$ rpki-client -vvf rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft File: Ul6ia2phflqvwFQjzOWI3hnsWEc.mft (raw, json) Hash identifier: geyLNRy93NHMRApVwm2VAt+32iboFdLrupmF9sY1vtw= Subject key identifier: A7:82:73:CC:A5:5D:64:45:FD:29:11:A7:F3:EA:6D:8F:63:63:32:76 Authority key identifier: 52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47 Certificate issuer: /CN=A91975F1/serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847 Certificate serial: 02C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft Manifest number: 02BE Signing time: Thu 15 May 2025 01:26:28 +0000 Manifest this update: Thu 15 May 2025 01:26:28 +0000 Manifest next update: Thu 22 May 2025 01:26:28 +0000 Files and hashes: 1: Ul6ia2phflqvwFQjzOWI3hnsWEc.crl (hash: 9OdfBLUAdMAXSh9WmnMMwJRoDQvODz/oG4GQ6RR4Bm4=) 2: 412DD396EE3B11EC8EE6DA63C4F9AE02.roa (hash: 90iQ52pzi3F+reOCS+hcjY5A8xSUULeYkZXVo6UNIXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91975F1, serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847 Validity Not Before: May 15 01:26:28 2025 GMT Not After : May 22 01:26:28 2025 GMT Subject: CN=682542c4-7022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:48:4f:75:0c:0c:be:67:4e:8f:b0:dd:dc:6d: ba:14:fc:f3:0b:65:3e:05:f8:6d:88:0b:33:99:c0: f7:0d:ca:eb:85:df:72:5d:40:db:49:fd:ce:29:76: c2:25:f3:6f:02:97:8e:3b:da:3a:2d:24:04:ca:78: f3:58:a7:ea:37:6d:f9:e6:72:fc:ef:3b:63:ed:0b: cf:fa:d2:d2:c8:17:78:60:00:40:71:07:a4:b0:23: cd:f3:f6:3e:40:c9:d9:b4:ca:b0:5a:dd:8c:e5:87: b0:ea:47:e1:42:7f:d3:e6:52:7c:d7:a2:24:b3:50: 38:ca:e7:fb:4e:f6:0a:3e:46:f8:27:fb:c2:76:9f: 2a:e7:4a:3f:21:fb:09:e8:45:2a:b0:5f:17:c7:78: a3:bd:d9:7f:d7:e3:bf:05:96:7e:00:5a:e7:e1:47: 03:be:5d:93:d1:e9:54:c5:58:47:9c:18:e0:79:44: 85:5b:5d:12:e0:05:65:f5:d1:2b:f0:7b:34:43:51: 72:70:19:ec:ec:4a:d2:97:85:4d:0a:6d:6f:b0:8d: 83:16:0d:fd:15:60:42:ca:fb:bd:70:a7:4c:7e:a8: 7d:63:43:24:a0:c0:03:c8:59:ee:06:f2:d2:21:6b: ba:af:f9:34:d6:7d:8f:82:06:b5:d3:16:24:a3:f3: 42:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:82:73:CC:A5:5D:64:45:FD:29:11:A7:F3:EA:6D:8F:63:63:32:76 X509v3 Authority Key Identifier: keyid:52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:ff:4c:c3:3b:0b:df:6c:4c:9e:4b:41:81:ca:49:95:f6:f6: a9:b2:79:3a:27:4f:07:92:8d:65:93:49:b0:1d:20:36:75:2d: e2:85:82:b3:68:e5:bc:17:81:97:ae:6c:a5:5f:2d:9f:18:62: 96:3d:12:ad:1e:12:8d:85:fe:96:bd:d0:35:5d:f1:ff:68:0e: 17:99:f0:e5:2d:87:17:1c:81:41:9e:33:05:d0:7e:34:23:16: a9:dd:94:8b:7a:c6:40:10:7a:70:af:c4:6d:15:9a:ce:d1:e9: 3f:04:e4:4c:d3:8b:c4:89:de:30:d6:fe:f2:84:43:37:71:d7: d0:90:43:af:18:84:9a:c9:c2:9c:d8:53:e2:3a:79:ec:87:e4: 5a:4f:82:07:2f:bc:c2:30:76:03:1c:3d:3d:27:d8:27:04:91: d3:fb:6c:16:2f:7c:90:6b:52:83:06:7a:e2:2f:8a:5d:17:1c: 27:e2:1c:7f:d2:0c:84:95:c0:b1:5d:11:24:93:1c:c8:a1:2e: 3f:e1:49:34:4b:c7:3c:45:0a:41:3d:bf:c5:1d:b5:a9:43:be: e6:52:a4:24:44:d2:06:26:97:4b:30:f0:f1:14:40:11:23:85: a9:19:12:10:db:61:e7:38:5f:8d:04:5a:b7:3a:f0:62:93:a5: b8:2a:5f:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc1RjExMTAvBgNVBAUTKDUyNUVBMjZCNkE2MTdFNUFBRkMwNTQyM0NDRTU4OERF MTlFQzU4NDcwHhcNMjUwNTE1MDEyNjI4WhcNMjUwNTIyMDEyNjI4WjAYMRYwFAYD VQQDEw02ODI1NDJjNC03MDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUhPdQwMvmdOj7Dd3G26FPzzC2U+BfhtiAszmcD3Dcrrhd9yXUDbSf3OKXbC JfNvApeOO9o6LSQEynjzWKfqN2355nL87ztj7QvP+tLSyBd4YABAcQeksCPN8/Y+ QMnZtMqwWt2M5Yew6kfhQn/T5lJ816Iks1A4yuf7TvYKPkb4J/vCdp8q50o/IfsJ 6EUqsF8Xx3ijvdl/1+O/BZZ+AFrn4UcDvl2T0elUxVhHnBjgeUSFW10S4AVl9dEr 8Hs0Q1FycBns7ErSl4VNCm1vsI2DFg39FWBCyvu9cKdMfqh9Y0MkoMADyFnuBvLS IWu6r/k01n2Pgga10xYko/NCaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeCc8yl XWRF/SkRp/PqbY9jYzJ2MB8GA1UdIwQYMBaAFFJeomtqYX5ar8BUI8zliN4Z7FhH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzVGMS9DQjY2MzMwQUVF MkMxMUVDOTU2QjJDNEZDNEY5QUUwMi9VbDZpYTJwaGZscXZ3RlFqek9XSTNobnNX RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VsNmlhMnBoZmxxdndGUWp6T1dJM2huc1dFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzVGMS9DQjY2MzMwQUVFMkMxMUVDOTU2QjJDNEZDNEY5QUUwMi9VbDZpYTJwaGZs cXZ3RlFqek9XSTNobnNXRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT/0zDOwvfbEyeS0GBykmV9vapsnk6J08Hko1lk0mwHSA2dS3ihYKz aOW8F4GXrmylXy2fGGKWPRKtHhKNhf6WvdA1XfH/aA4XmfDlLYcXHIFBnjMF0H40 Ixap3ZSLesZAEHpwr8RtFZrO0ek/BORM04vEid4w1v7yhEM3cdfQkEOvGISaycKc 2FPiOnnsh+RaT4IHL7zCMHYDHD09J9gnBJHT+2wWL3yQa1KDBnriL4pdFxwn4hx/ 0gyElcCxXREkkxzIoS4/4Uk0S8c8RQpBPb/FHbWpQ77mUqQkRNIGJpdLMPDxFEAR I4WpGRIQ22HnOF+NBFq3OvBik6W4Kl9B -----END CERTIFICATE-----Generated at Fri May 16 11:50:28 2025 by rpki-client