$ rpki-client -vvf rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft File: uIPha7zTcVtWFzExa6Gw70BTwS4.mft (raw, json) Hash identifier: NJc3rIg64ejXPIxWfdBF5ZfXDFT1ogX+IOtpxDNe4Hs= Subject key identifier: 4E:87:ED:C2:5C:B5:F9:4B:C4:B9:BF:1C:83:E5:28:F6:75:9D:78:75 Authority key identifier: B8:83:E1:6B:BC:D3:71:5B:56:17:31:31:6B:A1:B0:EF:40:53:C1:2E Certificate issuer: /CN=A914B05F/serialNumber=B883E16BBCD3715B561731316BA1B0EF4053C12E Certificate serial: 1842 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft Manifest number: 1837 Signing time: Sat 10 May 2025 16:26:00 +0000 Manifest this update: Sat 10 May 2025 16:25:59 +0000 Manifest next update: Sat 17 May 2025 16:25:59 +0000 Files and hashes: 1: uIPha7zTcVtWFzExa6Gw70BTwS4.crl (hash: hO5nxaQ4MHHGreCnqk6+/GR7N6JNIykZHY+sLxrnH6M=) 2: 3482BB06AB3E11E7B15D1874C4F9AE02.roa (hash: f/iGCTTWKgyC6GDNoG48hLtnpOGko6TY6XeoD7uohtY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.crl rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6210 (0x1842) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B05F, serialNumber=B883E16BBCD3715B561731316BA1B0EF4053C12E Validity Not Before: May 10 16:25:59 2025 GMT Not After : May 17 16:25:59 2025 GMT Subject: CN=681f7e18-3bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ae:01:32:b0:c5:45:e3:ec:53:28:74:b0:a3: f4:e6:a2:86:e3:85:4d:96:74:cb:27:9d:a3:b9:73: 58:00:25:d8:65:df:6b:12:a9:87:bd:56:6d:c0:bc: 89:4c:31:cf:e1:79:86:62:af:80:b3:e8:13:ee:bb: 9c:11:84:93:af:f2:f0:f1:82:36:85:11:e5:50:13: 5b:39:a4:94:ba:66:28:39:bf:43:c2:ed:4f:b4:f0: e4:81:3a:bb:39:2f:73:e1:5c:5c:8a:79:52:a0:d8: c4:55:5f:3e:fd:8f:15:9c:3d:2b:fa:c3:18:a8:07: db:1e:79:86:fd:06:fb:a4:6f:0e:80:9f:93:c0:97: 85:05:ad:3f:1f:b1:44:fc:a6:c1:74:6c:f2:56:0f: 76:60:a8:1a:4f:e9:7a:4c:3d:8d:45:e3:e6:38:ca: 30:42:a2:ea:f2:0d:c8:15:f8:d7:da:26:84:6b:f8: 41:6f:69:6f:4d:f0:78:ae:f3:67:ec:ee:75:a6:7b: e0:df:e2:af:db:8f:55:35:a1:0a:5c:bf:9a:35:d5: d2:37:49:1f:40:83:1e:35:e4:52:49:fd:59:c7:94: e7:dc:bc:75:1a:0b:0a:b0:12:bf:a8:67:24:70:70: 1b:80:e9:91:36:bc:89:c2:2d:73:bd:ca:5e:b4:58: 34:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:87:ED:C2:5C:B5:F9:4B:C4:B9:BF:1C:83:E5:28:F6:75:9D:78:75 X509v3 Authority Key Identifier: keyid:B8:83:E1:6B:BC:D3:71:5B:56:17:31:31:6B:A1:B0:EF:40:53:C1:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:b2:63:2e:e8:fd:d6:60:b0:a6:e6:5a:1d:7f:bc:33:1c:0b: 81:dc:80:e1:0b:dc:95:e2:a8:d1:0d:49:64:cf:99:e8:74:d0: f6:83:a7:e9:4a:f4:a4:80:9e:f0:86:28:b0:7d:21:88:9c:50: 5b:86:60:7b:1f:b6:fe:70:4d:d7:7b:d5:28:28:96:37:de:1a: 2c:23:bf:cc:88:4b:37:12:7d:9a:26:1f:ef:86:09:54:ea:ff: 81:37:7c:96:1d:c1:60:d1:7f:c7:62:da:d1:a2:9e:cc:3f:33: a2:a7:34:81:90:71:d6:54:62:84:70:61:5f:2d:e7:a5:c6:5d: f4:87:db:ca:47:23:65:54:97:be:9b:cb:c1:3e:ee:15:a6:f4: f5:9a:73:19:c4:45:e1:ef:36:e2:03:03:2b:db:0f:a0:9f:82: 2b:43:f3:49:01:ed:9f:0b:f6:2c:75:56:8d:23:ed:14:8f:8b: 02:ea:92:ce:65:22:da:a3:0d:64:62:44:13:4f:44:ea:9e:f5: d3:ec:59:1c:63:5b:7a:33:c9:00:bf:89:d1:ad:2f:4b:bf:e3: 8a:6b:af:11:03:77:3e:de:15:89:30:9b:b1:44:7c:aa:bb:87: 86:20:6c:f5:bd:68:87:e5:8b:79:47:1a:9d:ac:34:42:c2:98: 5a:10:52:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwNUYxMTAvBgNVBAUTKEI4ODNFMTZCQkNEMzcxNUI1NjE3MzEzMTZCQTFCMEVG NDA1M0MxMkUwHhcNMjUwNTEwMTYyNTU5WhcNMjUwNTE3MTYyNTU5WjAYMRYwFAYD VQQDEw02ODFmN2UxOC0zYmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv64BMrDFRePsUyh0sKP05qKG44VNlnTLJ52juXNYACXYZd9rEqmHvVZtwLyJ TDHP4XmGYq+As+gT7rucEYSTr/Lw8YI2hRHlUBNbOaSUumYoOb9Dwu1PtPDkgTq7 OS9z4VxcinlSoNjEVV8+/Y8VnD0r+sMYqAfbHnmG/Qb7pG8OgJ+TwJeFBa0/H7FE /KbBdGzyVg92YKgaT+l6TD2NRePmOMowQqLq8g3IFfjX2iaEa/hBb2lvTfB4rvNn 7O51pnvg3+Kv249VNaEKXL+aNdXSN0kfQIMeNeRSSf1Zx5Tn3Lx1GgsKsBK/qGck cHAbgOmRNryJwi1zvcpetFg0nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6H7cJc tflLxLm/HIPlKPZ1nXh1MB8GA1UdIwQYMBaAFLiD4Wu803FbVhcxMWuhsO9AU8Eu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjA1Ri8zMzUxMjA0MEFC M0IxMUU3QkFBQjBENkJDNEY5QUUwMi91SVBoYTd6VGNWdFdGekV4YTZHdzcwQlR3 UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VJUGhhN3pUY1Z0V0Z6RXhhNkd3NzBCVHdTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjA1Ri8zMzUxMjA0MEFCM0IxMUU3QkFBQjBENkJDNEY5QUUwMi91SVBoYTd6VGNW dFdGekV4YTZHdzcwQlR3UzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDsmMu6P3WYLCm5lodf7wzHAuB3IDhC9yV4qjRDUlkz5nodND2g6fp SvSkgJ7whiiwfSGInFBbhmB7H7b+cE3Xe9UoKJY33hosI7/MiEs3En2aJh/vhglU 6v+BN3yWHcFg0X/HYtrRop7MPzOipzSBkHHWVGKEcGFfLeelxl30h9vKRyNlVJe+ m8vBPu4VpvT1mnMZxEXh7zbiAwMr2w+gn4IrQ/NJAe2fC/YsdVaNI+0Uj4sC6pLO ZSLaow1kYkQTT0TqnvXT7FkcY1t6M8kAv4nRrS9Lv+OKa68RA3c+3hWJMJuxRHyq u4eGIGz1vWiH5Yt5RxqdrDRCwphaEFJr -----END CERTIFICATE-----Generated at Mon May 12 18:17:28 2025 by rpki-client