$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft File: uxh7m1B2e7e7wih3IL02wLjQaJY.mft (raw, json) Hash identifier: n8spyZD2GFmpMZD0fzapBXcYiwKpNjWs04Ij+HXzpLU= Subject key identifier: 3C:99:DB:8C:09:9C:45:69:93:D6:AA:C2:19:27:AB:8F:29:4B:10:DA Authority key identifier: BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96 Certificate issuer: /CN=A9191E43/serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896 Certificate serial: 02EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft Manifest number: 02EE Signing time: Sun 15 Jun 2025 01:00:36 +0000 Manifest this update: Sun 15 Jun 2025 01:00:36 +0000 Manifest next update: Sun 22 Jun 2025 01:00:36 +0000 Files and hashes: 1: uxh7m1B2e7e7wih3IL02wLjQaJY.crl (hash: P8jbGZu03hXvogxy5sgbWVGPvazBEXJC2MbFt6PST+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 750 (0x2ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E43, serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896 Validity Not Before: Jun 15 01:00:36 2025 GMT Not After : Jun 22 01:00:36 2025 GMT Subject: CN=684e1b34-52b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:98:42:6f:cb:55:94:e4:f7:98:0c:1a:89:bf: d9:1d:8b:90:6c:d9:60:50:f3:b6:0d:e5:d7:38:fb: 4f:d1:ba:62:79:25:c6:3a:42:91:43:2c:c5:1a:6f: 6b:f1:e1:22:a8:aa:30:ab:ee:e0:10:eb:98:04:20: c8:fa:e0:88:ab:0a:ac:ba:39:e0:11:10:30:0c:f9: b9:8d:84:e5:69:ff:cd:1e:99:33:1c:ff:cf:a1:7a: 04:b0:75:a7:89:59:c3:c9:46:6e:a2:64:71:b4:61: dc:49:a4:f6:3c:c2:35:bb:37:54:13:23:aa:92:8e: 69:df:c5:5c:75:07:bf:4c:94:c7:d5:8f:46:a9:95: 8b:47:a6:c9:6b:fe:98:6c:b7:3c:30:1f:f5:0b:63: f5:b5:75:cd:7f:17:18:3b:03:38:0b:72:17:99:74: 26:71:09:43:3a:ac:e4:5e:21:24:a4:d2:2b:da:ff: 3a:fe:15:55:28:a8:af:ee:74:c7:2a:70:af:cb:ff: 72:53:5a:be:c6:05:84:40:6b:1a:1c:9f:92:09:6a: ba:c2:e9:c4:ba:00:25:35:f4:07:74:68:60:a1:0c: 0a:c6:45:3b:8c:71:4b:72:a7:c9:ca:a3:dc:2f:80: dd:47:c9:75:e7:91:cf:18:45:a2:e3:31:71:7e:49: 35:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:99:DB:8C:09:9C:45:69:93:D6:AA:C2:19:27:AB:8F:29:4B:10:DA X509v3 Authority Key Identifier: keyid:BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:cf:33:ec:81:b5:f4:b6:67:c4:81:db:91:66:19:54:ca:bd: 5d:d2:ff:72:76:40:7c:03:50:95:1a:f3:86:53:87:f4:5b:20: ed:d9:66:3d:1d:88:8a:d0:4c:c2:da:54:cd:0d:17:2f:c6:cd: 5d:54:92:fb:dc:64:f4:a6:b3:c2:77:b2:4d:72:4c:ec:74:0a: 86:eb:e6:77:1e:9e:2a:70:a8:9e:8d:6b:6a:ae:c5:b7:c5:a2: 4a:2a:17:4b:93:b0:88:1a:6e:51:10:39:03:5c:4e:d5:ef:ef: 5e:09:30:21:76:46:1a:d9:77:b4:e5:60:04:ed:64:30:27:06: fc:6f:93:d3:b6:8c:b0:a6:07:b4:ea:e0:98:5f:90:92:71:af: c4:6d:90:7c:b9:a7:b7:47:3f:70:e0:89:e4:58:3d:80:10:ad: 25:3b:02:00:a9:c4:3a:76:81:4c:c6:ae:e3:bb:d0:d0:81:90: 26:1e:ba:ed:d0:68:c4:63:e9:f9:72:ff:fc:f9:92:d7:90:79: ef:95:c0:14:2e:6e:33:98:0d:02:bb:05:1c:3b:b2:8b:ff:53: 04:20:25:e5:61:11:e8:40:2b:40:89:f8:0c:7d:1e:60:de:ed: c7:a8:7c:ed:2f:b6:5c:3c:69:70:0c:9c:92:70:fc:eb:36:11: 24:69:c0:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFNDMxMTAvBgNVBAUTKEJCMTg3QjlCNTA3NjdCQjdCQkMyMjg3NzIwQkQzNkMw QjhEMDY4OTYwHhcNMjUwNjE1MDEwMDM2WhcNMjUwNjIyMDEwMDM2WjAYMRYwFAYD VQQDEw02ODRlMWIzNC01MmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZhCb8tVlOT3mAwaib/ZHYuQbNlgUPO2DeXXOPtP0bpieSXGOkKRQyzFGm9r 8eEiqKowq+7gEOuYBCDI+uCIqwqsujngERAwDPm5jYTlaf/NHpkzHP/PoXoEsHWn iVnDyUZuomRxtGHcSaT2PMI1uzdUEyOqko5p38VcdQe/TJTH1Y9GqZWLR6bJa/6Y bLc8MB/1C2P1tXXNfxcYOwM4C3IXmXQmcQlDOqzkXiEkpNIr2v86/hVVKKiv7nTH KnCvy/9yU1q+xgWEQGsaHJ+SCWq6wunEugAlNfQHdGhgoQwKxkU7jHFLcqfJyqPc L4DdR8l155HPGEWi4zFxfkk18QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyZ24wJ nEVpk9aqwhknq48pSxDaMB8GA1UdIwQYMBaAFLsYe5tQdnu3u8IodyC9NsC40GiW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU0My81MDhEQTExOEUy MDExMUVDOTdDQjMxNUNDNEY5QUUwMi91eGg3bTFCMmU3ZTd3aWgzSUwwMndMalFh SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V4aDdtMUIyZTdlN3dpaDNJTDAyd0xqUWFKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUU0My81MDhEQTExOEUyMDExMUVDOTdDQjMxNUNDNEY5QUUwMi91eGg3bTFCMmU3 ZTd3aWgzSUwwMndMalFhSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFzzPsgbX0tmfEgduRZhlUyr1d0v9ydkB8A1CVGvOGU4f0WyDt2WY9 HYiK0EzC2lTNDRcvxs1dVJL73GT0prPCd7JNckzsdAqG6+Z3Hp4qcKiejWtqrsW3 xaJKKhdLk7CIGm5REDkDXE7V7+9eCTAhdkYa2Xe05WAE7WQwJwb8b5PTtoywpge0 6uCYX5CSca/EbZB8uae3Rz9w4InkWD2AEK0lOwIAqcQ6doFMxq7ju9DQgZAmHrrt 0GjEY+n5cv/8+ZLXkHnvlcAULm4zmA0CuwUcO7KL/1MEICXlYRHoQCtAifgMfR5g 3u3HqHztL7ZcPGlwDJyScPzrNhEkacCr -----END CERTIFICATE-----Generated at Sun Jun 15 09:54:59 2025 by rpki-client