$ rpki-client -vvf rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft File: UjrFjamEDQscqom9_54NzkZ2fEo.mft (raw, json) Hash identifier: MeYmc9Cru7GXRV6JD7vrDrjkh68SbN72j6tA2FmEDDg= Subject key identifier: 47:D3:90:96:22:B1:23:4F:D2:8F:53:83:5C:56:1C:EE:B1:55:B5:35 Authority key identifier: 52:3A:C5:8D:A9:84:0D:0B:1C:AA:89:BD:FF:9E:0D:CE:46:76:7C:4A Certificate issuer: /CN=A9124B27/serialNumber=523AC58DA9840D0B1CAA89BDFF9E0DCE46767C4A Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft Manifest number: 3F Signing time: Tue 15 Apr 2025 06:17:48 +0000 Manifest this update: Tue 15 Apr 2025 06:17:47 +0000 Manifest next update: Tue 22 Apr 2025 06:17:47 +0000 Files and hashes: 1: UjrFjamEDQscqom9_54NzkZ2fEo.crl (hash: wr3dQ9FmaeJkMM9LR0iadp+gmMMykJmt3Z3p2X5elxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.crl rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 06:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B27, serialNumber=523AC58DA9840D0B1CAA89BDFF9E0DCE46767C4A Validity Not Before: Apr 15 06:17:47 2025 GMT Not After : Apr 22 06:17:47 2025 GMT Subject: CN=67fdfa0b-d8cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:54:2b:71:62:fe:f4:09:00:88:a1:3a:7a:fe: 80:85:fc:6c:d4:14:cb:ae:36:6e:42:e7:37:ef:f7: 06:40:de:09:55:15:3e:d1:a9:e6:f0:6b:e1:ce:4f: cf:b8:05:69:33:29:db:62:d5:6a:e3:47:0a:c1:3a: b7:e1:03:ba:e3:4b:f0:cc:40:cd:0c:66:e3:6a:97: c6:79:33:ab:6e:9b:50:7c:43:76:05:6e:bc:bc:56: 78:b0:ab:1c:57:2d:22:9e:aa:7a:d1:90:03:31:9b: b6:12:c7:95:f0:37:99:62:d7:c4:39:d6:b7:88:bf: de:8d:a6:3a:27:7e:fc:e1:d2:8f:69:59:a8:ce:bd: 27:32:14:81:5d:52:1f:68:05:d4:73:2e:df:f5:59: 35:11:4b:aa:fe:ea:65:1a:65:8e:db:57:3e:9f:02: 62:46:05:17:cb:91:c9:75:3b:fe:d8:89:88:18:e6: 3f:80:33:e9:7e:89:12:2b:9a:56:ee:52:6d:d0:5f: f3:ee:14:2a:35:d0:46:3d:02:c1:31:f7:f3:da:4a: 27:27:a4:24:ad:bb:35:65:1d:d4:5d:a0:ba:11:0e: 34:4d:36:5f:7a:ef:dc:30:aa:a9:b3:3a:aa:fd:75: 9f:d7:5f:ce:05:52:08:f4:93:62:65:fa:71:de:63: 62:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D3:90:96:22:B1:23:4F:D2:8F:53:83:5C:56:1C:EE:B1:55:B5:35 X509v3 Authority Key Identifier: keyid:52:3A:C5:8D:A9:84:0D:0B:1C:AA:89:BD:FF:9E:0D:CE:46:76:7C:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:69:9c:15:1b:ee:b5:ad:51:43:0f:46:b6:e1:2b:05:b5:cb: 50:c6:ae:ff:5a:bb:56:1e:4c:6a:0e:28:1d:d3:d0:72:1d:b3: c2:01:c1:63:d7:58:b7:62:47:44:d1:ef:f5:f0:53:f9:f7:50: ed:d7:e0:0c:5d:d7:4c:de:69:ef:17:41:2d:35:45:f7:ae:d2: f0:cb:30:83:d5:87:25:7e:1a:4c:c3:28:85:68:e8:1b:88:71: 16:0a:3c:eb:fc:15:94:88:e2:bf:23:8d:9b:67:34:07:12:7f: 48:31:1c:76:8b:78:29:0c:7c:68:4b:c6:88:4f:aa:a5:e2:8d: 7f:fa:a2:34:80:d1:3d:73:60:c5:8f:18:dc:13:a8:69:0a:91: ad:03:6c:df:8c:8a:09:e9:64:8a:6f:0b:39:9a:09:64:3f:82: 27:14:8f:60:10:84:06:6d:33:70:2d:88:65:19:e3:77:ba:46: 6e:4a:56:b8:81:47:73:d0:f0:68:f6:23:16:5d:b2:d2:71:bf: a0:66:90:79:3c:8e:b4:20:2d:03:8a:72:37:9a:3a:a1:f7:2f: 84:4c:32:61:55:c9:62:07:96:20:43:a9:25:b4:65:72:81:6b: 84:31:72:ae:d1:26:61:82:6b:4e:ee:25:28:9a:bf:36:6b:e5: 47:3b:01:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NEIyNzExMC8GA1UEBRMoNTIzQUM1OERBOTg0MEQwQjFDQUE4OUJERkY5RTBEQ0U0 Njc2N0M0QTAeFw0yNTA0MTUwNjE3NDdaFw0yNTA0MjIwNjE3NDdaMBgxFjAUBgNV BAMTDTY3ZmRmYTBiLWQ4Y2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiVCtxYv70CQCIoTp6/oCF/GzUFMuuNm5C5zfv9wZA3glVFT7Rqebwa+HOT8+4 BWkzKdti1WrjRwrBOrfhA7rjS/DMQM0MZuNql8Z5M6tum1B8Q3YFbry8VniwqxxX LSKeqnrRkAMxm7YSx5XwN5li18Q51reIv96Npjonfvzh0o9pWajOvScyFIFdUh9o BdRzLt/1WTURS6r+6mUaZY7bVz6fAmJGBRfLkcl1O/7YiYgY5j+AM+l+iRIrmlbu Um3QX/PuFCo10EY9AsEx9/PaSicnpCStuzVlHdRdoLoRDjRNNl9679wwqqmzOqr9 dZ/XX84FUgj0k2Jl+nHeY2J3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUR9OQliKx I0/Sj1ODXFYc7rFVtTUwHwYDVR0jBBgwFoAUUjrFjamEDQscqom9/54NzkZ2fEow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0QjI3LzUwMDYxOERDQzZF ODExRUY4N0FFNjkwREM0RjlBRTAyL1VqckZqYW1FRFFzY3FvbTlfNTROemtaMmZF by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVWpyRmphbUVEUXNjcW9tOV81NE56a1oyZkVvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 QjI3LzUwMDYxOERDQzZFODExRUY4N0FFNjkwREM0RjlBRTAyL1VqckZqYW1FRFFz Y3FvbTlfNTROemtaMmZFby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHBpnBUb7rWtUUMPRrbhKwW1y1DGrv9au1YeTGoOKB3T0HIds8IBwWPX WLdiR0TR7/XwU/n3UO3X4Axd10zeae8XQS01Rfeu0vDLMIPVhyV+GkzDKIVo6BuI cRYKPOv8FZSI4r8jjZtnNAcSf0gxHHaLeCkMfGhLxohPqqXijX/6ojSA0T1zYMWP GNwTqGkKka0DbN+MignpZIpvCzmaCWQ/gicUj2AQhAZtM3AtiGUZ43e6Rm5KVriB R3PQ8Gj2IxZdstJxv6BmkHk8jrQgLQOKcjeaOqH3L4RMMmFVyWIHliBDqSW0ZXKB a4Qxcq7RJmGCa07uJSiavzZr5Uc7ARE= -----END CERTIFICATE-----Generated at Wed Apr 16 17:15:23 2025 by rpki-client