$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft File: uxh7m1B2e7e7wih3IL02wLjQaJY.mft (raw, json) Hash identifier: rRA1ofLysTIaY5fCRkYApzLwsfhLzGg7ZnwaHZ6hukc= Subject key identifier: EC:9C:C4:3B:C4:6C:53:FE:4E:2C:4A:F8:BB:86:16:22:C9:A2:7F:6E Authority key identifier: BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96 Certificate issuer: /CN=A9191E43/serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896 Certificate serial: 02D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft Manifest number: 02D4 Signing time: Fri 25 Apr 2025 01:08:21 +0000 Manifest this update: Fri 25 Apr 2025 01:08:20 +0000 Manifest next update: Fri 02 May 2025 01:08:20 +0000 Files and hashes: 1: uxh7m1B2e7e7wih3IL02wLjQaJY.crl (hash: 3jBmwPCq1T4DfGDllXn5w9fsGxS8ysTELJnDGbcceqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 724 (0x2d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E43, serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896 Validity Not Before: Apr 25 01:08:20 2025 GMT Not After : May 2 01:08:20 2025 GMT Subject: CN=680ae084-1425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:2f:1c:e2:28:22:5f:9a:37:b1:8e:02:77: 93:0d:db:f4:33:32:56:19:81:a4:37:3c:68:13:90: 72:c4:e6:2f:03:64:ed:f0:a1:a7:31:6f:7f:9b:43: 97:0b:f0:c4:04:32:8b:84:f3:e0:a4:ec:16:5f:f2: 1b:33:71:15:07:a2:1e:db:46:d4:70:1d:f3:2e:69: 5d:8f:47:77:1f:20:91:af:c8:f7:b2:54:b4:4c:9f: 7e:0d:57:1a:95:6b:a8:d8:20:81:b4:67:96:88:ab: d7:f9:b1:b9:16:0f:5b:91:6a:31:57:56:04:2d:54: 20:b6:2f:e1:7e:96:39:a7:f7:16:c9:c3:8b:2c:27: af:b9:16:0b:7b:d7:58:5c:78:22:c2:38:a5:c6:6c: 93:b6:56:78:58:f8:69:47:d5:31:84:f0:ec:bd:54: ff:cc:10:2f:61:92:9e:a4:10:4a:7d:b7:c5:45:76: b8:a9:e2:8c:3c:43:5f:ba:e3:f0:4f:f7:89:88:d7: 0e:be:13:fc:eb:78:09:99:c3:af:63:19:5d:f4:d1: a7:76:25:75:41:41:0a:b7:f8:9b:49:45:1d:33:64: f8:c3:9f:3f:b1:4a:62:84:74:0c:4c:c6:cc:f2:83: 4e:77:a8:96:fb:dc:b7:cb:80:37:63:4b:6b:13:ee: fd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9C:C4:3B:C4:6C:53:FE:4E:2C:4A:F8:BB:86:16:22:C9:A2:7F:6E X509v3 Authority Key Identifier: keyid:BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:ae:e5:aa:28:34:f3:a5:39:84:41:c2:a0:4e:e1:cf:88:de: c1:6d:82:3f:92:90:c2:c6:61:8d:05:46:78:ed:3d:4f:9e:04: d9:79:a9:a0:e8:ef:19:26:a8:98:34:d9:0b:04:59:dd:45:d5: 5c:ac:ad:84:47:b1:aa:d6:38:a9:37:1b:0f:94:30:ca:a6:73: d7:b3:ea:e4:68:53:cc:1e:4c:2d:6d:68:57:59:94:b0:bb:60: 6f:34:8d:b7:6d:88:9b:e5:df:ee:fc:bb:47:5c:c0:93:55:41: f8:b1:0f:53:1e:37:67:3b:c6:62:4d:c8:60:cd:00:72:36:c6: 68:76:9e:00:b3:1a:e7:cc:c2:f1:67:55:38:25:6e:ee:4a:1d: d1:66:ea:24:42:a5:61:71:d3:a7:01:b2:8b:e0:0a:1c:bc:07: 9f:17:ae:19:ee:4e:a1:d7:40:83:41:2d:a4:0f:59:9a:f7:c3: 10:ff:b7:4d:5e:51:f3:f8:96:50:93:b5:1c:76:92:b2:17:ab: 58:fe:b5:48:b1:00:e0:3b:d9:2f:79:24:da:c3:3c:ea:d0:30: f2:b9:e9:b8:39:dc:f9:fe:78:ef:a5:89:0e:04:fb:fc:21:ba: 67:1e:16:0e:ff:3c:07:59:14:7a:75:1e:41:a8:e5:d2:1a:d3: 62:35:56:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFNDMxMTAvBgNVBAUTKEJCMTg3QjlCNTA3NjdCQjdCQkMyMjg3NzIwQkQzNkMw QjhEMDY4OTYwHhcNMjUwNDI1MDEwODIwWhcNMjUwNTAyMDEwODIwWjAYMRYwFAYD VQQDEw02ODBhZTA4NC0xNDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgMvHOIoIl+aN7GOAneTDdv0MzJWGYGkNzxoE5ByxOYvA2Tt8KGnMW9/m0OX C/DEBDKLhPPgpOwWX/IbM3EVB6Ie20bUcB3zLmldj0d3HyCRr8j3slS0TJ9+DVca lWuo2CCBtGeWiKvX+bG5Fg9bkWoxV1YELVQgti/hfpY5p/cWycOLLCevuRYLe9dY XHgiwjilxmyTtlZ4WPhpR9UxhPDsvVT/zBAvYZKepBBKfbfFRXa4qeKMPENfuuPw T/eJiNcOvhP863gJmcOvYxld9NGndiV1QUEKt/ibSUUdM2T4w58/sUpihHQMTMbM 8oNOd6iW+9y3y4A3Y0trE+79kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOycxDvE bFP+TixK+LuGFiLJon9uMB8GA1UdIwQYMBaAFLsYe5tQdnu3u8IodyC9NsC40GiW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU0My81MDhEQTExOEUy MDExMUVDOTdDQjMxNUNDNEY5QUUwMi91eGg3bTFCMmU3ZTd3aWgzSUwwMndMalFh SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V4aDdtMUIyZTdlN3dpaDNJTDAyd0xqUWFKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUU0My81MDhEQTExOEUyMDExMUVDOTdDQjMxNUNDNEY5QUUwMi91eGg3bTFCMmU3 ZTd3aWgzSUwwMndMalFhSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTruWqKDTzpTmEQcKgTuHPiN7BbYI/kpDCxmGNBUZ47T1PngTZeamg 6O8ZJqiYNNkLBFndRdVcrK2ER7Gq1jipNxsPlDDKpnPXs+rkaFPMHkwtbWhXWZSw u2BvNI23bYib5d/u/LtHXMCTVUH4sQ9THjdnO8ZiTchgzQByNsZodp4AsxrnzMLx Z1U4JW7uSh3RZuokQqVhcdOnAbKL4AocvAefF64Z7k6h10CDQS2kD1ma98MQ/7dN XlHz+JZQk7UcdpKyF6tY/rVIsQDgO9kveSTawzzq0DDyuem4Odz5/njvpYkOBPv8 IbpnHhYO/zwHWRR6dR5BqOXSGtNiNVbk -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:46 2025 by rpki-client