$ rpki-client -vvf rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft File: UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft (raw, json) Hash identifier: IEDOnEYePZrbQ/qB0IRS/lny81poXCA1HOSevGRMKWk= Subject key identifier: 5A:55:BC:BD:F6:4B:D3:04:9C:28:02:D1:91:57:3F:40:C5:2E:18:38 Authority key identifier: 52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36 Certificate issuer: /CN=A916B30C/serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft Manifest number: FA Signing time: Tue 13 May 2025 04:20:44 +0000 Manifest this update: Tue 13 May 2025 04:20:43 +0000 Manifest next update: Tue 20 May 2025 04:20:43 +0000 Files and hashes: 1: UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl (hash: ohVTAV1jDx9xdkfsIV1I2t1z0ZPtB2o+1sLPAv9sDaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B30C, serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836 Validity Not Before: May 13 04:20:43 2025 GMT Not After : May 20 04:20:43 2025 GMT Subject: CN=6822c89b-e392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:9f:f7:c9:a3:e7:fd:43:5a:62:57:71:6f: e3:15:24:e4:b4:74:d2:5a:2f:1f:da:c7:11:5b:c1: 0c:54:18:85:d5:8b:af:f6:be:bc:ad:5b:8f:6c:e9: f3:07:2b:0d:be:47:6b:be:8c:4e:75:22:55:a0:3b: 5b:df:19:bc:0e:5d:6c:70:81:3b:0f:0e:38:b4:c8: 72:60:fe:d2:2e:17:37:53:aa:6b:ea:21:1a:1e:46: ce:ba:9f:1c:04:51:71:dd:96:f0:37:eb:ef:d3:0a: 74:66:e9:3d:2b:74:81:9f:bd:98:00:25:7d:8d:e4: 61:cb:9d:d2:be:d2:28:f8:c2:07:84:47:8d:08:0a: 6e:2e:11:57:f0:e2:80:47:ed:1b:4c:04:14:f9:5c: dc:f6:5c:5b:91:73:89:b6:7d:cc:1d:b2:c1:cb:49: 27:f3:f8:f7:c0:46:2f:2f:1b:b9:aa:f2:9d:0f:db: 50:1e:8f:42:ff:db:71:ce:a5:df:39:2f:2e:a7:45: d5:82:a2:6c:dd:76:11:99:52:71:b2:c3:2a:76:c4: 14:db:08:b6:b3:1e:42:d1:f4:40:68:b9:17:28:34: 94:a9:6a:b5:be:7e:6b:69:2f:da:58:0d:56:60:7b: 07:3a:19:19:c4:62:1a:b8:f0:28:5a:af:72:ac:7a: 2f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:55:BC:BD:F6:4B:D3:04:9C:28:02:D1:91:57:3F:40:C5:2E:18:38 X509v3 Authority Key Identifier: keyid:52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f4:c6:8e:87:dd:ec:20:77:28:5d:62:eb:0b:e2:a0:7f:a2: f0:74:46:d1:87:55:62:08:58:ae:e2:bf:50:ea:24:4a:c8:c9: 79:5d:b4:a1:25:b3:08:47:2a:93:65:d8:f5:ff:c4:07:02:7a: 07:2f:72:8c:ee:2c:82:3d:7f:3c:a8:7c:53:82:2f:7f:3d:98: d7:69:89:ee:0a:91:99:06:30:df:f8:fe:62:7a:e7:17:bf:62: d8:bd:61:a2:1c:28:1b:b8:d4:b4:80:86:f7:22:e4:50:67:8e: 3a:76:01:7f:ba:36:9d:9b:58:b0:2e:98:4c:7d:28:f6:63:03: a1:20:3f:a5:b8:57:3b:98:83:11:19:f1:4c:fd:b6:1f:86:1f: 41:46:c0:b7:ec:2d:84:b0:ff:63:67:fe:3b:25:c7:d8:57:59: d6:8a:59:54:dc:b4:16:8f:f2:a7:9c:07:e0:2f:0d:9e:27:db: 4a:13:b0:82:70:33:da:7d:c5:51:9e:93:7b:6c:39:8b:10:39: 04:73:8c:9f:54:f1:f8:2b:02:1b:94:7f:ae:0f:ba:b5:ca:cc: f8:e7:09:18:26:38:d7:72:70:63:27:aa:62:00:ae:dd:e8:8d: 30:17:c9:a7:a8:fb:db:65:fe:d3:41:de:da:82:3c:29:24:3b: 0a:2d:5e:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIzMEMxMTAvBgNVBAUTKDUyQjNFODNCMTYyMUFGQjNEQ0NGMEFDRjY3RjI3RUUw QjFENkM4MzYwHhcNMjUwNTEzMDQyMDQzWhcNMjUwNTIwMDQyMDQzWjAYMRYwFAYD VQQDEw02ODIyYzg5Yi1lMzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFuf98mj5/1DWmJXcW/jFSTktHTSWi8f2scRW8EMVBiF1Yuv9r68rVuPbOnz BysNvkdrvoxOdSJVoDtb3xm8Dl1scIE7Dw44tMhyYP7SLhc3U6pr6iEaHkbOup8c BFFx3ZbwN+vv0wp0Zuk9K3SBn72YACV9jeRhy53SvtIo+MIHhEeNCApuLhFX8OKA R+0bTAQU+Vzc9lxbkXOJtn3MHbLBy0kn8/j3wEYvLxu5qvKdD9tQHo9C/9txzqXf OS8up0XVgqJs3XYRmVJxssMqdsQU2wi2sx5C0fRAaLkXKDSUqWq1vn5raS/aWA1W YHsHOhkZxGIauPAoWq9yrHovWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpVvL32 S9MEnCgC0ZFXP0DFLhg4MB8GA1UdIwQYMBaAFFKz6DsWIa+z3M8Kz2fyfuCx1sg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMwQy85QTg3NTQzQUIw NUUxMUVFOTdDNzhCNzVDNEY5QUUwMi9VclBvT3hZaHI3UGN6d3JQWl9KLTRMSFd5 RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyUG9PeFlocjdQY3p3clBaX0otNExIV3lEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjMwQy85QTg3NTQzQUIwNUUxMUVFOTdDNzhCNzVDNEY5QUUwMi9VclBvT3hZaHI3 UGN6d3JQWl9KLTRMSFd5RFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO9MaOh93sIHcoXWLrC+Kgf6LwdEbRh1ViCFiu4r9Q6iRKyMl5XbSh JbMIRyqTZdj1/8QHAnoHL3KM7iyCPX88qHxTgi9/PZjXaYnuCpGZBjDf+P5ieucX v2LYvWGiHCgbuNS0gIb3IuRQZ446dgF/ujadm1iwLphMfSj2YwOhID+luFc7mIMR GfFM/bYfhh9BRsC37C2EsP9jZ/47JcfYV1nWillU3LQWj/KnnAfgLw2eJ9tKE7CC cDPafcVRnpN7bDmLEDkEc4yfVPH4KwIblH+uD7q1ysz45wkYJjjXcnBjJ6piAK7d 6I0wF8mnqPvbZf7TQd7agjwpJDsKLV6U -----END CERTIFICATE-----Generated at Wed May 14 11:44:49 2025 by rpki-client