$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft File: UylwC03drZ4_zcMnP00Y0-MEXcA.mft (raw, json) Hash identifier: Eho88gQ0Ca0JJA9tGss3MdJtuDwJ1bZUEseInEWVDvc= Subject key identifier: DA:03:DB:63:DE:D8:BA:F7:41:DA:EC:B8:05:7F:5E:D2:06:FF:D7:4F Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 Certificate issuer: /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Certificate serial: 08C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft Manifest number: 190E Signing time: Wed 14 May 2025 17:29:12 +0000 Manifest this update: Wed 14 May 2025 17:29:11 +0000 Manifest next update: Wed 21 May 2025 17:29:11 +0000 Files and hashes: 1: UylwC03drZ4_zcMnP00Y0-MEXcA.crl (hash: q9rlOxgKhecgAiAmpIglLh+F8ItAif9O88bDFQC7Vjs=) 2: 31414558B0D511EFB17B942FC4F9AE02.roa (hash: mtUL6kpWcJ0s0WYAq9l26D9HLDGvLgZ5GCmZqFRcyjs=) 3: D9B56C8A7AB211EB99DAFE83C4F9AE02.roa (hash: F8NUI5IF7FjRVcKD/tqhJ5Q4QNzh0QGai7XMrRHjkus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:29:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2247 (0x8c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Validity Not Before: May 14 17:29:11 2025 GMT Not After : May 21 17:29:11 2025 GMT Subject: CN=6824d2e8-bba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2d:de:5b:63:a0:ce:c1:f9:dd:99:c9:d0:22: d3:aa:6b:6a:2e:5d:1f:05:82:d1:cb:bf:24:c5:fe: 37:00:17:b6:1a:f8:f4:a3:06:10:c0:ea:4d:34:80: 20:76:8b:96:c9:a3:54:b2:32:3e:86:14:03:04:f8: 7b:8c:ad:95:db:8b:b5:ad:90:a5:c9:f5:2c:69:7a: d6:9a:73:94:25:40:cb:b5:ab:69:59:ad:b6:41:1d: 30:bb:a1:00:5f:ab:4a:84:75:c4:4d:f4:8d:2d:ec: 5c:b0:84:aa:61:a0:79:87:4a:11:b6:85:77:15:a9: 45:54:77:a2:b4:1f:cc:ed:92:af:f8:15:0a:b6:46: e4:7b:68:82:94:7a:f7:87:d8:bc:c5:9f:26:0d:e7: ff:82:ab:04:71:3d:fd:f8:df:ff:e9:96:63:68:c2: c6:08:97:cd:4c:cf:4b:79:68:3b:b7:57:66:b1:fc: b5:e1:be:66:d3:f1:57:cc:da:1e:b5:f9:c4:26:93: 1c:74:0a:78:7c:17:25:3c:ed:88:42:ea:44:44:4f: e4:b1:bb:b9:74:84:dc:67:44:a7:4a:1e:db:6e:ca: 03:1d:d0:b7:75:27:be:86:2b:f7:fd:cd:30:fd:da: 1b:4e:b2:8f:57:56:f8:26:ca:99:de:45:25:a0:44: 44:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:03:DB:63:DE:D8:BA:F7:41:DA:EC:B8:05:7F:5E:D2:06:FF:D7:4F X509v3 Authority Key Identifier: keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:d4:af:e6:64:83:b9:87:ec:86:eb:e0:e0:94:54:9e:c3:67: c9:ad:92:0c:6b:1e:8c:d6:b9:40:88:45:d4:c7:8e:81:59:7c: 62:80:dd:af:e4:79:73:0e:c0:56:bd:32:cb:b5:6c:64:1c:ce: f1:4e:45:ef:13:c6:46:31:54:e9:9a:f8:9b:9b:a1:7b:62:bb: fe:31:de:4f:34:3a:0f:9c:fa:0c:1f:40:85:6e:75:d0:f0:34: 30:71:25:8b:1b:87:25:59:24:70:7f:d1:4d:49:89:1b:9c:4d: 15:a6:e8:89:42:15:e9:d5:24:c2:ab:9b:3b:9a:09:79:93:cb: 20:eb:2e:7d:90:6a:f9:41:fa:dd:5c:64:e6:2a:8b:76:96:02: 1a:19:c6:a1:b8:f7:09:03:a6:13:ea:23:f0:94:7c:ae:e0:53: 1f:d5:46:b3:62:07:cf:75:f6:9f:76:28:95:07:64:14:f8:2e: 76:82:66:e2:23:e7:d3:da:6c:ff:d4:59:9e:d8:7a:0c:ae:21: 81:74:ec:b5:8d:a7:32:cf:65:ca:c4:11:94:d1:5b:b2:96:b3: 0d:c6:fd:65:25:7e:59:fe:ad:8e:f2:ce:a9:e6:1e:a7:0f:e3: 3a:64:b2:5c:c9:37:77:e7:a1:7a:62:7b:71:27:86:77:d5:fa: 02:e7:a1:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKDUzMjk3MDBCNEREREFEOUUzRkNEQzMyNzNGNEQxOEQz RTMwNDVEQzAwHhcNMjUwNTE0MTcyOTExWhcNMjUwNTIxMTcyOTExWjAYMRYwFAYD VQQDEw02ODI0ZDJlOC1iYmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArC3eW2OgzsH53ZnJ0CLTqmtqLl0fBYLRy78kxf43ABe2Gvj0owYQwOpNNIAg douWyaNUsjI+hhQDBPh7jK2V24u1rZClyfUsaXrWmnOUJUDLtatpWa22QR0wu6EA X6tKhHXETfSNLexcsISqYaB5h0oRtoV3FalFVHeitB/M7ZKv+BUKtkbke2iClHr3 h9i8xZ8mDef/gqsEcT39+N//6ZZjaMLGCJfNTM9LeWg7t1dmsfy14b5m0/FXzNoe tfnEJpMcdAp4fBclPO2IQupERE/ksbu5dITcZ0SnSh7bbsoDHdC3dSe+hiv3/c0w /dobTrKPV1b4JsqZ3kUloEREDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoD22Pe 2Lr3QdrsuAV/XtIG/9dPMB8GA1UdIwQYMBaAFFMpcAtN3a2eP83DJz9NGNPjBF3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJaNF96Y01uUDAwWTAtTUVY Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5bHdDMDNkclo0X3pjTW5QMDBZMC1NRVhjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJa NF96Y01uUDAwWTAtTUVYY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW1K/mZIO5h+yG6+DglFSew2fJrZIMax6M1rlAiEXUx46BWXxigN2v 5HlzDsBWvTLLtWxkHM7xTkXvE8ZGMVTpmvibm6F7Yrv+Md5PNDoPnPoMH0CFbnXQ 8DQwcSWLG4clWSRwf9FNSYkbnE0VpuiJQhXp1STCq5s7mgl5k8sg6y59kGr5Qfrd XGTmKot2lgIaGcahuPcJA6YT6iPwlHyu4FMf1UazYgfPdfafdiiVB2QU+C52gmbi I+fT2mz/1Fme2HoMriGBdOy1jacyz2XKxBGU0VuylrMNxv1lJX5Z/q2O8s6p5h6n D+M6ZLJcyTd356F6YntxJ4Z31foC56E+ -----END CERTIFICATE-----Generated at Thu May 15 00:18:59 2025 by rpki-client