$ rpki-client -vvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft File: UxdJCV5En9gqodtQ2oNAFyML3RM.mft (raw, json) Hash identifier: jRD3zkN253c6yXJFsAX9+U3JBxfe6jM5LbpiakmDJSY= Subject key identifier: DC:14:54:14:54:BA:1C:43:2B:27:04:A0:D9:5E:83:89:C3:07:1E:0B Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 Certificate issuer: /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Certificate serial: 0B77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft Manifest number: 0B70 Signing time: Fri 16 May 2025 19:16:36 +0000 Manifest this update: Fri 16 May 2025 19:16:36 +0000 Manifest next update: Fri 23 May 2025 19:16:36 +0000 Files and hashes: 1: UxdJCV5En9gqodtQ2oNAFyML3RM.crl (hash: FWQjIJ0u6oDfXiP67uU97LMOSeQkZw2s/+qSLSawhGQ=) 2: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (hash: b6SG981ws9YTohF7YJYfD6V/fAmms72gE/FD/yHhvRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 19:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2935 (0xb77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117754, serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Validity Not Before: May 16 19:16:36 2025 GMT Not After : May 23 19:16:36 2025 GMT Subject: CN=68278f14-c147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e0:d4:b7:95:6a:e5:f7:77:0e:6b:73:2a:9c: b6:4a:28:2a:bf:af:17:4c:a9:ed:b4:e7:21:7b:e1: 93:9a:49:10:7c:54:47:48:58:7e:97:35:84:d2:3b: ae:1c:92:14:13:b2:f9:09:2c:8d:d5:4f:92:0c:d7: 2d:ad:a7:81:73:51:07:bd:91:6e:04:38:93:8f:ba: fe:c9:d9:ee:d4:a6:8c:0c:49:fa:d9:45:30:de:78: 6e:02:f0:87:5b:c4:d1:a4:3e:d3:42:d4:d3:cc:45: 20:83:ed:8e:47:b8:4e:34:f7:a8:19:bb:33:78:d5: b5:ba:cd:f3:ec:f8:4a:c8:18:42:8e:99:4a:4a:a3: 9b:cd:76:1b:b0:3c:31:bb:c3:69:c2:c9:28:9d:5f: 61:0a:43:12:98:41:e7:45:4d:da:a2:34:38:08:5f: 93:ef:79:5e:90:ca:82:d2:07:cc:19:1f:d7:ab:e3: a9:58:17:e6:df:c7:39:95:2e:0d:a3:56:0e:6c:82: aa:69:3f:b6:d4:96:56:e4:be:3e:09:b3:91:64:ae: d5:4c:cf:61:9a:7a:23:d4:c5:af:9c:0f:d5:47:a3: 48:74:75:98:a3:de:78:55:9c:ca:fc:96:ae:7d:a6: b6:8a:58:5e:4f:5e:35:23:c3:e0:36:84:42:db:9d: 97:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:14:54:14:54:BA:1C:43:2B:27:04:A0:D9:5E:83:89:C3:07:1E:0B X509v3 Authority Key Identifier: keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:72:43:73:75:a2:e0:85:b2:0a:da:e2:f6:10:4f:b3:96:1b: 5e:3d:61:1d:ab:b7:c6:fc:25:ce:37:e1:32:47:df:13:cf:3a: 4b:93:c3:41:a9:af:d1:b4:8d:b7:8a:01:13:da:47:a2:27:7c: 95:bf:f4:a0:04:36:7e:94:95:ed:9d:ff:d0:13:be:f0:dd:c8: c7:bd:18:0d:fd:13:ab:f9:56:90:13:42:d3:6c:95:2e:d2:f6: bf:b0:0d:d9:07:38:07:e2:ee:02:30:1d:cc:87:2d:57:00:e5: 34:99:fd:a8:38:21:2a:c2:5b:91:86:f8:b8:e9:e2:27:1f:9b: 60:c1:5f:a2:64:41:75:87:d6:2a:89:f9:27:ef:b1:70:a8:c3: a9:dd:41:7e:19:3d:fa:f2:65:14:6f:7f:0b:9c:52:f6:b6:a1: 86:bb:6f:e8:b2:c6:65:0f:87:83:1e:60:3c:35:06:47:bc:fb: 45:83:f1:ef:e4:46:9d:e1:e1:8a:3b:5b:17:6d:6c:29:90:54: 6c:30:2f:68:d5:9c:86:fe:a6:3e:93:5e:09:06:a1:45:13:a2: a0:e9:df:10:9d:09:c0:b3:69:10:40:e6:78:90:23:a4:b9:df: 24:a2:2f:79:a0:46:d5:5c:04:8b:ec:02:a1:a5:c3:9a:0e:01: ad:d2:66:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3NTQxMTAvBgNVBAUTKDUzMTc0OTA5NUU0NDlGRDgyQUExREI1MERBODM0MDE3 MjMwQkREMTMwHhcNMjUwNTE2MTkxNjM2WhcNMjUwNTIzMTkxNjM2WjAYMRYwFAYD VQQDEw02ODI3OGYxNC1jMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+DUt5Vq5fd3DmtzKpy2Sigqv68XTKnttOche+GTmkkQfFRHSFh+lzWE0juu HJIUE7L5CSyN1U+SDNctraeBc1EHvZFuBDiTj7r+ydnu1KaMDEn62UUw3nhuAvCH W8TRpD7TQtTTzEUgg+2OR7hONPeoGbszeNW1us3z7PhKyBhCjplKSqObzXYbsDwx u8NpwskonV9hCkMSmEHnRU3aojQ4CF+T73lekMqC0gfMGR/Xq+OpWBfm38c5lS4N o1YObIKqaT+21JZW5L4+CbORZK7VTM9hmnoj1MWvnA/VR6NIdHWYo954VZzK/Jau faa2ilheT141I8PgNoRC252XqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwUVBRU uhxDKycEoNleg4nDBx4LMB8GA1UdIwQYMBaAFFMXSQleRJ/YKqHbUNqDQBcjC90T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzc1NC84QjMxNDVBRTJD OEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45Z3FvZHRRMm9OQUZ5TUwz Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4ZEpDVjVFbjlncW9kdFEyb05BRnlNTDNSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzc1NC84QjMxNDVBRTJDOEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45 Z3FvZHRRMm9OQUZ5TUwzUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQckNzdaLghbIK2uL2EE+zlhtePWEdq7fG/CXON+EyR98TzzpLk8NB qa/RtI23igET2keiJ3yVv/SgBDZ+lJXtnf/QE77w3cjHvRgN/ROr+VaQE0LTbJUu 0va/sA3ZBzgH4u4CMB3Mhy1XAOU0mf2oOCEqwluRhvi46eInH5tgwV+iZEF1h9Yq ifkn77FwqMOp3UF+GT368mUUb38LnFL2tqGGu2/ossZlD4eDHmA8NQZHvPtFg/Hv 5Ead4eGKO1sXbWwpkFRsMC9o1ZyG/qY+k14JBqFFE6Kg6d8QnQnAs2kQQOZ4kCOk ud8koi95oEbVXASL7AKhpcOaDgGt0mb1 -----END CERTIFICATE-----Generated at Fri May 16 22:26:29 2025 by rpki-client