$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft File: uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json) Hash identifier: i59nRC6oOWkNOcrJ+K+lXX/QxNc0PQOK0zrJhmsy2mI= Subject key identifier: 19:88:BB:F2:97:B3:03:5B:01:E3:1B:0F:FF:BB:D6:83:29:84:88:9C Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9 Certificate issuer: /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9 Certificate serial: 07F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft Manifest number: 07D7 Signing time: Mon 12 May 2025 20:54:13 +0000 Manifest this update: Mon 12 May 2025 20:54:13 +0000 Manifest next update: Mon 19 May 2025 20:54:13 +0000 Files and hashes: 1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: RXyz2pNALYLO82x/KmlhGBCjbSuFBa5d3fNghbEFUM4=) 2: E68BF368DD9911EF85614A53C4F9AE02.roa (hash: RcdkSPfjnAmz3uVP4FBhLTQ0GFBSdezmu4kQPa/+yaY=) 3: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: A1w8tHzqGX+jD/ISNBe9aPcQuL2J3HJQzhH/YAzCdq0=) 4: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: XTLM9Il3d4SVArTDp/CLgDo1h6RlBLONdep9WAa5H5I=) 5: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: cXIuMnEWUiuT4kupzUNHJo4zj/W45Qb9cwkr7yvw0vc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2037 (0x7f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9 Validity Not Before: May 12 20:54:13 2025 GMT Not After : May 19 20:54:13 2025 GMT Subject: CN=68225ff5-f255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:96:8f:3d:be:77:05:ee:3c:8a:07:f3:19:4d: 5a:f0:08:38:5a:02:d7:0b:66:b9:e8:34:c9:3e:dc: d8:c7:e4:9c:67:e9:6e:ab:28:44:ce:a8:69:27:e9: 7d:58:61:80:77:7e:73:e5:75:50:b7:a0:28:cb:bd: e8:9b:af:fb:a0:cd:f1:85:41:3b:fa:6b:2c:53:86: 09:01:0b:20:07:8c:36:bf:e9:66:b5:e1:21:76:33: ab:e4:12:e7:91:9d:27:45:8c:43:a4:fc:e7:b0:3d: c1:a8:58:d5:72:0e:eb:0b:61:ac:af:91:ed:32:9b: 10:85:a7:49:3a:ea:5e:62:c9:51:77:7f:ae:2d:90: ec:b8:df:a9:44:c1:cd:1a:c2:f4:40:f7:91:de:43: d9:31:db:a4:68:4c:c6:ae:64:03:b3:74:91:d9:84: 03:24:cf:5a:86:ea:12:28:93:82:0e:32:56:5a:c8: 14:a6:ae:df:34:66:2e:5a:17:33:d1:d8:54:ed:7b: 7b:d6:3f:9e:8e:d3:d1:7b:cc:0f:af:59:22:7a:ef: 14:a2:51:c4:10:77:0c:f0:7e:1f:e6:5e:d8:58:f9: 92:a6:8d:1b:87:53:68:fd:bd:e3:1d:6c:c0:bb:72: 58:fa:8e:91:c9:aa:88:0d:79:79:88:ec:e1:15:42: 06:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:88:BB:F2:97:B3:03:5B:01:E3:1B:0F:FF:BB:D6:83:29:84:88:9C X509v3 Authority Key Identifier: keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e8:ec:92:5b:5e:d4:65:bd:37:ea:0f:e6:38:b4:62:ce:5c: d0:93:68:70:13:5f:3b:27:86:37:72:ae:f9:19:3f:09:e3:16: 9a:1c:af:d1:1b:91:ad:c0:56:eb:18:97:55:9e:e0:2f:70:a0: 96:aa:40:14:5b:c7:b8:c1:ef:93:94:b5:b9:da:57:15:4d:77: ab:6a:0e:ed:f2:4f:26:e8:02:88:4b:d9:bf:91:00:1c:84:87: 3f:cd:e4:a9:7a:30:34:13:d8:3f:08:a8:0e:f0:2e:ef:45:e0: c8:f0:57:99:c2:56:21:e8:57:49:c6:9f:7f:35:f5:ce:19:69: dc:c9:e3:2e:2f:8a:e6:51:0d:e7:24:ae:8a:86:17:d0:43:52: 03:be:4f:10:ad:22:ca:2c:ce:70:f2:be:d0:ed:12:38:1a:16: 57:54:b3:62:44:05:de:a8:75:6b:6d:ff:ad:d3:9b:3e:24:fb: 88:16:ad:78:a2:29:ff:03:83:36:f1:f7:cb:17:60:1c:40:6e: 9c:e6:22:d7:bf:69:57:90:2d:ea:33:36:51:52:81:06:98:40: 5a:7f:af:b5:7f:2c:d5:9e:63:6d:96:1d:70:f3:d3:5c:a4:3a: e2:f3:bc:f8:0b:7e:78:09:d7:36:5b:3e:09:7e:e4:2d:d0:08: ea:b2:73:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU4M0IxMTAvBgNVBAUTKEI4QTYyQ0YxREU4QjI2MkUxNDczN0Q5M0VFM0U2RjM2 QzNBMEUxQzkwHhcNMjUwNTEyMjA1NDEzWhcNMjUwNTE5MjA1NDEzWjAYMRYwFAYD VQQDEw02ODIyNWZmNS1mMjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJaPPb53Be48igfzGU1a8Ag4WgLXC2a56DTJPtzYx+ScZ+luqyhEzqhpJ+l9 WGGAd35z5XVQt6Aoy73om6/7oM3xhUE7+mssU4YJAQsgB4w2v+lmteEhdjOr5BLn kZ0nRYxDpPznsD3BqFjVcg7rC2Gsr5HtMpsQhadJOupeYslRd3+uLZDsuN+pRMHN GsL0QPeR3kPZMdukaEzGrmQDs3SR2YQDJM9ahuoSKJOCDjJWWsgUpq7fNGYuWhcz 0dhU7Xt71j+ejtPRe8wPr1kieu8UolHEEHcM8H4f5l7YWPmSpo0bh1No/b3jHWzA u3JY+o6RyaqIDXl5iOzhFUIGGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmIu/KX swNbAeMbD/+71oMphIicMB8GA1UdIwQYMBaAFLimLPHeiyYuFHN9k+4+bzbDoOHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTgzQi83OTJEMTQ4QUYy ODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEppNFVjMzJUN2o1dk5zT2c0 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VLWXM4ZDZMSmk0VWMzMlQ3ajV2TnNPZzRjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTgzQi83OTJEMTQ4QUYyODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEpp NFVjMzJUN2o1dk5zT2c0Y2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd6OySW17UZb036g/mOLRizlzQk2hwE187J4Y3cq75GT8J4xaaHK/R G5GtwFbrGJdVnuAvcKCWqkAUW8e4we+TlLW52lcVTXerag7t8k8m6AKIS9m/kQAc hIc/zeSpejA0E9g/CKgO8C7vReDI8FeZwlYh6FdJxp9/NfXOGWncyeMuL4rmUQ3n JK6KhhfQQ1IDvk8QrSLKLM5w8r7Q7RI4GhZXVLNiRAXeqHVrbf+t05s+JPuIFq14 oin/A4M28ffLF2AcQG6c5iLXv2lXkC3qMzZRUoEGmEBaf6+1fyzVnmNtlh1w89Nc pDri87z4C354Cdc2Wz4JfuQt0AjqsnOt -----END CERTIFICATE-----Generated at Tue May 13 18:02:45 2025 by rpki-client