$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft File: uhYFabkV4kxq5sJIlNBPnUo5FpI.mft (raw, json) Hash identifier: 0vhO0XSv2ntIFpcvi0d4of8uX1d6JfFRfcnpQe4k+RE= Subject key identifier: 9D:E0:45:B5:BD:4B:1D:8D:9D:C6:63:FC:EF:90:C4:24:BE:77:3E:76 Authority key identifier: BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92 Certificate issuer: /CN=A912CDCB/serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692 Certificate serial: 04CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft Manifest number: 04C7 Signing time: Wed 14 May 2025 23:51:33 +0000 Manifest this update: Wed 14 May 2025 23:51:32 +0000 Manifest next update: Wed 21 May 2025 23:51:32 +0000 Files and hashes: 1: uhYFabkV4kxq5sJIlNBPnUo5FpI.crl (hash: db0vMT2feM6H5UEXwSk0wFn9xTnFCnBqsW3yTNjYDMI=) 2: DAF98AAA20F111EC89E7D668C4F9AE02.roa (hash: LH3JZfkASioifJ898UuwmPenAKd90H/13hB5MxOGBgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1227 (0x4cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDCB, serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692 Validity Not Before: May 14 23:51:32 2025 GMT Not After : May 21 23:51:32 2025 GMT Subject: CN=68252c84-4dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8f:44:1d:36:2c:54:04:0e:05:00:ca:b2:e9: 81:15:ca:15:a8:2e:8c:fd:b1:bd:bf:f9:8a:d2:a2: 09:e3:a9:09:a2:89:62:2e:5c:4d:7f:b2:0f:2e:b4: 84:42:d8:c2:df:89:6e:c6:c5:d8:2e:06:ce:b0:7f: d4:0a:30:17:13:91:28:df:04:3b:e8:40:25:19:55: d6:0c:35:88:55:7a:a6:cd:b7:94:49:09:12:ec:20: a3:61:75:8f:e2:5c:c3:53:7b:98:5f:72:08:ef:7f: 6c:d0:1a:a0:a4:b5:42:87:36:e9:4f:d8:bd:60:8a: cb:be:69:ff:ec:1f:bc:68:7d:db:11:ed:83:2d:92: d8:9f:48:94:24:41:29:ae:5e:32:bb:00:b8:c7:2f: 8c:ea:8a:64:9a:51:46:10:ee:14:30:2e:5a:28:a0: c9:bc:ce:7e:72:d4:ef:a7:bc:51:56:6c:c1:48:28: 95:8c:fd:4d:9b:da:78:ab:30:3b:ee:70:7d:c3:be: 58:dd:a9:54:13:88:08:de:74:ef:b4:48:b9:18:87: f5:e5:dc:36:a9:e2:3c:18:c0:d4:84:df:b0:e4:2a: 05:9e:bb:69:d7:3c:42:b0:d5:e1:61:24:be:88:32: c8:e2:21:ea:61:55:c3:ef:e9:61:5e:08:c5:f8:51: a4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E0:45:B5:BD:4B:1D:8D:9D:C6:63:FC:EF:90:C4:24:BE:77:3E:76 X509v3 Authority Key Identifier: keyid:BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:8a:f1:e1:c9:49:2d:f4:82:df:65:5c:70:a1:a5:8b:0b:07: 5b:98:d4:be:89:0a:e0:2a:6b:ac:62:26:a0:cb:34:86:af:16: 29:fd:d0:ff:ee:da:28:25:82:94:e0:2c:6b:91:59:24:8b:7c: e9:74:09:6e:1b:68:af:5f:80:63:43:28:af:a0:1e:e8:3b:76: b9:01:c9:73:d3:1f:eb:0f:77:0f:11:e5:38:c2:d0:4c:8e:c7: 6a:3b:fd:ad:b7:8f:c8:10:74:a1:5c:cc:5e:40:fc:21:63:e5: 6e:44:83:c7:aa:ff:9e:a2:95:45:56:c5:49:e3:85:5e:18:2f: e9:10:e3:63:21:d9:76:8a:65:b9:f7:6e:f5:be:30:f7:dd:5a: 1b:5d:ae:10:b5:7d:47:b4:4a:ff:75:ba:83:bd:13:2c:4d:28: a4:4e:f3:13:e7:ec:3a:87:10:56:82:85:73:32:a3:84:01:20: ff:d6:cb:25:56:87:f1:66:33:ec:4e:3f:e3:36:1b:96:4d:e7: 58:7a:03:4c:64:54:03:14:6e:5a:f5:52:22:ed:ac:d2:f5:01: d3:84:a6:c5:72:e7:58:97:2a:b3:92:f5:5e:1a:02:fa:b9:6e: 93:0b:0f:f5:fe:f2:fc:18:d3:de:dc:96:46:d1:e2:5c:5c:7f: 57:de:2a:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQ0IxMTAvBgNVBAUTKEJBMTYwNTY5QjkxNUUyNEM2QUU2QzI0ODk0RDA0RjlE NEEzOTE2OTIwHhcNMjUwNTE0MjM1MTMyWhcNMjUwNTIxMjM1MTMyWjAYMRYwFAYD VQQDEw02ODI1MmM4NC00ZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6I9EHTYsVAQOBQDKsumBFcoVqC6M/bG9v/mK0qIJ46kJooliLlxNf7IPLrSE QtjC34luxsXYLgbOsH/UCjAXE5Eo3wQ76EAlGVXWDDWIVXqmzbeUSQkS7CCjYXWP 4lzDU3uYX3II739s0BqgpLVChzbpT9i9YIrLvmn/7B+8aH3bEe2DLZLYn0iUJEEp rl4yuwC4xy+M6opkmlFGEO4UMC5aKKDJvM5+ctTvp7xRVmzBSCiVjP1Nm9p4qzA7 7nB9w75Y3alUE4gI3nTvtEi5GIf15dw2qeI8GMDUhN+w5CoFnrtp1zxCsNXhYSS+ iDLI4iHqYVXD7+lhXgjF+FGkjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3gRbW9 Sx2NncZj/O+QxCS+dz52MB8GA1UdIwQYMBaAFLoWBWm5FeJMaubCSJTQT51KORaS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDQi84QTgyMDk0NDIw RUMxMUVDOUQ1RDMxM0JDNEY5QUUwMi91aFlGYWJrVjRreHE1c0pJbE5CUG5VbzVG cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VoWUZhYmtWNGt4cTVzSklsTkJQblVvNUZwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDQi84QTgyMDk0NDIwRUMxMUVDOUQ1RDMxM0JDNEY5QUUwMi91aFlGYWJrVjRr eHE1c0pJbE5CUG5VbzVGcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNivHhyUkt9ILfZVxwoaWLCwdbmNS+iQrgKmusYiagyzSGrxYp/dD/ 7tooJYKU4CxrkVkki3zpdAluG2ivX4BjQyivoB7oO3a5Aclz0x/rD3cPEeU4wtBM jsdqO/2tt4/IEHShXMxeQPwhY+VuRIPHqv+eopVFVsVJ44VeGC/pEONjIdl2imW5 9271vjD33VobXa4QtX1HtEr/dbqDvRMsTSikTvMT5+w6hxBWgoVzMqOEASD/1ssl VofxZjPsTj/jNhuWTedYegNMZFQDFG5a9VIi7azS9QHThKbFcudYlyqzkvVeGgL6 uW6TCw/1/vL8GNPe3JZG0eJcXH9X3ipa -----END CERTIFICATE-----Generated at Fri May 16 10:07:28 2025 by rpki-client