$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft File: uzvV1-GZJNhitqQb80x_27vpHG0.mft (raw, json) Hash identifier: i1dEQu4D8RvdWHZLSFTnWNRs6A1mqGNKgHTUZP8f+00= Subject key identifier: 53:66:E3:88:7F:A7:DF:E0:12:AE:7A:D4:A0:E1:4F:C8:43:7D:6B:17 Authority key identifier: BB:3B:D5:D7:E1:99:24:D8:62:B6:A4:1B:F3:4C:7F:DB:BB:E9:1C:6D Certificate issuer: /CN=A91CA735/serialNumber=BB3BD5D7E19924D862B6A41BF34C7FDBBBE91C6D Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft Manifest number: 84 Signing time: Fri 25 Apr 2025 05:40:12 +0000 Manifest this update: Fri 25 Apr 2025 05:40:12 +0000 Manifest next update: Fri 02 May 2025 05:40:12 +0000 Files and hashes: 1: uzvV1-GZJNhitqQb80x_27vpHG0.crl (hash: swiZI6es7SoRVC2YxvVP1f2Rvj+xLFKZLR3fY7T1nas=) 2: 385E3308639D11EFB668775FC4F9AE02.roa (hash: TCYXclRvYYtZUxQ5mRKUajDIcjauKFDG/zZisgUfCFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.crl rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA735, serialNumber=BB3BD5D7E19924D862B6A41BF34C7FDBBBE91C6D Validity Not Before: Apr 25 05:40:12 2025 GMT Not After : May 2 05:40:12 2025 GMT Subject: CN=680b203c-c8c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:06:99:75:d5:d7:68:3b:43:22:ad:1b:f3:5e: 17:ae:86:06:d7:e5:69:2a:9d:67:5b:d9:d7:86:57: 80:90:14:53:71:0c:ac:51:72:41:2c:fa:2d:55:95: bb:eb:8b:78:34:7b:8f:f1:eb:56:02:d5:05:42:1d: d2:ac:73:47:93:fd:85:f3:23:b9:f0:e5:38:2f:1a: 6f:48:e8:12:bf:2a:6e:9f:0f:d4:27:ef:6c:6a:89: d2:dd:18:f6:db:de:ac:06:97:3e:dc:a6:71:7f:74: b7:a1:b6:bc:b3:20:fb:85:41:83:af:b9:1f:52:1d: 7e:53:76:89:ff:7e:e2:4c:e2:bc:f0:ec:9b:e1:ea: 7a:48:55:ed:00:49:8b:fa:7f:77:25:7f:6a:ea:6c: 9a:eb:c6:de:63:64:05:96:6b:c9:92:0d:79:58:e9: 27:05:c6:87:a7:7c:19:7a:a2:01:42:6e:b6:d2:ba: 48:93:27:b8:bf:a7:46:a0:7d:cf:77:7b:6e:fa:a7: de:d7:51:f1:09:17:2e:10:7e:0f:e1:7b:3e:a8:b5: f6:e4:21:99:37:33:39:74:b1:0e:c1:f5:a2:c6:37: 64:50:be:79:d7:bd:a1:03:ec:74:a7:7c:e0:28:c3: 23:50:19:05:af:b1:28:9f:9f:7e:37:b1:c5:b6:d8: fc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:66:E3:88:7F:A7:DF:E0:12:AE:7A:D4:A0:E1:4F:C8:43:7D:6B:17 X509v3 Authority Key Identifier: keyid:BB:3B:D5:D7:E1:99:24:D8:62:B6:A4:1B:F3:4C:7F:DB:BB:E9:1C:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:fb:6e:88:8b:c6:70:37:be:8f:ca:07:e4:ff:b2:24:7c:34: ce:09:2b:e4:36:ee:cb:c5:39:9a:69:fd:a2:7a:37:73:48:14: 6a:aa:8e:d8:d1:2b:45:e2:b3:3f:25:fc:1b:2b:5a:c2:dd:40: 79:74:63:04:53:af:97:8d:b5:47:85:df:1a:65:20:ec:7e:2b: be:c1:7f:32:e2:de:15:06:f4:6d:76:55:20:98:0d:10:24:29: 1d:73:4c:52:1a:f6:82:bd:b7:ba:9c:34:f1:5f:e1:a9:b0:01: 7b:6d:45:50:ca:43:00:84:90:d6:b5:8e:1b:e5:44:7f:26:c0: 44:a0:86:02:e5:94:93:c0:81:81:3f:3b:66:fb:a0:0d:1f:24: b4:98:79:7e:00:1e:ff:2d:67:65:45:8b:ad:8d:e4:1e:dc:48: bc:1e:30:41:e5:c0:bb:26:1a:29:76:8e:49:82:49:8c:00:eb: a4:be:f5:61:c1:77:9b:0e:11:13:2c:52:6a:a1:3c:3b:bd:49: ee:08:ef:6f:4a:b5:57:d4:b9:e2:c7:89:0d:43:9f:47:8b:a8: 40:06:cf:66:02:99:69:59:b7:62:e5:40:43:4b:bc:04:34:55: 2a:ee:72:6f:57:5e:a0:42:9e:33:06:d2:ca:32:f0:31:9a:98: ea:a6:ee:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E3MzUxMTAvBgNVBAUTKEJCM0JENUQ3RTE5OTI0RDg2MkI2QTQxQkYzNEM3RkRC QkJFOTFDNkQwHhcNMjUwNDI1MDU0MDEyWhcNMjUwNTAyMDU0MDEyWjAYMRYwFAYD VQQDEw02ODBiMjAzYy1jOGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwaZddXXaDtDIq0b814XroYG1+VpKp1nW9nXhleAkBRTcQysUXJBLPotVZW7 64t4NHuP8etWAtUFQh3SrHNHk/2F8yO58OU4LxpvSOgSvypunw/UJ+9saonS3Rj2 296sBpc+3KZxf3S3oba8syD7hUGDr7kfUh1+U3aJ/37iTOK88Oyb4ep6SFXtAEmL +n93JX9q6mya68beY2QFlmvJkg15WOknBcaHp3wZeqIBQm620rpIkye4v6dGoH3P d3tu+qfe11HxCRcuEH4P4Xs+qLX25CGZNzM5dLEOwfWixjdkUL55172hA+x0p3zg KMMjUBkFr7Eon59+N7HFttj8OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNm44h/ p9/gEq561KDhT8hDfWsXMB8GA1UdIwQYMBaAFLs71dfhmSTYYrakG/NMf9u76Rxt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTczNS9DN0Y0NDFDNjYz OUIxMUVGOUI0RDJBNURDNEY5QUUwMi91enZWMS1HWkpOaGl0cVFiODB4XzI3dnBI RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3V6dlYxLUdaSk5oaXRxUWI4MHhfMjd2cEhHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTczNS9DN0Y0NDFDNjYzOUIxMUVGOUI0RDJBNURDNEY5QUUwMi91enZWMS1HWkpO aGl0cVFiODB4XzI3dnBIRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD+26Ii8ZwN76Pygfk/7IkfDTOCSvkNu7LxTmaaf2iejdzSBRqqo7Y 0StF4rM/JfwbK1rC3UB5dGMEU6+XjbVHhd8aZSDsfiu+wX8y4t4VBvRtdlUgmA0Q JCkdc0xSGvaCvbe6nDTxX+GpsAF7bUVQykMAhJDWtY4b5UR/JsBEoIYC5ZSTwIGB Pztm+6ANHyS0mHl+AB7/LWdlRYutjeQe3Ei8HjBB5cC7Jhopdo5JgkmMAOukvvVh wXebDhETLFJqoTw7vUnuCO9vSrVX1Lnix4kNQ59Hi6hABs9mAplpWbdi5UBDS7wE NFUq7nJvV16gQp4zBtLKMvAxmpjqpu5a -----END CERTIFICATE-----Generated at Sat Apr 26 13:06:30 2025 by rpki-client