$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft File: uf67oJzxCyh-7SzlZyKzyaDvEv8.mft (raw, json) Hash identifier: 2w643w9YyL77FlP0SluZU6moDhpkExeKfAaoXwJRBOE= Subject key identifier: E9:1A:09:A5:C0:3E:83:A3:17:56:35:74:8A:90:C7:A5:4B:CD:40:EA Authority key identifier: B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF Certificate issuer: /CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Certificate serial: 0973 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft Manifest number: 096D Signing time: Thu 24 Apr 2025 20:02:58 +0000 Manifest this update: Thu 24 Apr 2025 20:02:58 +0000 Manifest next update: Thu 01 May 2025 20:02:58 +0000 Files and hashes: 1: uf67oJzxCyh-7SzlZyKzyaDvEv8.crl (hash: LOoNk81OkNRV1jQh91DseD1jkOcYspUXIlb4g5v2xJo=) 2: 27030ADA8EB211EA9D09090FC4F9AE02.roa (hash: KzsEqYZi4RymBpkz6QVCB3ieArM+VhARkW/2ksmdU8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2419 (0x973) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB7A, serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Validity Not Before: Apr 24 20:02:58 2025 GMT Not After : May 1 20:02:58 2025 GMT Subject: CN=680a98f2-c71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:f6:38:eb:5f:4a:e7:2c:ef:57:b7:a6:10: f8:c0:c9:bd:a6:7e:ca:c7:9c:93:81:a1:6d:49:bf: 5b:67:4e:f6:4f:59:2c:12:65:0f:14:9f:4e:5d:de: 83:49:84:d4:1c:87:b7:89:14:b6:73:f0:60:f3:38: 87:2a:5b:43:97:c9:e4:48:c6:22:d9:9c:84:50:21: 49:86:9e:45:07:e0:6e:43:8d:21:06:1f:ac:08:0f: 1b:94:0f:f9:01:70:09:c2:58:15:04:ab:3c:b7:2d: db:85:9b:1c:c6:50:09:bd:86:0c:de:fc:73:24:5c: 1e:a6:5f:c2:49:0b:4c:25:02:45:9d:15:c7:ef:09: 1a:4a:ed:f0:d3:55:24:e9:e4:db:16:7d:85:56:d1: a2:cb:ca:4f:bc:63:f5:e9:1c:8b:a9:29:5a:f3:a2: 18:6c:f6:68:e1:32:dd:ff:96:e2:6a:27:e4:ff:ec: 1c:ac:1b:d8:5d:04:69:34:ed:6a:13:b1:60:39:7f: c1:c1:96:7a:88:6c:20:d6:2a:01:01:41:c1:d9:4d: bd:3e:2c:4d:54:99:25:3b:bc:88:2f:de:20:2f:21: 03:39:d4:1c:15:c4:47:4c:b7:71:e3:98:c9:14:54: a0:31:97:c7:e0:8b:ef:f7:0f:ec:58:39:0a:82:08: a5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1A:09:A5:C0:3E:83:A3:17:56:35:74:8A:90:C7:A5:4B:CD:40:EA X509v3 Authority Key Identifier: keyid:B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:98:fe:85:8b:e0:e9:09:80:e3:a1:df:5c:9e:18:8f:e1:98: 30:04:98:d7:66:e3:68:1a:e3:e0:93:d2:d7:f4:f2:7a:e8:76: 2c:f1:6f:65:c3:87:47:ad:56:6b:89:00:ba:41:ae:8a:8f:db: 1f:2d:3e:c4:6d:52:66:d8:fc:37:00:64:2a:ee:b5:81:e1:b5: b1:ff:a2:16:0a:d5:a8:41:33:08:cc:d1:1a:4b:84:88:58:1f: 66:ef:02:3d:0d:42:26:2e:b6:2a:fb:4f:05:75:93:44:45:63: 5d:93:9d:d2:23:ce:c0:5f:bf:8c:9a:73:c2:2a:15:a7:7f:88: 9c:36:b3:11:6c:37:53:7f:f6:23:fc:00:0b:53:fb:34:ab:bd: 72:e0:1e:0e:31:fa:d0:53:8d:98:e2:8b:52:3f:00:23:32:15: 6d:5d:ae:6b:5d:76:34:a2:28:40:d3:7d:1d:55:5d:a7:44:87: e3:d2:e5:0c:a4:88:d8:44:60:cf:c2:c1:0c:bd:37:92:3c:26: 3b:ae:4b:f2:a4:58:c7:ac:52:4f:c6:37:7b:bb:ab:e7:96:4f: 01:c5:fa:0d:20:a5:31:4d:02:2b:e5:eb:23:14:e4:18:d4:06: 99:c4:e1:43:e2:20:44:52:b3:6a:31:95:dd:87:43:21:c8:8a: 82:be:1a:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCN0ExMTAvBgNVBAUTKEI5RkVCQkEwOUNGMTBCMjg3RUVEMkNFNTY3MjJCM0M5 QTBFRjEyRkYwHhcNMjUwNDI0MjAwMjU4WhcNMjUwNTAxMjAwMjU4WjAYMRYwFAYD VQQDEw02ODBhOThmMi1jNzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJf2OOtfSucs71e3phD4wMm9pn7Kx5yTgaFtSb9bZ072T1ksEmUPFJ9OXd6D SYTUHIe3iRS2c/Bg8ziHKltDl8nkSMYi2ZyEUCFJhp5FB+BuQ40hBh+sCA8blA/5 AXAJwlgVBKs8ty3bhZscxlAJvYYM3vxzJFwepl/CSQtMJQJFnRXH7wkaSu3w01Uk 6eTbFn2FVtGiy8pPvGP16RyLqSla86IYbPZo4TLd/5biaifk/+wcrBvYXQRpNO1q E7FgOX/BwZZ6iGwg1ioBAUHB2U29PixNVJklO7yIL94gLyEDOdQcFcRHTLdx45jJ FFSgMZfH4Ivv9w/sWDkKggil5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkaCaXA PoOjF1Y1dIqQx6VLzUDqMB8GA1UdIwQYMBaAFLn+u6Cc8Qsofu0s5Wcis8mg7xL/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI3QS81RDIxMTg0QzhF QjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5aC03U3psWnlLenlhRHZF djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmNjdvSnp4Q3loLTdTemxaeUt6eWFEdkV2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkI3QS81RDIxMTg0QzhFQjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5 aC03U3psWnlLenlhRHZFdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCmP6Fi+DpCYDjod9cnhiP4ZgwBJjXZuNoGuPgk9LX9PJ66HYs8W9l w4dHrVZriQC6Qa6Kj9sfLT7EbVJm2Pw3AGQq7rWB4bWx/6IWCtWoQTMIzNEaS4SI WB9m7wI9DUImLrYq+08FdZNERWNdk53SI87AX7+MmnPCKhWnf4icNrMRbDdTf/Yj /AALU/s0q71y4B4OMfrQU42Y4otSPwAjMhVtXa5rXXY0oihA030dVV2nRIfj0uUM pIjYRGDPwsEMvTeSPCY7rkvypFjHrFJPxjd7u6vnlk8BxfoNIKUxTQIr5esjFOQY 1AaZxOFD4iBEUrNqMZXdh0MhyIqCvhqt -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:35 2025 by rpki-client