$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft File: ULpjuT-CkSle5HAxuWtFzaXCSw0.mft (raw, json) Hash identifier: BfOJKxylDXwjFTGX23Vonl7VKLZHYxhR/J4YtNzPu4c= Subject key identifier: A8:AC:3D:1C:22:46:F2:EE:A0:93:B5:6E:89:2B:E7:0F:24:E3:AD:15 Authority key identifier: 50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D Certificate issuer: /CN=A9199CFF/serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft Manifest number: 32 Signing time: Fri 25 Apr 2025 06:38:12 +0000 Manifest this update: Fri 25 Apr 2025 06:38:12 +0000 Manifest next update: Fri 02 May 2025 06:38:12 +0000 Files and hashes: 1: ULpjuT-CkSle5HAxuWtFzaXCSw0.crl (hash: HrXHfl8+kuyxIDD2jK3zUAspn8aB+Dxl8efGO753Seg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CFF, serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D Validity Not Before: Apr 25 06:38:12 2025 GMT Not After : May 2 06:38:12 2025 GMT Subject: CN=680b2dd4-f603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:92:d9:e3:f3:ea:13:b7:85:1b:11:10:9a:23: a3:95:38:01:27:ff:18:30:9b:dd:41:32:31:25:44: 2c:b2:7d:7a:e0:96:69:bb:f9:24:14:fc:30:93:c2: 19:ab:72:16:1c:ce:11:81:a2:3e:43:80:5a:96:d0: 46:71:5d:35:3b:2e:fb:a3:71:1f:b8:4d:d1:c4:57: ec:4e:ba:0a:e3:32:9b:30:fe:22:2a:30:a8:4b:e2: cc:00:2e:5c:3a:b2:72:9c:d9:22:10:36:c4:25:24: c0:52:24:85:7c:2d:fe:36:90:b6:2a:e1:51:84:58: 40:bc:85:71:2c:34:34:56:68:b9:f0:0c:0f:30:2a: 63:0d:c4:58:c3:f0:07:54:78:34:4e:11:bb:35:24: 55:4e:45:46:45:a7:27:68:eb:33:45:88:da:cb:70: 99:f7:0c:32:10:49:3c:68:a7:0f:f4:0a:6c:83:cc: d9:72:b0:47:fe:1e:2e:10:1a:38:45:65:5e:d1:20: 1b:56:01:73:ce:d5:1c:ba:fc:7a:17:8d:51:78:bc: d2:ae:8b:30:c7:87:2c:83:99:fa:b7:48:e3:56:8f: ee:0b:02:69:9a:2e:08:d4:1b:85:f0:37:85:27:31: 03:57:cc:f3:6f:dd:4e:f6:f4:aa:53:e9:53:9b:0b: 96:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AC:3D:1C:22:46:F2:EE:A0:93:B5:6E:89:2B:E7:0F:24:E3:AD:15 X509v3 Authority Key Identifier: keyid:50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:75:64:4e:23:62:51:18:d5:2a:b3:7d:9f:dc:a4:e8:d2:bc: 83:2d:ec:50:1c:da:e0:9e:ae:4c:e5:21:90:03:8d:a6:3e:49: 56:85:3a:49:2b:bc:3c:9e:fc:17:18:e6:c7:d7:9b:61:de:67: 77:94:43:13:93:f6:ce:d0:ce:ec:a8:e9:19:0f:56:34:97:0b: 4a:44:18:7c:3c:3d:65:18:0b:b8:5a:40:b8:a5:c2:2f:38:47: 94:cd:36:a7:5d:99:d4:33:bd:5b:ff:19:38:a5:32:95:0b:d1: ad:7e:c2:b3:c6:f2:21:d7:44:c7:0b:e3:b9:ad:ab:7b:92:6c: e0:f4:20:14:ba:ba:b9:c8:13:0e:f2:d3:69:cb:36:4a:f4:b8: e1:9a:4c:9d:62:e0:b1:cc:73:dd:ed:36:8d:36:30:c9:cb:72: 4b:df:ff:11:24:d9:5c:36:91:0b:2f:8b:e5:5f:27:2a:31:bb: 19:71:58:d1:94:f6:30:6e:75:59:b3:6e:da:73:72:67:4c:01: f0:82:7f:dd:bc:cb:cb:39:0a:4d:c3:20:e4:55:20:f3:c6:62: 7b:19:db:5e:5b:d2:19:ef:b2:f5:53:ac:c7:94:82:57:a5:3d: 30:19:cf:87:56:34:83:9a:e5:6e:1e:15:aa:59:24:d6:40:36: 70:94:9b:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUNGRjExMC8GA1UEBRMoNTBCQTYzQjkzRjgyOTEyOTVFRTQ3MDMxQjk2QjQ1Q0RB NUMyNEIwRDAeFw0yNTA0MjUwNjM4MTJaFw0yNTA1MDIwNjM4MTJaMBgxFjAUBgNV BAMTDTY4MGIyZGQ0LWY2MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaktnj8+oTt4UbERCaI6OVOAEn/xgwm91BMjElRCyyfXrglmm7+SQU/DCTwhmr chYczhGBoj5DgFqW0EZxXTU7LvujcR+4TdHEV+xOugrjMpsw/iIqMKhL4swALlw6 snKc2SIQNsQlJMBSJIV8Lf42kLYq4VGEWEC8hXEsNDRWaLnwDA8wKmMNxFjD8AdU eDROEbs1JFVORUZFpydo6zNFiNrLcJn3DDIQSTxopw/0CmyDzNlysEf+Hi4QGjhF ZV7RIBtWAXPO1Ry6/HoXjVF4vNKuizDHhyyDmfq3SONWj+4LAmmaLgjUG4XwN4Un MQNXzPNv3U729KpT6VObC5aVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqKw9HCJG 8u6gk7VuiSvnDyTjrRUwHwYDVR0jBBgwFoAUULpjuT+CkSle5HAxuWtFzaXCSw0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5Q0ZGLzJBRTE2QTU4RDdF MDExRUY4QjE3M0QyRkM0RjlBRTAyL1VMcGp1VC1Da1NsZTVIQXh1V3RGemFYQ1N3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVUxwanVULUNrU2xlNUhBeHVXdEZ6YVhDU3cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 Q0ZGLzJBRTE2QTU4RDdFMDExRUY4QjE3M0QyRkM0RjlBRTAyL1VMcGp1VC1Da1Ns ZTVIQXh1V3RGemFYQ1N3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEh1ZE4jYlEY1SqzfZ/cpOjSvIMt7FAc2uCerkzlIZADjaY+SVaFOkkr vDye/BcY5sfXm2HeZ3eUQxOT9s7Qzuyo6RkPVjSXC0pEGHw8PWUYC7haQLilwi84 R5TNNqddmdQzvVv/GTilMpUL0a1+wrPG8iHXRMcL47mtq3uSbOD0IBS6urnIEw7y 02nLNkr0uOGaTJ1i4LHMc93tNo02MMnLckvf/xEk2Vw2kQsvi+VfJyoxuxlxWNGU 9jBudVmzbtpzcmdMAfCCf928y8s5Ck3DIORVIPPGYnsZ215b0hnvsvVTrMeUglel PTAZz4dWNIOa5W4eFapZJNZANnCUm5k= -----END CERTIFICATE-----Generated at Sat Apr 26 05:20:12 2025 by rpki-client