$ rpki-client -vvf rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft File: UyQGWmE9LRB4F5xiFjcczGp3UHo.mft (raw, json) Hash identifier: nl+BbU0of5aVLenZ7e/T0a4+S5KmUIpNY4eQCy0BMj0= Subject key identifier: FC:48:C8:DC:2A:E6:1B:0F:8E:FC:D8:F9:1E:2B:EA:1C:81:17:A3:20 Authority key identifier: 53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A Certificate issuer: /CN=A9158EC4/serialNumber=5324065A613D2D1078179C6216371CCC6A77507A Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft Manifest number: DD Signing time: Thu 15 May 2025 04:53:17 +0000 Manifest this update: Thu 15 May 2025 04:53:17 +0000 Manifest next update: Thu 22 May 2025 04:53:17 +0000 Files and hashes: 1: UyQGWmE9LRB4F5xiFjcczGp3UHo.crl (hash: QpOX/dQb+GhNxNtcWipuTxEZcm9ENlWKRZ1rsiSzD/g=) 2: 2805F2D6E5B511EEB34EF35AC4F9AE02.roa (hash: 0mdd1hPCY77vgsAR82vZE3qWvhrgXofs3UYJMwrKnGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158EC4, serialNumber=5324065A613D2D1078179C6216371CCC6A77507A Validity Not Before: May 15 04:53:17 2025 GMT Not After : May 22 04:53:17 2025 GMT Subject: CN=6825733d-b7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:de:38:88:34:61:d4:32:0c:32:fc:63:6d:1a: fc:21:e9:48:b7:46:04:08:99:25:d5:bf:81:52:ad: 7d:38:8d:1f:3d:52:ce:4c:10:ed:97:45:5b:53:ae: f7:18:aa:b6:eb:c8:00:b5:48:15:d8:d1:4b:95:83: bc:48:14:c7:1c:15:f6:d7:a8:ec:0a:24:70:6d:0e: e7:9f:26:c8:92:8b:5c:d1:78:6b:23:75:85:9a:0e: b4:61:b9:1b:2d:4e:d6:9c:14:c6:6d:b8:33:46:83: 03:43:6f:4e:03:f1:04:40:da:9c:e5:7f:7f:cb:0c: 34:bb:cf:eb:86:97:a8:bc:77:2b:99:cb:65:80:17: dd:fd:78:84:2a:11:bc:76:e0:88:a2:69:5e:cf:e1: 73:28:77:d2:b9:7a:c1:03:3c:1b:64:c8:4b:5e:11: 7a:07:cb:3d:95:41:1f:40:55:ca:ce:2b:04:d1:08: fb:dc:cb:c2:78:9d:30:41:5b:d0:0a:c8:6a:79:e8: 32:53:fa:93:f1:a0:5b:9c:2b:f1:55:d9:2f:9f:56: 6d:fd:9a:40:e2:e6:ad:d5:9f:74:43:a4:3b:a0:11: 3a:61:37:e5:f2:85:84:c3:4a:96:d5:f4:3c:ef:f0: 77:0f:ae:b2:9d:fa:21:c3:99:e9:d2:0e:c7:8c:e5: cf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:48:C8:DC:2A:E6:1B:0F:8E:FC:D8:F9:1E:2B:EA:1C:81:17:A3:20 X509v3 Authority Key Identifier: keyid:53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:96:e1:94:be:ee:10:6f:a2:39:5e:9e:c9:02:8f:5c:d5:8f: 27:b6:7c:58:ee:b2:b8:63:75:7a:7f:2c:24:30:91:d1:9e:8f: 2b:cf:73:4f:25:8f:95:1e:06:34:48:52:fc:2b:85:ff:3f:12: 15:7f:b5:a6:38:fc:49:f2:11:b2:d8:54:12:c4:81:6d:58:d0: 97:5f:ff:fb:67:1a:15:f4:a2:0e:7d:77:06:36:88:55:f1:b1: e6:ba:06:29:d7:36:68:19:1b:85:19:9e:2d:9e:35:79:f0:ea: dd:9b:90:da:51:b5:be:84:ea:64:8f:a4:b4:6b:fe:f5:d7:7f: c2:82:19:a2:29:86:1e:12:e2:f8:0f:9a:14:ff:ea:81:db:42: ab:3d:b1:6a:ed:fc:fd:b4:53:a5:58:c3:11:cf:ed:26:91:f6: 73:93:28:46:8c:bb:92:87:0b:7c:09:40:53:a6:7c:58:94:8a: 46:c5:67:a1:20:3c:11:30:cc:b5:62:7d:17:cc:5e:b6:bb:42: 9e:d9:9d:39:e5:be:00:b8:a6:0f:99:c5:ad:c9:01:23:7b:b7: ad:a0:72:5b:7f:6d:2f:df:b0:28:f4:0b:1e:8d:e6:28:f0:9c: 6d:ef:e4:43:a8:7d:5a:9d:d5:96:1d:b1:fc:45:ec:0e:80:46: 20:76:5b:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFQzQxMTAvBgNVBAUTKDUzMjQwNjVBNjEzRDJEMTA3ODE3OUM2MjE2MzcxQ0ND NkE3NzUwN0EwHhcNMjUwNTE1MDQ1MzE3WhcNMjUwNTIyMDQ1MzE3WjAYMRYwFAYD VQQDEw02ODI1NzMzZC1iN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy944iDRh1DIMMvxjbRr8IelIt0YECJkl1b+BUq19OI0fPVLOTBDtl0VbU673 GKq268gAtUgV2NFLlYO8SBTHHBX216jsCiRwbQ7nnybIkotc0XhrI3WFmg60Ybkb LU7WnBTGbbgzRoMDQ29OA/EEQNqc5X9/yww0u8/rhpeovHcrmctlgBfd/XiEKhG8 duCIomlez+FzKHfSuXrBAzwbZMhLXhF6B8s9lUEfQFXKzisE0Qj73MvCeJ0wQVvQ CshqeegyU/qT8aBbnCvxVdkvn1Zt/ZpA4uat1Z90Q6Q7oBE6YTfl8oWEw0qW1fQ8 7/B3D66ynfohw5np0g7HjOXPmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxIyNwq 5hsPjvzY+R4r6hyBF6MgMB8GA1UdIwQYMBaAFFMkBlphPS0QeBecYhY3HMxqd1B6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEVDNC80NTA2NDc5MEU1 QjExMUVFOUUzNUMzMzNDNEY5QUUwMi9VeVFHV21FOUxSQjRGNXhpRmpjY3pHcDNV SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5UUdXbUU5TFJCNEY1eGlGamNjekdwM1VIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEVDNC80NTA2NDc5MEU1QjExMUVFOUUzNUMzMzNDNEY5QUUwMi9VeVFHV21FOUxS QjRGNXhpRmpjY3pHcDNVSG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUluGUvu4Qb6I5Xp7JAo9c1Y8ntnxY7rK4Y3V6fywkMJHRno8rz3NP JY+VHgY0SFL8K4X/PxIVf7WmOPxJ8hGy2FQSxIFtWNCXX//7ZxoV9KIOfXcGNohV 8bHmugYp1zZoGRuFGZ4tnjV58Ordm5DaUbW+hOpkj6S0a/7113/CghmiKYYeEuL4 D5oU/+qB20KrPbFq7fz9tFOlWMMRz+0mkfZzkyhGjLuShwt8CUBTpnxYlIpGxWeh IDwRMMy1Yn0XzF62u0Ke2Z055b4AuKYPmcWtyQEje7etoHJbf20v37Ao9AsejeYo 8Jxt7+RDqH1andWWHbH8RewOgEYgdltE -----END CERTIFICATE-----Generated at Thu May 15 22:28:00 2025 by rpki-client