$ rpki-client -vvf rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft File: _UXMVAPGTPsjCqfe7RC8aCKNdHM.mft (raw, json) Hash identifier: 3s+ekcSnfSg+oO9s/38atdTXsrF1QRjvn27deE8KA7I= Subject key identifier: E8:40:1A:87:C8:79:51:FA:86:7C:A4:49:02:E8:90:A2:2A:94:0C:32 Authority key identifier: FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73 Certificate issuer: /CN=A9186BCC/serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft Manifest number: 012F Signing time: Fri 11 Apr 2025 03:48:41 +0000 Manifest this update: Fri 11 Apr 2025 03:48:41 +0000 Manifest next update: Fri 18 Apr 2025 03:48:41 +0000 Files and hashes: 1: _UXMVAPGTPsjCqfe7RC8aCKNdHM.crl (hash: qyuFwpiX1eCorniAMe5hQnq33iHytoSLN/U4hDSDIjw=) 2: 6B62D92248D511EEBE05CC7FC4F9AE02.roa (hash: 3T/MseZ6JXWgLESYBTBgDLBC7fpGasfK+B1pI77N9vU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 03:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186BCC, serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473 Validity Not Before: Apr 11 03:48:41 2025 GMT Not After : Apr 18 03:48:41 2025 GMT Subject: CN=67f89119-5b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9e:e7:09:4e:94:30:ea:ba:b5:b8:5b:b9:f1: b4:98:f2:50:a3:fe:44:1d:72:58:8d:38:a8:6b:8d: 38:20:b4:4b:4e:0f:00:5f:e2:05:b6:c6:bf:ec:6e: 97:14:44:24:62:b5:5b:37:c5:b2:72:b4:00:53:2f: 88:40:ae:be:f2:08:e8:cd:74:62:7a:b4:6a:98:61: 15:c1:95:19:15:d0:6c:cc:d1:1b:48:3c:62:10:e3: 48:df:3c:1b:36:1f:cf:07:6f:12:13:21:cd:89:04: a1:95:f2:6e:d8:f3:d5:42:d8:02:e5:ed:67:f3:81: 07:f3:2b:ce:3a:98:6d:84:fb:8d:07:b6:f5:ee:92: 67:fc:ee:53:40:be:8b:43:d8:11:56:e8:98:55:9a: d3:52:5e:22:7f:fa:93:db:c7:8e:81:45:81:d1:0d: fe:05:96:be:71:3e:fd:28:3f:76:99:98:67:ce:2a: 46:b8:bd:b0:c9:a7:62:de:f6:55:ce:a0:17:e2:70: 42:3f:05:94:b5:63:ca:4d:90:07:7b:87:c6:b2:8b: 25:87:b2:e1:4e:60:5c:75:36:ce:77:f5:ee:9d:80: d3:4e:c9:72:88:9e:2a:ed:bb:93:f2:42:3b:8a:70: f9:be:cc:9c:73:8f:3c:24:14:95:d2:81:70:56:9b: 09:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:40:1A:87:C8:79:51:FA:86:7C:A4:49:02:E8:90:A2:2A:94:0C:32 X509v3 Authority Key Identifier: keyid:FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:39:ba:86:80:b1:f3:6d:9b:54:a7:17:ac:98:73:1e:d3:01: 2c:33:90:07:52:70:d3:10:e5:b7:99:d0:76:f9:cf:af:27:1f: 9b:f5:c1:26:e8:a1:71:f5:bc:ae:25:f2:48:c7:17:ff:5e:1c: ec:f8:a0:1c:e7:4f:d4:84:32:09:21:19:9a:7c:7c:a4:bb:65: 28:82:9c:9a:cd:a8:b1:bd:af:48:5c:4c:cb:c5:17:80:46:bd: 00:13:b6:e7:a9:a8:66:46:f4:20:32:11:86:99:c8:e9:7b:d1: c1:65:99:2a:d2:aa:5f:31:a6:eb:1e:43:cf:44:f3:f6:9d:c0: 55:a3:b4:f7:9a:da:35:88:fa:da:4c:db:27:89:d1:2a:cb:4c: 48:ae:9d:5e:47:64:c0:93:5e:2f:90:de:a3:39:14:5a:52:45: af:d6:ea:ee:2d:10:8f:03:a1:43:33:11:12:82:8b:0c:2a:fc: 76:1b:c1:11:33:bc:83:00:5d:31:b9:5f:1d:8a:97:bc:e6:f3: f2:c3:de:db:85:43:58:04:d5:74:0a:0c:5e:24:76:be:2b:48: 7d:9e:63:37:56:6b:cf:69:49:9d:08:52:a6:e6:08:c7:92:b1: 27:15:89:5c:60:0d:ab:a5:fc:e1:60:7b:d9:09:db:b1:22:89: 63:33:60:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCQ0MxMTAvBgNVBAUTKEZENDVDQzU0MDNDNjRDRkIyMzBBQTdERUVEMTBCQzY4 MjI4RDc0NzMwHhcNMjUwNDExMDM0ODQxWhcNMjUwNDE4MDM0ODQxWjAYMRYwFAYD VQQDEw02N2Y4OTExOS01Yjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1p7nCU6UMOq6tbhbufG0mPJQo/5EHXJYjTioa404ILRLTg8AX+IFtsa/7G6X FEQkYrVbN8WycrQAUy+IQK6+8gjozXRierRqmGEVwZUZFdBszNEbSDxiEONI3zwb Nh/PB28SEyHNiQShlfJu2PPVQtgC5e1n84EH8yvOOphthPuNB7b17pJn/O5TQL6L Q9gRVuiYVZrTUl4if/qT28eOgUWB0Q3+BZa+cT79KD92mZhnzipGuL2wyadi3vZV zqAX4nBCPwWUtWPKTZAHe4fGsoslh7LhTmBcdTbOd/XunYDTTslyiJ4q7buT8kI7 inD5vsycc488JBSV0oFwVpsJywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhAGofI eVH6hnykSQLokKIqlAwyMB8GA1UdIwQYMBaAFP1FzFQDxkz7Iwqn3u0QvGgijXRz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkJDQy85MDRFNTBGMDQ4 RDQxMUVFQjVENkExN0JDNEY5QUUwMi9fVVhNVkFQR1RQc2pDcWZlN1JDOGFDS05k SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VWE1WQVBHVFBzakNxZmU3UkM4YUNLTmRITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkJDQy85MDRFNTBGMDQ4RDQxMUVFQjVENkExN0JDNEY5QUUwMi9fVVhNVkFQR1RQ c2pDcWZlN1JDOGFDS05kSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYObqGgLHzbZtUpxesmHMe0wEsM5AHUnDTEOW3mdB2+c+vJx+b9cEm 6KFx9byuJfJIxxf/Xhzs+KAc50/UhDIJIRmafHyku2Uogpyazaixva9IXEzLxReA Rr0AE7bnqahmRvQgMhGGmcjpe9HBZZkq0qpfMabrHkPPRPP2ncBVo7T3mto1iPra TNsnidEqy0xIrp1eR2TAk14vkN6jORRaUkWv1uruLRCPA6FDMxESgosMKvx2G8ER M7yDAF0xuV8dipe85vPyw97bhUNYBNV0CgxeJHa+K0h9nmM3VmvPaUmdCFKm5gjH krEnFYlcYA2rpfzhYHvZCduxIoljM2AQ -----END CERTIFICATE-----Generated at Sat Apr 12 14:52:55 2025 by rpki-client