$ rpki-client -vvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft File: UxdJCV5En9gqodtQ2oNAFyML3RM.mft (raw, json) Hash identifier: jy3sfZllYSHIZySHrlEgxHjbo0InVbJhRDYe+tTMrXI= Subject key identifier: 36:99:B0:4F:BC:94:B9:FE:4E:00:16:04:DC:0B:63:CE:F6:EB:73:BF Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 Certificate issuer: /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Certificate serial: 0B62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft Manifest number: 0B5B Signing time: Fri 04 Apr 2025 19:12:12 +0000 Manifest this update: Fri 04 Apr 2025 19:12:12 +0000 Manifest next update: Fri 11 Apr 2025 19:12:12 +0000 Files and hashes: 1: UxdJCV5En9gqodtQ2oNAFyML3RM.crl (hash: Ph8wtYUD2UOsCU+3IHlh+bmMIs2G1nR0sHHfDJYqYpQ=) 2: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (hash: b6SG981ws9YTohF7YJYfD6V/fAmms72gE/FD/yHhvRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2914 (0xb62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117754 Validity Not Before: Apr 4 19:12:12 2025 GMT Not After : Apr 11 19:12:12 2025 GMT Subject: CN=67f02f0c-e05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:78:b8:fb:0f:a3:ba:05:97:23:77:29:09:94: 89:e1:85:3c:ae:cb:84:79:92:7d:ab:d6:a6:75:54: bb:12:b1:67:b4:17:d4:9e:d4:60:52:9f:9d:ee:f7: a4:41:0b:9c:28:9f:a2:f9:3a:c8:db:12:39:3b:8f: 2c:66:74:98:f1:63:be:33:f2:55:44:c4:69:55:a2: e3:66:4e:fa:6a:0b:da:56:49:fc:76:cd:cb:4d:db: f5:3f:c5:9e:59:23:71:04:c4:ac:51:93:90:38:8c: 9f:17:8b:d1:30:5b:e4:a5:3b:74:4f:0d:c9:b9:ed: 7f:7c:23:85:83:40:4b:bd:fc:5f:82:72:00:b2:ba: ef:56:b8:64:16:97:38:43:59:e8:b6:5c:bb:d4:05: 4c:ba:22:85:15:1a:c0:cf:20:71:71:40:b5:c8:34: 11:76:84:8c:bd:12:83:83:9f:bb:2c:be:bf:a5:6c: 49:d3:22:92:b4:8c:cf:50:49:8b:ed:a0:98:f4:75: e2:bf:9a:e2:9f:52:b8:49:8f:6d:e1:8d:c0:12:01: ba:91:77:12:d9:41:3c:40:93:5f:92:90:1d:01:5c: 67:83:9e:1c:bb:dd:50:8d:26:b4:6b:83:37:1e:ea: 40:25:04:42:b0:fb:af:b6:53:99:da:bb:cc:d3:e9: e4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:99:B0:4F:BC:94:B9:FE:4E:00:16:04:DC:0B:63:CE:F6:EB:73:BF X509v3 Authority Key Identifier: keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:13:a0:37:b5:0a:76:d7:dc:da:bf:81:fd:d7:24:2c:ab:67: d5:ce:25:31:84:0d:ad:4a:ef:75:e4:44:d2:7d:22:b4:8d:2a: de:7f:e1:63:02:ac:26:59:a5:68:c6:16:a8:db:f2:98:e5:ba: f5:f3:e7:66:d3:90:a5:37:c7:90:02:30:bf:b4:71:80:3c:92: 35:6e:ed:38:c8:f9:ca:68:da:6e:8d:ab:45:16:8c:a4:bc:a4: ef:87:6f:d7:c1:b0:73:e0:cc:61:c6:c4:c0:d4:22:0d:e2:ac: 03:0a:33:a6:ea:4c:de:62:f8:e3:2a:85:c9:18:ef:66:9b:99: 39:d5:bd:b5:99:62:9b:60:6f:7a:de:09:2d:db:b8:e0:27:6f: f3:f7:d0:1c:47:69:57:5f:fc:36:0f:19:a3:e2:88:f2:ad:20: 26:46:b4:3d:05:32:44:fc:4d:74:31:3b:dd:3c:8b:1a:1c:12: cc:d1:fe:2d:54:b1:2f:46:93:32:83:f1:17:ec:28:7c:9d:33: 96:f8:64:29:8b:14:c9:83:b7:26:87:8c:9b:4b:17:bf:3a:55: 75:11:0b:72:2e:2a:09:50:30:ad:d5:01:41:bd:86:34:ea:3a: 96:49:d1:a8:e7:61:3e:6f:09:23:23:1d:41:1d:b0:c2:8a:dc: ca:14:7a:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3NTQxMTAvBgNVBAUTKDUzMTc0OTA5NUU0NDlGRDgyQUExREI1MERBODM0MDE3 MjMwQkREMTMwHhcNMjUwNDA0MTkxMjEyWhcNMjUwNDExMTkxMjEyWjAYMRYwFAYD VQQDEw02N2YwMmYwYy1lMDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXi4+w+jugWXI3cpCZSJ4YU8rsuEeZJ9q9amdVS7ErFntBfUntRgUp+d7vek QQucKJ+i+TrI2xI5O48sZnSY8WO+M/JVRMRpVaLjZk76agvaVkn8ds3LTdv1P8We WSNxBMSsUZOQOIyfF4vRMFvkpTt0Tw3Jue1/fCOFg0BLvfxfgnIAsrrvVrhkFpc4 Q1notly71AVMuiKFFRrAzyBxcUC1yDQRdoSMvRKDg5+7LL6/pWxJ0yKStIzPUEmL 7aCY9HXiv5rin1K4SY9t4Y3AEgG6kXcS2UE8QJNfkpAdAVxng54cu91QjSa0a4M3 HupAJQRCsPuvtlOZ2rvM0+nkfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDaZsE+8 lLn+TgAWBNwLY87263O/MB8GA1UdIwQYMBaAFFMXSQleRJ/YKqHbUNqDQBcjC90T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzc1NC84QjMxNDVBRTJD OEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45Z3FvZHRRMm9OQUZ5TUwz Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4ZEpDVjVFbjlncW9kdFEyb05BRnlNTDNSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzc1NC84QjMxNDVBRTJDOEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45 Z3FvZHRRMm9OQUZ5TUwzUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEE6A3tQp219zav4H91yQsq2fVziUxhA2tSu915ETSfSK0jSref+Fj AqwmWaVoxhao2/KY5br18+dm05ClN8eQAjC/tHGAPJI1bu04yPnKaNpujatFFoyk vKTvh2/XwbBz4MxhxsTA1CIN4qwDCjOm6kzeYvjjKoXJGO9mm5k51b21mWKbYG96 3gkt27jgJ2/z99AcR2lXX/w2Dxmj4ojyrSAmRrQ9BTJE/E10MTvdPIsaHBLM0f4t VLEvRpMyg/EX7Ch8nTOW+GQpixTJg7cmh4ybSxe/OlV1EQtyLioJUDCt1QFBvYY0 6jqWSdGo52E+bwkjIx1BHbDCitzKFHrX -----END CERTIFICATE-----Generated at Sat Apr 5 23:07:50 2025 by rpki-client