$ rpki-client -vvf rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft File: U1n0WpMqsOo84GFn1fzHBltN2IU.mft (raw, json) Hash identifier: f8KrLC3Auzc6ENyNCJAgz3cuir3fjKv7OY6oRY3m3Dc= Subject key identifier: 11:70:F8:B4:03:A7:DF:3F:A7:5B:09:83:E3:55:50:D0:DB:0C:8D:5D Authority key identifier: 53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85 Certificate issuer: /CN=A911367F/serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885 Certificate serial: 0C4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft Manifest number: 0C42 Signing time: Mon 12 May 2025 18:16:28 +0000 Manifest this update: Mon 12 May 2025 18:16:28 +0000 Manifest next update: Mon 19 May 2025 18:16:28 +0000 Files and hashes: 1: U1n0WpMqsOo84GFn1fzHBltN2IU.crl (hash: Emk3rpZFVEDU5G7s0vnQlLDy7Pk0681unLact2pBAwk=) 2: 6751E26C415511ECA2FD715CC4F9AE02.roa (hash: a/sC7ETDIVIboPEKOWwxdZFEr4Jd7KezTCrJldPHdYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3149 (0xc4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911367F, serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885 Validity Not Before: May 12 18:16:28 2025 GMT Not After : May 19 18:16:28 2025 GMT Subject: CN=68223afc-630c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:40:da:e3:97:0d:60:37:ad:c8:0b:02:bc:a5: 8f:aa:35:62:e2:2f:ff:2b:f8:ce:d7:03:45:87:36: fb:1b:cd:fe:ea:31:81:71:42:a1:88:74:af:28:44: fd:d2:55:43:e5:f8:6e:f1:e3:58:9e:08:01:a3:5a: 56:98:82:c2:fe:b4:5a:4c:bd:d3:10:34:8e:2d:d4: 52:c2:cf:5d:55:69:0d:16:48:53:85:bb:aa:4d:23: 4e:81:69:bc:29:15:71:8a:c1:7b:17:4c:af:92:54: 55:7a:8d:1d:b0:48:07:36:eb:65:f9:9a:a3:db:4f: 65:df:28:4d:de:03:59:2d:be:2b:32:61:80:ca:38: 47:e9:48:88:74:63:09:42:aa:0e:ca:01:a6:a5:e7: e1:b8:2f:3b:0e:d9:92:cf:54:79:02:72:8d:b9:10: 49:0d:50:af:cd:07:ee:d4:5d:c0:b9:a8:95:39:ed: f2:fe:62:32:80:95:92:7d:94:d7:79:d1:4d:36:15: 51:c8:4e:f2:eb:05:f8:a8:97:66:70:8b:53:14:4b: 96:df:ac:e8:61:f2:bb:53:4e:b6:19:e7:36:fe:44: 0b:e5:76:ac:1d:dc:a1:a8:2d:5d:37:66:ab:7f:16: 9c:27:2e:c9:82:66:ea:1d:23:a5:fc:8f:10:7f:38: e6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:70:F8:B4:03:A7:DF:3F:A7:5B:09:83:E3:55:50:D0:DB:0C:8D:5D X509v3 Authority Key Identifier: keyid:53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:4b:bc:7d:c7:22:01:0a:76:80:a7:0d:92:26:1d:66:19:17: 15:2b:4e:aa:25:b7:77:d8:2b:65:e7:6d:9e:78:d3:53:62:fb: 03:f9:45:85:55:51:64:78:b3:fb:eb:a2:e5:e0:55:de:fe:e7: ca:98:31:55:ac:d4:53:d3:51:65:39:15:80:0d:f0:5b:78:76: 2c:59:04:ab:23:49:74:fa:aa:59:46:ee:0c:26:1f:87:d2:f1: 98:a6:e0:ec:37:2e:dc:eb:3d:87:a5:8c:00:b0:94:96:89:86: bb:32:19:d3:be:b2:4b:ca:cf:67:7e:bf:c4:28:13:09:f7:02: 45:cc:51:33:41:e2:9f:a9:95:dd:72:35:ad:e4:de:36:bc:02: fe:db:38:74:48:5b:86:18:7e:af:74:89:2b:0d:f7:48:5f:e2: aa:fc:3d:47:c0:41:b4:c8:eb:43:a8:10:c2:4b:1b:a8:c1:ad: 6b:3d:a1:27:19:32:e4:7f:f6:ab:8e:a2:ca:3f:36:f7:b9:4b: 35:89:30:c6:01:1f:f3:4b:2f:ab:85:d5:9a:a6:92:17:61:fd: 3e:6e:4a:17:63:71:65:b8:2c:d2:dd:97:c0:49:9b:05:fb:04: 01:66:c1:7e:6c:e4:6c:77:00:e7:e3:62:0a:cf:e2:eb:13:59: 23:88:49:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM2N0YxMTAvBgNVBAUTKDUzNTlGNDVBOTMyQUIwRUEzQ0UwNjE2N0Q1RkNDNzA2 NUI0REQ4ODUwHhcNMjUwNTEyMTgxNjI4WhcNMjUwNTE5MTgxNjI4WjAYMRYwFAYD VQQDEw02ODIyM2FmYy02MzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkDa45cNYDetyAsCvKWPqjVi4i//K/jO1wNFhzb7G83+6jGBcUKhiHSvKET9 0lVD5fhu8eNYnggBo1pWmILC/rRaTL3TEDSOLdRSws9dVWkNFkhThbuqTSNOgWm8 KRVxisF7F0yvklRVeo0dsEgHNutl+Zqj209l3yhN3gNZLb4rMmGAyjhH6UiIdGMJ QqoOygGmpefhuC87DtmSz1R5AnKNuRBJDVCvzQfu1F3AuaiVOe3y/mIygJWSfZTX edFNNhVRyE7y6wX4qJdmcItTFEuW36zoYfK7U062Gec2/kQL5XasHdyhqC1dN2ar fxacJy7JgmbqHSOl/I8QfzjmqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFw+LQD p98/p1sJg+NVUNDbDI1dMB8GA1UdIwQYMBaAFFNZ9FqTKrDqPOBhZ9X8xwZbTdiF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzY3Ri83QTk0RDEyODA0 NjExMUVBOUYwRjQwNDJDNEY5QUUwMi9VMW4wV3BNcXNPbzg0R0ZuMWZ6SEJsdE4y SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UxbjBXcE1xc09vODRHRm4xZnpIQmx0TjJJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzY3Ri83QTk0RDEyODA0NjExMUVBOUYwRjQwNDJDNEY5QUUwMi9VMW4wV3BNcXNP bzg0R0ZuMWZ6SEJsdE4ySVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNS7x9xyIBCnaApw2SJh1mGRcVK06qJbd32Ctl522eeNNTYvsD+UWF VVFkeLP766Ll4FXe/ufKmDFVrNRT01FlORWADfBbeHYsWQSrI0l0+qpZRu4MJh+H 0vGYpuDsNy7c6z2HpYwAsJSWiYa7MhnTvrJLys9nfr/EKBMJ9wJFzFEzQeKfqZXd cjWt5N42vAL+2zh0SFuGGH6vdIkrDfdIX+Kq/D1HwEG0yOtDqBDCSxuowa1rPaEn GTLkf/arjqLKPzb3uUs1iTDGAR/zSy+rhdWappIXYf0+bkoXY3FluCzS3ZfASZsF +wQBZsF+bORsdwDn42IKz+LrE1kjiEnt -----END CERTIFICATE-----Generated at Tue May 13 12:47:26 2025 by rpki-client