$ rpki-client -vvf rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft File: uNk1BsinkdH5_6W2fDiBbdwD7ms.mft (raw, json) Hash identifier: Y4RkY3g+sn9vJ5VLv28d94GB2DHRQxvBY4BefQQFpo0= Subject key identifier: F3:60:AE:88:2D:FB:21:7D:E0:E4:FF:D0:40:41:20:CC:AB:AB:F7:A8 Authority key identifier: B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B Certificate issuer: /CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B Certificate serial: 0A2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft Manifest number: 0A28 Signing time: Sat 10 May 2025 19:30:58 +0000 Manifest this update: Sat 10 May 2025 19:30:58 +0000 Manifest next update: Sat 17 May 2025 19:30:58 +0000 Files and hashes: 1: uNk1BsinkdH5_6W2fDiBbdwD7ms.crl (hash: NapHexl05obnr8qpZ1a8EuEGPyAFQ/M+EfodDU3b0z8=) 2: C01674A86BF011EA87B33D25C4F9AE02.roa (hash: 70ds0/DyF5wXCHSmR464rx4ZYg97rO4f023Z3VGG144=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2606 (0xa2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110DEC, serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B Validity Not Before: May 10 19:30:58 2025 GMT Not After : May 17 19:30:58 2025 GMT Subject: CN=681fa972-5bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9c:bd:f7:df:d2:7c:76:74:0b:b0:c7:15:b5: 25:21:f7:b4:b1:ce:28:4a:87:6b:c2:1e:e7:f7:5c: f4:cc:9a:9b:ee:fd:fc:3d:21:a5:01:1f:2c:99:cd: c7:3c:ca:66:8e:ad:e5:ce:08:94:18:49:c7:e7:33: 50:5b:c1:51:ad:71:f2:68:03:5d:4e:6f:b7:e3:6e: 11:60:59:e5:03:5a:5f:8d:e0:56:4c:1b:4b:d8:fe: 77:d9:b7:6b:66:05:83:37:0e:38:3a:6d:f6:64:d4: 08:ab:82:12:3a:84:fd:31:6f:99:02:75:cb:de:12: 91:4b:c4:83:30:95:0d:00:da:4e:de:53:73:5c:b3: 09:1f:d0:a5:d5:c6:80:8f:14:86:89:84:9c:e4:c3: 4b:ef:7b:0f:3c:83:dd:c0:84:82:f8:d9:0a:1d:f1: 82:05:c0:24:c1:e7:4b:04:fc:74:97:1a:4e:f3:cc: 1b:9a:9a:25:b0:21:04:bb:99:3f:c0:b6:ee:65:83: d5:6c:fc:7d:94:a0:07:54:a2:16:dc:26:f8:f5:d7: e5:e0:e7:25:4b:1b:0b:be:bc:4c:d3:be:72:a0:55: 57:a7:cd:07:b5:d6:3c:57:b1:aa:4f:b0:5b:68:ab: 87:01:eb:56:bc:68:e2:92:c6:7f:50:09:02:0e:ad: 9e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:60:AE:88:2D:FB:21:7D:E0:E4:FF:D0:40:41:20:CC:AB:AB:F7:A8 X509v3 Authority Key Identifier: keyid:B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:2f:65:6e:46:79:18:29:55:a0:c0:25:1d:29:9e:9e:d8:10: a3:ab:26:6e:2a:0e:77:ee:be:6d:6c:93:da:90:ca:8a:fc:4a: 3f:7c:79:28:a5:27:d2:37:86:d9:10:46:45:2f:1f:70:29:b4: bd:2a:e0:29:68:2c:92:b1:80:09:6d:c0:49:27:9c:0f:ca:b9: 1b:0d:40:1f:41:14:c2:3b:7f:5c:45:26:50:5f:64:06:71:32: 85:03:30:cf:4d:05:eb:45:95:1b:dc:de:2d:ec:c7:89:22:e6: de:6b:90:00:5a:38:00:6e:b3:ec:1c:3d:31:eb:ce:fc:87:c5: 4e:92:57:d2:b9:64:ca:54:28:67:28:c1:5c:40:d0:17:d0:60: 29:a8:df:1d:86:38:9a:9f:7b:43:59:ed:ac:c2:e9:1b:67:00: 22:8d:0f:5d:d0:1e:f3:c7:4d:17:48:e8:94:5b:96:7b:b5:73: 98:41:a2:6c:67:69:92:ef:d0:ac:32:cd:82:fc:ef:3d:96:f4: e2:c5:80:c5:3c:84:dd:e1:23:f2:d2:5b:77:d2:20:60:05:47: cf:c7:f7:19:ea:5c:42:1f:c9:3c:e2:09:86:67:be:c5:83:e3: b2:bd:18:5f:10:49:5d:72:f0:b8:75:f1:23:65:67:2f:2b:58: db:3d:bd:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBERUMxMTAvBgNVBAUTKEI4RDkzNTA2QzhBNzkxRDFGOUZGQTVCNjdDMzg4MTZE REMwM0VFNkIwHhcNMjUwNTEwMTkzMDU4WhcNMjUwNTE3MTkzMDU4WjAYMRYwFAYD VQQDEw02ODFmYTk3Mi01YmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpy999/SfHZ0C7DHFbUlIfe0sc4oSodrwh7n91z0zJqb7v38PSGlAR8smc3H PMpmjq3lzgiUGEnH5zNQW8FRrXHyaANdTm+3424RYFnlA1pfjeBWTBtL2P532bdr ZgWDNw44Om32ZNQIq4ISOoT9MW+ZAnXL3hKRS8SDMJUNANpO3lNzXLMJH9Cl1caA jxSGiYSc5MNL73sPPIPdwISC+NkKHfGCBcAkwedLBPx0lxpO88wbmpolsCEEu5k/ wLbuZYPVbPx9lKAHVKIW3Cb49dfl4OclSxsLvrxM075yoFVXp80HtdY8V7GqT7Bb aKuHAetWvGjiksZ/UAkCDq2eBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNgrogt +yF94OT/0EBBIMyrq/eoMB8GA1UdIwQYMBaAFLjZNQbIp5HR+f+ltnw4gW3cA+5r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMERFQy8xNzJEMEEyNDZC RUYxMUVBQTI2QTVFMjJDNEY5QUUwMi91TmsxQnNpbmtkSDVfNlcyZkRpQmJkd0Q3 bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VOazFCc2lua2RINV82VzJmRGlCYmR3RDdtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MERFQy8xNzJEMEEyNDZCRUYxMUVBQTI2QTVFMjJDNEY5QUUwMi91TmsxQnNpbmtk SDVfNlcyZkRpQmJkd0Q3bXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIL2VuRnkYKVWgwCUdKZ6e2BCjqyZuKg537r5tbJPakMqK/Eo/fHko pSfSN4bZEEZFLx9wKbS9KuApaCySsYAJbcBJJ5wPyrkbDUAfQRTCO39cRSZQX2QG cTKFAzDPTQXrRZUb3N4t7MeJIubea5AAWjgAbrPsHD0x6878h8VOklfSuWTKVChn KMFcQNAX0GApqN8dhjian3tDWe2swukbZwAijQ9d0B7zx00XSOiUW5Z7tXOYQaJs Z2mS79CsMs2C/O89lvTixYDFPITd4SPy0lt30iBgBUfPx/cZ6lxCH8k84gmGZ77F g+OyvRhfEEldcvC4dfEjZWcvK1jbPb3O -----END CERTIFICATE-----Generated at Mon May 12 19:59:35 2025 by rpki-client