$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft File: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json) Hash identifier: 2UuwxWnwZmrkUgNVobI3arN4GWUHSaSk37nekGVJIWg= Subject key identifier: A6:3B:DA:FC:BA:C5:93:EB:3F:1F:30:5C:4B:BB:04:13:2B:8F:7D:A8 Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 Certificate issuer: /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Certificate serial: 2A02 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft Manifest number: 2A02 Signing time: Thu 24 Apr 2025 15:36:54 +0000 Manifest this update: Thu 24 Apr 2025 15:36:54 +0000 Manifest next update: Thu 01 May 2025 15:36:54 +0000 Files and hashes: 1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: Gu94DetRMCmmhJDw2pySKwiLPyXvjxSjo+fdhO+ofS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10754 (0x2a02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Validity Not Before: Apr 24 15:36:54 2025 GMT Not After : May 1 15:36:54 2025 GMT Subject: CN=680a5a96-abb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ed:fc:5d:34:c9:ca:ce:c9:39:5e:5b:6b:35: c7:1e:29:9c:17:53:c7:ec:78:27:f5:72:74:5d:d2: 89:07:7c:57:49:49:9f:39:8b:fd:6a:9c:f7:ee:42: 52:32:0f:10:ac:4a:b2:ff:1e:b9:f9:88:3a:f5:a9: 69:88:25:47:db:ef:56:68:db:22:0b:27:67:53:98: 37:70:ce:3e:8b:b2:00:a7:ec:2d:35:63:4b:e8:5d: d2:a1:8d:ad:dc:eb:d4:26:f7:14:96:54:96:e2:39: 1d:a1:a5:f1:4f:d7:68:cc:11:95:c4:c1:97:1a:8e: 18:c1:ea:b3:f1:40:74:35:46:5f:25:8e:8f:79:ca: 60:f7:f5:5f:ca:ce:12:d7:4e:e0:fb:bc:76:9f:c1: 9b:e9:e4:e3:34:3f:26:f8:cd:e9:b0:44:80:1b:7e: 38:c7:47:af:36:25:80:6c:14:0a:fd:c9:ec:cb:7a: 80:12:ee:3f:bc:2a:11:4b:64:2c:72:a4:30:6b:0c: 6a:d2:ae:e0:69:a9:22:c7:87:29:87:8e:85:20:06: 7b:48:64:e1:48:60:eb:6d:b2:ad:b1:b7:af:4b:1f: c7:67:b6:39:e2:6c:41:0a:2b:23:45:a7:9e:3e:16: e1:09:ee:65:64:62:ee:8a:56:8c:56:01:f4:4b:fc: 2a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3B:DA:FC:BA:C5:93:EB:3F:1F:30:5C:4B:BB:04:13:2B:8F:7D:A8 X509v3 Authority Key Identifier: keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:34:0d:35:71:eb:ee:16:35:a9:eb:e9:72:5d:9e:d2:f8:97: d6:94:ac:1d:01:d4:9a:fb:50:fb:ce:4c:79:26:9c:f1:cd:d7: 2d:18:cb:e8:c6:13:49:a8:ee:ed:a2:38:08:20:0d:a0:6a:4f: ed:8f:ce:b7:f9:0e:0e:c9:1b:7f:1b:a6:bb:76:3d:af:71:06: 46:09:84:a0:ee:de:a2:87:4e:83:72:90:22:af:b7:cb:9e:ca: a1:dc:16:03:69:fc:79:18:ea:af:54:56:ab:5d:41:8f:9d:a5: f9:00:11:51:de:6c:5b:7e:b9:32:87:78:d5:3a:75:b3:77:0a: 2a:e8:ba:b9:6a:03:fe:d8:78:d0:35:f8:2e:ca:80:1f:0e:79: d0:18:24:0b:3b:4f:5d:eb:16:43:8f:5e:70:61:42:42:fc:0c: 70:88:5b:79:19:37:9f:41:83:5b:a3:dc:73:c0:30:cf:d8:b9: 05:c4:b9:d0:e5:01:31:51:e6:a0:d2:cf:f2:77:f2:9b:44:68: 98:48:1f:f4:09:31:27:2b:d7:a7:af:22:78:36:df:33:63:51: a4:1d:dd:7f:5f:81:84:b6:f9:b7:96:23:4d:ab:20:bf:63:f7: d8:e7:9d:5e:ca:4a:47:e5:14:d5:a7:7a:32:4e:79:f5:ad:69: 51:cd:81:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKERENDkzMEUzRTQyREZFM0JGRkY0ODFCMTc5NzcwRDFB QjE1NzVCQzMwHhcNMjUwNDI0MTUzNjU0WhcNMjUwNTAxMTUzNjU0WjAYMRYwFAYD VQQDEw02ODBhNWE5Ni1hYmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwO38XTTJys7JOV5bazXHHimcF1PH7Hgn9XJ0XdKJB3xXSUmfOYv9apz37kJS Mg8QrEqy/x65+Yg69alpiCVH2+9WaNsiCydnU5g3cM4+i7IAp+wtNWNL6F3SoY2t 3OvUJvcUllSW4jkdoaXxT9dozBGVxMGXGo4Yweqz8UB0NUZfJY6Pecpg9/Vfys4S 107g+7x2n8Gb6eTjND8m+M3psESAG344x0evNiWAbBQK/cnsy3qAEu4/vCoRS2Qs cqQwawxq0q7gaakix4cph46FIAZ7SGThSGDrbbKtsbevSx/HZ7Y54mxBCisjRaee PhbhCe5lZGLuilaMVgH0S/wq8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKY72vy6 xZPrPx8wXEu7BBMrj32oMB8GA1UdIwQYMBaAFN1JMOPkLf47//SBsXl3DRqxV1vD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9ENzg1OTlCQzMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9qdl85SUd4ZVhjTkdyRlhX OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNVa3c0LVF0X2p2XzlJR3hlWGNOR3JGWFc4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjIxNC9ENzg1OTlCQzMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9q dl85SUd4ZVhjTkdyRlhXOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPNA01cevuFjWp6+lyXZ7S+JfWlKwdAdSa+1D7zkx5JpzxzdctGMvo xhNJqO7tojgIIA2gak/tj863+Q4OyRt/G6a7dj2vcQZGCYSg7t6ih06DcpAir7fL nsqh3BYDafx5GOqvVFarXUGPnaX5ABFR3mxbfrkyh3jVOnWzdwoq6Lq5agP+2HjQ NfguyoAfDnnQGCQLO09d6xZDj15wYUJC/AxwiFt5GTefQYNbo9xzwDDP2LkFxLnQ 5QExUeag0s/yd/KbRGiYSB/0CTEnK9enryJ4Nt8zY1GkHd1/X4GEtvm3liNNqyC/ Y/fY551eykpH5RTVp3oyTnn1rWlRzYE9 -----END CERTIFICATE-----Generated at Sat Apr 26 12:55:42 2025 by rpki-client