$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft File: ux3tVEsnoTcZtI-wA3PNSeDehRc.mft (raw, json) Hash identifier: EnqKM0X8wAjW3kTi32VGTlSWyaLVrGNG/XI85IDdoWU= Subject key identifier: 63:79:D2:A5:E3:26:31:53:7E:25:B3:DC:5D:1F:B3:A4:61:12:28:5F Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Certificate serial: 08C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft Manifest number: 08B4 Signing time: Wed 14 May 2025 20:37:38 +0000 Manifest this update: Wed 14 May 2025 20:37:38 +0000 Manifest next update: Wed 21 May 2025 20:37:38 +0000 Files and hashes: 1: ux3tVEsnoTcZtI-wA3PNSeDehRc.crl (hash: furd4E+nKXsz/v/a1j85/BkGns+OdiroI7+NaT5IBFo=) 2: 2B7215E2B54B11EA85EE266DC4F9AE02.roa (hash: HHCFckY7O591LILqzlA5i+TVYe0u7mT2Ya4XZsY3L5w=) 3: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (hash: vv1GYbA2AyqRD7ZSBeebG8Ws0r4NHNq0J0Vkh/R0ypw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2240 (0x8c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919123C, serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Validity Not Before: May 14 20:37:38 2025 GMT Not After : May 21 20:37:38 2025 GMT Subject: CN=6824ff12-7dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:31:8f:17:a3:e5:5b:8a:04:25:37:68:d2:80: 51:d4:70:01:36:56:cc:92:74:7c:e1:35:b8:0a:96: 5c:2f:18:6c:b2:1f:87:30:2b:87:1f:70:d6:b7:86: 20:59:61:eb:1d:f2:76:78:25:2e:11:82:1a:d9:42: 7b:2e:02:fe:63:39:e0:91:78:34:c6:e3:0d:95:44: 3b:ae:ee:d8:7e:1d:04:3c:74:22:12:79:44:64:13: 93:68:25:09:bf:7b:25:41:3b:39:38:56:97:f5:cd: 7c:44:d4:e1:e1:fd:76:26:30:b8:22:03:75:f1:4f: 31:b8:a1:6c:b0:1c:27:50:a6:de:64:f7:f8:45:d5: 14:6c:f5:97:d0:5d:fd:78:c6:04:1a:04:57:18:e6: df:78:20:3c:7a:75:9b:60:36:f1:d7:47:72:67:68: a1:da:af:2d:e7:38:0e:38:74:75:ae:70:2d:1b:a1: b2:9f:94:a7:86:4d:a2:e7:46:cd:f8:64:b1:bf:c0: eb:51:9a:aa:f3:3d:80:fc:80:62:24:24:86:1a:57: 83:d0:63:92:f6:61:a6:82:07:c4:f6:c0:2b:aa:4d: 4c:6e:88:6c:f4:27:3c:39:51:47:a7:21:ec:da:ea: 4a:56:47:40:7f:42:60:92:06:bd:a6:7e:40:7b:02: d7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:79:D2:A5:E3:26:31:53:7E:25:B3:DC:5D:1F:B3:A4:61:12:28:5F X509v3 Authority Key Identifier: keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:75:74:17:3a:19:ae:ab:0f:f5:2f:9b:63:54:09:e9:d9:97: ce:a2:17:88:f7:fe:29:09:26:6b:27:28:c9:b5:5c:76:c4:31: e0:82:b7:a5:d2:72:25:cc:c4:f4:01:70:e2:d1:a2:83:57:aa: ad:67:f0:57:0a:6e:34:57:3f:58:1e:6a:f7:74:a5:e1:a0:54: ac:66:c9:10:d5:44:0b:8d:9b:a4:c6:d5:4d:ca:01:db:9f:53: 6c:41:c8:ef:74:94:1e:5c:cd:45:d3:d0:21:47:fd:f0:83:56: 0a:c4:08:fb:a2:74:27:ca:22:98:be:93:45:57:83:23:77:7f: 50:31:76:f8:7b:2d:58:d7:6c:38:4e:7e:78:fa:9b:ac:ee:58: 8c:18:d4:0a:e4:07:a7:a5:6d:98:5a:31:dd:46:b1:6a:22:07: 59:7f:35:40:49:73:88:5d:f4:52:64:c3:79:67:4a:f1:7c:81: 00:da:1f:41:09:44:6e:bf:1c:21:98:1c:fe:9c:5b:ef:fe:64: d0:f9:5c:6b:0d:76:bb:71:1b:6e:b7:8c:48:86:b9:c2:50:34: 34:bf:9e:10:59:66:33:66:58:30:8a:3e:f5:3b:3b:c3:8d:bf: 47:41:1e:0f:a0:99:7c:7e:18:44:9b:03:a5:76:c8:c2:01:d7: 16:46:65:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyM0MxMTAvBgNVBAUTKEJCMURFRDU0NEIyN0ExMzcxOUI0OEZCMDAzNzNDRDQ5 RTBERTg1MTcwHhcNMjUwNTE0MjAzNzM4WhcNMjUwNTIxMjAzNzM4WjAYMRYwFAYD VQQDEw02ODI0ZmYxMi03ZGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTGPF6PlW4oEJTdo0oBR1HABNlbMknR84TW4CpZcLxhssh+HMCuHH3DWt4Yg WWHrHfJ2eCUuEYIa2UJ7LgL+YzngkXg0xuMNlUQ7ru7Yfh0EPHQiEnlEZBOTaCUJ v3slQTs5OFaX9c18RNTh4f12JjC4IgN18U8xuKFssBwnUKbeZPf4RdUUbPWX0F39 eMYEGgRXGObfeCA8enWbYDbx10dyZ2ih2q8t5zgOOHR1rnAtG6Gyn5Snhk2i50bN +GSxv8DrUZqq8z2A/IBiJCSGGleD0GOS9mGmggfE9sArqk1Mbohs9Cc8OVFHpyHs 2upKVkdAf0Jgkga9pn5AewLX1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGN50qXj JjFTfiWz3F0fs6RhEihfMB8GA1UdIwQYMBaAFLsd7VRLJ6E3GbSPsANzzUng3oUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTIzQy9FNTYyMUE2OEI1 NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9UY1p0SS13QTNQTlNlRGVo UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V4M3RWRXNub1RjWnRJLXdBM1BOU2VEZWhSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTIzQy9FNTYyMUE2OEI1NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9U Y1p0SS13QTNQTlNlRGVoUmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXdXQXOhmuqw/1L5tjVAnp2ZfOoheI9/4pCSZrJyjJtVx2xDHggrel 0nIlzMT0AXDi0aKDV6qtZ/BXCm40Vz9YHmr3dKXhoFSsZskQ1UQLjZukxtVNygHb n1NsQcjvdJQeXM1F09AhR/3wg1YKxAj7onQnyiKYvpNFV4Mjd39QMXb4ey1Y12w4 Tn54+pus7liMGNQK5AenpW2YWjHdRrFqIgdZfzVASXOIXfRSZMN5Z0rxfIEA2h9B CURuvxwhmBz+nFvv/mTQ+VxrDXa7cRtut4xIhrnCUDQ0v54QWWYzZlgwij71OzvD jb9HQR4PoJl8fhhEmwOldsjCAdcWRmUD -----END CERTIFICATE-----Generated at Fri May 16 18:55:32 2025 by rpki-client