$ rpki-client -vvf rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft File: uHLzTVUlH6dw7MOT0mcSED1VBzc.mft (raw, json) Hash identifier: 6UIlIgfLe/9J3l6s/zCjz/ulYTA4gxR/fFY3UOpgr/4= Subject key identifier: AA:46:7D:94:2A:96:51:8A:6C:A0:BF:21:95:93:B2:E2:74:D8:BC:D3 Authority key identifier: B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37 Certificate issuer: /CN=A917C606/serialNumber=B872F34D55251FA770ECC393D26712103D550737 Certificate serial: 03B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft Manifest number: 03AE Signing time: Fri 25 Apr 2025 00:30:11 +0000 Manifest this update: Fri 25 Apr 2025 00:30:11 +0000 Manifest next update: Fri 02 May 2025 00:30:11 +0000 Files and hashes: 1: uHLzTVUlH6dw7MOT0mcSED1VBzc.crl (hash: C7dcw7gMdydhTxYJ4c/79NTqC0hhWhlvzboIJR8N7hU=) 2: 945375FAF69511EC90A47215C4F9AE02.roa (hash: 93z4oqW7DQ1yUII6DWRvY7Xrtn4iF7Cp5BMrU5CKBhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 953 (0x3b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C606, serialNumber=B872F34D55251FA770ECC393D26712103D550737 Validity Not Before: Apr 25 00:30:11 2025 GMT Not After : May 2 00:30:11 2025 GMT Subject: CN=680ad793-fb63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9d:03:74:41:b5:0f:eb:19:e0:53:5b:94:d2: d1:13:23:16:4a:bf:7c:13:29:fb:a8:61:66:65:c5: 4c:66:4e:37:cb:c8:e6:5a:6e:33:27:88:c6:b8:81: 7c:02:c1:00:64:7e:a2:4f:f0:01:85:a9:31:0a:bd: 36:88:5e:c4:62:1e:64:b0:8d:11:4b:fa:eb:d6:a3: 2c:3b:69:04:21:31:bc:c7:44:c7:92:bd:bb:17:ff: 5b:78:86:a2:e5:2c:27:f4:a7:19:5e:b5:93:ad:d8: 13:80:f5:e8:c1:5e:4a:97:58:62:e6:6d:8f:bd:5d: 83:7c:68:72:1a:e3:76:56:4e:4b:a4:b1:30:aa:1d: 2c:6a:bf:08:11:95:43:1c:13:54:a4:a6:9a:66:68: 44:c1:81:06:69:d4:46:15:6a:19:11:39:52:f4:9b: 15:5d:ab:5f:02:33:4c:46:9d:08:a9:d4:a8:07:82: 15:09:32:3c:cf:2e:3c:2d:87:bf:98:31:eb:6b:74: 87:ba:53:fe:54:f0:d4:89:57:92:f9:cf:36:3f:97: cf:0c:f2:b5:0b:75:a7:a6:0c:21:a9:96:9e:b7:38: 38:07:17:93:c0:98:46:9f:e9:ad:18:78:9e:12:ac: 89:e3:7e:d3:17:24:e7:5a:05:f8:78:e6:b2:46:4f: 45:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:46:7D:94:2A:96:51:8A:6C:A0:BF:21:95:93:B2:E2:74:D8:BC:D3 X509v3 Authority Key Identifier: keyid:B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:31:dc:5d:41:89:8d:13:c3:40:02:8a:e1:22:bc:3c:e7:df: 53:41:a1:b1:c3:37:0b:3b:d7:b8:03:4d:80:c8:39:04:0e:c9: b9:aa:3c:43:74:3e:db:43:70:8e:7c:3d:46:85:ec:ad:7a:a2: 86:90:d9:db:87:31:ca:67:ee:c8:11:ad:8d:da:2d:81:98:2f: 23:57:3e:72:45:f7:c9:6b:d7:18:62:77:9a:e6:6e:58:b9:e3: c9:ee:b2:f2:5a:cf:26:f8:66:b1:c2:82:15:a9:6f:6f:58:fa: fc:c7:ee:12:f8:8a:52:bc:bc:c6:f4:e3:61:cf:62:6c:55:76: 61:2d:eb:9f:07:61:99:73:e7:36:35:33:c6:28:e9:bf:08:da: f5:aa:41:b6:52:f4:f3:93:c5:b9:a3:54:58:bd:29:ea:3f:58: 10:eb:00:fd:8d:fe:e2:fd:fe:94:c9:45:15:b9:b7:53:3b:05: 9d:10:91:d8:86:e3:a2:fd:93:c8:90:da:fc:d8:0f:c8:b3:66: da:7e:96:04:77:45:1f:ad:34:7e:ea:71:ab:61:b2:89:7a:46: 5a:d1:37:65:66:59:f2:6c:17:f0:31:5c:04:e7:54:57:c6:11: 46:28:fc:97:4f:ad:ff:75:d9:c7:c0:02:da:d4:8d:bc:13:19: 84:84:ed:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2MDYxMTAvBgNVBAUTKEI4NzJGMzRENTUyNTFGQTc3MEVDQzM5M0QyNjcxMjEw M0Q1NTA3MzcwHhcNMjUwNDI1MDAzMDExWhcNMjUwNTAyMDAzMDExWjAYMRYwFAYD VQQDEw02ODBhZDc5My1mYjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Z0DdEG1D+sZ4FNblNLREyMWSr98Eyn7qGFmZcVMZk43y8jmWm4zJ4jGuIF8 AsEAZH6iT/ABhakxCr02iF7EYh5ksI0RS/rr1qMsO2kEITG8x0THkr27F/9beIai 5Swn9KcZXrWTrdgTgPXowV5Kl1hi5m2PvV2DfGhyGuN2Vk5LpLEwqh0sar8IEZVD HBNUpKaaZmhEwYEGadRGFWoZETlS9JsVXatfAjNMRp0IqdSoB4IVCTI8zy48LYe/ mDHra3SHulP+VPDUiVeS+c82P5fPDPK1C3WnpgwhqZaetzg4BxeTwJhGn+mtGHie EqyJ437TFyTnWgX4eOayRk9F3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpGfZQq llGKbKC/IZWTsuJ02LzTMB8GA1UdIwQYMBaAFLhy801VJR+ncOzDk9JnEhA9VQc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzYwNi83QzhCMTM3QThG QzkxMUVDODE1NURCNjFDNEY5QUUwMi91SEx6VFZVbEg2ZHc3TU9UMG1jU0VEMVZC emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VITHpUVlVsSDZkdzdNT1QwbWNTRUQxVkJ6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzYwNi83QzhCMTM3QThGQzkxMUVDODE1NURCNjFDNEY5QUUwMi91SEx6VFZVbEg2 ZHc3TU9UMG1jU0VEMVZCemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbMdxdQYmNE8NAAorhIrw8599TQaGxwzcLO9e4A02AyDkEDsm5qjxD dD7bQ3COfD1GheyteqKGkNnbhzHKZ+7IEa2N2i2BmC8jVz5yRffJa9cYYnea5m5Y uePJ7rLyWs8m+GaxwoIVqW9vWPr8x+4S+IpSvLzG9ONhz2JsVXZhLeufB2GZc+c2 NTPGKOm/CNr1qkG2UvTzk8W5o1RYvSnqP1gQ6wD9jf7i/f6UyUUVubdTOwWdEJHY huOi/ZPIkNr82A/Is2bafpYEd0UfrTR+6nGrYbKJekZa0TdlZlnybBfwMVwE51RX xhFGKPyXT63/ddnHwALa1I28ExmEhO0d -----END CERTIFICATE-----Generated at Sat Apr 26 16:52:35 2025 by rpki-client