$ rpki-client -vvf rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft File: uttpn6AqlXLm70n0-Rof4Kc8LI0.mft (raw, json) Hash identifier: aUOf3NRZSjP5kkYlFRdGvvZooZrONzarkWKEWBk9Gys= Subject key identifier: 19:22:40:24:7F:A1:86:2D:52:0F:D9:1E:D4:4C:32:0A:37:72:44:A6 Authority key identifier: BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D Certificate issuer: /CN=A91E27B9/serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D Certificate serial: 0802 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft Manifest number: 07ED Signing time: Mon 12 May 2025 20:51:27 +0000 Manifest this update: Mon 12 May 2025 20:51:26 +0000 Manifest next update: Mon 19 May 2025 20:51:26 +0000 Files and hashes: 1: uttpn6AqlXLm70n0-Rof4Kc8LI0.crl (hash: qUpkXGTG7juSCoJaXKMRBlS0ZP+uxYPKCWKGt+4vnp0=) 2: C8BD376C3ADF11EC85EB255FC4F9AE02.roa (hash: wZOUAFh3yH4xpJik8Ps1Fk72+HENAnV8sf4x6n94egk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2050 (0x802) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E27B9, serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D Validity Not Before: May 12 20:51:26 2025 GMT Not After : May 19 20:51:26 2025 GMT Subject: CN=68225f4f-0f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9e:6a:47:b8:19:08:3e:2b:41:14:1a:ed:a7: c2:bd:6a:e7:ef:74:29:a5:57:1a:79:52:ac:b5:48: 82:71:c3:fb:62:73:29:91:1b:55:57:9b:6e:4e:42: 15:37:76:b8:eb:7b:fb:53:2e:fd:77:e2:69:3e:ea: 2b:e8:be:28:ec:c0:74:fc:2d:0e:98:67:66:b8:80: 75:a6:77:85:d4:3b:df:0d:da:81:db:48:8e:5f:c6: 08:38:27:fe:6d:90:69:6b:19:49:de:ab:8a:c8:f8: c1:a0:fc:d1:a0:69:b0:41:7a:af:41:c2:73:bf:a3: 58:9a:e4:fb:6d:56:78:5c:2d:58:5d:62:60:ac:9b: ce:5b:92:bb:77:d0:0e:4e:cf:a1:4e:ec:5c:97:40: 22:c2:fc:7e:24:0b:0f:52:97:38:12:26:74:28:28: b7:27:64:f7:5b:96:e4:a9:37:47:bf:98:03:8c:88: 07:26:ee:c9:b5:42:93:9b:54:39:80:07:18:77:55: 9d:e1:1c:f2:ba:d0:eb:2f:15:98:31:4b:d3:56:e9: f8:b4:ce:b8:ef:76:91:0f:a0:03:60:21:e5:fd:e7: 7a:bf:5e:94:3a:14:1f:6f:bd:98:c1:89:92:d6:5f: 37:79:cd:ef:8d:92:31:54:64:14:16:46:a8:01:14: 65:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:22:40:24:7F:A1:86:2D:52:0F:D9:1E:D4:4C:32:0A:37:72:44:A6 X509v3 Authority Key Identifier: keyid:BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:8a:d7:0a:c4:ba:4e:32:55:6b:f4:a1:71:7c:4b:3f:43:0a: 8d:38:be:30:8e:42:58:a4:af:39:f5:21:67:2b:e6:00:56:9f: 79:3e:de:20:c1:5b:ba:56:4b:a1:1d:ba:4f:23:41:cd:51:b5: f3:90:f4:f4:15:d4:b5:d0:48:55:c2:95:82:01:26:8c:b9:df: c9:f4:1a:a0:13:80:71:83:d7:ad:15:18:43:4b:94:cc:a1:6a: 6d:4d:d9:93:1a:55:9a:70:ed:62:32:12:01:b5:2f:bd:ad:63: b1:59:43:a6:50:1b:bc:92:1f:9b:f2:da:6c:9b:96:90:2d:d0: bc:07:a1:06:10:b9:fc:42:79:a7:ee:f7:44:e6:38:69:eb:22: 20:d1:4d:31:a5:77:52:5c:60:ec:cb:ba:fe:b3:0a:95:fd:4a: 80:75:65:ac:92:a2:3d:a0:f6:7d:40:60:a3:db:60:df:e1:a4: 10:6f:71:0a:80:a9:a1:b2:d2:39:53:8e:5a:14:42:b8:0b:ce: 05:e9:2c:e2:c2:75:fc:21:b8:9e:6d:75:52:d6:d2:74:8b:4e: f1:a2:94:34:af:8b:a9:9b:80:56:16:23:61:45:24:f3:fb:40: 87:6e:d1:16:04:12:49:ca:95:ec:1b:5a:cd:52:8d:2a:b3:8a: fe:a7:ed:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3QjkxMTAvBgNVBAUTKEJBREI2OTlGQTAyQTk1NzJFNkVGNDlGNEY5MUExRkUw QTczQzJDOEQwHhcNMjUwNTEyMjA1MTI2WhcNMjUwNTE5MjA1MTI2WjAYMRYwFAYD VQQDEw02ODIyNWY0Zi0wZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJ5qR7gZCD4rQRQa7afCvWrn73QppVcaeVKstUiCccP7YnMpkRtVV5tuTkIV N3a463v7Uy79d+JpPuor6L4o7MB0/C0OmGdmuIB1pneF1DvfDdqB20iOX8YIOCf+ bZBpaxlJ3quKyPjBoPzRoGmwQXqvQcJzv6NYmuT7bVZ4XC1YXWJgrJvOW5K7d9AO Ts+hTuxcl0Aiwvx+JAsPUpc4EiZ0KCi3J2T3W5bkqTdHv5gDjIgHJu7JtUKTm1Q5 gAcYd1Wd4RzyutDrLxWYMUvTVun4tM6473aRD6ADYCHl/ed6v16UOhQfb72YwYmS 1l83ec3vjZIxVGQUFkaoARRljQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkiQCR/ oYYtUg/ZHtRMMgo3ckSmMB8GA1UdIwQYMBaAFLrbaZ+gKpVy5u9J9PkaH+CnPCyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjdCOS84NEJBNzQ4MkYw Q0UxMUVBODkxQjJDNzZDNEY5QUUwMi91dHRwbjZBcWxYTG03MG4wLVJvZjRLYzhM STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V0dHBuNkFxbFhMbTcwbjAtUm9mNEtjOExJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjdCOS84NEJBNzQ4MkYwQ0UxMUVBODkxQjJDNzZDNEY5QUUwMi91dHRwbjZBcWxY TG03MG4wLVJvZjRLYzhMSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHitcKxLpOMlVr9KFxfEs/QwqNOL4wjkJYpK859SFnK+YAVp95Pt4g wVu6VkuhHbpPI0HNUbXzkPT0FdS10EhVwpWCASaMud/J9BqgE4Bxg9etFRhDS5TM oWptTdmTGlWacO1iMhIBtS+9rWOxWUOmUBu8kh+b8tpsm5aQLdC8B6EGELn8Qnmn 7vdE5jhp6yIg0U0xpXdSXGDsy7r+swqV/UqAdWWskqI9oPZ9QGCj22Df4aQQb3EK gKmhstI5U45aFEK4C84F6SziwnX8IbiebXVS1tJ0i07xopQ0r4upm4BWFiNhRSTz +0CHbtEWBBJJypXsG1rNUo0qs4r+p+0c -----END CERTIFICATE-----Generated at Tue May 13 16:01:24 2025 by rpki-client