$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft File: UzfctqkbQdUhGkTCFqljq6zH4rA.mft (raw, json) Hash identifier: jTQcEK5DmKQwFmnZBDb4t8/BMHMFNKc2f24Mu6gfs08= Subject key identifier: 14:9A:E5:1A:E9:F9:4B:01:8A:2F:9F:00:0B:69:39:B0:56:83:46:8B Authority key identifier: 53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0 Certificate issuer: /CN=A9197FBC/serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0 Certificate serial: 3494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft Manifest number: 348A Signing time: Wed 14 May 2025 14:46:08 +0000 Manifest this update: Wed 14 May 2025 14:46:07 +0000 Manifest next update: Wed 21 May 2025 14:46:07 +0000 Files and hashes: 1: UzfctqkbQdUhGkTCFqljq6zH4rA.crl (hash: XeE6bXSi3PLAeGxilUB1sjSSPe8BYcxw/VsnBDlTBME=) 2: 8DFE2984EAD811ECA1ED8915C4F9AE02.roa (hash: dOS+EBN8T4gv4pfAW5HZ87ld30CEjTabsXZtn+f9BiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 14:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13460 (0x3494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197FBC, serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0 Validity Not Before: May 14 14:46:07 2025 GMT Not After : May 21 14:46:07 2025 GMT Subject: CN=6824acaf-7850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:eb:12:c1:eb:8e:0e:7b:bd:c3:a1:35:14:69: 06:7a:25:ba:e8:cf:a2:88:89:25:17:70:59:1c:11: eb:33:5a:e4:9a:76:d5:a3:39:01:10:e0:37:5a:02: cb:51:94:6a:46:70:aa:da:25:5e:b3:ff:40:f2:d5: 3e:eb:16:16:f0:61:2b:96:9f:69:27:be:e9:97:53: cc:c2:e3:65:3a:b4:a7:f6:79:67:9c:83:1d:2c:7b: 22:e9:e2:4e:5c:91:75:18:e2:4c:11:0c:5f:83:d3: 3f:9d:ed:56:95:76:62:88:9e:a1:22:c5:b3:07:b3: 5e:32:2e:a8:71:cf:90:ca:63:d4:fe:b4:1a:23:ed: 54:db:93:b1:3c:c8:aa:e3:46:16:3e:b3:b2:f7:61: dd:e9:f1:72:0f:8a:17:75:14:2b:6e:b5:9e:7f:c9: f5:4e:5f:30:2b:bc:98:e2:0a:3a:ed:6d:20:7a:88: cb:ef:20:d1:10:d9:2a:90:1a:72:75:1c:31:e1:44: e8:bf:5f:fe:d8:39:a5:d5:e9:17:44:95:4a:b8:a6: 44:77:97:88:9a:c1:4b:21:a4:9e:8e:84:c2:1c:92: 74:41:a8:24:ac:c1:cc:6f:b8:00:3c:7f:2f:30:08: 18:e8:33:4c:ee:3c:78:9b:e7:7e:4a:99:dd:16:65: ca:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9A:E5:1A:E9:F9:4B:01:8A:2F:9F:00:0B:69:39:B0:56:83:46:8B X509v3 Authority Key Identifier: keyid:53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:81:36:c0:20:54:c2:2c:e5:6e:46:48:af:a6:a2:35:93:d8: f4:13:f6:58:3f:9e:82:27:37:10:15:93:0e:dc:85:33:1b:5f: 18:1d:d1:ef:c6:a4:38:6d:90:cd:89:f9:d3:06:46:11:67:a2: 21:9a:69:f0:93:ae:49:38:6f:8d:ec:9e:fd:43:7c:ec:5b:96: b1:d6:f1:6c:fc:73:1b:2b:33:d0:73:88:6b:cf:5e:7b:e3:0d: 99:1c:06:cf:9a:7c:08:12:bf:33:be:57:e3:89:c3:79:28:15: f0:47:75:ec:b9:95:09:d9:65:ca:d9:db:92:f2:f8:0d:23:3f: f9:d9:4d:c1:7c:91:e2:01:f9:85:46:3f:a5:96:49:e2:a5:3c: 39:94:9d:0a:bc:be:70:33:04:3c:9f:4f:74:a6:7e:9b:fd:8f: 5d:9a:8f:d6:88:fa:71:be:d8:6b:58:db:8b:53:b2:5e:5a:d6: 85:63:dc:2e:1b:bc:5e:b8:cd:35:25:cd:5f:a8:4b:0b:6e:5f: a4:01:6e:1d:1c:0a:b3:5d:d2:54:d2:40:d6:34:b6:ce:7e:27: 36:62:9a:d6:f3:0a:1d:5f:6e:27:91:53:e1:bd:82:92:65:3e: dd:d6:0d:43:2f:c3:8d:2a:aa:63:5a:30:2a:1a:6b:4f:4a:7e: 01:a8:92:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdGQkMxMTAvBgNVBAUTKDUzMzdEQ0I2QTkxQjQxRDUyMTFBNDRDMjE2QTk2M0FC QUNDN0UyQjAwHhcNMjUwNTE0MTQ0NjA3WhcNMjUwNTIxMTQ0NjA3WjAYMRYwFAYD VQQDEw02ODI0YWNhZi03ODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6OsSweuODnu9w6E1FGkGeiW66M+iiIklF3BZHBHrM1rkmnbVozkBEOA3WgLL UZRqRnCq2iVes/9A8tU+6xYW8GErlp9pJ77pl1PMwuNlOrSn9nlnnIMdLHsi6eJO XJF1GOJMEQxfg9M/ne1WlXZiiJ6hIsWzB7NeMi6occ+QymPU/rQaI+1U25OxPMiq 40YWPrOy92Hd6fFyD4oXdRQrbrWef8n1Tl8wK7yY4go67W0geojL7yDRENkqkBpy dRwx4UTov1/+2Dml1ekXRJVKuKZEd5eImsFLIaSejoTCHJJ0QagkrMHMb7gAPH8v MAgY6DNM7jx4m+d+SpndFmXKpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSa5Rrp +UsBii+fAAtpObBWg0aLMB8GA1UdIwQYMBaAFFM33LapG0HVIRpEwhapY6usx+Kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZCQy8zNzMwODM4MDFE OTMxMUUyOEFCRTlFRjYwOEIwMkNEMi9VemZjdHFrYlFkVWhHa1RDRnFsanE2ekg0 ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6ZmN0cWtiUWRVaEdrVENGcWxqcTZ6SDRyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0ZCQy8zNzMwODM4MDFEOTMxMUUyOEFCRTlFRjYwOEIwMkNEMi9VemZjdHFrYlFk VWhHa1RDRnFsanE2ekg0ckEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBagTbAIFTCLOVuRkivpqI1k9j0E/ZYP56CJzcQFZMO3IUzG18YHdHv xqQ4bZDNifnTBkYRZ6Ihmmnwk65JOG+N7J79Q3zsW5ax1vFs/HMbKzPQc4hrz157 4w2ZHAbPmnwIEr8zvlfjicN5KBXwR3XsuZUJ2WXK2duS8vgNIz/52U3BfJHiAfmF Rj+llknipTw5lJ0KvL5wMwQ8n090pn6b/Y9dmo/WiPpxvthrWNuLU7JeWtaFY9wu G7xeuM01Jc1fqEsLbl+kAW4dHAqzXdJU0kDWNLbOfic2YprW8wodX24nkVPhvYKS ZT7d1g1DL8ONKqpjWjAqGmtPSn4BqJIC -----END CERTIFICATE-----Generated at Fri May 16 00:33:33 2025 by rpki-client