$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft File: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft (raw, json) Hash identifier: qOzz80REhUuhbMjfAus6UoBTyTX8fpeClgQ2oLusNHo= Subject key identifier: 92:8A:65:50:30:AE:31:B5:4F:0C:23:5D:BC:16:E3:81:5E:F9:99:23 Authority key identifier: B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD Certificate issuer: /CN=A9170829/serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD Certificate serial: 0435 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft Manifest number: 055F Signing time: Tue 13 May 2025 00:12:06 +0000 Manifest this update: Tue 13 May 2025 00:12:05 +0000 Manifest next update: Tue 20 May 2025 00:12:05 +0000 Files and hashes: 1: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl (hash: mGLtnQXk0sMkMssTpNf1lCChYuBnOQ98H+bvrgN3BPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1077 (0x435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170829, serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD Validity Not Before: May 13 00:12:05 2025 GMT Not After : May 20 00:12:05 2025 GMT Subject: CN=68228e56-735f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:05:2d:dd:12:09:41:f8:a6:4b:7a:ad:0a:06: 7a:30:c7:6b:da:a0:2f:3d:26:32:4e:51:4d:50:e4: de:a6:2a:21:bd:9b:b2:ed:3c:42:8d:80:7b:f7:27: 48:da:8b:d8:66:59:a0:5f:03:05:53:48:01:71:97: 91:65:50:98:72:f1:36:a7:47:8e:ae:92:fe:4f:6d: 2d:6e:30:9e:57:a5:5a:21:a3:dc:62:3c:e7:e3:4d: bd:e3:98:f9:39:11:95:a4:ea:39:19:08:47:da:cd: 64:64:fa:fb:df:3c:b2:86:57:8f:b4:e8:5c:d7:0f: e0:d2:9a:a3:ac:78:9c:54:c0:e5:51:cb:46:00:0e: 0c:22:cc:13:b6:50:bd:75:3b:57:48:54:b6:00:2c: af:7f:67:54:98:2b:1d:04:e6:e2:27:5b:72:13:15: 88:e7:54:66:bb:75:11:fe:ea:d8:d4:ec:b2:06:c9: cd:6c:26:9c:40:08:3d:80:55:64:bf:f5:05:e5:75: bc:2a:4c:7f:f5:fb:34:b2:25:01:a0:e8:b2:19:e9: 9f:fd:f2:fa:ba:2e:cf:10:0e:e5:f5:d8:63:17:c0: de:7d:1f:de:ea:5e:33:72:4c:42:34:37:4c:c3:d3: 35:71:d1:43:9f:8a:95:5f:f1:dd:0d:c3:46:bf:35: 27:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8A:65:50:30:AE:31:B5:4F:0C:23:5D:BC:16:E3:81:5E:F9:99:23 X509v3 Authority Key Identifier: keyid:B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:f2:75:f6:e0:1f:55:32:4d:11:c4:df:a4:87:d4:bc:cc:02: 28:8e:ff:74:32:3e:40:96:a1:fe:6f:38:ee:ce:c8:e4:0d:22: 4a:c5:bd:ae:87:30:07:1c:89:e2:96:e9:da:e9:74:61:ba:b5: 01:3f:32:c2:d0:b9:7e:aa:d9:ae:5d:1c:4d:56:51:46:63:fb: 3f:63:56:65:d8:17:9e:97:73:e1:8c:63:8d:fc:50:c6:57:93: 97:cf:ec:2c:76:00:85:14:ad:ba:2e:23:bb:3d:6a:2b:dc:cb: f7:d8:7b:f5:c4:98:cc:6e:87:1b:48:9d:86:b9:ac:f6:2b:26: b4:9c:df:af:29:5d:5f:ef:a8:21:dc:7f:22:09:eb:82:c7:7d: a1:0c:e6:7c:33:ee:ca:80:89:35:ea:13:ab:b7:f6:fc:e3:1e: ce:26:35:97:81:53:d4:d8:cd:09:2d:11:e9:5e:f8:6f:43:33: ef:ae:18:c5:ac:5a:fe:10:9a:75:c1:6c:c7:30:70:95:2f:a4: 76:3b:f9:47:c3:d8:ba:7d:2a:f9:22:11:bf:92:2d:ac:bd:a4: 03:a0:78:2a:46:07:82:1a:3d:e2:26:5c:50:f7:4a:c9:44:29: 51:b6:90:a5:5f:a2:8a:54:3a:f1:74:5b:1c:f4:d2:3a:9c:08: 52:a3:ee:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA4MjkxMTAvBgNVBAUTKEI4Rjg0NkI0MzUzQjY0MjlBQzQwNDNGMzJCQjc4OTRD RjgzODU1RkQwHhcNMjUwNTEzMDAxMjA1WhcNMjUwNTIwMDAxMjA1WjAYMRYwFAYD VQQDEw02ODIyOGU1Ni03MzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwUt3RIJQfimS3qtCgZ6MMdr2qAvPSYyTlFNUOTepiohvZuy7TxCjYB79ydI 2ovYZlmgXwMFU0gBcZeRZVCYcvE2p0eOrpL+T20tbjCeV6VaIaPcYjzn402945j5 ORGVpOo5GQhH2s1kZPr73zyyhlePtOhc1w/g0pqjrHicVMDlUctGAA4MIswTtlC9 dTtXSFS2ACyvf2dUmCsdBObiJ1tyExWI51Rmu3UR/urY1OyyBsnNbCacQAg9gFVk v/UF5XW8Kkx/9fs0siUBoOiyGemf/fL6ui7PEA7l9dhjF8DefR/e6l4zckxCNDdM w9M1cdFDn4qVX/HdDcNGvzUntwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKKZVAw rjG1TwwjXbwW44Fe+ZkjMB8GA1UdIwQYMBaAFLj4RrQ1O2QprEBD8yu3iUz4OFX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi91UGhHdERVN1pDbXNRRVB6SzdlSlRQZzRW ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQaEd0RFU3WkNtc1FFUHpLN2VKVFBnNFZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDgyOS83NjY3QkVEMDYzQTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi91UGhHdERVN1pD bXNRRVB6SzdlSlRQZzRWZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD8nX24B9VMk0RxN+kh9S8zAIojv90Mj5AlqH+bzjuzsjkDSJKxb2u hzAHHIniluna6XRhurUBPzLC0Ll+qtmuXRxNVlFGY/s/Y1Zl2Beel3PhjGON/FDG V5OXz+wsdgCFFK26LiO7PWor3Mv32Hv1xJjMbocbSJ2Guaz2Kya0nN+vKV1f76gh 3H8iCeuCx32hDOZ8M+7KgIk16hOrt/b84x7OJjWXgVPU2M0JLRHpXvhvQzPvrhjF rFr+EJp1wWzHMHCVL6R2O/lHw9i6fSr5IhG/ki2svaQDoHgqRgeCGj3iJlxQ90rJ RClRtpClX6KKVDrxdFsc9NI6nAhSo+6Q -----END CERTIFICATE-----Generated at Wed May 14 15:04:54 2025 by rpki-client