$ rpki-client -vvf rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft File: uFvtmb90CrrVo5nJ31_plipt6PE.mft (raw, json) Hash identifier: jcUdALexB2X71CjFXdCISJjY1i661GC/fuVpwUq4Xi8= Subject key identifier: 6D:65:89:6D:4D:61:4F:DC:2D:EB:E0:60:49:AB:32:11:A0:D0:23:42 Authority key identifier: B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 Certificate issuer: /CN=A9195DE5/serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Certificate serial: 07D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft Manifest number: 07BF Signing time: Thu 24 Apr 2025 20:58:40 +0000 Manifest this update: Thu 24 Apr 2025 20:58:39 +0000 Manifest next update: Thu 01 May 2025 20:58:39 +0000 Files and hashes: 1: uFvtmb90CrrVo5nJ31_plipt6PE.crl (hash: ezggg23HVNqkSh2e/zvxPtqlnBCuGICiXMRc7PQLLls=) 2: 709F917AF74111EF98C99938C4F9AE02.roa (hash: 1qf+iawoit0ys+iUAf7LEY7HtRnvUIOTI+MZhHCWuYU=) 3: C7ADA138F4C011EAA7B25986C4F9AE02.roa (hash: G5UBtJsfZQZ4SV+yPTNK/ejUFIGmrip9sZG7FP0b4Cg=) 4: C8633DEAF4C011EAA7B25986C4F9AE02.roa (hash: ux6FaGhfWyv2H1NDOSXEk7LrVXGwR7MCaj2E49kXMHg=) 5: 70017B5CF74111EF98C99938C4F9AE02.roa (hash: 2qfdADfdo36JxITYdf4pd34OcKO4BbP5IH9WNGohmvk=) 6: C6EDD52EF4C011EAA7B25986C4F9AE02.roa (hash: qyqw3i3GL6h/SgQPPtxyHJkhrm/uWWSr5nGAKt/Qapg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2007 (0x7d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195DE5, serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Validity Not Before: Apr 24 20:58:39 2025 GMT Not After : May 1 20:58:39 2025 GMT Subject: CN=680aa600-3dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1c:38:5a:60:d7:ec:f3:10:06:ee:59:2f:ff: 39:6d:d2:15:08:b3:f0:4f:be:9b:48:00:c7:dd:c4: f5:45:31:7e:a1:92:da:09:a1:72:52:24:3b:0f:62: ba:48:44:58:47:ab:3b:b0:3b:2f:f6:96:da:65:10: 05:36:e1:53:77:15:ed:f5:24:d4:98:3f:ff:fd:3e: a2:32:ef:ba:0c:0a:1b:cb:54:82:9e:b6:13:70:6b: 1c:6b:d8:cf:3d:49:99:f4:ae:f4:4e:dd:57:c7:da: f1:1d:4a:4e:a0:b7:11:5e:d4:f9:e4:ee:0b:fb:37: 72:e5:57:5c:aa:ed:54:bd:c1:c0:27:ca:01:14:3c: e6:2c:01:18:7d:a8:4a:ce:46:00:2f:f1:b9:c5:25: 72:38:7e:bc:59:7a:b3:c3:75:7b:a6:51:59:92:04: bf:f4:c4:f3:78:69:f5:f6:b9:a2:74:45:8d:92:56: d1:37:39:99:61:90:e6:c8:72:f5:80:b6:fa:fd:44: ba:5d:44:7f:46:ac:47:28:4d:f3:1e:79:23:5b:66: 96:8e:e7:9d:c7:47:27:44:45:58:be:f4:77:b5:ae: 51:11:24:b0:ee:d2:99:77:a8:7f:ee:46:5e:41:d0: b0:18:e0:db:32:1e:ba:3d:6a:1c:c3:86:d3:e2:12: 5a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:65:89:6D:4D:61:4F:DC:2D:EB:E0:60:49:AB:32:11:A0:D0:23:42 X509v3 Authority Key Identifier: keyid:B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:eb:de:45:89:03:35:9f:34:5b:70:aa:da:de:93:39:82:ea: 2c:46:a5:c9:b0:c1:73:0e:76:40:76:8b:3e:c7:ef:56:8f:f9: 19:a5:d2:c9:fd:6c:19:b2:c7:3a:2e:b6:62:20:a1:10:ad:e4: e5:43:9a:d6:a5:b8:1d:ae:9a:b1:e1:56:bc:a2:0e:42:56:e4: 13:8c:e0:45:cf:2e:66:20:ad:9d:b7:60:63:c3:5e:3a:24:7d: 63:16:f6:42:09:ad:45:d8:78:2e:d5:f5:2a:c6:27:a0:43:76: 4e:99:c4:77:e0:ba:08:cc:64:03:a7:dd:2e:ba:20:a0:7f:11: 45:fc:8a:66:aa:0b:b4:20:aa:25:a3:c9:5d:d2:ff:4e:76:4f: 07:10:c6:67:7e:5c:8d:b2:42:33:f7:85:48:dc:e0:52:94:54: 6e:1b:7a:ba:5b:af:86:84:e7:50:0b:11:ef:dc:09:63:10:44: d9:2c:11:c4:50:90:43:b9:c2:2a:0f:7b:51:16:01:7b:1b:11: c4:48:eb:35:5a:22:77:98:72:34:fa:7c:48:89:67:f8:97:da: f0:b9:a3:f6:39:67:75:36:90:0e:f1:53:d1:cd:63:51:41:2b: ad:ce:55:4a:4d:5d:5c:e8:2a:b5:68:ce:a2:d5:b0:e1:bf:a2: 8e:43:1b:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVERTUxMTAvBgNVBAUTKEI4NUJFRDk5QkY3NDBBQkFENUEzOTlDOURGNUZFOTk2 MkE2REU4RjEwHhcNMjUwNDI0MjA1ODM5WhcNMjUwNTAxMjA1ODM5WjAYMRYwFAYD VQQDEw02ODBhYTYwMC0zZGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthw4WmDX7PMQBu5ZL/85bdIVCLPwT76bSADH3cT1RTF+oZLaCaFyUiQ7D2K6 SERYR6s7sDsv9pbaZRAFNuFTdxXt9STUmD///T6iMu+6DAoby1SCnrYTcGsca9jP PUmZ9K70Tt1Xx9rxHUpOoLcRXtT55O4L+zdy5Vdcqu1UvcHAJ8oBFDzmLAEYfahK zkYAL/G5xSVyOH68WXqzw3V7plFZkgS/9MTzeGn19rmidEWNklbRNzmZYZDmyHL1 gLb6/US6XUR/RqxHKE3zHnkjW2aWjuedx0cnREVYvvR3ta5RESSw7tKZd6h/7kZe QdCwGODbMh66PWocw4bT4hJaXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1liW1N YU/cLevgYEmrMhGg0CNCMB8GA1UdIwQYMBaAFLhb7Zm/dAq61aOZyd9f6ZYqbejx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NURFNS9FM0VENjVEOEY0 QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENyclZvNW5KMzFfcGxpcHQ2 UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VGdnRtYjkwQ3JyVm81bkozMV9wbGlwdDZQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NURFNS9FM0VENjVEOEY0QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENy clZvNW5KMzFfcGxpcHQ2UEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA695FiQM1nzRbcKra3pM5guosRqXJsMFzDnZAdos+x+9Wj/kZpdLJ /WwZssc6LrZiIKEQreTlQ5rWpbgdrpqx4Va8og5CVuQTjOBFzy5mIK2dt2Bjw146 JH1jFvZCCa1F2Hgu1fUqxiegQ3ZOmcR34LoIzGQDp90uuiCgfxFF/Ipmqgu0IKol o8ld0v9Odk8HEMZnflyNskIz94VI3OBSlFRuG3q6W6+GhOdQCxHv3AljEETZLBHE UJBDucIqD3tRFgF7GxHESOs1WiJ3mHI0+nxIiWf4l9rwuaP2OWd1NpAO8VPRzWNR QSutzlVKTV1c6Cq1aM6i1bDhv6KOQxvQ -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:23 2025 by rpki-client