$ rpki-client -vvf rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft File: 7UHN-Ie33i9cIBvogU8ejfPQIB8.mft (raw, json) Hash identifier: mFXk7t7RmCKUglYGR+4j7LCFX08C9NKQ4kbeGWSuZXY= Subject key identifier: 22:00:50:C8:6F:4E:10:21:10:1B:53:15:17:14:E9:10:AA:CB:E2:80 Authority key identifier: ED:41:CD:F8:87:B7:DE:2F:5C:20:1B:E8:81:4F:1E:8D:F3:D0:20:1F Certificate issuer: /CN=A916C832/serialNumber=ED41CDF887B7DE2F5C201BE8814F1E8DF3D0201F Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft Manifest number: 0E Signing time: Thu 15 May 2025 07:23:22 +0000 Manifest this update: Thu 15 May 2025 07:23:22 +0000 Manifest next update: Thu 22 May 2025 07:23:22 +0000 Files and hashes: 1: 7UHN-Ie33i9cIBvogU8ejfPQIB8.crl (hash: xiEJaI/4w85pJZuY5UMqc2ey+hZNpu+KTnN886CjfxU=) 2: AA3FBE4A1E6111F093F53B75C4F9AE02.roa (hash: LSRr7TMpx9Qi1u09QfccXCZNggaDKCGxTg8r/GddSHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.crl rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C832, serialNumber=ED41CDF887B7DE2F5C201BE8814F1E8DF3D0201F Validity Not Before: May 15 07:23:22 2025 GMT Not After : May 22 07:23:22 2025 GMT Subject: CN=6825966a-3212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:c2:c7:74:47:8e:d6:77:e1:28:09:5f:46: 71:e2:84:23:44:2d:59:51:59:90:da:fb:aa:15:be: ca:76:24:7b:0b:40:fa:8b:ac:8f:ee:06:e3:53:df: ac:7b:bb:3b:1b:e5:e7:f7:82:c1:e0:8d:8f:da:0b: 42:a6:4e:34:61:e0:51:cc:4f:c6:24:7f:72:8d:d5: 4a:1e:ef:78:1d:da:d4:10:6a:11:10:f3:b3:5f:8d: 85:8d:74:ce:eb:06:8a:80:9a:6d:78:6c:5d:c7:21: e2:6e:42:cc:b5:10:80:58:fb:ac:ea:93:a8:6f:0e: 7c:c9:20:9f:b0:44:56:16:88:73:8c:ca:a5:7f:22: 99:2c:70:11:7d:a5:30:79:df:a7:91:0e:f7:91:09: 93:ca:6b:98:6f:33:9f:ca:b0:84:49:d1:6f:32:1e: 90:5f:e2:4c:55:06:cf:ef:15:57:1e:fd:c1:10:39: 7c:01:06:18:dc:a9:b8:2a:e2:cf:b3:78:8d:d5:40: 99:6b:4b:41:5c:d4:e3:11:5a:6b:83:eb:43:f2:03: e6:74:f2:f0:67:69:93:ed:b4:a2:ec:1d:95:6e:9f: a1:7b:ad:6a:a7:ae:0a:b6:6a:20:f7:30:e1:07:f0: 67:0c:bc:61:84:62:fd:9e:d8:f0:16:5a:68:a0:10: 4b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:00:50:C8:6F:4E:10:21:10:1B:53:15:17:14:E9:10:AA:CB:E2:80 X509v3 Authority Key Identifier: keyid:ED:41:CD:F8:87:B7:DE:2F:5C:20:1B:E8:81:4F:1E:8D:F3:D0:20:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fa:8b:87:2f:f5:63:3f:f0:09:65:98:0a:66:8c:63:32:1f: 87:23:7c:96:97:ad:3d:8f:58:57:e8:b2:e9:bb:61:ba:63:8a: b4:de:27:a6:94:c1:48:35:9c:16:28:de:3f:e7:6a:dc:53:f3: e1:fa:e5:0c:09:23:33:e9:36:73:cb:ee:77:cb:c8:2d:c2:a4: 1c:98:1a:59:36:dc:84:73:80:68:81:bc:44:d4:fa:16:cf:d4: 40:9b:c1:9c:90:14:13:28:88:34:eb:8d:6b:ca:fe:42:87:97: 68:90:dc:46:f7:72:13:6d:c6:74:79:47:ae:0a:d2:51:0b:89: 60:28:27:31:ce:10:15:d6:a9:1f:04:f4:53:cc:f1:19:5f:6b: 0d:39:ae:9a:8f:9a:ee:69:90:47:59:3c:fa:60:10:29:7d:09: a5:61:23:c3:f1:6c:47:af:d1:23:5b:8d:c0:c1:2d:8c:46:d0: c0:55:4d:b5:2e:6f:51:9a:4c:ca:bd:7e:db:fe:a0:a2:87:cf: eb:83:8c:45:40:be:24:39:62:f4:6d:a8:8c:49:db:9f:85:cb: 66:8c:4e:98:ca:c8:19:73:25:01:9e:d9:9c:7c:a7:1f:b4:53: 0c:fc:f7:71:95:51:7d:6f:23:57:9a:49:0e:e6:bd:f9:37:ef: 7f:65:63:7e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzgzMjExMC8GA1UEBRMoRUQ0MUNERjg4N0I3REUyRjVDMjAxQkU4ODE0RjFFOERG M0QwMjAxRjAeFw0yNTA1MTUwNzIzMjJaFw0yNTA1MjIwNzIzMjJaMBgxFjAUBgNV BAMTDTY4MjU5NjZhLTMyMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7bMLHdEeO1nfhKAlfRnHihCNELVlRWZDa+6oVvsp2JHsLQPqLrI/uBuNT36x7 uzsb5ef3gsHgjY/aC0KmTjRh4FHMT8Ykf3KN1Uoe73gd2tQQahEQ87NfjYWNdM7r BoqAmm14bF3HIeJuQsy1EIBY+6zqk6hvDnzJIJ+wRFYWiHOMyqV/IpkscBF9pTB5 36eRDveRCZPKa5hvM5/KsIRJ0W8yHpBf4kxVBs/vFVce/cEQOXwBBhjcqbgq4s+z eI3VQJlrS0Fc1OMRWmuD60PyA+Z08vBnaZPttKLsHZVun6F7rWqnrgq2aiD3MOEH 8GcMvGGEYv2e2PAWWmigEEsRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIgBQyG9O ECEQG1MVFxTpEKrL4oAwHwYDVR0jBBgwFoAU7UHN+Ie33i9cIBvogU8ejfPQIB8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDODMyLzVCNjE4MDYwMUU2 MTExRjA5MzRGNkY3NEM0RjlBRTAyLzdVSE4tSWUzM2k5Y0lCdm9nVThlamZQUUlC OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN1VITi1JZTMzaTljSUJ2b2dVOGVqZlBRSUI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD ODMyLzVCNjE4MDYwMUU2MTExRjA5MzRGNkY3NEM0RjlBRTAyLzdVSE4tSWUzM2k5 Y0lCdm9nVThlamZQUUlCOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABv6i4cv9WM/8AllmApmjGMyH4cjfJaXrT2PWFfosum7YbpjirTeJ6aU wUg1nBYo3j/natxT8+H65QwJIzPpNnPL7nfLyC3CpByYGlk23IRzgGiBvETU+hbP 1ECbwZyQFBMoiDTrjWvK/kKHl2iQ3Eb3chNtxnR5R64K0lELiWAoJzHOEBXWqR8E 9FPM8Rlfaw05rpqPmu5pkEdZPPpgECl9CaVhI8PxbEev0SNbjcDBLYxG0MBVTbUu b1GaTMq9ftv+oKKHz+uDjEVAviQ5YvRtqIxJ25+Fy2aMTpjKyBlzJQGe2Zx8px+0 Uwz893GVUX1vI1eaSQ7mvfk3739lY34= -----END CERTIFICATE-----Generated at Thu May 15 19:32:20 2025 by rpki-client