$ rpki-client -vvf rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft File: UudzDz1hVWPrWMn6dZKhvYBbWjU.mft (raw, json) Hash identifier: 9x2SgOj3kTMMg4xypcdks0Fgv3+lMBwBvUKRV7DKKPk= Subject key identifier: E5:71:A4:C9:A4:81:AB:4C:EB:0F:C2:DF:E1:9B:4E:5E:D9:7B:70:D4 Authority key identifier: 52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 Certificate issuer: /CN=A914D9BE/serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft Manifest number: 01BA Signing time: Thu 03 Apr 2025 02:23:54 +0000 Manifest this update: Thu 03 Apr 2025 02:23:53 +0000 Manifest next update: Thu 10 Apr 2025 02:23:53 +0000 Files and hashes: 1: UudzDz1hVWPrWMn6dZKhvYBbWjU.crl (hash: /yQNlNAuk7W9pGd8ALap/1NlDOmOEHeDmQ7/GT0FMSg=) 2: AE148B2A6BB911ED97343873C4F9AE02.roa (hash: h7PFINLKglbbD51solfuF7q/5uroEa7Bk3jUBzQnwh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D9BE Validity Not Before: Apr 3 02:23:53 2025 GMT Not After : Apr 10 02:23:53 2025 GMT Subject: CN=67edf13a-b3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e2:d9:c3:34:a4:a6:51:a8:d1:04:d8:b7:82: 88:56:ac:5b:43:df:fc:a8:3f:1d:b9:13:5c:1c:9f: df:78:78:e9:9f:0c:fb:f6:83:a4:6d:6f:e8:f7:1b: 0d:18:4e:be:7a:2b:69:e6:32:fc:0e:24:57:5d:fc: ad:f0:1d:f0:0b:7b:0d:df:89:d2:77:37:11:ff:83: 09:f3:26:8b:20:f0:70:cb:4e:a0:92:a8:c9:9c:b6: 6b:be:1b:4a:ef:13:f5:0c:7f:bd:b6:ab:5c:9a:65: 53:dd:9a:c0:5c:8b:51:ed:3a:b9:5f:2c:7a:07:48: e7:1e:d6:74:1f:5b:c0:e3:e2:67:6a:08:10:a4:fc: 2a:bd:5b:bf:54:bd:47:e1:2a:a7:71:ee:0f:24:8c: 7c:8e:ed:7d:80:4c:9c:cc:fb:79:5b:d3:9d:94:6d: 80:c6:93:14:59:f0:97:3d:d6:a6:8d:f1:83:5f:9a: 3c:26:41:64:a6:c4:60:73:7d:b9:c4:0d:d4:59:b3: 59:0d:67:7d:a8:eb:d2:75:ab:41:f9:90:c9:46:14: db:aa:ac:da:e2:20:60:17:ca:e1:c0:ff:77:f7:b0: 22:09:50:cd:d5:08:0f:57:7f:cd:48:bb:ad:b2:7b: 8d:e2:10:b4:0c:0b:ca:24:ce:a4:17:bb:18:9f:8f: 3c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:71:A4:C9:A4:81:AB:4C:EB:0F:C2:DF:E1:9B:4E:5E:D9:7B:70:D4 X509v3 Authority Key Identifier: keyid:52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:60:0c:59:b1:2a:25:36:07:18:8e:76:57:40:80:12:dd:63: 16:e8:d1:ec:8b:ba:1a:fe:ea:a9:47:c8:29:21:81:a9:1f:b8: 31:39:8b:95:0c:19:f7:00:c2:58:a8:54:ff:7b:4c:a8:c8:42: 32:f0:7c:f2:40:a2:86:f3:69:85:38:0f:97:fb:21:cf:19:d6: 39:9f:6b:f7:8b:e7:08:1d:30:31:76:18:76:92:7c:13:9c:84: a1:db:d6:69:57:45:ef:44:f0:c3:63:da:36:7f:91:d6:41:23: 45:2b:9d:90:2b:56:89:db:95:0a:2a:38:cf:3e:57:bd:0b:c9: 9e:70:0b:89:6e:9d:f9:1e:02:42:5e:70:d3:73:28:5b:77:89: 63:0c:6a:04:49:cf:7a:31:2d:e8:c9:d5:60:4e:6a:97:a6:6e: a1:17:b2:ad:e9:88:42:a8:07:55:a2:83:d8:89:8b:37:04:02: 9b:31:ae:f4:45:b6:20:50:95:34:a3:fd:c5:c3:bb:83:e0:01: 0e:2c:8e:d9:b5:a5:46:82:85:7a:9c:df:05:29:3c:67:d7:64: b6:64:d5:71:20:64:38:ed:57:c3:dc:78:c7:e2:41:19:eb:0a: 52:58:87:a7:dc:81:52:04:95:62:1e:86:f2:c7:6b:38:0e:ab: db:67:e4:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ5QkUxMTAvBgNVBAUTKDUyRTc3MzBGM0Q2MTU1NjNFQjU4QzlGQTc1OTJBMUJE ODA1QjVBMzUwHhcNMjUwNDAzMDIyMzUzWhcNMjUwNDEwMDIyMzUzWjAYMRYwFAYD VQQDEw02N2VkZjEzYS1iM2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuLZwzSkplGo0QTYt4KIVqxbQ9/8qD8duRNcHJ/feHjpnwz79oOkbW/o9xsN GE6+eitp5jL8DiRXXfyt8B3wC3sN34nSdzcR/4MJ8yaLIPBwy06gkqjJnLZrvhtK 7xP1DH+9tqtcmmVT3ZrAXItR7Tq5Xyx6B0jnHtZ0H1vA4+JnaggQpPwqvVu/VL1H 4Sqnce4PJIx8ju19gEyczPt5W9OdlG2AxpMUWfCXPdamjfGDX5o8JkFkpsRgc325 xA3UWbNZDWd9qOvSdatB+ZDJRhTbqqza4iBgF8rhwP9397AiCVDN1QgPV3/NSLut snuN4hC0DAvKJM6kF7sYn488gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVxpMmk gatM6w/C3+GbTl7Ze3DUMB8GA1UdIwQYMBaAFFLncw89YVVj61jJ+nWSob2AW1o1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDlCRS82RkNGQjg2NjZC QjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZXUHJXTW42ZFpLaHZZQmJX alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V1ZHpEejFoVldQcldNbjZkWktodllCYldqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDlCRS82RkNGQjg2NjZCQjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZX UHJXTW42ZFpLaHZZQmJXalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGYAxZsSolNgcYjnZXQIAS3WMW6NHsi7oa/uqpR8gpIYGpH7gxOYuV DBn3AMJYqFT/e0yoyEIy8HzyQKKG82mFOA+X+yHPGdY5n2v3i+cIHTAxdhh2knwT nISh29ZpV0XvRPDDY9o2f5HWQSNFK52QK1aJ25UKKjjPPle9C8mecAuJbp35HgJC XnDTcyhbd4ljDGoESc96MS3oydVgTmqXpm6hF7Kt6YhCqAdVooPYiYs3BAKbMa70 RbYgUJU0o/3Fw7uD4AEOLI7ZtaVGgoV6nN8FKTxn12S2ZNVxIGQ47VfD3HjH4kEZ 6wpSWIen3IFSBJViHobyx2s4DqvbZ+T3 -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:00 2025 by rpki-client