$ rpki-client -vvf rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft File: uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft (raw, json) Hash identifier: Uggrj7lMl4gNocsFGJJH0WpB+YV0eAZs07p4bL9r5vs= Subject key identifier: 14:97:3C:ED:90:D2:C0:0D:85:04:F8:BA:56:4A:5C:52:30:5F:1C:F0 Authority key identifier: B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6 Certificate issuer: /CN=A919D72D/serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6 Certificate serial: 062D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft Manifest number: 0627 Signing time: Mon 12 May 2025 22:31:16 +0000 Manifest this update: Mon 12 May 2025 22:31:16 +0000 Manifest next update: Mon 19 May 2025 22:31:16 +0000 Files and hashes: 1: uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl (hash: G0Ww4MqcFtLWCsni9d7Flv8XPfL6W3KPiHLYqkHg3jU=) 2: 00C79724968F11EB9A79630BC4F9AE02.roa (hash: Y2zv5qoN2STM8iOeHa24FYyQDvrtP06yfpXTjv2gJRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1581 (0x62d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D72D, serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6 Validity Not Before: May 12 22:31:16 2025 GMT Not After : May 19 22:31:16 2025 GMT Subject: CN=682276b4-0cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:09:c7:a3:ec:6c:d5:c8:b7:96:ba:50:d8:4c: ac:fc:22:32:e6:ba:11:99:e1:80:4e:9f:ff:a5:c9: a8:ee:be:70:11:5d:41:ba:11:cd:a9:af:96:21:17: 5c:86:54:6d:05:9a:d1:48:15:f7:b4:17:8e:bf:3c: bb:30:2e:e0:77:f8:17:7a:83:d4:20:51:fa:c8:e6: e7:18:83:9c:56:3a:53:53:14:55:c8:1b:85:48:dd: 0b:99:d4:60:6f:ea:0e:c7:c8:82:e2:57:57:7b:cc: 49:a6:2b:ab:5c:2a:4d:3c:74:29:52:0b:b9:f7:34: b6:33:46:63:54:85:f1:ed:33:f3:68:ac:58:fe:ab: 37:93:a6:46:aa:da:58:9e:37:88:85:07:fd:4f:ba: fa:0b:d0:03:a3:67:ed:2c:cb:a2:0f:47:a8:8b:5d: a7:44:8f:cf:c4:1c:6a:3c:21:27:41:3a:0f:c2:50: 08:bf:96:c1:27:10:a1:a3:23:4e:4e:52:5f:56:38: 39:df:b8:e5:8e:54:df:3b:87:0f:0a:d1:7f:b2:71: ce:33:7b:5c:09:be:24:ee:18:93:82:c6:e1:8c:8e: 24:77:c6:75:5a:ec:95:74:3a:ff:4d:a2:34:c2:e1: 2f:51:8a:7c:94:07:ea:ea:6e:e7:ba:f3:23:d8:ff: 5d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:97:3C:ED:90:D2:C0:0D:85:04:F8:BA:56:4A:5C:52:30:5F:1C:F0 X509v3 Authority Key Identifier: keyid:B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c8:41:b3:3a:75:72:fb:5f:c6:9b:8c:21:6a:8b:62:b4:8a: 3e:e5:89:c4:99:ed:03:eb:92:06:1f:00:d9:a8:0f:02:cb:c4: 01:78:b3:11:c7:86:00:58:c7:25:02:ad:6c:6c:d9:0f:d4:6d: a6:77:82:dd:b3:67:fc:d3:8c:57:20:e1:46:4e:93:99:f4:21: 1c:e8:c5:48:22:70:0d:ef:2b:17:53:1a:cc:c2:89:db:50:ed: 8f:f7:1f:41:3d:a9:de:ba:b7:6b:14:12:ae:ec:af:f6:d1:86: 64:e0:58:c1:61:a3:f8:f3:63:7e:52:61:7c:37:45:6f:6b:ef: bd:02:ff:af:47:0c:89:30:6a:39:d2:5c:d7:ad:5c:e1:3c:0b: 78:57:cf:e4:51:86:dc:ed:1c:81:13:95:07:2a:f0:28:06:c0: d9:a5:00:d7:9d:93:ba:1c:82:85:ae:e5:b2:b9:eb:f5:a4:7d: 54:59:12:fd:1b:bd:90:93:90:1d:1d:74:91:a4:13:2c:17:df: 3e:4e:de:f6:03:89:9c:8e:d3:07:d0:0f:25:b4:98:6c:06:0d: 00:44:82:38:c6:f7:7f:bd:65:f3:e8:ea:32:c4:85:dc:f4:8f: bd:80:62:af:c1:72:94:0d:85:bc:39:6d:fd:d1:18:11:80:df: f4:94:f5:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ3MkQxMTAvBgNVBAUTKEI4RjYxQ0FCQjkxMTlENkMzNzY4NUYwQUJFMzRBRUUy NkEwMjE3RTYwHhcNMjUwNTEyMjIzMTE2WhcNMjUwNTE5MjIzMTE2WjAYMRYwFAYD VQQDEw02ODIyNzZiNC0wY2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgnHo+xs1ci3lrpQ2Eys/CIy5roRmeGATp//pcmo7r5wEV1BuhHNqa+WIRdc hlRtBZrRSBX3tBeOvzy7MC7gd/gXeoPUIFH6yObnGIOcVjpTUxRVyBuFSN0LmdRg b+oOx8iC4ldXe8xJpiurXCpNPHQpUgu59zS2M0ZjVIXx7TPzaKxY/qs3k6ZGqtpY njeIhQf9T7r6C9ADo2ftLMuiD0eoi12nRI/PxBxqPCEnQToPwlAIv5bBJxChoyNO TlJfVjg537jljlTfO4cPCtF/snHOM3tcCb4k7hiTgsbhjI4kd8Z1WuyVdDr/TaI0 wuEvUYp8lAfq6m7nuvMj2P9djQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSXPO2Q 0sANhQT4ulZKXFIwXxzwMB8GA1UdIwQYMBaAFLj2HKu5EZ1sN2hfCr40ruJqAhfm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDcyRC85OEJBNDZCNDk2 OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5XdzNhRjhLdmpTdTRtb0NG LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQWWNxN2tSbld3M2FGOEt2alN1NG1vQ0YtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDcyRC85OEJBNDZCNDk2OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5X dzNhRjhLdmpTdTRtb0NGLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfyEGzOnVy+1/Gm4whaotitIo+5YnEme0D65IGHwDZqA8Cy8QBeLMR x4YAWMclAq1sbNkP1G2md4Lds2f804xXIOFGTpOZ9CEc6MVIInAN7ysXUxrMwonb UO2P9x9BPaneurdrFBKu7K/20YZk4FjBYaP482N+UmF8N0Vva++9Av+vRwyJMGo5 0lzXrVzhPAt4V8/kUYbc7RyBE5UHKvAoBsDZpQDXnZO6HIKFruWyuev1pH1UWRL9 G72Qk5AdHXSRpBMsF98+Tt72A4mcjtMH0A8ltJhsBg0ARII4xvd/vWXz6OoyxIXc 9I+9gGKvwXKUDYW8OW390RgRgN/0lPWU -----END CERTIFICATE-----Generated at Wed May 14 16:56:44 2025 by rpki-client