$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft File: UHztrU5Y_M0K4JOTmGWG21g_B6I.mft (raw, json) Hash identifier: f4r8oeHQHxqet75jF88SiwXzXDlkoiwQeKJnihXj984= Subject key identifier: B0:D8:2D:4D:82:21:24:D6:3C:F9:8C:E7:F2:F8:B5:C6:53:1B:37:7A Authority key identifier: 50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 Certificate issuer: /CN=A912C8FD/serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Certificate serial: 0BA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft Manifest number: 0BA1 Signing time: Mon 12 May 2025 18:48:54 +0000 Manifest this update: Mon 12 May 2025 18:48:53 +0000 Manifest next update: Mon 19 May 2025 18:48:53 +0000 Files and hashes: 1: UHztrU5Y_M0K4JOTmGWG21g_B6I.crl (hash: Q6JmZQGR66H5NuWwWOi99gPbym6rcLkxbTFH/AHyA+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2977 (0xba1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FD, serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Validity Not Before: May 12 18:48:53 2025 GMT Not After : May 19 18:48:53 2025 GMT Subject: CN=68224296-a217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9b:84:c2:63:b4:de:59:f7:53:34:b5:33:ba: 40:23:08:0c:8e:a3:c0:2f:bc:13:30:df:48:2d:3f: 9c:e7:ce:d0:e6:9e:78:d6:3a:59:66:5d:a3:47:a3: 37:3c:27:be:ae:47:51:49:a4:d5:cf:9b:15:42:25: 57:67:35:10:ac:47:0d:51:09:f0:ca:8f:56:c0:cf: 5f:de:54:1c:85:16:8b:68:bc:55:bb:6a:f9:b8:79: 60:56:9a:90:3e:6d:dc:2b:4e:68:1e:e5:7a:5b:a7: d6:42:8d:28:66:8a:c3:d4:a8:cf:cc:38:4c:ac:a9: f1:91:44:bb:91:58:0a:4d:8c:56:da:f1:d4:10:2c: 40:83:43:e8:a9:f3:11:9f:99:a0:df:fa:09:22:69: 35:eb:31:1b:a3:47:00:76:dc:a7:96:80:dd:03:27: 66:5d:ca:33:20:8d:d9:63:b6:5e:9c:8e:0f:ff:90: dc:38:68:2a:45:39:d6:d0:39:ff:81:52:ba:d3:d8: 95:57:4e:05:69:18:d2:2d:24:99:64:18:b0:61:21: 52:2d:38:66:3f:27:18:9c:1c:0f:a9:2c:a0:d1:2a: e2:ce:e6:94:4b:4a:69:78:29:56:df:0b:a6:5e:a7: 2f:80:bb:41:61:fe:1e:0a:7e:96:7b:87:2c:a1:99: 9c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D8:2D:4D:82:21:24:D6:3C:F9:8C:E7:F2:F8:B5:C6:53:1B:37:7A X509v3 Authority Key Identifier: keyid:50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:23:f4:0f:f3:b6:3d:85:a3:37:38:ad:8e:42:4f:4c:7a:d9: 5c:32:b4:31:63:7e:a3:76:72:eb:73:c3:1b:91:91:3d:13:d4: 87:d0:98:d4:0c:98:4d:10:05:a9:7c:4a:ca:f2:0c:ab:38:5c: b9:e0:ab:fb:ab:28:eb:2d:5a:db:87:dc:5f:14:49:7f:d5:e2: 5b:01:cb:36:61:c9:aa:21:93:98:5b:d7:86:aa:41:06:74:4a: d9:0c:d3:e1:12:50:3c:ab:6b:12:63:a1:aa:c8:36:ce:52:ff: db:43:3f:16:3e:e8:c2:ea:62:3f:21:7e:88:71:9f:4d:37:b6: 49:ec:5d:a1:55:e6:c2:c4:5f:8f:06:d5:6f:fb:66:99:96:4b: 54:2c:65:6a:99:ce:4d:55:82:12:87:ab:aa:55:30:5c:48:96: 01:b4:ec:da:4c:96:bf:49:03:bc:97:24:80:2e:8b:66:8a:65: 5b:d3:69:63:d8:ea:70:90:91:45:5b:27:e9:65:96:63:b1:d8: 50:9b:18:96:83:9f:b3:82:ce:fb:ff:6d:cb:40:1b:e4:c3:9e: 7e:83:0e:ea:68:ef:14:1f:ae:09:f4:9a:ad:43:5e:01:69:ca: b9:c4:19:f0:59:4e:69:a3:ee:bf:d8:1e:a0:41:54:03:3b:54: 13:fa:c2:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkQxMTAvBgNVBAUTKDUwN0NFREFENEU1OEZDQ0QwQUUwOTM5Mzk4NjU4NkRC NTgzRjA3QTIwHhcNMjUwNTEyMTg0ODUzWhcNMjUwNTE5MTg0ODUzWjAYMRYwFAYD VQQDEw02ODIyNDI5Ni1hMjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmJuEwmO03ln3UzS1M7pAIwgMjqPAL7wTMN9ILT+c587Q5p541jpZZl2jR6M3 PCe+rkdRSaTVz5sVQiVXZzUQrEcNUQnwyo9WwM9f3lQchRaLaLxVu2r5uHlgVpqQ Pm3cK05oHuV6W6fWQo0oZorD1KjPzDhMrKnxkUS7kVgKTYxW2vHUECxAg0PoqfMR n5mg3/oJImk16zEbo0cAdtynloDdAydmXcozII3ZY7ZenI4P/5DcOGgqRTnW0Dn/ gVK609iVV04FaRjSLSSZZBiwYSFSLThmPycYnBwPqSyg0SrizuaUS0ppeClW3wum XqcvgLtBYf4eCn6We4csoZmcJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDYLU2C ISTWPPmM5/L4tcZTGzd6MB8GA1UdIwQYMBaAFFB87a1OWPzNCuCTk5hlhttYPwei MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGRC82NzRDRTJGMDIx NjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9NMEs0Sk9UbUdXRzIxZ19C NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIenRyVTVZX00wSzRKT1RtR1dHMjFnX0I2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGRC82NzRDRTJGMDIxNjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9N MEs0Sk9UbUdXRzIxZ19CNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4I/QP87Y9haM3OK2OQk9MetlcMrQxY36jdnLrc8MbkZE9E9SH0JjU DJhNEAWpfErK8gyrOFy54Kv7qyjrLVrbh9xfFEl/1eJbAcs2YcmqIZOYW9eGqkEG dErZDNPhElA8q2sSY6GqyDbOUv/bQz8WPujC6mI/IX6IcZ9NN7ZJ7F2hVebCxF+P BtVv+2aZlktULGVqmc5NVYISh6uqVTBcSJYBtOzaTJa/SQO8lySALotmimVb02lj 2OpwkJFFWyfpZZZjsdhQmxiWg5+zgs77/23LQBvkw55+gw7qaO8UH64J9JqtQ14B acq5xBnwWU5po+6/2B6gQVQDO1QT+sIK -----END CERTIFICATE-----Generated at Mon May 12 22:25:09 2025 by rpki-client