$ rpki-client -vvf rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft File: uHLzTVUlH6dw7MOT0mcSED1VBzc.mft (raw, json) Hash identifier: vjG0GwUzYJL5v78ZqizPhSHtMpf6LhfDIjiujaugfG0= Subject key identifier: 2F:01:41:7F:89:52:EA:05:CC:56:97:54:22:E8:2E:DD:EB:C6:66:4C Authority key identifier: B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37 Certificate issuer: /CN=A917C606/serialNumber=B872F34D55251FA770ECC393D26712103D550737 Certificate serial: 03C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft Manifest number: 03B6 Signing time: Sun 11 May 2025 00:16:51 +0000 Manifest this update: Sun 11 May 2025 00:16:50 +0000 Manifest next update: Sun 18 May 2025 00:16:50 +0000 Files and hashes: 1: uHLzTVUlH6dw7MOT0mcSED1VBzc.crl (hash: bCP9QlqgY8dbGdStcDi04+8DSdJ86ToJnNDhujDOd8w=) 2: 945375FAF69511EC90A47215C4F9AE02.roa (hash: 93z4oqW7DQ1yUII6DWRvY7Xrtn4iF7Cp5BMrU5CKBhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 961 (0x3c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C606, serialNumber=B872F34D55251FA770ECC393D26712103D550737 Validity Not Before: May 11 00:16:50 2025 GMT Not After : May 18 00:16:50 2025 GMT Subject: CN=681fec72-1664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b8:49:b0:b0:02:dd:68:ed:b8:00:ca:7b:3a: a2:02:9c:d7:57:6c:77:f0:d6:75:cb:3a:56:3e:90: 0e:b8:8f:56:a9:c1:f3:08:2c:8a:ae:95:b4:d8:01: c5:5c:af:f4:4a:35:3a:f0:04:3c:60:b0:0b:c8:e6: 15:77:1e:c8:4e:86:a9:21:5f:14:e3:5a:b2:dd:09: 51:6f:19:83:d7:d2:40:15:df:ba:86:42:87:46:50: 63:21:76:a1:d3:48:ca:cb:3f:86:72:60:3f:e6:34: f4:3c:b4:6d:5c:aa:c5:e1:6f:5e:ab:4a:c0:b3:ba: 05:e3:1b:11:86:96:d7:5e:68:de:7e:a3:06:9c:17: de:21:de:ec:70:73:a8:c8:df:62:3f:b1:3f:4f:63: 11:73:87:58:35:a0:ab:bc:a9:5f:a2:fa:97:24:21: d3:bb:d6:82:a2:cb:70:93:32:4b:2c:66:e8:bb:c5: 99:2a:12:31:f7:ba:e1:f1:f3:3e:5f:a6:3d:7d:e8: c2:4e:3e:5b:f6:ea:c9:9b:07:76:ab:cf:60:99:13: 3e:5e:ca:1a:7c:0e:6c:da:e8:30:f7:4b:8f:2c:b5: 60:c7:61:69:10:af:84:d2:f7:93:10:ec:b4:de:55: 02:85:a0:37:77:bf:cb:4a:fa:96:96:eb:39:47:23: bf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:01:41:7F:89:52:EA:05:CC:56:97:54:22:E8:2E:DD:EB:C6:66:4C X509v3 Authority Key Identifier: keyid:B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:eb:02:40:4b:2c:14:a5:01:77:1a:04:76:d7:f7:23:2f:68: 4b:81:5e:48:d0:bf:62:37:3c:9e:4c:cb:2f:7e:b4:cb:2a:e4: 5f:5a:fc:cd:39:03:79:66:7d:c4:e0:ff:39:64:58:99:e4:e5: 29:d7:2b:ba:32:48:f4:49:79:51:03:3e:d1:b5:a0:13:49:c5: 5a:df:eb:86:70:1c:4c:d4:d4:a6:eb:91:de:18:13:0a:ab:11: e8:25:ea:59:79:55:8c:8f:86:ae:c2:9b:13:82:c0:53:be:c1: 69:8f:65:cb:b9:c0:5d:ba:da:5d:52:4e:98:85:c7:71:94:e2: bf:97:f7:e0:88:f6:4e:ca:6b:48:25:22:c2:60:e2:c4:5c:33: d2:7e:c2:e4:8f:01:36:d8:60:28:8c:77:25:d9:45:b4:85:c7: bf:a4:49:57:79:19:00:ea:8a:95:fc:1b:d8:97:44:db:9a:41: 07:4d:4a:0b:c9:f7:5f:12:44:aa:38:d5:9f:96:67:56:66:38: 56:7e:dc:a8:53:fb:f3:d3:64:8d:29:2c:47:12:2b:18:72:1f: 2e:fb:e5:99:68:ea:3d:eb:5e:3a:04:6e:e0:54:3f:a6:b4:f7: 48:50:f6:de:65:28:b6:56:18:22:a2:d2:51:c8:ff:62:e2:ec: 94:94:2a:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2MDYxMTAvBgNVBAUTKEI4NzJGMzRENTUyNTFGQTc3MEVDQzM5M0QyNjcxMjEw M0Q1NTA3MzcwHhcNMjUwNTExMDAxNjUwWhcNMjUwNTE4MDAxNjUwWjAYMRYwFAYD VQQDEw02ODFmZWM3Mi0xNjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrhJsLAC3WjtuADKezqiApzXV2x38NZ1yzpWPpAOuI9WqcHzCCyKrpW02AHF XK/0SjU68AQ8YLALyOYVdx7IToapIV8U41qy3QlRbxmD19JAFd+6hkKHRlBjIXah 00jKyz+GcmA/5jT0PLRtXKrF4W9eq0rAs7oF4xsRhpbXXmjefqMGnBfeId7scHOo yN9iP7E/T2MRc4dYNaCrvKlfovqXJCHTu9aCostwkzJLLGbou8WZKhIx97rh8fM+ X6Y9fejCTj5b9urJmwd2q89gmRM+XsoafA5s2ugw90uPLLVgx2FpEK+E0veTEOy0 3lUChaA3d7/LSvqWlus5RyO/6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8BQX+J UuoFzFaXVCLoLt3rxmZMMB8GA1UdIwQYMBaAFLhy801VJR+ncOzDk9JnEhA9VQc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzYwNi83QzhCMTM3QThG QzkxMUVDODE1NURCNjFDNEY5QUUwMi91SEx6VFZVbEg2ZHc3TU9UMG1jU0VEMVZC emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VITHpUVlVsSDZkdzdNT1QwbWNTRUQxVkJ6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzYwNi83QzhCMTM3QThGQzkxMUVDODE1NURCNjFDNEY5QUUwMi91SEx6VFZVbEg2 ZHc3TU9UMG1jU0VEMVZCemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE6wJASywUpQF3GgR21/cjL2hLgV5I0L9iNzyeTMsvfrTLKuRfWvzN OQN5Zn3E4P85ZFiZ5OUp1yu6Mkj0SXlRAz7RtaATScVa3+uGcBxM1NSm65HeGBMK qxHoJepZeVWMj4auwpsTgsBTvsFpj2XLucBdutpdUk6YhcdxlOK/l/fgiPZOymtI JSLCYOLEXDPSfsLkjwE22GAojHcl2UW0hce/pElXeRkA6oqV/BvYl0TbmkEHTUoL yfdfEkSqONWflmdWZjhWftyoU/vz02SNKSxHEisYch8u++WZaOo96146BG7gVD+m tPdIUPbeZSi2VhgiotJRyP9i4uyUlCqy -----END CERTIFICATE-----Generated at Mon May 12 22:53:52 2025 by rpki-client