$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft File: S-UGizexYyUw_1Ijhue3-wGI6eo.mft (raw, json) Hash identifier: AQ9hT7CTL+xKPL3QX+Te76S689ssuW36CFAsssqBWT0= Subject key identifier: 8A:82:10:4B:DE:7C:DD:5D:E9:38:3A:D6:40:F3:6A:8E:80:9F:2A:61 Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA Certificate issuer: /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft Manifest number: FF Signing time: Sun 11 May 2025 04:01:27 +0000 Manifest this update: Sun 11 May 2025 04:01:26 +0000 Manifest next update: Sun 18 May 2025 04:01:26 +0000 Files and hashes: 1: S-UGizexYyUw_1Ijhue3-wGI6eo.crl (hash: oDPoSim18HHYbDUFnXv9X1rZjqcKkpkDJ3wPnSVnJr0=) 2: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (hash: 0bfhohRWkw+mHnMOok0JegQjrp5R3WBkt6xVLjqYhaM=) 3: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (hash: 9uv33qCd79bYBodXMfJmbwWFz6eg4sXVPhBBvtjp6jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Validity Not Before: May 11 04:01:26 2025 GMT Not After : May 18 04:01:26 2025 GMT Subject: CN=68202116-2d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5f:0a:12:42:91:9b:36:3e:7e:e1:bc:6d:8f: 56:b7:de:42:d4:38:07:15:9d:81:c0:34:dc:2d:90: 81:85:37:eb:c8:4d:ac:21:40:ed:7b:ad:7f:bd:be: 7c:2d:90:4f:c8:b1:04:1b:bc:22:26:54:a0:be:82: 68:4e:b0:6b:d7:24:fc:78:a2:1a:26:54:21:8f:c3: 24:0f:16:a7:73:0b:0e:cc:dc:5f:b8:38:42:9d:ce: 2a:d3:af:df:2f:cb:48:4e:50:70:6c:a8:92:a0:2e: 98:53:bf:ce:4b:50:78:b4:5f:7a:38:ef:29:10:d6: 69:84:77:de:b3:92:5e:65:f2:0e:f2:51:ff:fd:3a: 93:8a:36:be:fe:39:28:a4:54:18:41:7f:c5:b5:2a: 6e:58:e8:cb:55:a3:db:07:ec:fb:18:94:20:4c:fd: 79:da:05:d6:27:58:75:86:02:7e:9e:d0:c6:e7:8a: 0c:c8:70:87:e4:6e:33:9d:a6:b6:da:f6:b5:90:bb: 16:11:35:dc:96:40:ff:8a:f9:57:97:d6:04:54:ab: 71:61:9c:c1:86:e8:bd:03:0d:02:32:42:53:0f:d4: 55:45:aa:b9:bd:43:4d:c9:02:d8:67:c0:ec:f2:af: db:1c:ea:cb:65:74:6c:63:8f:28:1b:2f:25:72:c5: 35:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:82:10:4B:DE:7C:DD:5D:E9:38:3A:D6:40:F3:6A:8E:80:9F:2A:61 X509v3 Authority Key Identifier: keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f9:fb:e4:9d:1d:3e:fd:f7:76:d3:5a:05:08:43:a5:d2:de: 4f:df:14:52:d4:c1:01:27:65:e2:f9:3c:1b:f3:49:5a:f4:d3: f5:8f:b1:cf:3a:4f:c3:a0:72:24:48:f6:66:44:92:e5:37:53: 0f:17:23:47:62:46:31:8f:5c:11:cf:0a:f0:68:e6:31:fd:c4: d4:d3:b1:66:fc:bd:95:dc:f8:b7:47:a0:0d:90:cf:d5:9e:0c: a2:8a:41:20:b3:32:de:51:56:65:06:c1:00:93:c2:a6:2f:10: 03:11:5a:68:0f:eb:7d:17:e4:30:82:a6:db:89:7e:01:ef:0b: fe:cb:ac:24:26:b2:5b:72:5a:a0:85:48:f1:00:8d:2b:ae:96: 23:83:51:55:7b:a9:d4:b4:fc:9d:9d:7e:63:c6:25:7a:c7:b7: 54:64:ac:3c:ff:d5:16:cb:43:25:90:a4:a9:54:59:82:08:1e: e4:13:44:03:c6:da:47:0c:1d:d8:33:c1:0d:9d:c4:ed:21:1a: a9:89:92:bc:3f:3b:be:b5:ba:a8:14:e7:b1:a2:2b:10:42:34: 4e:15:26:3b:a3:cc:2b:92:ce:bf:8f:1b:2b:62:4c:fc:66:f0: 86:5e:a2:8d:92:45:a5:9f:7f:ff:da:3f:88:6f:20:9a:74:32: 87:4a:36:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDRCRTUwNjhCMzdCMTYzMjUzMEZGNTIyMzg2RTdCN0ZC MDE4OEU5RUEwHhcNMjUwNTExMDQwMTI2WhcNMjUwNTE4MDQwMTI2WjAYMRYwFAYD VQQDEw02ODIwMjExNi0yZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyF8KEkKRmzY+fuG8bY9Wt95C1DgHFZ2BwDTcLZCBhTfryE2sIUDte61/vb58 LZBPyLEEG7wiJlSgvoJoTrBr1yT8eKIaJlQhj8MkDxancwsOzNxfuDhCnc4q06/f L8tITlBwbKiSoC6YU7/OS1B4tF96OO8pENZphHfes5JeZfIO8lH//TqTija+/jko pFQYQX/FtSpuWOjLVaPbB+z7GJQgTP152gXWJ1h1hgJ+ntDG54oMyHCH5G4znaa2 2va1kLsWETXclkD/ivlXl9YEVKtxYZzBhui9Aw0CMkJTD9RVRaq5vUNNyQLYZ8Ds 8q/bHOrLZXRsY48oGy8lcsU10QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqCEEve fN1d6Tg61kDzao6AnyphMB8GA1UdIwQYMBaAFEvlBos3sWMlMP9SI4bnt/sBiOnq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy9FODBGMTM3Q0I5 OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5VXdfMUlqaHVlMy13R0k2 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1MtVUdpemV4WXlVd18xSWpodWUzLXdHSTZlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy9FODBGMTM3Q0I5OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5 VXdfMUlqaHVlMy13R0k2ZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa+fvknR0+/fd201oFCEOl0t5P3xRS1MEBJ2Xi+Twb80la9NP1j7HP Ok/DoHIkSPZmRJLlN1MPFyNHYkYxj1wRzwrwaOYx/cTU07Fm/L2V3Pi3R6ANkM/V ngyiikEgszLeUVZlBsEAk8KmLxADEVpoD+t9F+QwgqbbiX4B7wv+y6wkJrJbclqg hUjxAI0rrpYjg1FVe6nUtPydnX5jxiV6x7dUZKw8/9UWy0MlkKSpVFmCCB7kE0QD xtpHDB3YM8ENncTtIRqpiZK8Pzu+tbqoFOexoisQQjROFSY7o8wrks6/jxsrYkz8 ZvCGXqKNkkWln3//2j+IbyCadDKHSja3 -----END CERTIFICATE-----Generated at Mon May 12 23:20:53 2025 by rpki-client