$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft File: uKIid-zGsQo9ICqjkMyn-7kqRuA.mft (raw, json) Hash identifier: JebI3O72RIFeqb/hBvFGMzYuU04LVLKplgK7RWG+E74= Subject key identifier: 51:BD:4D:51:02:5A:94:A8:93:1F:04:75:85:3C:FA:35:66:29:15:92 Authority key identifier: B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0 Certificate issuer: /CN=A91975CC/serialNumber=B8A22277ECC6B10A3D202AA390CCA7FBB92A46E0 Certificate serial: 0363 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft Manifest number: 035F Signing time: Thu 15 May 2025 00:58:58 +0000 Manifest this update: Thu 15 May 2025 00:58:57 +0000 Manifest next update: Thu 22 May 2025 00:58:57 +0000 Files and hashes: 1: uKIid-zGsQo9ICqjkMyn-7kqRuA.crl (hash: ejvhHqkdahXmeZ6WkuqvKpdgR7aU+INiKhJnhSgRZ34=) 2: AF08CB4CC77511EC81DCA645C4F9AE02.roa (hash: fCg3LsUh16wFnDfXkxVhThF2ZOUkgckgr+TaTcI9RIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.crl rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 867 (0x363) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91975CC, serialNumber=B8A22277ECC6B10A3D202AA390CCA7FBB92A46E0 Validity Not Before: May 15 00:58:57 2025 GMT Not After : May 22 00:58:57 2025 GMT Subject: CN=68253c51-4da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d4:b7:79:ac:71:57:fd:25:26:9f:66:71:4b: f6:1a:f8:86:33:76:75:b8:00:9b:17:db:4b:ee:29: 90:8e:aa:07:36:2a:e3:68:15:e8:1f:1b:c5:33:6f: 72:ee:63:77:27:c9:38:9b:43:bf:78:aa:74:b5:b6: a9:a6:09:6c:e6:97:6b:57:4c:6a:97:13:4d:8b:bf: fa:a5:ef:ad:73:ba:fd:43:1f:f2:e4:f0:f0:3a:da: e3:0e:73:49:bf:92:3d:c9:19:0d:33:c1:de:9e:b7: ea:68:42:a6:bd:45:1c:0c:45:f2:c0:6e:f1:87:73: 80:43:2c:54:48:62:58:1f:13:25:5d:84:e9:f4:e9: 9b:e3:46:17:f2:19:bd:bc:29:2c:f4:81:e2:7f:67: 7f:60:48:1d:4b:f7:a6:d1:2c:11:bc:6f:c8:32:12: 95:8d:42:22:c0:0d:10:a6:b6:cb:5d:81:b3:2f:48: b6:1c:27:6a:98:66:90:9b:a0:78:be:22:b4:f6:9f: 59:56:f8:18:ae:f4:96:6f:c0:1e:02:c4:b5:fa:83: 75:d8:c8:2d:c2:33:af:18:d3:a0:65:dd:bc:2a:c7: cd:64:7c:84:a2:10:ed:e3:a8:8e:7c:af:15:2d:c1: a8:a1:37:64:3f:da:b4:04:e0:b9:25:b7:8d:38:ed: 7c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BD:4D:51:02:5A:94:A8:93:1F:04:75:85:3C:FA:35:66:29:15:92 X509v3 Authority Key Identifier: keyid:B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:45:72:75:53:0d:64:b9:fd:df:0d:78:a4:5d:14:84:e2:0c: 6a:84:8c:30:04:47:45:dd:72:ce:b5:8f:31:4d:a6:16:51:09: ac:8e:f7:6c:a4:b0:08:cc:29:c6:5a:c1:45:09:c2:b0:11:d0: b4:44:d1:73:b9:b9:20:d8:a6:59:8b:b4:dc:79:67:fc:3e:74: d7:b1:53:d8:98:3c:94:b9:a7:d4:67:80:69:cf:26:0c:99:fe: aa:05:f0:63:a3:62:ca:ba:ad:ff:60:81:2e:96:d6:ca:21:38: 0c:8f:ca:fa:84:06:61:9d:7b:4b:4c:f0:6b:c2:c2:97:98:76: 80:96:b5:c5:42:12:8c:d9:f3:24:3d:69:5d:f4:f3:fd:78:f4: 49:94:8b:36:31:8c:70:0d:a0:54:d5:d0:01:a5:07:eb:63:1f: 07:05:0e:d5:41:08:cb:f9:a9:62:95:0c:f1:c0:23:32:c5:64: 12:d1:7f:38:8b:47:81:d1:30:83:ee:d1:03:26:91:1e:6a:42: df:da:56:75:b6:a2:d8:c5:3f:c4:3e:01:95:2e:4f:66:67:ae: b3:c0:71:a1:36:2b:49:c3:74:0b:f3:04:01:16:32:7f:5b:92: 95:15:42:61:c4:71:2a:7c:2a:6c:e4:85:db:99:3a:6a:10:26: 1c:05:55:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc1Q0MxMTAvBgNVBAUTKEI4QTIyMjc3RUNDNkIxMEEzRDIwMkFBMzkwQ0NBN0ZC QjkyQTQ2RTAwHhcNMjUwNTE1MDA1ODU3WhcNMjUwNTIyMDA1ODU3WjAYMRYwFAYD VQQDEw02ODI1M2M1MS00ZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtS3eaxxV/0lJp9mcUv2GviGM3Z1uACbF9tL7imQjqoHNirjaBXoHxvFM29y 7mN3J8k4m0O/eKp0tbappgls5pdrV0xqlxNNi7/6pe+tc7r9Qx/y5PDwOtrjDnNJ v5I9yRkNM8HenrfqaEKmvUUcDEXywG7xh3OAQyxUSGJYHxMlXYTp9Omb40YX8hm9 vCks9IHif2d/YEgdS/em0SwRvG/IMhKVjUIiwA0QprbLXYGzL0i2HCdqmGaQm6B4 viK09p9ZVvgYrvSWb8AeAsS1+oN12MgtwjOvGNOgZd28KsfNZHyEohDt46iOfK8V LcGooTdkP9q0BOC5JbeNOO18EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFG9TVEC WpSokx8EdYU8+jVmKRWSMB8GA1UdIwQYMBaAFLiiInfsxrEKPSAqo5DMp/u5Kkbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzVDQy8xM0U3RDcyRUFG RTMxMUVDQTJDQjA2NkRDNEY5QUUwMi91S0lpZC16R3NRbzlJQ3Fqa015bi03a3FS dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3VLSWlkLXpHc1FvOUlDcWprTXluLTdrcVJ1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzVDQy8xM0U3RDcyRUFGRTMxMUVDQTJDQjA2NkRDNEY5QUUwMi91S0lpZC16R3NR bzlJQ3Fqa015bi03a3FSdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhRXJ1Uw1kuf3fDXikXRSE4gxqhIwwBEdF3XLOtY8xTaYWUQmsjvds pLAIzCnGWsFFCcKwEdC0RNFzubkg2KZZi7TceWf8PnTXsVPYmDyUuafUZ4BpzyYM mf6qBfBjo2LKuq3/YIEultbKITgMj8r6hAZhnXtLTPBrwsKXmHaAlrXFQhKM2fMk PWld9PP9ePRJlIs2MYxwDaBU1dABpQfrYx8HBQ7VQQjL+alilQzxwCMyxWQS0X84 i0eB0TCD7tEDJpEeakLf2lZ1tqLYxT/EPgGVLk9mZ66zwHGhNitJw3QL8wQBFjJ/ W5KVFUJhxHEqfCps5IXbmTpqECYcBVXS -----END CERTIFICATE-----Generated at Fri May 16 06:30:43 2025 by rpki-client