$ rpki-client -vvf rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft File: uXp_AVpzYHTfOERcmAdDeCGdKZU.mft (raw, json) Hash identifier: PLVHs+JC3eaHmFUQbWJXLTzJmW6R/9HILBVJo6+hnUk= Subject key identifier: 14:56:31:4F:A0:97:5C:79:25:BB:6D:B5:E1:AD:CD:7A:72:63:D4:EC Authority key identifier: B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95 Certificate issuer: /CN=A91320D4/serialNumber=B97A7F015A736074DF38445C98074378219D2995 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft Manifest number: E4 Signing time: Sat 05 Apr 2025 04:48:19 +0000 Manifest this update: Sat 05 Apr 2025 04:48:18 +0000 Manifest next update: Sat 12 Apr 2025 04:48:18 +0000 Files and hashes: 1: uXp_AVpzYHTfOERcmAdDeCGdKZU.crl (hash: 0peq2Ln7a4nhng1aVr7HFCl/FoSW9WqDh+fttiF8GVI=) 2: BAB65090BD7811EEB634A117C4F9AE02.roa (hash: rOfi7pLc2YXhQ9Pw2aUr9rz0+D/rY6Ijcu5KC1k/f/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91320D4 Validity Not Before: Apr 5 04:48:18 2025 GMT Not After : Apr 12 04:48:18 2025 GMT Subject: CN=67f0b613-0280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2b:e0:35:0b:76:85:cd:42:c5:99:d6:cf:64: 51:08:28:e9:c2:84:ed:38:06:25:8d:60:8f:5a:33: 4e:46:db:a4:5e:50:6a:36:64:4b:ee:d4:db:f1:00: d8:cb:6d:2d:79:6f:88:f1:cb:1d:3e:c3:56:80:5d: b1:c1:82:0f:57:80:7b:a2:36:5d:f6:38:d0:7c:1c: 17:92:ca:85:c5:42:80:ad:e1:8c:78:40:e3:ff:37: 58:21:b3:89:b6:e8:32:87:61:f6:7d:2b:ed:8c:8f: 86:3d:88:52:5f:5c:20:28:e5:50:6d:02:b6:ed:90: 2f:73:f7:d2:f9:a6:90:97:b6:b9:18:e9:17:cd:6d: cb:47:73:bc:1d:50:f3:7f:9d:53:16:d3:63:5f:bf: e8:93:ee:c0:a1:af:c5:37:c5:41:20:2e:94:f2:9d: 33:be:ef:b7:7f:ee:f0:1d:e7:fc:f3:7c:24:eb:98: 19:c4:44:4c:18:1d:f8:79:02:2c:f5:a2:6a:ec:d8: 8f:fa:8d:46:93:58:77:ca:d9:96:f0:77:7e:21:89: 37:13:b3:bf:88:92:f9:7e:6a:02:f6:e5:39:92:99: d3:fb:ed:0f:d3:f4:d0:8c:df:de:c1:d2:18:1b:c5: c2:44:2b:55:1b:81:48:a7:2a:a7:3f:50:87:a8:0c: 61:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:56:31:4F:A0:97:5C:79:25:BB:6D:B5:E1:AD:CD:7A:72:63:D4:EC X509v3 Authority Key Identifier: keyid:B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ec:ab:d2:28:69:b4:b2:c3:45:b0:04:c8:10:ad:f7:c2:b1: 2c:73:e6:6e:18:d1:5d:93:80:8b:1a:ea:af:d8:1c:d4:e1:5c: 89:37:3e:27:59:0c:04:6c:80:05:c7:71:34:d3:58:30:c1:77: b9:40:32:65:78:be:b8:db:29:d6:43:06:0c:16:93:0e:99:d1: 84:a1:1a:69:76:21:8b:70:c9:47:e8:6d:35:0b:ae:b5:83:0a: 9f:50:ef:f2:8b:f3:6e:41:a7:cc:9c:73:1f:2d:1c:c7:2e:71: 23:a0:b3:10:53:d6:51:e5:70:82:2b:1e:f9:be:d7:30:77:15: b6:ae:81:89:2b:b9:9c:44:bb:71:55:1f:42:09:d3:62:bf:c1: b0:47:60:e2:ad:bc:1a:a6:43:00:33:0a:64:4c:ee:4a:fd:6e: cc:e2:f1:c1:2e:7f:fb:b9:e4:14:24:f2:52:96:c1:d1:c8:3b: e2:6f:e0:78:d0:bd:5e:28:3a:f8:01:9f:83:dc:7a:75:8b:e2: f5:62:0b:44:2f:51:24:c5:af:8b:88:2a:d7:37:eb:56:00:6b: 9f:9d:f4:7c:1c:f5:df:af:ca:f7:6c:d4:67:ed:ed:5d:74:85: 2a:40:01:e1:a5:47:4e:76:b4:24:cc:01:e8:df:e7:c1:f7:ba: 6f:a2:14:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzIwRDQxMTAvBgNVBAUTKEI5N0E3RjAxNUE3MzYwNzRERjM4NDQ1Qzk4MDc0Mzc4 MjE5RDI5OTUwHhcNMjUwNDA1MDQ0ODE4WhcNMjUwNDEyMDQ0ODE4WjAYMRYwFAYD VQQDEw02N2YwYjYxMy0wMjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSvgNQt2hc1CxZnWz2RRCCjpwoTtOAYljWCPWjNORtukXlBqNmRL7tTb8QDY y20teW+I8csdPsNWgF2xwYIPV4B7ojZd9jjQfBwXksqFxUKAreGMeEDj/zdYIbOJ tugyh2H2fSvtjI+GPYhSX1wgKOVQbQK27ZAvc/fS+aaQl7a5GOkXzW3LR3O8HVDz f51TFtNjX7/ok+7Aoa/FN8VBIC6U8p0zvu+3f+7wHef883wk65gZxERMGB34eQIs 9aJq7NiP+o1Gk1h3ytmW8Hd+IYk3E7O/iJL5fmoC9uU5kpnT++0P0/TQjN/ewdIY G8XCRCtVG4FIpyqnP1CHqAxhrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRWMU+g l1x5JbttteGtzXpyY9TsMB8GA1UdIwQYMBaAFLl6fwFac2B03zhEXJgHQ3ghnSmV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjBENC8wRTNGMEM2NkJD MTYxMUVFQjkwNTlDODZDNEY5QUUwMi91WHBfQVZwellIVGZPRVJjbUFkRGVDR2RL WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYcF9BVnB6WUhUZk9FUmNtQWREZUNHZEtaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjBENC8wRTNGMEM2NkJDMTYxMUVFQjkwNTlDODZDNEY5QUUwMi91WHBfQVZwellI VGZPRVJjbUFkRGVDR2RLWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK7KvSKGm0ssNFsATIEK33wrEsc+ZuGNFdk4CLGuqv2BzU4VyJNz4n WQwEbIAFx3E001gwwXe5QDJleL642ynWQwYMFpMOmdGEoRppdiGLcMlH6G01C661 gwqfUO/yi/NuQafMnHMfLRzHLnEjoLMQU9ZR5XCCKx75vtcwdxW2roGJK7mcRLtx VR9CCdNiv8GwR2DirbwapkMAMwpkTO5K/W7M4vHBLn/7ueQUJPJSlsHRyDvib+B4 0L1eKDr4AZ+D3Hp1i+L1YgtEL1Ekxa+LiCrXN+tWAGufnfR8HPXfr8r3bNRn7e1d dIUqQAHhpUdOdrQkzAHo3+fB97pvohT2 -----END CERTIFICATE-----Generated at Sat Apr 5 14:41:18 2025 by rpki-client