$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft File: uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft (raw, json) Hash identifier: IBg8wNtilUc7Jti04fNWljLiQuyowwGjPsVXYRdHAEE= Subject key identifier: EC:63:DC:96:76:B4:3B:34:CA:FA:76:1F:A8:7C:02:1C:98:DD:A1:F3 Authority key identifier: B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36 Certificate issuer: /CN=A915825D/serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft Manifest number: 5A Signing time: Fri 25 Apr 2025 06:13:15 +0000 Manifest this update: Fri 25 Apr 2025 06:13:14 +0000 Manifest next update: Fri 02 May 2025 06:13:14 +0000 Files and hashes: 1: uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl (hash: prtM7oGTOEIRirViiKkXS9EOxytWcwtsc82vlS3mRCI=) 2: B035E67615D311F09BAD2971C4F9AE02.roa (hash: m6K1ejQzgZZN/JIHhR+mHfBRgRA0KhwEs/admphjKvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915825D, serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636 Validity Not Before: Apr 25 06:13:14 2025 GMT Not After : May 2 06:13:14 2025 GMT Subject: CN=680b27fb-6cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1b:9f:e8:80:61:c5:7f:f4:71:25:29:fe:06: 4c:f4:67:49:02:88:bb:44:b0:17:69:87:81:5d:47: 19:a2:70:10:1a:67:04:03:ad:42:cd:a5:04:5a:bd: b4:eb:3f:94:f6:a1:f3:6c:54:61:1e:3d:01:09:71: d1:7d:9b:3e:c1:cc:de:83:9f:be:05:56:6c:59:d1: f9:9c:fb:4e:e7:af:6d:08:7d:c3:2a:b3:2c:17:02: 4b:dc:7d:71:ea:25:f7:07:76:ed:53:e3:8a:6c:3a: cd:ec:b9:95:ad:43:40:2c:eb:db:0b:ed:8e:c1:6a: e7:7d:c8:83:65:00:0e:b8:ba:37:85:e2:39:30:a8: a5:3f:07:05:57:2b:42:fb:18:56:8c:6c:fe:6e:31: 2c:a4:8e:3f:91:8d:3f:97:2f:21:37:01:c7:39:d8: e0:6c:20:57:48:e6:5a:ab:44:a0:8f:31:2f:30:22: 0c:58:e9:7d:22:4d:54:ac:92:5a:d4:81:51:59:5b: ad:ca:da:21:d1:1e:61:e4:91:ce:de:03:1a:c5:cb: 4c:60:78:16:7c:c8:ef:60:c0:92:23:0d:b5:cb:dc: 0c:8b:9e:93:a4:69:f9:86:22:22:d2:8a:03:77:bd: 11:ed:d3:73:d2:cc:be:07:03:56:9b:71:85:b2:bd: e4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:63:DC:96:76:B4:3B:34:CA:FA:76:1F:A8:7C:02:1C:98:DD:A1:F3 X509v3 Authority Key Identifier: keyid:B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:75:29:e1:08:9e:97:b8:ef:d8:7c:85:3c:2e:91:cb:c3:1c: 5b:72:81:fa:2b:a9:7b:f9:9a:cc:e7:88:69:54:1a:da:a4:d6: c0:2b:44:1c:db:a4:b5:0d:e8:ea:ea:78:fe:a6:9d:c7:e9:bb: 75:03:f9:e9:cf:c0:e3:00:e8:64:25:b6:b3:31:13:1e:05:0f: 6a:bc:73:fd:3c:a9:4f:20:39:93:ef:21:ba:0f:cf:95:b8:af: b6:90:20:d4:b3:d2:19:52:c1:07:ea:6c:a0:d5:8a:ee:f9:6f: d5:c6:ac:8e:52:2e:89:71:63:24:36:a8:1d:7d:79:79:9a:b0: 8d:22:cf:5d:02:46:c8:3d:27:d0:e5:b4:56:55:ac:f7:ff:20: 14:4a:fa:12:bf:53:66:de:b3:67:c5:b1:7d:3b:00:46:b7:12: b8:04:66:0a:17:53:e4:f2:8f:19:37:fd:90:65:ef:d7:57:29: 67:04:14:01:88:02:72:4f:8d:f6:00:94:f5:c4:18:67:0e:79: 3f:cd:89:44:8d:ed:5d:8e:3e:7d:da:a2:71:6a:c0:04:ee:df: 0f:fb:e9:c3:d6:ec:49:80:97:10:2e:ae:cf:d0:b3:c1:cf:75: ad:78:30:14:16:a0:1c:71:4a:12:3f:77:5c:e4:a9:38:fe:fc: d7:b3:69:d0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODI1RDExMC8GA1UEBRMoQjg4QkQ1RDVCOUI4NjQ2RDhFNDNFNjRDMTI3Qjg0ODFB NDE4QzYzNjAeFw0yNTA0MjUwNjEzMTRaFw0yNTA1MDIwNjEzMTRaMBgxFjAUBgNV BAMTDTY4MGIyN2ZiLTZjZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIG5/ogGHFf/RxJSn+Bkz0Z0kCiLtEsBdph4FdRxmicBAaZwQDrULNpQRavbTr P5T2ofNsVGEePQEJcdF9mz7BzN6Dn74FVmxZ0fmc+07nr20IfcMqsywXAkvcfXHq JfcHdu1T44psOs3suZWtQ0As69sL7Y7Baud9yINlAA64ujeF4jkwqKU/BwVXK0L7 GFaMbP5uMSykjj+RjT+XLyE3Acc52OBsIFdI5lqrRKCPMS8wIgxY6X0iTVSsklrU gVFZW63K2iHRHmHkkc7eAxrFy0xgeBZ8yO9gwJIjDbXL3AyLnpOkafmGIiLSigN3 vRHt03PSzL4HA1abcYWyveRhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7GPclna0 OzTK+nYfqHwCHJjdofMwHwYDVR0jBBgwFoAUuIvV1bm4ZG2OQ+ZMEnuEgaQYxjYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4MjVEL0U1OEIyMjY4QTQ0 NjExRUY4RDU4QTYyNEM0RjlBRTAyL3VJdlYxYm00WkcyT1EtWk1FbnVFZ2FRWXhq WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdUl2VjFibTRaRzJPUS1aTUVudUVnYVFZeGpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 MjVEL0U1OEIyMjY4QTQ0NjExRUY4RDU4QTYyNEM0RjlBRTAyL3VJdlYxYm00Wkcy T1EtWk1FbnVFZ2FRWXhqWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACd1KeEInpe479h8hTwukcvDHFtygforqXv5mszniGlUGtqk1sArRBzb pLUN6OrqeP6mncfpu3UD+enPwOMA6GQltrMxEx4FD2q8c/08qU8gOZPvIboPz5W4 r7aQINSz0hlSwQfqbKDViu75b9XGrI5SLolxYyQ2qB19eXmasI0iz10CRsg9J9Dl tFZVrPf/IBRK+hK/U2bes2fFsX07AEa3ErgEZgoXU+Tyjxk3/ZBl79dXKWcEFAGI AnJPjfYAlPXEGGcOeT/NiUSN7V2OPn3aonFqwATu3w/76cPW7EmAlxAurs/Qs8HP da14MBQWoBxxShI/d1zkqTj+/NezadA= -----END CERTIFICATE-----Generated at Sat Apr 26 15:27:32 2025 by rpki-client