$ rpki-client -vvf rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft File: UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft (raw, json) Hash identifier: bZqzmKznVVXiBJr/oZ8QaBI9Dlc7ii/1+Dh9aYaA/E8= Subject key identifier: B5:5C:52:44:07:E9:A3:48:0F:AD:9D:CA:F8:86:CA:FF:39:CD:04:97 Authority key identifier: 50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1 Certificate issuer: /CN=A9130803/serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1 Certificate serial: 0BE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft Manifest number: 0BDE Signing time: Wed 14 May 2025 18:56:16 +0000 Manifest this update: Wed 14 May 2025 18:56:16 +0000 Manifest next update: Wed 21 May 2025 18:56:16 +0000 Files and hashes: 1: UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl (hash: GnBJs4PaOT64hCTgcvqjjVg7mdE7LBg1qvzBM2oloHA=) 2: 8DC4FE4C175F11EAB3DB1F61C4F9AE02.roa (hash: 44EICOrdULHxxmbJqfrzipdifGEHemkJ/PfPJGyHNtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3045 (0xbe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130803, serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1 Validity Not Before: May 14 18:56:16 2025 GMT Not After : May 21 18:56:16 2025 GMT Subject: CN=6824e750-0717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c5:a8:b5:06:25:e0:ef:65:25:a1:74:c5:92: c1:83:23:d5:01:fc:c9:ae:eb:ea:49:eb:61:9b:98: 7f:5f:32:29:d0:a2:4e:e2:74:20:92:b7:f4:2d:5b: 19:de:8d:c5:60:fe:78:92:63:76:d4:a2:32:43:7a: a7:c6:da:75:4b:ae:24:b3:5e:f4:3b:c1:de:45:31: f6:b9:b5:78:f2:19:f2:33:75:63:5c:48:15:c3:e2: 01:b7:ac:e8:8a:d0:50:a7:3d:85:1f:48:91:10:c1: 56:9d:ef:7d:3f:e7:7c:1f:20:cf:54:24:41:bd:e4: fd:b8:af:35:0f:54:74:61:05:c2:5d:cc:72:98:58: 59:3c:fd:d3:96:81:6d:0c:e0:a0:70:6b:5b:7f:77: fa:cd:eb:c5:d9:3d:5d:8f:bc:42:72:a7:23:3d:07: c6:7e:f2:cc:65:3a:84:c1:96:fc:52:19:f6:dd:93: 36:b4:50:41:2b:61:bf:98:13:30:a9:cd:8b:e6:96: 83:69:5f:80:9c:72:8e:1c:5a:e0:6f:80:28:34:d6: b7:ed:00:3d:b2:e7:19:2e:c2:8a:c6:14:ca:3f:2a: 9b:4f:fc:81:02:22:47:3e:70:a2:82:f7:eb:27:c8: 72:60:29:07:3d:a7:4d:c6:6b:06:d0:b0:45:66:9b: 9a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:5C:52:44:07:E9:A3:48:0F:AD:9D:CA:F8:86:CA:FF:39:CD:04:97 X509v3 Authority Key Identifier: keyid:50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:71:be:86:d2:97:6b:46:7f:7e:5a:b0:9d:f1:44:e9:e7:e9: 4e:a1:d2:a9:58:ed:5e:e9:4f:ee:f5:cc:e9:cf:08:c3:f5:ee: c2:ef:b9:bc:44:70:7b:a8:3d:72:6a:c6:5c:40:93:81:c2:cc: d8:fa:f2:ae:59:b7:dd:e3:47:c6:a3:20:69:7a:99:9a:c5:5e: c1:83:fe:60:37:4b:38:ed:db:8c:dc:1e:c5:39:f9:23:d1:14: ab:4c:a7:5a:05:13:80:12:90:95:9c:41:b6:de:41:64:22:9b: 7a:a1:4f:45:3c:32:c7:50:4d:7b:e4:26:63:c7:c7:bf:91:63: 9d:5e:dd:47:40:67:1d:94:1e:ef:b0:97:08:34:c3:6f:ba:72: 9c:23:a6:28:a2:55:12:0c:36:02:d3:5a:94:01:be:00:84:7c: b1:17:7c:30:57:c3:02:92:e0:00:39:82:fa:f2:49:f8:b1:c7: eb:01:75:eb:e4:47:f6:2f:37:84:7c:a1:2f:11:79:ba:ee:eb: 7f:1a:40:bd:5c:59:e5:2d:6d:45:0b:89:ef:35:3d:f2:85:67: 58:5c:5a:30:6e:fb:97:06:d9:b7:19:cb:4f:89:d3:9e:da:98: 11:c0:0f:70:c8:b9:2b:e9:86:b8:f3:de:47:8f:6d:8f:46:f7: 85:ed:f9:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4MDMxMTAvBgNVBAUTKDUwN0EwRUFGNDc1MUFDQjUyQzJDN0ZCRjk4MUQxMUJD RTgzNThCQTEwHhcNMjUwNTE0MTg1NjE2WhcNMjUwNTIxMTg1NjE2WjAYMRYwFAYD VQQDEw02ODI0ZTc1MC0wNzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcWotQYl4O9lJaF0xZLBgyPVAfzJruvqSethm5h/XzIp0KJO4nQgkrf0LVsZ 3o3FYP54kmN21KIyQ3qnxtp1S64ks170O8HeRTH2ubV48hnyM3VjXEgVw+IBt6zo itBQpz2FH0iREMFWne99P+d8HyDPVCRBveT9uK81D1R0YQXCXcxymFhZPP3TloFt DOCgcGtbf3f6zevF2T1dj7xCcqcjPQfGfvLMZTqEwZb8Uhn23ZM2tFBBK2G/mBMw qc2L5paDaV+AnHKOHFrgb4AoNNa37QA9sucZLsKKxhTKPyqbT/yBAiJHPnCigvfr J8hyYCkHPadNxmsG0LBFZpuaIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVcUkQH 6aNID62dyviGyv85zQSXMB8GA1UdIwQYMBaAFFB6Dq9HUay1LCx/v5gdEbzoNYuh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDgwMy9EODZBQkYwMDE3 NUUxMUVBQThBMzMyNjBDNEY5QUUwMi9VSG9PcjBkUnJMVXNMSC1fbUIwUnZPZzFp NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIb09yMGRSckxVc0xILV9tQjBSdk9nMWk2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDgwMy9EODZBQkYwMDE3NUUxMUVBQThBMzMyNjBDNEY5QUUwMi9VSG9PcjBkUnJM VXNMSC1fbUIwUnZPZzFpNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgcb6G0pdrRn9+WrCd8UTp5+lOodKpWO1e6U/u9czpzwjD9e7C77m8 RHB7qD1yasZcQJOBwszY+vKuWbfd40fGoyBpepmaxV7Bg/5gN0s47duM3B7FOfkj 0RSrTKdaBROAEpCVnEG23kFkIpt6oU9FPDLHUE175CZjx8e/kWOdXt1HQGcdlB7v sJcINMNvunKcI6YoolUSDDYC01qUAb4AhHyxF3wwV8MCkuAAOYL68kn4scfrAXXr 5Ef2LzeEfKEvEXm67ut/GkC9XFnlLW1FC4nvNT3yhWdYXFowbvuXBtm3GctPidOe 2pgRwA9wyLkr6Ya4895Hj22PRveF7fm2 -----END CERTIFICATE-----Generated at Fri May 16 14:36:17 2025 by rpki-client