$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft File: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json) Hash identifier: D0Bf/FMH6IGpbI1JKyyTqn0RMuitzPEuOMDIh1pyCaA= Subject key identifier: 45:D9:63:ED:5D:F5:8C:BA:9B:0C:13:EF:03:85:6E:DC:D7:E8:9A:8F Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 Certificate issuer: /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Certificate serial: 2A0C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft Manifest number: 2A0C Signing time: Wed 14 May 2025 15:40:13 +0000 Manifest this update: Wed 14 May 2025 15:40:12 +0000 Manifest next update: Wed 21 May 2025 15:40:12 +0000 Files and hashes: 1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: 245WtJ61qpkE8pkADcAcmmY0g+K9ktmL3YhQ4/l9HZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10764 (0x2a0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Validity Not Before: May 14 15:40:12 2025 GMT Not After : May 21 15:40:12 2025 GMT Subject: CN=6824b95d-d774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f7:73:d0:83:04:5a:ea:3c:24:ea:1b:2b:de: bc:0a:aa:0d:7f:27:bd:05:ea:46:5c:1c:1c:8b:61: 45:21:0f:eb:48:8c:7b:a7:9c:41:6f:f1:4e:1d:09: d9:41:cc:fb:43:16:92:7b:69:3c:fe:3b:22:61:66: f0:6b:ba:04:6c:28:2e:aa:68:40:c1:cd:20:d4:48: fb:5f:7a:9a:b7:d2:2c:d2:0f:b1:24:12:ac:6b:6c: 77:a8:83:3f:bd:c2:c2:d2:36:34:c0:50:36:f3:46: 4f:d5:20:82:29:b5:f4:32:53:ba:fd:0b:72:e3:23: 0b:4b:9e:ad:04:f9:c3:9a:e2:43:3d:c5:42:3a:c0: 8a:f6:e2:cb:aa:72:95:76:8f:a8:e4:b3:d8:c3:8d: 44:74:82:98:52:81:72:5a:47:d5:95:50:79:26:a2: c2:f4:e4:b6:43:0a:6e:e1:e4:2e:01:13:2e:71:62: ef:b1:f9:45:ac:2b:b5:c0:d5:83:20:0d:be:97:3a: cc:1c:cd:45:3b:84:98:67:90:de:e7:4f:00:2f:7b: 5b:9b:d8:f8:85:e8:4b:da:bf:0f:64:93:91:f6:b8: a8:17:cd:aa:6f:68:73:48:d8:ef:06:e0:ab:76:45: 76:31:51:72:ab:94:7f:ad:c2:2b:c0:bb:da:73:8c: 7f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D9:63:ED:5D:F5:8C:BA:9B:0C:13:EF:03:85:6E:DC:D7:E8:9A:8F X509v3 Authority Key Identifier: keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:6d:9e:10:78:25:04:d6:91:aa:eb:55:3d:28:f3:3e:00:c5: 1f:a6:68:cd:7c:62:81:a1:7b:a4:8b:d9:99:ff:07:80:0b:50: a8:b4:b7:ca:46:15:af:db:c6:48:66:2e:49:74:2f:5e:0d:e3: 0e:f1:c6:4e:e2:44:5f:b5:fd:78:59:b7:a5:7b:f9:05:d3:a6: 21:bd:33:02:1a:23:a0:ef:d7:a7:11:a7:1e:d4:ba:19:b0:e3: ba:31:8e:86:03:5a:92:12:1a:63:e3:83:d3:70:32:cf:f5:8a: 40:3b:0b:5a:a5:21:ae:58:bd:5d:1a:da:03:7a:1e:82:eb:40: 53:5c:3b:be:75:6e:46:23:cd:60:73:b2:a1:76:61:3e:5a:3c: a9:a8:67:37:ae:84:b9:f6:73:af:21:e1:b0:4d:db:b7:58:83: 4b:9e:3c:92:c8:b1:2e:1b:90:ef:96:b9:29:9c:01:25:48:44: f0:63:4d:55:98:85:b8:cf:1a:1a:79:1f:d6:8d:89:67:00:c7: 05:fb:c3:68:f8:ba:b4:13:6f:90:97:cb:0f:df:47:31:4f:c5: e4:f6:80:6c:a0:ea:8f:9e:87:7d:44:95:ed:2e:f8:c1:56:d2: e6:ea:f2:1d:8b:43:47:62:06:26:0a:56:24:cc:61:7a:9b:14: ac:fb:fd:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKERENDkzMEUzRTQyREZFM0JGRkY0ODFCMTc5NzcwRDFB QjE1NzVCQzMwHhcNMjUwNTE0MTU0MDEyWhcNMjUwNTIxMTU0MDEyWjAYMRYwFAYD VQQDEw02ODI0Yjk1ZC1kNzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/dz0IMEWuo8JOobK968CqoNfye9BepGXBwci2FFIQ/rSIx7p5xBb/FOHQnZ Qcz7QxaSe2k8/jsiYWbwa7oEbCguqmhAwc0g1Ej7X3qat9Is0g+xJBKsa2x3qIM/ vcLC0jY0wFA280ZP1SCCKbX0MlO6/Qty4yMLS56tBPnDmuJDPcVCOsCK9uLLqnKV do+o5LPYw41EdIKYUoFyWkfVlVB5JqLC9OS2Qwpu4eQuARMucWLvsflFrCu1wNWD IA2+lzrMHM1FO4SYZ5De508AL3tbm9j4hehL2r8PZJOR9rioF82qb2hzSNjvBuCr dkV2MVFyq5R/rcIrwLvac4x/RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXZY+1d 9Yy6mwwT7wOFbtzX6JqPMB8GA1UdIwQYMBaAFN1JMOPkLf47//SBsXl3DRqxV1vD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9ENzg1OTlCQzMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9qdl85SUd4ZVhjTkdyRlhX OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNVa3c0LVF0X2p2XzlJR3hlWGNOR3JGWFc4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjIxNC9ENzg1OTlCQzMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9q dl85SUd4ZVhjTkdyRlhXOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwbZ4QeCUE1pGq61U9KPM+AMUfpmjNfGKBoXuki9mZ/weAC1CotLfK RhWv28ZIZi5JdC9eDeMO8cZO4kRftf14Wbele/kF06YhvTMCGiOg79enEace1LoZ sOO6MY6GA1qSEhpj44PTcDLP9YpAOwtapSGuWL1dGtoDeh6C60BTXDu+dW5GI81g c7KhdmE+WjypqGc3roS59nOvIeGwTdu3WINLnjySyLEuG5DvlrkpnAElSETwY01V mIW4zxoaeR/WjYlnAMcF+8No+Lq0E2+Ql8sP30cxT8Xk9oBsoOqPnod9RJXtLvjB VtLm6vIdi0NHYgYmClYkzGF6mxSs+/3P -----END CERTIFICATE-----Generated at Thu May 15 13:51:33 2025 by rpki-client