and hashes: 1: UudzDz1hVWPrWMn6dZKhvYBbWjU.crl (hash: xMGg7yt5/3WKfJRDp1yXwtQ8ue3sPaSetfwlFjIW2xA=) 2: AE148B2A6BB911ED97343873C4F9AE02.roa (hash: h7PFINLKglbbD51solfuF7q/5uroEa7Bk3jUBzQnwh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 02:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D9BE, serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Validity Not Before: May 3 02:25:06 2025 GMT Not After : May 10 02:25:06 2025 GMT Subject: CN=68157e83-87e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:26:e7:98:73:9e:f4:d0:ea:41:20:54:cd: 54:60:91:f4:74:ac:89:92:63:fa:fb:0d:c8:96:0f: 8b:a9:a8:6c:67:dc:54:57:79:28:72:e5:0d:38:31: 68:77:d4:8c:68:74:45:71:f1:9a:df:87:39:9a:52: 4a:2f:3a:a5:f7:93:ed:dc:95:4e:5d:57:88:19:1b: ee:b6:45:e0:b8:98:ab:0b:48:1f:e3:73:bc:88:52: 07:8b:9d:02:3e:a7:bd:83:8d:ef:f7:c1:4d:2b:a0: 0a:6b:26:f6:22:43:bb:65:cc:6e:98:35:d2:50:6a: 6a:87:e4:79:c0:60:b8:e9:85:6a:0a:30:20:09:79: 0e:34:ef:ff:c9:5c:dd:b3:4c:b0:1d:99:9a:6d:b1: 78:87:28:53:3a:3b:d9:50:b8:f0:d4:bc:64:08:de: 3c:19:bb:9d:03:ac:9d:0c:49:0d:74:c1:0c:6e:53: 61:82:a8:1d:af:67:e8:5a:27:00:7d:0c:3d:08:a9: 94:eb:ea:d9:af:c2:e4:f2:9e:4c:83:75:e4:80:9e: 23:be:e5:91:c6:28:23:70:cd:6e:17:cd:3d:11:95: 97:01:5e:14:43:93:40:ad:57:ca:1f:a6:df:3e:f6: d3:53:7c:ef:db:91:21:66:20:93:f6:b9:41:7a:12: e8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EC:D9:6F:66:E5:67:E1:20:47:68:FD:58:D3:66:88:B7:84:88:15 X509v3 Authority Key Identifier: keyid:52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b8:e0:c8:75:d9:69:e2:a8:a3:c7:8c:57:e7:b8:c2:12:35: 04:c7:50:1b:b0:7e:c7:1d:ea:57:13:52:68:43:d7:22:ce:1a: d7:b3:ee:16:55:d1:25:42:31:40:8c:94:9e:ab:12:78:f3:07: 0e:35:2a:31:27:2c:7d:11:fe:78:61:d2:29:46:d9:b4:56:10: f3:13:9f:22:80:ea:43:65:f2:f5:77:98:89:e8:10:a5:48:e1: e9:a5:91:8e:b5:a8:42:57:45:0a:a2:88:9c:e4:f6:09:3a:82: 70:53:70:4a:f0:48:98:5d:06:fc:35:59:0b:77:95:ed:58:b0: 69:f3:df:05:61:35:8d:8c:be:cb:02:7b:1e:f7:aa:4c:41:25: ba:12:52:e5:ca:60:ba:ee:9d:35:8a:db:60:2f:27:96:09:a0: 47:45:ea:0f:05:a1:19:5c:ad:9d:d5:3f:68:4b:eb:23:50:31: 2e:63:fd:dc:f6:ff:75:2b:5b:3f:4c:52:c8:28:5f:2e:58:02: 56:70:2a:7a:7e:de:42:f4:c6:ff:b5:6a:be:98:de:c0:5d:84: 01:fb:08:e1:93:84:bd:bf:a1:10:ea:15:dc:6a:7a:20:fb:e3: c5:6d:25:21:51:30:7f:96:90:b5:ac:0c:eb:e4:8c:c6:b1:d7: ae:02:21:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ5QkUxMTAvBgNVBAUTKDUyRTc3MzBGM0Q2MTU1NjNFQjU4QzlGQTc1OTJBMUJE ODA1QjVBMzUwHhcNMjUwNTAzMDIyNTA2WhcNMjUwNTEwMDIyNTA2WjAYMRYwFAYD VQQDEw02ODE1N2U4My04N2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4Im55hznvTQ6kEgVM1UYJH0dKyJkmP6+w3Ilg+LqahsZ9xUV3kocuUNODFo d9SMaHRFcfGa34c5mlJKLzql95Pt3JVOXVeIGRvutkXguJirC0gf43O8iFIHi50C Pqe9g43v98FNK6AKayb2IkO7ZcxumDXSUGpqh+R5wGC46YVqCjAgCXkONO//yVzd s0ywHZmabbF4hyhTOjvZULjw1LxkCN48GbudA6ydDEkNdMEMblNhgqgdr2foWicA fQw9CKmU6+rZr8Lk8p5Mg3XkgJ4jvuWRxigjcM1uF809EZWXAV4UQ5NArVfKH6bf PvbTU3zv25EhZiCT9rlBehLo4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPs2W9m 5WfhIEdo/VjTZoi3hIgVMB8GA1UdIwQYMBaAFFLncw89YVVj61jJ+nWSob2AW1o1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDlCRS82RkNGQjg2NjZC QjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZXUHJXTW42ZFpLaHZZQmJX alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V1ZHpEejFoVldQcldNbjZkWktodllCYldqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDlCRS82RkNGQjg2NjZCQjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZX UHJXTW42ZFpLaHZZQmJXalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbuODIddlp4qijx4xX57jCEjUEx1AbsH7HHepXE1JoQ9cizhrXs+4W VdElQjFAjJSeqxJ48wcONSoxJyx9Ef54YdIpRtm0VhDzE58igOpDZfL1d5iJ6BCl SOHppZGOtahCV0UKooic5PYJOoJwU3BK8EiYXQb8NVkLd5XtWLBp898FYTWNjL7L Anse96pMQSW6ElLlymC67p01ittgLyeWCaBHReoPBaEZXK2d1T9oS+sjUDEuY/3c 9v91K1s/TFLIKF8uWAJWcCp6ft5C9Mb/tWq+mN7AXYQB+wjhk4S9v6EQ6hXcanog ++PFbSUhUTB/lpC1rAzr5IzGsdeuAiEv -----END CERTIFICATE-----Generated at Sat May 3 15:44:57 2025 by rpki-client