$ rpki-client -vvf rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft File: uFvtmb90CrrVo5nJ31_plipt6PE.mft (raw, json) Hash identifier: xi+OJyqTWmdKs0U6In+x108X9+SqnvsEN8wRPj3RvM0= Subject key identifier: 6A:7F:26:64:22:2A:BC:BB:83:72:7D:9D:25:16:9E:82:56:5E:15:DE Authority key identifier: B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 Certificate issuer: /CN=A9195DE5/serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Certificate serial: 07E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft Manifest number: 07C8 Signing time: Mon 12 May 2025 20:55:31 +0000 Manifest this update: Mon 12 May 2025 20:55:30 +0000 Manifest next update: Mon 19 May 2025 20:55:30 +0000 Files and hashes: 1: uFvtmb90CrrVo5nJ31_plipt6PE.crl (hash: 7VgReiVrsdoQrIdu2SkKX73EfNLB5vT5/BVavhXawsk=) 2: 709F917AF74111EF98C99938C4F9AE02.roa (hash: 1qf+iawoit0ys+iUAf7LEY7HtRnvUIOTI+MZhHCWuYU=) 3: C7ADA138F4C011EAA7B25986C4F9AE02.roa (hash: G5UBtJsfZQZ4SV+yPTNK/ejUFIGmrip9sZG7FP0b4Cg=) 4: C8633DEAF4C011EAA7B25986C4F9AE02.roa (hash: ux6FaGhfWyv2H1NDOSXEk7LrVXGwR7MCaj2E49kXMHg=) 5: 70017B5CF74111EF98C99938C4F9AE02.roa (hash: 2qfdADfdo36JxITYdf4pd34OcKO4BbP5IH9WNGohmvk=) 6: C6EDD52EF4C011EAA7B25986C4F9AE02.roa (hash: qyqw3i3GL6h/SgQPPtxyHJkhrm/uWWSr5nGAKt/Qapg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2016 (0x7e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195DE5, serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Validity Not Before: May 12 20:55:30 2025 GMT Not After : May 19 20:55:30 2025 GMT Subject: CN=68226042-b103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:99:f0:8c:15:3a:0c:fd:2f:84:26:c6:ed:8e: fe:77:ac:c7:9c:9f:e8:93:a6:d3:fc:65:24:65:95: 58:5b:17:fa:93:3c:c1:cb:37:f0:8f:97:a6:b0:3d: 47:f3:86:ef:e9:61:a6:f7:ec:47:ff:f6:b2:22:3b: ec:5d:47:4e:07:ba:db:64:c8:0a:72:b4:2f:33:c0: 34:44:64:c6:67:e9:eb:20:01:4a:47:f3:8b:cd:4a: 10:a8:97:25:fc:83:1d:84:1b:19:fd:37:a8:56:f1: ea:0c:e6:47:35:93:09:2b:e8:bb:68:b3:c5:15:d6: c1:50:6d:ba:ce:fc:70:2f:31:d9:bf:54:91:de:60: 86:90:54:9d:9e:ce:cc:1b:4d:b7:67:c0:bc:d0:fd: e1:4a:9d:b6:10:89:33:78:4c:ac:1b:31:86:69:ef: ab:69:2b:98:e6:68:e9:57:4a:99:29:d0:07:da:52: c1:38:4a:7e:bf:cd:d1:37:22:56:75:60:8c:d1:fa: e8:b1:dd:7c:90:60:1d:b2:bd:b0:92:6c:f6:af:7e: 94:ff:ee:75:bf:9f:fd:9d:04:7a:7c:23:1b:10:52: 3f:cb:ac:b2:5b:35:79:04:01:08:6d:40:d4:a7:e6: 96:7b:b7:88:ea:e1:72:18:d2:46:97:17:b5:f9:4e: 5e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7F:26:64:22:2A:BC:BB:83:72:7D:9D:25:16:9E:82:56:5E:15:DE X509v3 Authority Key Identifier: keyid:B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:83:b1:fa:1d:1b:8a:dc:4b:2a:e9:dd:f9:0c:09:ca:af:70: 77:d5:fc:e4:96:5d:e3:28:ee:df:2c:79:cf:99:04:f7:36:09: 95:ed:37:17:f8:77:74:b5:5d:e7:6c:2e:5b:92:fe:dd:e9:6a: e5:0f:4f:15:2c:7a:1e:97:fa:23:e6:4e:15:f1:ba:e8:ac:5f: de:83:06:3c:44:82:ba:69:72:75:58:dd:7b:24:e5:94:0f:f7: 86:6c:17:ff:89:20:bb:d2:01:e0:8f:86:f0:5c:2c:a6:df:2e: 6a:e4:97:e2:2e:6d:43:41:c3:a3:0e:12:56:f8:a8:ce:8a:c1: 6d:d8:b0:06:45:bf:98:0f:a5:c9:b6:05:b0:11:fa:9f:9b:d0: d1:58:fd:33:0d:fb:93:67:49:fd:ef:c6:b0:2a:53:31:9d:33: e2:43:e7:28:75:3f:c7:e6:12:4d:f9:41:ba:bd:df:3c:0e:a7: 1f:9f:be:15:09:6f:dd:c7:c7:81:3c:d7:eb:34:cc:66:fb:ea: cd:57:13:3b:e1:8f:1a:3f:8d:4a:db:fc:0b:a2:3e:fa:46:48: c8:97:21:1d:59:50:ca:13:95:7e:1a:15:66:a6:53:18:77:24: e7:76:59:6a:dd:5d:b9:38:51:6a:da:1a:14:da:cb:ca:14:f5: d0:0d:df:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVERTUxMTAvBgNVBAUTKEI4NUJFRDk5QkY3NDBBQkFENUEzOTlDOURGNUZFOTk2 MkE2REU4RjEwHhcNMjUwNTEyMjA1NTMwWhcNMjUwNTE5MjA1NTMwWjAYMRYwFAYD VQQDEw02ODIyNjA0Mi1iMTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA95nwjBU6DP0vhCbG7Y7+d6zHnJ/ok6bT/GUkZZVYWxf6kzzByzfwj5emsD1H 84bv6WGm9+xH//ayIjvsXUdOB7rbZMgKcrQvM8A0RGTGZ+nrIAFKR/OLzUoQqJcl /IMdhBsZ/TeoVvHqDOZHNZMJK+i7aLPFFdbBUG26zvxwLzHZv1SR3mCGkFSdns7M G023Z8C80P3hSp22EIkzeEysGzGGae+raSuY5mjpV0qZKdAH2lLBOEp+v83RNyJW dWCM0frosd18kGAdsr2wkmz2r36U/+51v5/9nQR6fCMbEFI/y6yyWzV5BAEIbUDU p+aWe7eI6uFyGNJGlxe1+U5e9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGp/JmQi Kry7g3J9nSUWnoJWXhXeMB8GA1UdIwQYMBaAFLhb7Zm/dAq61aOZyd9f6ZYqbejx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NURFNS9FM0VENjVEOEY0 QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENyclZvNW5KMzFfcGxpcHQ2 UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VGdnRtYjkwQ3JyVm81bkozMV9wbGlwdDZQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NURFNS9FM0VENjVEOEY0QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENy clZvNW5KMzFfcGxpcHQ2UEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDg7H6HRuK3Esq6d35DAnKr3B31fzkll3jKO7fLHnPmQT3NgmV7TcX +Hd0tV3nbC5bkv7d6WrlD08VLHoel/oj5k4V8brorF/egwY8RIK6aXJ1WN17JOWU D/eGbBf/iSC70gHgj4bwXCym3y5q5JfiLm1DQcOjDhJW+KjOisFt2LAGRb+YD6XJ tgWwEfqfm9DRWP0zDfuTZ0n978awKlMxnTPiQ+codT/H5hJN+UG6vd88Dqcfn74V CW/dx8eBPNfrNMxm++rNVxM74Y8aP41K2/wLoj76RkjIlyEdWVDKE5V+GhVmplMY dyTndllq3V25OFFq2hoU2svKFPXQDd/k -----END CERTIFICATE-----Generated at Wed May 14 17:18:38 2025 by rpki-client