$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft File: uIC429cILNkYtiF73qCXWEWR290.mft (raw, json) Hash identifier: xlfNr3VJIMr7cbJaZkPC/t1xXZzhEVeJDOAC7kFQaIk= Subject key identifier: 48:1F:41:B0:86:AF:DF:24:0D:5B:30:3F:2A:2A:83:B3:69:AD:74:E9 Authority key identifier: B8:80:B8:DB:D7:08:2C:D9:18:B6:21:7B:DE:A0:97:58:45:91:DB:DD Certificate issuer: /CN=A913EF9C/serialNumber=B880B8DBD7082CD918B6217BDEA097584591DBDD Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft Manifest number: 40 Signing time: Tue 13 May 2025 06:42:56 +0000 Manifest this update: Tue 13 May 2025 06:42:56 +0000 Manifest next update: Tue 20 May 2025 06:42:56 +0000 Files and hashes: 1: uIC429cILNkYtiF73qCXWEWR290.crl (hash: /uHQAbHesq2aIj+6TXEB8+3ykk4yS8AfAIIVebX7Wpc=) 2: 08476846D3EC11EFBFE6E864C4F9AE02.roa (hash: rxJJmD5OYbq6xF7owInMRKSqMF5l2EY96R9IaFA9M1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.crl rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EF9C, serialNumber=B880B8DBD7082CD918B6217BDEA097584591DBDD Validity Not Before: May 13 06:42:56 2025 GMT Not After : May 20 06:42:56 2025 GMT Subject: CN=6822e9f0-3afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:15:1f:3a:a1:56:25:93:a3:0b:6a:45:ea:3b: ad:d8:c3:d9:44:07:3b:cb:5e:8b:c6:ff:0a:90:c3: 0c:65:cd:68:d2:9f:62:a8:2f:cb:12:e4:0e:ab:ad: 4b:63:a7:fe:7d:8d:0d:e2:e1:d4:5e:ff:82:f6:fe: 12:36:eb:bd:f2:cc:29:9b:8c:9c:8c:ad:72:27:dd: 8c:04:5e:21:29:c2:5e:5c:39:e3:70:96:e7:b9:8e: c0:a2:fd:11:23:d5:ea:76:0d:08:fc:d6:38:5c:00: 6f:0f:0c:6d:a7:0b:e6:d3:8f:d8:65:aa:d7:53:3e: 34:83:30:c1:74:c7:8f:a8:1b:f2:be:b6:ed:19:18: 55:ca:a1:ab:f3:ee:49:07:84:6f:a8:26:6a:7b:26: 1c:a1:b6:15:80:93:b7:2f:b0:c3:74:e4:59:86:60: 9c:5e:d3:dc:6d:e3:5d:6a:e4:4c:57:49:4a:48:63: da:e6:7d:ff:ce:0b:d3:38:13:95:be:5b:a8:c1:e0: 48:ab:66:8c:9e:00:4c:b2:46:83:a4:ba:7a:fc:ec: 55:f1:21:2a:cf:99:c7:67:64:5b:5a:ee:6d:88:7d: a8:cd:05:d9:f2:00:3e:8d:c8:71:a7:7e:a6:3e:ee: ff:01:cc:42:66:46:1a:39:a0:d7:34:5b:22:35:ee: 85:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1F:41:B0:86:AF:DF:24:0D:5B:30:3F:2A:2A:83:B3:69:AD:74:E9 X509v3 Authority Key Identifier: keyid:B8:80:B8:DB:D7:08:2C:D9:18:B6:21:7B:DE:A0:97:58:45:91:DB:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:39:cd:96:f5:ae:50:2a:c9:64:fe:25:83:45:26:7c:44:b8: e3:0f:d2:cf:ef:c1:50:f8:60:d7:60:7f:5f:5e:c2:1c:fa:94: 9a:38:b8:7e:2b:9a:48:6d:f4:f6:89:f6:48:35:68:fe:2e:29: 6a:0e:b6:4a:cf:4f:4a:be:e0:bb:19:69:9b:b6:d6:d2:d0:d1: f4:a3:61:03:37:51:e6:96:cc:63:98:34:9a:6f:b4:a0:c2:62: be:82:f4:c3:5a:57:93:b6:66:b9:52:02:1e:e8:71:07:f0:43: 69:97:2b:d1:d9:52:7e:1a:eb:21:ac:8b:57:f9:fb:4b:10:ce: b6:7d:4a:c8:11:49:82:08:b8:41:33:e2:87:1e:5f:4d:e6:cf: 3c:9c:45:7c:6f:a8:f7:0f:cf:57:08:d5:2d:94:bb:cb:a9:e5: 4d:47:43:25:c2:e4:6d:96:f8:6a:47:bd:96:8f:70:a2:dc:ef: c6:f7:9f:d0:e6:d6:01:45:17:d9:2d:be:46:56:6e:d8:62:d4: aa:60:d8:30:c5:0e:e8:c9:ac:7b:7c:fd:b1:f8:3c:22:d4:0f: 89:b0:7b:ea:17:10:d6:c8:c6:2f:1e:e5:83:9b:03:ad:21:d7: 35:ee:b1:2e:c3:9f:a6:f8:50:ca:e2:f3:16:f0:7d:2b:1e:a8: 3e:bd:b9:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RUY5QzExMC8GA1UEBRMoQjg4MEI4REJENzA4MkNEOTE4QjYyMTdCREVBMDk3NTg0 NTkxREJERDAeFw0yNTA1MTMwNjQyNTZaFw0yNTA1MjAwNjQyNTZaMBgxFjAUBgNV BAMTDTY4MjJlOWYwLTNhZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAFR86oVYlk6MLakXqO63Yw9lEBzvLXovG/wqQwwxlzWjSn2KoL8sS5A6rrUtj p/59jQ3i4dRe/4L2/hI2673yzCmbjJyMrXIn3YwEXiEpwl5cOeNwlue5jsCi/REj 1ep2DQj81jhcAG8PDG2nC+bTj9hlqtdTPjSDMMF0x4+oG/K+tu0ZGFXKoavz7kkH hG+oJmp7JhyhthWAk7cvsMN05FmGYJxe09xt411q5ExXSUpIY9rmff/OC9M4E5W+ W6jB4EirZoyeAEyyRoOkunr87FXxISrPmcdnZFta7m2IfajNBdnyAD6NyHGnfqY+ 7v8BzEJmRho5oNc0WyI17oX3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSB9BsIav 3yQNWzA/KiqDs2mtdOkwHwYDVR0jBBgwFoAUuIC429cILNkYtiF73qCXWEWR290w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFRjlDL0M0RkVDMjg4RDNF QTExRUZBNjZDNDc2MEM0RjlBRTAyL3VJQzQyOWNJTE5rWXRpRjczcUNYV0VXUjI5 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdUlDNDI5Y0lMTmtZdGlGNzNxQ1hXRVdSMjkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF RjlDL0M0RkVDMjg4RDNFQTExRUZBNjZDNDc2MEM0RjlBRTAyL3VJQzQyOWNJTE5r WXRpRjczcUNYV0VXUjI5MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANI5zZb1rlAqyWT+JYNFJnxEuOMP0s/vwVD4YNdgf19ewhz6lJo4uH4r mkht9PaJ9kg1aP4uKWoOtkrPT0q+4LsZaZu21tLQ0fSjYQM3UeaWzGOYNJpvtKDC Yr6C9MNaV5O2ZrlSAh7ocQfwQ2mXK9HZUn4a6yGsi1f5+0sQzrZ9SsgRSYIIuEEz 4oceX03mzzycRXxvqPcPz1cI1S2Uu8up5U1HQyXC5G2W+GpHvZaPcKLc78b3n9Dm 1gFFF9ktvkZWbthi1Kpg2DDFDujJrHt8/bH4PCLUD4mwe+oXENbIxi8e5YObA60h 1zXusS7Dn6b4UMri8xbwfSseqD69uUY= -----END CERTIFICATE-----Generated at Wed May 14 23:24:21 2025 by rpki-client