$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft File: uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json) Hash identifier: i75cP8uHQXFIvcUsw6clmgdp4hp+U/lb7RUh3EP17Dc= Subject key identifier: A9:63:35:53:2D:63:E8:CB:01:75:36:AB:E2:76:14:57:9C:AB:5C:6A Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9 Certificate issuer: /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9 Certificate serial: 07E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft Manifest number: 07CD Signing time: Thu 24 Apr 2025 20:57:22 +0000 Manifest this update: Thu 24 Apr 2025 20:57:21 +0000 Manifest next update: Thu 01 May 2025 20:57:21 +0000 Files and hashes: 1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: vAHepLt4eeWqtqgdtRZA2WGS2y0/l/A1l25F+k75CGk=) 2: E68BF368DD9911EF85614A53C4F9AE02.roa (hash: r8A/94ghc8/XPx2goFiqLMeQN6YHcN5iJvMsFi80QDA=) 3: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: mT5QuDERTmVPlXZR5moXPT7cKPExBS2mAmCXS/H0poY=) 4: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: XvMq/9vITeOjRr0vA0uouJy5AhVhjzN8FwnxzNY6RG4=) 5: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: T7wBB0Q/OxACrFHdpRUHNW4aCrfVBO0wryHpyaFwA8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2023 (0x7e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9 Validity Not Before: Apr 24 20:57:21 2025 GMT Not After : May 1 20:57:21 2025 GMT Subject: CN=680aa5b2-7983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5e:7d:33:21:52:5c:8a:8a:2f:bc:41:94:cd: 81:a4:ae:6d:7d:dd:c7:47:8b:ad:7e:50:a4:e9:fa: c7:63:d0:92:5f:c1:5b:88:0d:e5:b7:9e:46:1f:3f: 59:4d:6e:ff:42:e4:f7:de:39:73:59:68:67:7c:db: d5:d3:e8:ef:4c:2a:0d:cb:53:bb:fa:c0:94:52:67: 7d:1b:53:d4:32:04:d6:fb:f8:e9:c9:a2:0f:6f:c1: bb:16:a8:30:a3:ba:77:a3:49:42:62:de:c4:31:b9: 89:e3:cc:58:99:91:ae:f0:71:07:f6:0b:6b:9d:bf: 4e:26:b0:8f:27:b5:8f:ec:45:ff:f8:47:99:f7:ac: 43:5d:ad:4a:8c:1e:57:cf:12:27:3c:f4:08:49:bf: 1c:7a:0c:19:64:9e:c5:44:71:05:02:27:9e:6f:c2: b2:51:ae:d5:bd:31:07:5d:99:4d:57:0c:77:91:f4: 6e:28:66:b2:16:6c:81:01:67:8a:29:7a:68:85:03: 6c:b9:6d:33:85:28:f8:99:e2:6b:1a:94:ec:79:9e: ae:a7:41:24:13:ff:f9:b0:d2:5a:68:3f:f5:cb:c0: 55:07:f8:0c:ef:81:f2:3c:54:c0:a8:ca:ae:be:1e: 3d:ed:9f:9c:76:84:27:a3:69:79:d6:e3:46:62:aa: 67:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:63:35:53:2D:63:E8:CB:01:75:36:AB:E2:76:14:57:9C:AB:5C:6A X509v3 Authority Key Identifier: keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:4a:29:f8:ad:37:b5:72:7b:41:cc:3b:fe:21:49:f8:f5:4b: 45:b4:29:65:c0:4b:d7:56:e9:c8:e5:35:c6:39:64:53:49:e9: e2:63:a5:f3:d5:b6:18:f2:46:84:26:1a:96:1f:a4:70:cb:95: 09:57:36:6e:65:42:f0:5b:6e:6a:f2:6b:37:5a:62:7a:6b:96: 2a:e2:98:c2:a6:ad:19:46:6c:f8:03:87:c1:be:da:b1:de:00: f0:90:85:8d:cf:a7:77:eb:b3:00:29:f2:1a:90:be:b5:59:f3: 16:da:af:f4:ee:7a:46:70:4a:b6:04:99:99:e8:83:78:56:eb: e5:95:d2:15:b2:e0:e1:92:e0:06:12:ba:33:4f:c2:bc:05:c2: 56:21:5a:ab:51:8a:73:d3:36:09:8c:76:7c:8a:06:49:bf:32: 8b:45:14:23:19:94:f8:8e:0a:78:da:67:86:49:60:12:8b:7c: ff:63:49:55:15:21:a9:de:4c:b5:c6:57:ee:5e:9e:5b:c4:0f: 0b:85:5b:7b:2f:ea:31:d1:1a:52:80:bb:ca:7e:fb:b4:17:63: c7:d7:a2:43:24:4f:ac:37:20:b6:77:89:1b:b1:d7:4f:a5:64: 7a:af:76:5b:96:03:2d:5c:8a:b3:ad:37:ad:9a:74:ad:1d:0c: b5:a6:2f:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU4M0IxMTAvBgNVBAUTKEI4QTYyQ0YxREU4QjI2MkUxNDczN0Q5M0VFM0U2RjM2 QzNBMEUxQzkwHhcNMjUwNDI0MjA1NzIxWhcNMjUwNTAxMjA1NzIxWjAYMRYwFAYD VQQDEw02ODBhYTViMi03OTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr159MyFSXIqKL7xBlM2BpK5tfd3HR4utflCk6frHY9CSX8FbiA3lt55GHz9Z TW7/QuT33jlzWWhnfNvV0+jvTCoNy1O7+sCUUmd9G1PUMgTW+/jpyaIPb8G7Fqgw o7p3o0lCYt7EMbmJ48xYmZGu8HEH9gtrnb9OJrCPJ7WP7EX/+EeZ96xDXa1KjB5X zxInPPQISb8cegwZZJ7FRHEFAieeb8KyUa7VvTEHXZlNVwx3kfRuKGayFmyBAWeK KXpohQNsuW0zhSj4meJrGpTseZ6up0EkE//5sNJaaD/1y8BVB/gM74HyPFTAqMqu vh497Z+cdoQno2l51uNGYqpnDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKljNVMt Y+jLAXU2q+J2FFecq1xqMB8GA1UdIwQYMBaAFLimLPHeiyYuFHN9k+4+bzbDoOHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTgzQi83OTJEMTQ4QUYy ODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEppNFVjMzJUN2o1dk5zT2c0 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VLWXM4ZDZMSmk0VWMzMlQ3ajV2TnNPZzRjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTgzQi83OTJEMTQ4QUYyODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEpp NFVjMzJUN2o1dk5zT2c0Y2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWSin4rTe1cntBzDv+IUn49UtFtCllwEvXVunI5TXGOWRTSeniY6Xz 1bYY8kaEJhqWH6Rwy5UJVzZuZULwW25q8ms3WmJ6a5Yq4pjCpq0ZRmz4A4fBvtqx 3gDwkIWNz6d367MAKfIakL61WfMW2q/07npGcEq2BJmZ6IN4VuvlldIVsuDhkuAG ErozT8K8BcJWIVqrUYpz0zYJjHZ8igZJvzKLRRQjGZT4jgp42meGSWASi3z/Y0lV FSGp3ky1xlfuXp5bxA8LhVt7L+ox0RpSgLvKfvu0F2PH16JDJE+sNyC2d4kbsddP pWR6r3ZblgMtXIqzrTetmnStHQy1pi8U -----END CERTIFICATE-----Generated at Sat Apr 26 13:02:22 2025 by rpki-client