$ rpki-client -vvf rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft File: up0lGkqfrMTkpmOHdQooZioxAFc.mft (raw, json) Hash identifier: MO3qrcBYvA4dnqaZHRX+Uk0ihBkSXbOGQDDlUzLNy40= Subject key identifier: 67:5D:D8:EC:E1:1F:6E:93:2B:5C:91:20:88:54:0E:BA:FC:57:61:79 Authority key identifier: BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57 Certificate issuer: /CN=A915B581/serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057 Certificate serial: 34A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft Manifest number: 3490 Signing time: Sat 10 May 2025 14:45:05 +0000 Manifest this update: Sat 10 May 2025 14:45:04 +0000 Manifest next update: Sat 17 May 2025 14:45:04 +0000 Files and hashes: 1: up0lGkqfrMTkpmOHdQooZioxAFc.crl (hash: EOMoKCYpKUxg+G0AWk7QEDGgrKFu3XxaygmYtXSbaOA=) 2: 7A38D6B854F311E7AC64ED3AC4F9AE02.roa (hash: J0n8zynWewxBVfoDX3OB8RbfuIjzjZ2KDx4R2TodoBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:45:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13475 (0x34a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B581, serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057 Validity Not Before: May 10 14:45:04 2025 GMT Not After : May 17 14:45:04 2025 GMT Subject: CN=681f6671-22af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b6:b2:a9:6b:a2:64:81:bf:3d:5d:22:47:a2: 4a:4d:8e:66:9e:06:5b:cf:91:43:7e:92:dd:56:6b: 65:20:a4:e1:64:8d:61:ab:00:64:68:6d:96:4b:3e: eb:8d:4f:63:bc:3a:3c:04:e2:52:80:c3:ca:36:22: 0b:41:03:d4:10:01:95:89:1f:c2:bc:ca:48:93:2b: a1:14:70:14:34:2e:97:51:b2:bb:f4:68:6c:bf:b8: 01:21:1b:f5:a6:9a:45:b2:e7:c8:98:15:7b:fa:a8: 67:00:bf:33:bf:4a:68:f8:de:a3:61:c0:50:8b:c9: 9a:51:c5:03:97:a2:7a:c6:8e:b1:83:ca:80:e8:24: ab:dd:67:a9:ed:49:97:5d:3d:cb:83:87:50:d9:78: 31:3e:56:28:7c:b9:3c:aa:c9:59:95:02:89:18:85: 8e:0a:58:61:fb:b2:25:17:77:eb:f6:9f:30:e9:69: 5c:1d:90:2f:09:12:04:97:f1:3e:32:e1:00:66:58: 2e:db:c4:06:ec:90:74:d2:e6:de:53:12:c3:5a:eb: 6f:90:c4:0e:90:e8:28:6e:38:b1:a3:3b:66:2b:cf: e3:33:41:00:4a:8d:b9:54:8e:e0:57:c2:a7:ca:72: 11:66:ba:ff:3a:a4:a6:8f:cf:c1:61:64:fa:d8:66: 73:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5D:D8:EC:E1:1F:6E:93:2B:5C:91:20:88:54:0E:BA:FC:57:61:79 X509v3 Authority Key Identifier: keyid:BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:79:78:4b:bc:af:8e:cd:91:e9:c8:91:75:16:cc:f7:eb:24: db:28:9a:44:0a:76:1e:58:22:58:cc:22:63:4e:8b:8d:dd:3e: c0:5d:dc:3b:f5:ee:67:6d:80:eb:9b:f9:c2:58:81:e5:ae:7f: c1:cb:82:58:51:e0:5b:ea:23:c7:b6:6a:1e:fe:2f:c2:be:e3: f3:8e:ce:74:1f:7d:44:08:49:39:88:56:90:53:84:cb:d7:19: e3:2b:4c:79:5e:44:21:97:57:63:75:9f:3b:ef:9f:72:6f:3b: 10:12:15:52:77:05:e0:93:2d:b3:67:63:2e:55:ce:6f:cf:2c: 97:4a:53:f0:9d:e9:88:d2:6b:ae:68:aa:f9:0d:a8:8f:4e:6f: ff:40:2a:b0:6b:2e:03:d1:2d:62:41:bc:5c:4c:7f:0a:fb:f5: 76:9a:c8:7d:0c:b3:97:fa:11:1a:0c:6b:e3:ea:17:c8:73:8f: 3c:48:3a:09:30:c1:b3:51:9b:af:22:31:08:7e:ed:a3:c3:2b: 73:f1:11:a0:ea:b1:21:21:d9:94:67:74:70:1d:d1:d2:13:7d: 08:9d:82:f0:8a:c4:21:de:06:f6:ce:79:b2:5a:91:3c:4f:e4: 87:eb:be:fe:bc:de:64:53:4f:c2:c6:70:01:82:8f:19:76:ed: 3d:c1:23:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1ODExMTAvBgNVBAUTKEJBOUQyNTFBNEE5RkFDQzRFNEE2NjM4Nzc1MEEyODY2 MkEzMTAwNTcwHhcNMjUwNTEwMTQ0NTA0WhcNMjUwNTE3MTQ0NTA0WjAYMRYwFAYD VQQDEw02ODFmNjY3MS0yMmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrayqWuiZIG/PV0iR6JKTY5mngZbz5FDfpLdVmtlIKThZI1hqwBkaG2WSz7r jU9jvDo8BOJSgMPKNiILQQPUEAGViR/CvMpIkyuhFHAUNC6XUbK79Ghsv7gBIRv1 pppFsufImBV7+qhnAL8zv0po+N6jYcBQi8maUcUDl6J6xo6xg8qA6CSr3Wep7UmX XT3Lg4dQ2XgxPlYofLk8qslZlQKJGIWOClhh+7IlF3fr9p8w6WlcHZAvCRIEl/E+ MuEAZlgu28QG7JB00ubeUxLDWutvkMQOkOgobjixoztmK8/jM0EASo25VI7gV8Kn ynIRZrr/OqSmj8/BYWT62GZzkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdd2Ozh H26TK1yRIIhUDrr8V2F5MB8GA1UdIwQYMBaAFLqdJRpKn6zE5KZjh3UKKGYqMQBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU4MS9CQjhGREZGRTFE OTMxMUUyQTk2MzhBRjcwOEIwMkNEMi91cDBsR2txZnJNVGtwbU9IZFFvb1ppb3hB RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VwMGxHa3Fmck1Ua3BtT0hkUW9vWmlveEFGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU4MS9CQjhGREZGRTFEOTMxMUUyQTk2MzhBRjcwOEIwMkNEMi91cDBsR2txZnJN VGtwbU9IZFFvb1ppb3hBRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAheXhLvK+OzZHpyJF1Fsz36yTbKJpECnYeWCJYzCJjTouN3T7AXdw7 9e5nbYDrm/nCWIHlrn/By4JYUeBb6iPHtmoe/i/CvuPzjs50H31ECEk5iFaQU4TL 1xnjK0x5XkQhl1djdZ87759ybzsQEhVSdwXgky2zZ2MuVc5vzyyXSlPwnemI0muu aKr5DaiPTm//QCqway4D0S1iQbxcTH8K+/V2msh9DLOX+hEaDGvj6hfIc488SDoJ MMGzUZuvIjEIfu2jwytz8RGg6rEhIdmUZ3RwHdHSE30InYLwisQh3gb2znmyWpE8 T+SH677+vN5kU0/CxnABgo8Zdu09wSOg -----END CERTIFICATE-----Generated at Sun May 11 15:16:21 2025 by rpki-client