$ rpki-client -vvf rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft File: bUGUPlFfU_mSYZyH8COTgRJT3mc.mft (raw, json) Hash identifier: P8COm1dK1dUMQlPbcuZfr91vLDGwV+ykG4NHemUNXRo= Subject key identifier: F0:E5:E1:D6:6C:6E:89:1F:61:E4:DE:40:A1:8F:E5:B5:27:81:3F:54 Authority key identifier: 6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67 Certificate issuer: /CN=A915216F/serialNumber=6D41943E515F53F992619C87F02393811253DE67 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft Manifest number: 0101 Signing time: Fri 25 Apr 2025 04:14:22 +0000 Manifest this update: Fri 25 Apr 2025 04:14:22 +0000 Manifest next update: Fri 02 May 2025 04:14:22 +0000 Files and hashes: 1: bUGUPlFfU_mSYZyH8COTgRJT3mc.crl (hash: 5a6J4e/cNG0w0K8A1/KNG6STFY9ey7qtYkkHFfmZcRs=) 2: 038457CEA3A011EEBE44947FC4F9AE02.roa (hash: PgCUtYUopFfJUcc6oCyLffXra/44Q+4sS+exi8w3QBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915216F, serialNumber=6D41943E515F53F992619C87F02393811253DE67 Validity Not Before: Apr 25 04:14:22 2025 GMT Not After : May 2 04:14:22 2025 GMT Subject: CN=680b0c1e-f27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2b:16:a4:30:15:8a:7b:af:9e:cf:c4:20:32: 3a:4f:fc:72:12:90:28:c7:37:1e:ff:67:71:51:fa: 76:4b:8c:54:54:53:e3:55:26:a3:3c:3f:d6:e8:80: f2:b5:4e:a3:0f:43:0e:58:87:1e:e7:84:04:6f:f1: fa:0c:3f:82:3c:5c:e8:68:0f:21:cd:29:3b:9a:d7: 69:f9:63:84:3e:4c:b3:bf:33:3d:4d:3a:b9:ad:b3: db:1e:7f:68:13:c7:ce:af:31:23:37:be:2c:92:ff: 9a:c7:fe:cb:30:0b:07:46:12:ef:02:02:1f:aa:24: 81:b8:06:54:4e:03:52:66:7d:50:ae:86:06:58:56: 4a:37:d5:49:a2:b2:6e:40:86:f9:07:6d:0d:a7:ef: ad:74:6b:93:fc:98:84:d2:c6:a4:5c:57:37:7d:91: 1e:b3:b2:c7:f4:bb:8d:16:4b:81:07:4b:74:9e:f9: df:5e:9d:5f:61:bc:90:ac:77:f6:eb:1e:26:a2:d8: 5b:1a:c3:8a:5f:76:99:86:4e:6d:a6:01:5c:17:5e: a6:0c:f9:fc:77:ea:28:e7:33:01:e6:de:01:f5:6c: 14:73:dd:6a:23:5f:0f:8f:bf:86:97:7f:76:2c:f8: 74:5c:29:00:96:58:75:0a:50:e5:69:f2:e6:03:88: 44:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E5:E1:D6:6C:6E:89:1F:61:E4:DE:40:A1:8F:E5:B5:27:81:3F:54 X509v3 Authority Key Identifier: keyid:6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:82:3e:06:46:d3:25:36:23:d5:67:08:ca:e0:36:7c:29:eb: e3:ac:88:98:e9:48:41:11:c8:d7:e0:90:27:50:5f:ef:1d:d6: 9a:e8:98:e8:39:64:7a:fd:26:e0:57:02:93:d2:a7:78:2d:96: 9e:f5:b0:c5:0a:cb:b8:61:1c:70:a3:7f:86:40:59:37:a6:2d: 0e:a3:d2:c7:17:d5:6d:3f:8d:31:e9:1e:24:50:94:54:50:f6: 1f:97:88:83:bc:71:64:2d:cf:b3:2b:28:5d:32:4a:1c:d4:8d: ed:9c:68:3e:c6:9c:e0:a3:87:eb:80:22:38:e4:2c:8f:c3:b2: 77:48:f2:9e:79:7c:f2:e8:ed:80:66:36:84:fb:93:2f:ec:64: eb:5f:e1:e8:a3:bf:8a:c7:fd:77:2a:bf:1c:f1:3b:aa:93:36: 75:63:c2:44:84:c0:bc:ce:46:7e:37:d2:d9:cd:0f:03:06:50: 9f:ac:15:1c:db:28:db:3a:74:ec:c1:8c:eb:25:3b:20:d8:70: 81:5a:58:15:61:d7:c0:fc:48:10:ae:36:4b:6c:e0:25:45:50: 0b:b6:a7:a1:01:ee:32:73:f4:6f:f7:3a:f7:7e:eb:fc:e4:7b: f3:3f:fd:03:66:e7:b8:ad:1b:12:11:e1:df:7c:7d:5d:96:d1: e8:92:1e:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIxNkYxMTAvBgNVBAUTKDZENDE5NDNFNTE1RjUzRjk5MjYxOUM4N0YwMjM5Mzgx MTI1M0RFNjcwHhcNMjUwNDI1MDQxNDIyWhcNMjUwNTAyMDQxNDIyWjAYMRYwFAYD VQQDEw02ODBiMGMxZS1mMjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzisWpDAVinuvns/EIDI6T/xyEpAoxzce/2dxUfp2S4xUVFPjVSajPD/W6IDy tU6jD0MOWIce54QEb/H6DD+CPFzoaA8hzSk7mtdp+WOEPkyzvzM9TTq5rbPbHn9o E8fOrzEjN74skv+ax/7LMAsHRhLvAgIfqiSBuAZUTgNSZn1QroYGWFZKN9VJorJu QIb5B20Np++tdGuT/JiE0sakXFc3fZEes7LH9LuNFkuBB0t0nvnfXp1fYbyQrHf2 6x4mothbGsOKX3aZhk5tpgFcF16mDPn8d+oo5zMB5t4B9WwUc91qI18Pj7+Gl392 LPh0XCkAllh1ClDlafLmA4hE5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDl4dZs bokfYeTeQKGP5bUngT9UMB8GA1UdIwQYMBaAFG1BlD5RX1P5kmGch/Ajk4ESU95n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjE2Ri8xMUIyQzgwQUEz OUUxMUVFOURDNzFDNjBDNEY5QUUwMi9iVUdVUGxGZlVfbVNZWnlIOENPVGdSSlQz bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JVR1VQbEZmVV9tU1laeUg4Q09UZ1JKVDNtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjE2Ri8xMUIyQzgwQUEzOUUxMUVFOURDNzFDNjBDNEY5QUUwMi9iVUdVUGxGZlVf bVNZWnlIOENPVGdSSlQzbWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBgj4GRtMlNiPVZwjK4DZ8KevjrIiY6UhBEcjX4JAnUF/vHdaa6Jjo OWR6/SbgVwKT0qd4LZae9bDFCsu4YRxwo3+GQFk3pi0Oo9LHF9VtP40x6R4kUJRU UPYfl4iDvHFkLc+zKyhdMkoc1I3tnGg+xpzgo4frgCI45CyPw7J3SPKeeXzy6O2A ZjaE+5Mv7GTrX+Hoo7+Kx/13Kr8c8TuqkzZ1Y8JEhMC8zkZ+N9LZzQ8DBlCfrBUc 2yjbOnTswYzrJTsg2HCBWlgVYdfA/EgQrjZLbOAlRVALtqehAe4yc/Rv9zr3fuv8 5HvzP/0DZue4rRsSEeHffH1dltHokh5l -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:35 2025 by rpki-client