$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft File: UzSpQuM2kLKBJhu645cTXb6kE5c.mft (raw, json) Hash identifier: eBrr47FfF5PMCJJHTQTHaZVOtxGcL9iNgKT3QvwMuG8= Subject key identifier: 97:22:9D:4B:CF:AE:C3:1E:56:32:6C:0C:68:FD:B0:1F:94:27:B3:31 Authority key identifier: 53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 Certificate issuer: /CN=A91DA022/serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Certificate serial: 0826 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft Manifest number: 0820 Signing time: Thu 24 Apr 2025 20:40:56 +0000 Manifest this update: Thu 24 Apr 2025 20:40:56 +0000 Manifest next update: Thu 01 May 2025 20:40:56 +0000 Files and hashes: 1: UzSpQuM2kLKBJhu645cTXb6kE5c.crl (hash: n8g5w+JwBheUEFoEiCfadFwI2HJ+BBRMnNv01D8cD6A=) 2: DF3136A2CFF011EAB2F1D086C4F9AE02.roa (hash: P441cSLHyLoUjwh77ci4OGTBUeTeIRb4uG1co2Vb+f8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2086 (0x826) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA022, serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Validity Not Before: Apr 24 20:40:56 2025 GMT Not After : May 1 20:40:56 2025 GMT Subject: CN=680aa1d8-93d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2d:68:5a:1e:31:c2:d4:18:7b:2a:08:9b:21: 4c:23:b1:fc:e9:07:11:62:82:45:7c:55:03:06:db: 25:ba:e9:44:9a:1c:f7:5e:8e:c4:4a:4b:06:73:40: 4e:1a:8f:96:5f:83:26:94:fd:29:60:de:cf:1d:69: 2f:07:f8:08:1b:f9:c1:28:ac:3e:21:47:15:f4:6a: e7:0d:11:fa:4e:a0:b8:09:25:8f:6c:32:62:77:52: d4:40:14:e8:ba:15:dc:9b:6d:4f:92:36:2c:35:5c: 89:7b:0c:a3:a8:68:0d:53:44:f3:3c:85:7c:56:7f: ca:aa:9d:19:b7:d9:cb:1e:e0:29:fa:32:54:6d:11: c5:03:c0:7d:63:eb:34:70:84:ee:52:2b:63:e0:70: 15:ec:88:9d:b8:ae:a8:53:d1:f2:68:84:e9:12:dc: 7b:06:cd:8b:a5:06:49:1b:fc:66:9a:fa:56:3a:20: 5b:31:28:41:52:4a:d9:35:94:cb:0f:53:67:a8:a2: 66:bb:d5:c7:ad:57:d9:b2:c0:65:2d:3e:41:69:71: 04:be:37:7b:f8:31:3a:41:c8:28:2c:bf:64:dc:16: 2a:63:66:25:16:27:df:0c:61:6f:4c:1a:55:2a:f6: b2:5b:86:0a:c6:ae:22:7d:d7:bc:f5:5b:a1:56:1f: 9e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:22:9D:4B:CF:AE:C3:1E:56:32:6C:0C:68:FD:B0:1F:94:27:B3:31 X509v3 Authority Key Identifier: keyid:53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:7a:fb:49:99:1a:16:73:5d:b9:26:95:3c:65:08:6b:ba:d4: e7:7e:18:20:be:42:a7:44:91:99:c6:7d:e5:36:39:1f:b0:75: 7b:e1:55:22:4b:19:a7:09:33:b9:8e:5d:98:c5:c1:6d:be:68: 65:e4:23:b5:5b:61:23:d0:d1:c7:b4:14:93:ff:5b:64:48:2e: 72:fd:bd:73:e6:8d:b8:59:6b:dc:4e:db:67:2d:d1:02:f4:79: 5a:0f:bf:a2:fd:d5:89:bc:57:da:e5:fe:48:51:e2:dc:09:d6: 67:d9:fb:9c:65:0b:30:ea:d1:fd:04:0c:9e:a7:86:bb:50:a2: 3a:36:65:7f:fb:2b:46:cd:ab:e1:a4:bb:89:10:7b:e8:4f:7f: 15:f1:4a:c7:e7:30:e6:58:ec:0e:37:72:0e:04:ea:73:ac:77: a6:da:66:d9:03:a9:97:9e:e6:b4:fc:4c:49:71:1f:a0:55:68: 33:fc:5c:0f:65:5b:0a:b0:27:cc:64:94:2b:34:90:d9:2f:07: 99:a7:7e:80:c8:72:2f:88:dc:e9:dd:50:05:e6:e9:01:38:af: 9b:80:19:80:80:7d:4c:2f:ea:b6:1e:77:09:c4:1f:53:24:10: 69:b4:40:88:97:b1:86:23:d4:a6:28:33:09:03:2e:5b:81:c2: 4e:e5:ad:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwMjIxMTAvBgNVBAUTKDUzMzRBOTQyRTMzNjkwQjI4MTI2MUJCQUUzOTcxMzVE QkVBNDEzOTcwHhcNMjUwNDI0MjA0MDU2WhcNMjUwNTAxMjA0MDU2WjAYMRYwFAYD VQQDEw02ODBhYTFkOC05M2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3S1oWh4xwtQYeyoImyFMI7H86QcRYoJFfFUDBtsluulEmhz3Xo7ESksGc0BO Go+WX4MmlP0pYN7PHWkvB/gIG/nBKKw+IUcV9GrnDRH6TqC4CSWPbDJid1LUQBTo uhXcm21PkjYsNVyJewyjqGgNU0TzPIV8Vn/Kqp0Zt9nLHuAp+jJUbRHFA8B9Y+s0 cITuUitj4HAV7IiduK6oU9HyaITpEtx7Bs2LpQZJG/xmmvpWOiBbMShBUkrZNZTL D1NnqKJmu9XHrVfZssBlLT5BaXEEvjd7+DE6QcgoLL9k3BYqY2YlFiffDGFvTBpV KvayW4YKxq4ifde89VuhVh+emwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcinUvP rsMeVjJsDGj9sB+UJ7MxMB8GA1UdIwQYMBaAFFM0qULjNpCygSYbuuOXE12+pBOX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTAyMi85RDhEOTQ1OENG RUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtMS0JKaHU2NDVjVFhiNmtF NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6U3BRdU0ya0xLQkpodTY0NWNUWGI2a0U1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTAyMi85RDhEOTQ1OENGRUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtM S0JKaHU2NDVjVFhiNmtFNWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2evtJmRoWc125JpU8ZQhrutTnfhggvkKnRJGZxn3lNjkfsHV74VUi SxmnCTO5jl2YxcFtvmhl5CO1W2Ej0NHHtBST/1tkSC5y/b1z5o24WWvcTttnLdEC 9HlaD7+i/dWJvFfa5f5IUeLcCdZn2fucZQsw6tH9BAyep4a7UKI6NmV/+ytGzavh pLuJEHvoT38V8UrH5zDmWOwON3IOBOpzrHem2mbZA6mXnua0/ExJcR+gVWgz/FwP ZVsKsCfMZJQrNJDZLweZp36AyHIviNzp3VAF5ukBOK+bgBmAgH1ML+q2HncJxB9T JBBptECIl7GGI9SmKDMJAy5bgcJO5a2n -----END CERTIFICATE-----Generated at Sat Apr 26 12:18:10 2025 by rpki-client