$ rpki-client -vvf rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft File: uftCI-sDug7mzge0ZgIXr69xbV0.mft (raw, json) Hash identifier: +oCeybN/sfmm0GKsDinf/IKBHi6g3eKe24unb1yj1vM= Subject key identifier: 4C:75:36:C3:DD:73:4E:5F:80:F2:E4:42:00:77:CD:A5:D0:C5:70:4E Authority key identifier: B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D Certificate issuer: /CN=A916D5A2/serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D Certificate serial: 0657 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft Manifest number: 0652 Signing time: Thu 24 Apr 2025 22:16:39 +0000 Manifest this update: Thu 24 Apr 2025 22:16:38 +0000 Manifest next update: Thu 01 May 2025 22:16:38 +0000 Files and hashes: 1: uftCI-sDug7mzge0ZgIXr69xbV0.crl (hash: yMVh79aX+A7DB+BBiTB0ySUzuWBIiyRO1FcuvzUbuzI=) 2: 179D126A80BB11EB8827C40AC4F9AE02.roa (hash: Z2FHnDXg4Ip1mKaBZDT4wmtIm4sbvDrPsJ6u/yKuqxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1623 (0x657) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D5A2, serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D Validity Not Before: Apr 24 22:16:38 2025 GMT Not After : May 1 22:16:38 2025 GMT Subject: CN=680ab846-c4e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:65:b0:d4:7b:50:03:8d:5a:4c:3b:23:ff:64: 9e:a6:64:4b:c9:af:92:a2:ea:b0:12:4f:77:fa:51: 7a:17:12:53:ce:5b:55:47:f5:52:5b:54:da:f1:9b: c3:a3:3a:c1:71:56:92:f3:03:b9:e3:d0:0a:e6:f5: 07:3c:09:ab:a2:e5:66:69:ba:07:00:7f:2f:c0:70: 13:ff:8d:ed:16:9d:20:fc:41:fc:7a:32:9f:54:b7: 4e:1a:9f:31:07:a9:e7:fa:9b:e3:29:8f:69:19:cc: d5:45:d3:71:73:ef:da:2c:09:51:e2:39:c4:ad:95: 7c:3a:a7:b2:13:68:c1:b4:1d:d3:0d:df:7f:35:83: 0d:4a:75:8f:43:79:ac:fe:e3:2e:85:76:f2:27:7a: 96:7e:cf:33:a2:10:cb:fb:f5:d9:1f:60:ee:4d:34: ae:8a:da:df:16:53:12:8d:69:63:b8:d7:3c:9e:5c: 40:a3:56:4a:fc:1c:d0:79:2b:19:c2:28:e8:c8:4e: 53:fe:ea:3e:42:4e:7f:0b:0f:d7:30:79:a0:07:eb: d1:e4:b2:22:65:5d:9c:ae:ef:0a:49:be:e0:fe:03: 60:27:fc:db:fd:b6:0c:bc:3f:ff:44:d4:9a:26:e2: f9:58:cb:e6:83:c4:b0:be:1a:25:27:af:27:90:00: 08:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:75:36:C3:DD:73:4E:5F:80:F2:E4:42:00:77:CD:A5:D0:C5:70:4E X509v3 Authority Key Identifier: keyid:B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:b8:e8:b5:71:fb:a1:9b:d2:a9:e4:1b:1e:ad:10:65:95:26: 48:7b:be:f8:6e:89:ad:e9:c2:ba:d9:9c:f7:48:ba:0b:d9:a3: 28:c8:51:0c:dd:ff:72:59:3b:c7:c1:02:dc:c1:85:d8:24:74: 99:fb:a8:95:ae:11:8f:ed:28:25:d0:75:ce:eb:f4:d9:ef:1c: bf:c8:15:41:58:db:04:f7:a0:c5:bf:99:57:e8:56:80:38:33: 34:cc:72:a2:11:81:c0:fa:15:a3:10:2d:37:a8:1f:d7:aa:fb: 37:7e:3b:28:3b:48:61:f1:c3:d4:68:1f:5b:3d:26:df:b2:9e: f2:b7:73:bc:22:5a:b6:26:20:09:51:6f:44:93:3c:50:a2:40: c1:b5:71:9b:d1:20:24:1f:d6:8c:26:93:59:57:ed:1d:ba:0b: 4f:64:a1:6a:34:6d:ac:b9:fc:e9:41:2a:c2:1c:c1:99:eb:c3: 71:84:c9:48:fa:ed:a6:8a:0c:8d:4d:ac:ab:9b:ea:7c:5c:99: 89:40:bc:15:6b:c6:20:59:ba:2b:77:22:80:82:35:46:9f:ce: 5c:cc:70:42:00:94:19:97:3c:14:8e:ab:bc:28:1a:67:18:ac: d2:d6:2c:bc:25:5b:cb:83:81:b8:eb:1d:a1:75:78:ce:2a:c7: 41:e0:da:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ1QTIxMTAvBgNVBAUTKEI5RkI0MjIzRUIwM0JBMEVFNkNFMDdCNDY2MDIxN0FG QUY3MTZENUQwHhcNMjUwNDI0MjIxNjM4WhcNMjUwNTAxMjIxNjM4WjAYMRYwFAYD VQQDEw02ODBhYjg0Ni1jNGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA92Ww1HtQA41aTDsj/2SepmRLya+SouqwEk93+lF6FxJTzltVR/VSW1Ta8ZvD ozrBcVaS8wO549AK5vUHPAmrouVmaboHAH8vwHAT/43tFp0g/EH8ejKfVLdOGp8x B6nn+pvjKY9pGczVRdNxc+/aLAlR4jnErZV8OqeyE2jBtB3TDd9/NYMNSnWPQ3ms /uMuhXbyJ3qWfs8zohDL+/XZH2DuTTSuitrfFlMSjWljuNc8nlxAo1ZK/BzQeSsZ wijoyE5T/uo+Qk5/Cw/XMHmgB+vR5LIiZV2cru8KSb7g/gNgJ/zb/bYMvD//RNSa JuL5WMvmg8SwvholJ68nkAAIZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEx1NsPd c05fgPLkQgB3zaXQxXBOMB8GA1UdIwQYMBaAFLn7QiPrA7oO5s4HtGYCF6+vcW1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDVBMi9DMjFBNTM4Njgw QjgxMUVCQkVCMTlFODNDNEY5QUUwMi91ZnRDSS1zRHVnN216Z2UwWmdJWHI2OXhi VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmdENJLXNEdWc3bXpnZTBaZ0lYcjY5eGJWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDVBMi9DMjFBNTM4NjgwQjgxMUVCQkVCMTlFODNDNEY5QUUwMi91ZnRDSS1zRHVn N216Z2UwWmdJWHI2OXhiVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGuOi1cfuhm9Kp5BserRBllSZIe774bomt6cK62Zz3SLoL2aMoyFEM 3f9yWTvHwQLcwYXYJHSZ+6iVrhGP7Sgl0HXO6/TZ7xy/yBVBWNsE96DFv5lX6FaA ODM0zHKiEYHA+hWjEC03qB/Xqvs3fjsoO0hh8cPUaB9bPSbfsp7yt3O8Ilq2JiAJ UW9EkzxQokDBtXGb0SAkH9aMJpNZV+0dugtPZKFqNG2sufzpQSrCHMGZ68NxhMlI +u2migyNTayrm+p8XJmJQLwVa8YgWbordyKAgjVGn85czHBCAJQZlzwUjqu8KBpn GKzS1iy8JVvLg4G46x2hdXjOKsdB4Nr2 -----END CERTIFICATE-----Generated at Sat Apr 26 16:40:28 2025 by rpki-client