$ rpki-client -vvf rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft File: uc1X4v9PWLuVmpVBoxz99ml2GLI.mft (raw, json) Hash identifier: 0kX8sufBoyJulBdbjLjCAeB8zthZvbSGSIhY6X1/UYQ= Subject key identifier: 17:53:5C:E7:56:D2:4B:76:E6:7B:31:64:C6:1B:B9:10:5F:8A:FE:F7 Authority key identifier: B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2 Certificate issuer: /CN=A918E023/serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft Manifest number: 0D Signing time: Fri 25 Apr 2025 07:06:02 +0000 Manifest this update: Fri 25 Apr 2025 07:06:01 +0000 Manifest next update: Fri 02 May 2025 07:06:01 +0000 Files and hashes: 1: uc1X4v9PWLuVmpVBoxz99ml2GLI.crl (hash: w7KuUb0wFLF+Act2sGhpt/SjRQkuSq4Rf6mvOPGDCEs=) 2: C420B2B6111D11F0BE9ABA7AC4F9AE02.roa (hash: BmMWgtMQ3PCdQlZ5TlrzvWUUVUt35N0MZwh0nPjZPiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E023, serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2 Validity Not Before: Apr 25 07:06:01 2025 GMT Not After : May 2 07:06:01 2025 GMT Subject: CN=680b3459-b5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a1:00:64:59:fb:6d:68:21:a1:0a:f3:39:2f: 3b:47:92:4d:a3:9b:ef:de:cb:de:a6:45:e8:ef:12: f1:5c:a2:99:13:ff:8b:b5:e8:c5:25:9d:62:f2:49: 4e:4b:0f:51:52:29:9b:64:e7:16:df:75:b7:74:bf: ea:1a:64:30:7c:01:72:e5:6e:47:b6:6f:ff:20:ea: 5b:d4:7d:f0:72:c6:32:6a:f6:1b:eb:2e:40:97:64: c8:83:58:36:92:44:e6:f3:5c:c6:20:8b:c9:46:1d: 76:12:b7:0c:7f:80:fa:af:49:e4:10:57:1d:3b:5b: 08:03:9c:dd:9d:f8:3b:98:8d:bf:01:ac:fc:d9:51: cd:c1:0a:9f:92:91:33:69:34:1c:08:8d:46:a9:1b: 21:28:32:19:f0:08:4e:14:82:ab:5f:7b:33:81:6e: e1:81:c1:8b:d3:18:ac:58:09:14:3f:80:75:9b:e6: 02:2d:58:ee:87:d0:88:13:ba:33:8a:80:68:71:5a: ca:5d:41:a2:2c:5d:db:a9:a2:7e:6b:53:37:a2:ca: c8:0d:7c:e2:68:24:d6:bd:45:a3:de:34:61:0d:20: a3:8e:80:fd:65:15:4f:12:bd:59:7f:69:3b:b9:b6: bd:35:43:5e:14:7e:8b:3b:aa:f7:3c:4d:de:8f:0b: 50:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:53:5C:E7:56:D2:4B:76:E6:7B:31:64:C6:1B:B9:10:5F:8A:FE:F7 X509v3 Authority Key Identifier: keyid:B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:49:eb:5c:f8:b9:94:84:3d:9f:41:8a:62:cd:09:24:88:43: c9:fe:5a:e7:c0:10:bb:2f:44:99:27:e8:3f:a3:88:2c:e5:a9: 8d:c2:ff:38:48:11:cb:ff:bb:90:86:e6:2f:9a:89:25:16:78: 90:47:26:e9:c5:d7:88:28:28:90:90:cf:47:48:65:81:83:59: b2:88:df:d6:dd:ad:7d:9b:6c:48:8d:40:5d:b8:ee:32:ed:3b: 3b:56:25:38:76:27:18:d7:f0:47:60:8a:a0:f1:47:43:a0:a2: 3f:af:7f:a4:31:69:6a:f9:37:e2:d1:4d:9a:48:55:42:87:97: 53:64:26:5a:a2:14:d2:c7:b3:cb:72:43:99:5e:20:2a:1a:0c: c7:28:e1:7a:12:82:90:52:a5:3d:97:bb:76:44:40:71:a9:1b: 86:15:4c:ab:a3:16:73:2c:0a:f4:d4:65:5e:dd:c6:66:b6:4e: 0f:33:2d:1a:23:7a:b1:97:5d:c4:ca:e8:b7:47:d9:de:49:40: 4b:a0:34:39:b1:14:4e:d9:0f:05:8d:c3:6b:86:dc:06:e2:7d: af:9d:b1:f0:b7:b6:b3:48:d9:6c:ae:cb:10:56:e4:4c:d0:df: 20:6f:d4:c5:30:08:e4:42:31:89:07:b9:f3:f5:75:9b:ac:c0: f4:07:ad:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTAyMzExMC8GA1UEBRMoQjlDRDU3RTJGRjRGNThCQjk1OUE5NTQxQTMxQ0ZERjY2 OTc2MThCMjAeFw0yNTA0MjUwNzA2MDFaFw0yNTA1MDIwNzA2MDFaMBgxFjAUBgNV BAMTDTY4MGIzNDU5LWI1ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvoQBkWfttaCGhCvM5LztHkk2jm+/ey96mRejvEvFcopkT/4u16MUlnWLySU5L D1FSKZtk5xbfdbd0v+oaZDB8AXLlbke2b/8g6lvUffByxjJq9hvrLkCXZMiDWDaS RObzXMYgi8lGHXYStwx/gPqvSeQQVx07WwgDnN2d+DuYjb8BrPzZUc3BCp+SkTNp NBwIjUapGyEoMhnwCE4UgqtfezOBbuGBwYvTGKxYCRQ/gHWb5gItWO6H0IgTujOK gGhxWspdQaIsXdupon5rUzeiysgNfOJoJNa9RaPeNGENIKOOgP1lFU8SvVl/aTu5 tr01Q14Ufos7qvc8Td6PC1DZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF1Nc51bS S3bmezFkxhu5EF+K/vcwHwYDVR0jBBgwFoAUuc1X4v9PWLuVmpVBoxz99ml2GLIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFMDIzL0E2NTRGRUYwMTEx QzExRjBCMTVBRjk3MEM0RjlBRTAyL3VjMVg0djlQV0x1Vm1wVkJveHo5OW1sMkdM SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWMxWDR2OVBXTHVWbXBWQm94ejk5bWwyR0xJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF MDIzL0E2NTRGRUYwMTExQzExRjBCMTVBRjk3MEM0RjlBRTAyL3VjMVg0djlQV0x1 Vm1wVkJveHo5OW1sMkdMSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALRJ61z4uZSEPZ9BimLNCSSIQ8n+WufAELsvRJkn6D+jiCzlqY3C/zhI Ecv/u5CG5i+aiSUWeJBHJunF14goKJCQz0dIZYGDWbKI39bdrX2bbEiNQF247jLt OztWJTh2JxjX8EdgiqDxR0Ogoj+vf6QxaWr5N+LRTZpIVUKHl1NkJlqiFNLHs8ty Q5leICoaDMco4XoSgpBSpT2Xu3ZEQHGpG4YVTKujFnMsCvTUZV7dxma2Tg8zLRoj erGXXcTK6LdH2d5JQEugNDmxFE7ZDwWNw2uG3Abifa+dsfC3trNI2WyuyxBW5EzQ 3yBv1MUwCORCMYkHufP1dZuswPQHrQc= -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:59 2025 by rpki-client