$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft File: uRokzwRxERfIw7omSjM5Xad_kbQ.mft (raw, json) Hash identifier: q0JjzZ+i+HiYfRVyf6zgU/fIi7UQzhatVRvQ8n5eRng= Subject key identifier: 19:9D:86:10:A4:B3:CB:9E:C4:F3:57:42:40:E7:EF:1F:A7:AF:29:C6 Authority key identifier: B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4 Certificate issuer: /CN=A9133BB0/serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft Manifest number: 7E Signing time: Wed 09 Apr 2025 05:27:31 +0000 Manifest this update: Wed 09 Apr 2025 05:27:31 +0000 Manifest next update: Wed 16 Apr 2025 05:27:31 +0000 Files and hashes: 1: uRokzwRxERfIw7omSjM5Xad_kbQ.crl (hash: 7KdflS7pHgVmIixsOfhg9vefoUKCwzPaKXX76fllg38=) 2: 27995372566911EF9D53B517C4F9AE02.roa (hash: xq/tIHChRUQ/SVgEnorDvzsCIu9u4UcNJR+//ggbghs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0 Validity Not Before: Apr 9 05:27:31 2025 GMT Not After : Apr 16 05:27:31 2025 GMT Subject: CN=67f60543-f7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:30:e4:f7:b2:02:c9:cb:91:2e:b7:20:61:9c: 1f:be:9b:e5:dc:90:a8:d5:de:6f:99:76:33:cb:89: b2:1e:80:32:38:85:af:95:7c:fd:60:1f:1e:86:de: 5b:57:f9:91:be:37:20:fc:dc:ef:2a:df:6f:db:ce: 89:31:96:91:94:1e:28:14:25:2c:f6:ed:c0:c0:09: cb:14:df:86:7f:ea:66:40:46:5e:60:be:90:94:95: 4d:9e:82:34:65:19:69:6d:b5:58:00:25:4e:ff:dc: d7:60:5a:f3:22:3e:d0:fe:3a:21:07:b5:36:89:c4: 35:fd:65:af:54:63:c8:27:14:21:72:2c:02:b6:a6: 8a:94:20:f1:27:18:a6:ef:fe:f6:8d:7d:7e:9e:ce: 63:24:8c:76:45:c4:e9:4d:41:2f:9a:37:3d:8e:27: 88:64:df:ee:ce:45:21:7e:43:17:79:b6:25:84:2a: bc:0a:c4:37:81:36:f3:79:0d:34:f6:19:92:9b:50: 9f:6d:25:7b:72:f1:b1:80:92:66:44:9f:90:93:33: 54:3c:26:56:0b:0f:55:77:4d:de:0e:ef:13:5d:d1: a7:64:8b:ea:66:45:6a:9f:47:c2:2e:37:66:bd:f1: c9:67:ff:d1:8a:f2:37:6a:5f:36:fd:81:d7:2c:7a: 61:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9D:86:10:A4:B3:CB:9E:C4:F3:57:42:40:E7:EF:1F:A7:AF:29:C6 X509v3 Authority Key Identifier: keyid:B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:26:d6:af:6d:c3:b8:29:16:f5:77:14:bd:27:86:3a:fa:6b: 62:e7:c6:e2:e2:bf:b1:ab:da:d7:72:7d:43:fd:e5:e6:f2:72: c4:75:14:a8:5d:df:43:68:26:4c:5b:98:e7:55:4c:5b:e7:ab: 09:73:2b:79:fe:3c:d7:7a:bb:15:a2:25:f0:c1:91:28:70:ee: f8:75:6a:a1:54:82:62:a5:75:aa:d1:90:92:24:c2:0b:db:fa: 66:97:59:8f:d8:48:56:85:96:6c:63:7f:0e:8a:1e:a3:fe:8c: c0:9a:f1:3c:bd:6e:35:41:f9:30:1b:47:e1:87:a3:a6:98:61: 00:ee:b3:d0:13:39:6c:1b:47:37:73:72:ff:62:81:c1:bb:8b: ec:10:3e:ed:29:da:21:16:5e:70:52:57:d0:2d:a9:85:f8:e0: 19:93:f0:e1:4f:ed:e0:8f:84:d4:80:6d:7f:4c:fa:3a:52:94: 77:5a:44:83:17:9f:95:2f:3d:0e:59:18:15:48:30:49:2e:f9: a7:b3:87:26:e8:15:7f:fd:ba:d9:f4:22:5e:c4:0a:39:8b:09: 9c:8e:12:2c:d3:12:60:2d:83:1c:4b:ef:95:4f:0b:dc:54:6f: 68:08:31:27:d1:e9:76:fc:af:00:d4:2e:7b:d3:9b:cb:ef:07: 14:a1:28:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz M0JCMDExMC8GA1UEBRMoQjkxQTI0Q0YwNDcxMTExN0M4QzNCQTI2NEEzMzM5NURB NzdGOTFCNDAeFw0yNTA0MDkwNTI3MzFaFw0yNTA0MTYwNTI3MzFaMBgxFjAUBgNV BAMTDTY3ZjYwNTQzLWY3ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVMOT3sgLJy5EutyBhnB++m+XckKjV3m+ZdjPLibIegDI4ha+VfP1gHx6G3ltX +ZG+NyD83O8q32/bzokxlpGUHigUJSz27cDACcsU34Z/6mZARl5gvpCUlU2egjRl GWlttVgAJU7/3NdgWvMiPtD+OiEHtTaJxDX9Za9UY8gnFCFyLAK2poqUIPEnGKbv /vaNfX6ezmMkjHZFxOlNQS+aNz2OJ4hk3+7ORSF+Qxd5tiWEKrwKxDeBNvN5DTT2 GZKbUJ9tJXty8bGAkmZEn5CTM1Q8JlYLD1V3Td4O7xNd0adki+pmRWqfR8IuN2a9 8cln/9GK8jdqXzb9gdcsemH7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGZ2GEKSz y57E81dCQOfvH6evKcYwHwYDVR0jBBgwFoAUuRokzwRxERfIw7omSjM5Xad/kbQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzQkIwL0I4NjVCMzdFNTY2 ODExRUY4RTZBNzc1REM0RjlBRTAyL3VSb2t6d1J4RVJmSXc3b21Tak01WGFkX2ti US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdVJva3p3UnhFUmZJdzdvbVNqTTVYYWRfa2JRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz QkIwL0I4NjVCMzdFNTY2ODExRUY4RTZBNzc1REM0RjlBRTAyL3VSb2t6d1J4RVJm SXc3b21Tak01WGFkX2tiUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD8m1q9tw7gpFvV3FL0nhjr6a2LnxuLiv7Gr2tdyfUP95ebycsR1FKhd 30NoJkxbmOdVTFvnqwlzK3n+PNd6uxWiJfDBkShw7vh1aqFUgmKldarRkJIkwgvb +maXWY/YSFaFlmxjfw6KHqP+jMCa8Ty9bjVB+TAbR+GHo6aYYQDus9ATOWwbRzdz cv9igcG7i+wQPu0p2iEWXnBSV9AtqYX44BmT8OFP7eCPhNSAbX9M+jpSlHdaRIMX n5UvPQ5ZGBVIMEku+aezhyboFX/9utn0Il7ECjmLCZyOEizTEmAtgxxL75VPC9xU b2gIMSfR6Xb8rwDULnvTm8vvBxShKDE= -----END CERTIFICATE-----Generated at Fri Apr 11 00:02:00 2025 by rpki-client