$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft File: uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft (raw, json) Hash identifier: wNQWsmv5EUdFuzmPGwtoFkTyutv7eTvvbL+sR8HSln4= Subject key identifier: 29:32:E2:59:B8:01:C4:A4:69:68:8F:CD:4F:59:4F:62:F1:A3:C8:1E Authority key identifier: B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36 Certificate issuer: /CN=A915825D/serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft Manifest number: 65 Signing time: Sat 17 May 2025 06:34:44 +0000 Manifest this update: Sat 17 May 2025 06:34:43 +0000 Manifest next update: Sat 24 May 2025 06:34:43 +0000 Files and hashes: 1: uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl (hash: Jeb3/rWag5EjlN0hDiTo1kev5Tu9K4rSLqKU2PvKaI4=) 2: B035E67615D311F09BAD2971C4F9AE02.roa (hash: m6K1ejQzgZZN/JIHhR+mHfBRgRA0KhwEs/admphjKvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 06:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915825D, serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636 Validity Not Before: May 17 06:34:43 2025 GMT Not After : May 24 06:34:43 2025 GMT Subject: CN=68282e04-0143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c9:76:92:a4:be:23:20:7f:97:29:6c:ad:a2: cd:b4:9c:34:7e:ad:b2:09:c1:ce:4d:1a:5d:78:87: 13:dd:5a:4c:10:b2:cf:90:89:d3:e1:fa:96:5e:b8: 64:a0:fb:97:b5:ac:e0:35:9c:ec:67:aa:5d:7c:e3: 2f:5c:2e:a1:05:9d:01:cf:b6:7a:84:78:ff:c9:fc: 63:af:6a:ce:25:f8:d1:c5:b9:bc:9d:a3:d5:8a:28: cb:be:81:b8:95:c4:2b:f8:9d:e2:ca:17:48:3e:87: ee:4d:c2:7c:fa:16:40:ac:e7:34:6f:9a:c6:ab:28: 07:4a:ad:c6:9a:a4:a7:86:54:aa:2e:fe:fb:21:a5: dd:7c:43:57:e6:21:7d:7b:39:c1:f9:44:d6:b5:9d: 92:51:ba:a3:02:9f:58:41:4a:c4:d6:2b:3a:e2:1d: 40:b9:30:7d:6e:20:3a:7c:46:d0:fc:56:0c:72:de: 15:42:93:83:5f:21:cf:3c:44:0c:a5:df:99:b9:76: 4d:2a:91:b5:a7:72:26:9a:e9:1c:da:8a:4d:0e:22: 28:3e:dc:4e:a4:cd:4c:d4:7d:74:f8:97:9f:97:be: 14:d4:92:8b:5d:39:e5:ff:ed:e3:0c:99:8d:f0:9d: 35:dc:ef:d3:ee:bf:c1:c2:19:d6:d1:b2:9e:0d:b7: 7c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:32:E2:59:B8:01:C4:A4:69:68:8F:CD:4F:59:4F:62:F1:A3:C8:1E X509v3 Authority Key Identifier: keyid:B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:96:b4:0c:be:09:05:60:f7:8a:11:80:ca:0b:ff:fe:bf:ff: c3:10:2d:c3:69:1c:d6:7d:be:27:bc:02:37:fa:ca:16:24:7e: 1a:26:5d:5b:b0:53:84:3c:b9:34:66:8d:87:a3:77:fd:76:e5: aa:4c:09:8c:14:2e:2c:f8:5a:bd:98:44:28:80:8e:48:f5:3d: 75:45:0c:82:6a:d1:a5:77:2a:c5:77:2d:47:cd:f1:7f:c6:f4: fe:c6:e7:62:84:46:89:ff:90:7f:a1:fa:41:79:93:84:39:8d: e1:c2:a0:ea:c6:11:27:7b:df:a8:04:66:7e:ac:91:fd:08:2a: af:fb:fb:38:d5:37:26:1b:ec:5d:05:48:58:dc:97:1b:f0:e9: eb:b6:9c:7d:4c:09:f2:58:d1:43:f1:8d:f8:c2:2c:c1:73:38: 42:ad:64:d1:27:c7:79:fe:d7:8e:89:ab:bc:48:86:55:d5:b9: 1e:6c:c1:b5:aa:44:ff:79:ed:af:2a:cb:bc:60:18:a2:e6:5d: e0:9c:b2:39:97:13:bb:66:2c:e9:83:d2:26:d9:b2:7c:23:d6: 77:0c:93:43:e9:88:70:9c:8a:e1:05:f6:50:64:f9:ab:0e:71: ae:c3:c9:0a:ce:40:12:e6:ba:c5:4c:12:87:68:14:d2:ae:36: b4:61:43:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODI1RDExMC8GA1UEBRMoQjg4QkQ1RDVCOUI4NjQ2RDhFNDNFNjRDMTI3Qjg0ODFB NDE4QzYzNjAeFw0yNTA1MTcwNjM0NDNaFw0yNTA1MjQwNjM0NDNaMBgxFjAUBgNV BAMTDTY4MjgyZTA0LTAxNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRyXaSpL4jIH+XKWytos20nDR+rbIJwc5NGl14hxPdWkwQss+QidPh+pZeuGSg +5e1rOA1nOxnql184y9cLqEFnQHPtnqEeP/J/GOvas4l+NHFubydo9WKKMu+gbiV xCv4neLKF0g+h+5Nwnz6FkCs5zRvmsarKAdKrcaapKeGVKou/vshpd18Q1fmIX17 OcH5RNa1nZJRuqMCn1hBSsTWKzriHUC5MH1uIDp8RtD8Vgxy3hVCk4NfIc88RAyl 35m5dk0qkbWnciaa6Rzaik0OIig+3E6kzUzUfXT4l5+XvhTUkotdOeX/7eMMmY3w nTXc79Puv8HCGdbRsp4Nt3yzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKTLiWbgB xKRpaI/NT1lPYvGjyB4wHwYDVR0jBBgwFoAUuIvV1bm4ZG2OQ+ZMEnuEgaQYxjYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4MjVEL0U1OEIyMjY4QTQ0 NjExRUY4RDU4QTYyNEM0RjlBRTAyL3VJdlYxYm00WkcyT1EtWk1FbnVFZ2FRWXhq WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdUl2VjFibTRaRzJPUS1aTUVudUVnYVFZeGpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 MjVEL0U1OEIyMjY4QTQ0NjExRUY4RDU4QTYyNEM0RjlBRTAyL3VJdlYxYm00Wkcy T1EtWk1FbnVFZ2FRWXhqWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALSWtAy+CQVg94oRgMoL//6//8MQLcNpHNZ9vie8Ajf6yhYkfhomXVuw U4Q8uTRmjYejd/125apMCYwULiz4Wr2YRCiAjkj1PXVFDIJq0aV3KsV3LUfN8X/G 9P7G52KERon/kH+h+kF5k4Q5jeHCoOrGESd736gEZn6skf0IKq/7+zjVNyYb7F0F SFjclxvw6eu2nH1MCfJY0UPxjfjCLMFzOEKtZNEnx3n+146Jq7xIhlXVuR5swbWq RP957a8qy7xgGKLmXeCcsjmXE7tmLOmD0ibZsnwj1ncMk0PpiHCciuEF9lBk+asO ca7DyQrOQBLmusVMEodoFNKuNrRhQ6M= -----END CERTIFICATE-----Generated at Sun May 18 08:50:21 2025 by rpki-client