$ rpki-client -vvf rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft File: uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft (raw, json) Hash identifier: bM037yggSoN0zvBB/1muaW4TxIq3i2/KasyEGNRwhyQ= Subject key identifier: 83:D3:58:24:F7:5E:19:17:2F:53:0A:2A:69:F3:00:F2:8D:7F:ED:BC Authority key identifier: B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25 Certificate issuer: /CN=A917068E/serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25 Certificate serial: 065B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft Manifest number: 0653 Signing time: Mon 12 May 2025 22:17:04 +0000 Manifest this update: Mon 12 May 2025 22:17:04 +0000 Manifest next update: Mon 19 May 2025 22:17:04 +0000 Files and hashes: 1: uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl (hash: yodkIgTcWmtkjPwGb+qBUKu3eX05cq77AXwtIlRULuY=) 2: 8889F4E484A711EBB701E773C4F9AE02.roa (hash: J+8/ZwrlIkoJr01jQAl9vk2aVwqPeoCZlFWB5DqiI1A=) 3: 7464EB1E876411EE8971C221C4F9AE02.roa (hash: ojB4V4VtVHXuFHAezvaTkfH4Bh/CstC86ZtstiMw1LA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1627 (0x65b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917068E, serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25 Validity Not Before: May 12 22:17:04 2025 GMT Not After : May 19 22:17:04 2025 GMT Subject: CN=68227360-1cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:89:e1:43:9c:5e:66:b8:d4:8f:17:aa:d1:4d: 2a:ff:e5:0d:a3:cf:bc:f7:53:b6:9c:f8:12:48:24: 90:bd:17:ab:e7:a6:98:db:3e:00:b3:dc:8c:9c:3e: fb:b2:62:9c:a7:9f:d5:76:b9:d0:00:05:0b:d1:9d: 39:e8:39:a8:72:62:f1:77:6b:e8:6d:d7:3e:80:a1: d5:ec:24:73:1a:07:e1:99:f8:db:45:6a:c6:3a:ba: 72:b9:30:62:85:35:17:e8:6d:14:6e:39:db:71:a1: 45:17:99:e4:4c:5f:64:12:fa:08:e3:01:dc:5d:bf: c7:d3:20:a7:e9:a6:1a:a7:ec:73:64:6d:c3:32:5d: e1:ee:f0:a9:4e:97:61:94:72:5d:da:a9:7e:0e:d5: 72:55:63:18:96:ef:b7:e7:23:f2:ff:db:34:05:63: 0f:93:80:1a:f9:79:ca:69:70:bd:af:e6:38:3e:98: cc:2e:c5:c3:d4:70:9a:8c:11:8d:ed:e5:8e:33:c3: 19:11:47:ca:6a:f9:e0:07:0a:8d:74:e2:89:f0:9c: d9:4b:0c:48:43:74:f5:9f:2f:0d:a5:12:2c:12:18: 2c:58:94:36:3f:6e:26:60:53:d7:0e:94:0b:58:fc: ad:29:e7:d0:c3:ce:4b:70:be:ba:77:e0:93:bc:30: 40:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D3:58:24:F7:5E:19:17:2F:53:0A:2A:69:F3:00:F2:8D:7F:ED:BC X509v3 Authority Key Identifier: keyid:B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:2e:53:be:b4:4d:e6:72:81:25:3e:b7:4a:ba:e0:48:6a:89: 80:78:37:14:99:77:b0:d0:35:48:e3:5a:fb:e6:5c:60:eb:93: 51:a4:d9:a6:16:1e:1e:ec:fa:02:13:ca:5f:d5:78:60:38:fc: 83:aa:8f:1e:6a:89:54:3b:96:a1:0c:37:b5:03:9e:f7:5b:62: 3e:b2:b5:78:be:c8:78:bd:3d:c2:c6:84:4f:ba:77:fa:bd:ff: 53:df:10:3a:d8:7f:7d:5a:0f:c6:39:24:c0:67:90:6a:dc:c5: 84:35:8a:6f:29:26:cc:7c:4f:4f:02:1c:a4:77:41:5c:96:f8: d7:1c:3e:56:32:72:7d:0f:a2:74:09:75:c5:20:ce:08:1f:07: 0b:f1:d8:db:09:92:0b:f8:ea:c2:e1:9a:96:fc:16:c4:00:8b: b5:55:42:d2:d9:b2:82:14:3b:73:81:e1:13:56:e1:fb:46:cd: 38:5b:c0:54:af:a9:b2:d0:7d:81:54:ae:7f:04:d4:c6:da:e3: bb:60:ca:a6:31:c4:59:74:7e:e8:01:97:e5:d5:a7:ca:ee:cc: f2:a4:7d:af:94:90:59:99:2e:32:df:6e:cd:13:39:c7:85:85: 14:73:87:45:6f:b9:23:f2:67:7d:d2:23:ba:80:3d:cc:39:0a: e2:f4:24:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2OEUxMTAvBgNVBAUTKEI4RjhDMzYyNkREMDYxNjJFNjdFMjVGNTlBOUE4MUZB RTQ3MjBBMjUwHhcNMjUwNTEyMjIxNzA0WhcNMjUwNTE5MjIxNzA0WjAYMRYwFAYD VQQDEw02ODIyNzM2MC0xY2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnonhQ5xeZrjUjxeq0U0q/+UNo8+891O2nPgSSCSQvRer56aY2z4As9yMnD77 smKcp5/VdrnQAAUL0Z056DmocmLxd2vobdc+gKHV7CRzGgfhmfjbRWrGOrpyuTBi hTUX6G0UbjnbcaFFF5nkTF9kEvoI4wHcXb/H0yCn6aYap+xzZG3DMl3h7vCpTpdh lHJd2ql+DtVyVWMYlu+35yPy/9s0BWMPk4Aa+XnKaXC9r+Y4PpjMLsXD1HCajBGN 7eWOM8MZEUfKavngBwqNdOKJ8JzZSwxIQ3T1ny8NpRIsEhgsWJQ2P24mYFPXDpQL WPytKefQw85LcL66d+CTvDBA8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPTWCT3 XhkXL1MKKmnzAPKNf+28MB8GA1UdIwQYMBaAFLj4w2Jt0GFi5n4l9Zqagfrkcgol MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDY4RS9ENkVGNjcxQTg0 QTUxMUVCQUU5RTQ0NzJDNEY5QUUwMi91UGpEWW0zUVlXTG1maVgxbXBxQi11UnlD aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQakRZbTNRWVdMbWZpWDFtcHFCLXVSeUNpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDY4RS9ENkVGNjcxQTg0QTUxMUVCQUU5RTQ0NzJDNEY5QUUwMi91UGpEWW0zUVlX TG1maVgxbXBxQi11UnlDaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsLlO+tE3mcoElPrdKuuBIaomAeDcUmXew0DVI41r75lxg65NRpNmm Fh4e7PoCE8pf1XhgOPyDqo8eaolUO5ahDDe1A573W2I+srV4vsh4vT3CxoRPunf6 vf9T3xA62H99Wg/GOSTAZ5Bq3MWENYpvKSbMfE9PAhykd0FclvjXHD5WMnJ9D6J0 CXXFIM4IHwcL8djbCZIL+OrC4ZqW/BbEAIu1VULS2bKCFDtzgeETVuH7Rs04W8BU r6my0H2BVK5/BNTG2uO7YMqmMcRZdH7oAZfl1afK7szypH2vlJBZmS4y327NEznH hYUUc4dFb7kj8md90iO6gD3MOQri9CSR -----END CERTIFICATE-----Generated at Tue May 13 18:34:26 2025 by rpki-client