$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft File: UzfctqkbQdUhGkTCFqljq6zH4rA.mft (raw, json) Hash identifier: 0atfnvekr+lJmllJcIimZdKv3DH0IZVbwCjd35/R7y0= Subject key identifier: E5:3B:BB:91:F4:58:D6:93:2B:2B:4D:A3:61:A2:F4:35:FB:F1:0D:E9 Authority key identifier: 53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0 Certificate issuer: /CN=A9197FBC/serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0 Certificate serial: 348A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft Manifest number: 3480 Signing time: Thu 24 Apr 2025 14:44:39 +0000 Manifest this update: Thu 24 Apr 2025 14:44:38 +0000 Manifest next update: Thu 01 May 2025 14:44:38 +0000 Files and hashes: 1: UzfctqkbQdUhGkTCFqljq6zH4rA.crl (hash: T91jA0loIxTXhZLtBQyZbVBEf73wlZGflObXxnoH2yQ=) 2: 8DFE2984EAD811ECA1ED8915C4F9AE02.roa (hash: dOS+EBN8T4gv4pfAW5HZ87ld30CEjTabsXZtn+f9BiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13450 (0x348a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197FBC, serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0 Validity Not Before: Apr 24 14:44:38 2025 GMT Not After : May 1 14:44:38 2025 GMT Subject: CN=680a4e57-f502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:17:99:a2:32:a9:2e:23:09:bf:f8:1c:4c:67: 85:dd:34:77:4c:29:42:41:11:87:53:b2:e7:cf:f8: f4:10:8b:b6:06:57:c1:0e:2e:8e:65:fd:bf:51:06: 09:e9:6c:e2:ce:51:ae:37:79:55:d4:ff:e6:48:30: ac:01:c8:36:28:d9:d0:9b:ad:5b:e9:64:4d:fb:b9: 96:62:5b:5b:5d:0a:77:55:2a:c9:4e:fa:64:6e:c5: 5f:44:31:18:07:26:c9:fa:8e:a5:8d:dd:7e:4a:aa: c5:5f:90:3c:fb:38:6e:37:c1:35:a1:7b:c4:d6:cf: 25:14:d8:dd:79:59:12:c7:29:59:7f:56:fa:3a:80: 7c:ad:70:87:85:0f:21:7d:ce:9b:5f:a1:04:c4:b9: 86:8d:08:20:c0:bc:12:01:23:01:fd:c8:c4:fb:7f: 82:2a:ec:d9:9f:86:a9:14:79:bb:b5:d5:80:4a:e6: 99:8d:41:1b:18:74:ec:6e:15:d9:e0:9d:62:8c:13: c4:8a:01:a7:b7:d7:e9:37:06:c7:cb:7e:3f:f6:8f: ea:2f:d0:4d:80:11:d1:db:f4:91:3a:b8:db:81:fa: 9e:2d:ac:4a:e9:27:23:59:1b:3f:ce:de:d3:af:eb: 72:13:c6:b3:34:17:26:aa:68:2d:c0:34:71:9e:bc: ec:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3B:BB:91:F4:58:D6:93:2B:2B:4D:A3:61:A2:F4:35:FB:F1:0D:E9 X509v3 Authority Key Identifier: keyid:53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9e:51:c4:c2:e6:72:ca:8c:55:be:19:9b:49:7a:65:28:a5: e6:6a:77:63:1b:8b:15:c3:69:59:47:e2:fd:51:1d:56:51:76: 9e:34:c3:2f:f2:47:98:67:86:96:aa:16:74:79:4f:83:60:35: 99:a2:ad:7d:b1:14:79:23:06:4f:10:f2:77:68:b9:c7:65:33: 1a:a4:b8:21:85:3b:ed:43:64:2f:cc:2b:42:0f:10:9a:a6:c0: 51:70:f2:5b:c3:e2:a3:de:15:1c:dd:86:4d:a0:fa:db:35:2f: 55:d3:8d:e4:14:1f:4c:07:45:2a:fa:c9:1b:ba:de:0f:8d:dd: 30:be:0d:a8:1a:ef:b1:a4:f3:b3:26:ff:c0:97:7c:90:7e:b3: d3:62:47:7f:6f:ea:44:01:88:3e:d1:ab:8f:c7:76:e5:27:c9: 60:c0:58:fd:c1:3a:65:08:79:94:32:16:7c:ce:be:43:43:25: 29:ca:e7:9a:f0:00:bc:40:62:65:96:6b:52:3c:b2:89:48:2c: c9:c6:f1:bd:7e:3f:2d:6b:f9:32:af:b4:98:2c:96:72:f8:bd: c0:61:2a:ca:ce:fa:fe:8a:bd:83:33:14:5f:78:1b:14:d1:25: ac:57:82:7c:cd:13:bb:36:eb:7f:e0:84:8f:36:fb:f6:86:0b: f9:3c:bc:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdGQkMxMTAvBgNVBAUTKDUzMzdEQ0I2QTkxQjQxRDUyMTFBNDRDMjE2QTk2M0FC QUNDN0UyQjAwHhcNMjUwNDI0MTQ0NDM4WhcNMjUwNTAxMTQ0NDM4WjAYMRYwFAYD VQQDEw02ODBhNGU1Ny1mNTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnReZojKpLiMJv/gcTGeF3TR3TClCQRGHU7Lnz/j0EIu2BlfBDi6OZf2/UQYJ 6WzizlGuN3lV1P/mSDCsAcg2KNnQm61b6WRN+7mWYltbXQp3VSrJTvpkbsVfRDEY BybJ+o6ljd1+SqrFX5A8+zhuN8E1oXvE1s8lFNjdeVkSxylZf1b6OoB8rXCHhQ8h fc6bX6EExLmGjQggwLwSASMB/cjE+3+CKuzZn4apFHm7tdWASuaZjUEbGHTsbhXZ 4J1ijBPEigGnt9fpNwbHy34/9o/qL9BNgBHR2/SROrjbgfqeLaxK6ScjWRs/zt7T r+tyE8azNBcmqmgtwDRxnrzsXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOU7u5H0 WNaTKytNo2Gi9DX78Q3pMB8GA1UdIwQYMBaAFFM33LapG0HVIRpEwhapY6usx+Kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZCQy8zNzMwODM4MDFE OTMxMUUyOEFCRTlFRjYwOEIwMkNEMi9VemZjdHFrYlFkVWhHa1RDRnFsanE2ekg0 ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6ZmN0cWtiUWRVaEdrVENGcWxqcTZ6SDRyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0ZCQy8zNzMwODM4MDFEOTMxMUUyOEFCRTlFRjYwOEIwMkNEMi9VemZjdHFrYlFk VWhHa1RDRnFsanE2ekg0ckEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAanlHEwuZyyoxVvhmbSXplKKXmandjG4sVw2lZR+L9UR1WUXaeNMMv 8keYZ4aWqhZ0eU+DYDWZoq19sRR5IwZPEPJ3aLnHZTMapLghhTvtQ2QvzCtCDxCa psBRcPJbw+Kj3hUc3YZNoPrbNS9V043kFB9MB0Uq+skbut4Pjd0wvg2oGu+xpPOz Jv/Al3yQfrPTYkd/b+pEAYg+0auPx3blJ8lgwFj9wTplCHmUMhZ8zr5DQyUpyuea 8AC8QGJllmtSPLKJSCzJxvG9fj8ta/kyr7SYLJZy+L3AYSrKzvr+ir2DMxRfeBsU 0SWsV4J8zRO7Nut/4ISPNvv2hgv5PLyB -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:58 2025 by rpki-client