$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft File: uf67oJzxCyh-7SzlZyKzyaDvEv8.mft (raw, json) Hash identifier: iVlOyYWZO8btdxqFCCheLxX7U9zTwfR4EzErOXFWR6A= Subject key identifier: F0:53:D7:04:52:FC:CC:59:B9:A7:56:47:55:49:34:58:CE:C0:3F:C4 Authority key identifier: B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF Certificate issuer: /CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Certificate serial: 0969 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft Manifest number: 0963 Signing time: Fri 04 Apr 2025 20:21:08 +0000 Manifest this update: Fri 04 Apr 2025 20:21:08 +0000 Manifest next update: Fri 11 Apr 2025 20:21:08 +0000 Files and hashes: 1: uf67oJzxCyh-7SzlZyKzyaDvEv8.crl (hash: G+gm/S8snUipGSlhvsLErDjcwf+lThjadQrcv26PczI=) 2: 27030ADA8EB211EA9D09090FC4F9AE02.roa (hash: KzsEqYZi4RymBpkz6QVCB3ieArM+VhARkW/2ksmdU8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2409 (0x969) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB7A Validity Not Before: Apr 4 20:21:08 2025 GMT Not After : Apr 11 20:21:08 2025 GMT Subject: CN=67f03f34-6665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:54:21:84:f7:36:5c:cf:6e:8a:70:20:c6:da: 1f:84:45:d2:c1:7d:32:be:42:9a:1e:a5:c6:f6:bf: e1:59:bf:26:e6:f1:b4:8f:8b:50:b2:3d:a5:b4:43: 0e:e3:17:40:15:9a:a6:40:b3:ce:24:c4:73:78:16: 6a:bf:15:3f:b9:8f:88:32:3e:28:7b:dd:b7:64:68: 18:31:de:d5:38:84:60:6d:cf:2b:b9:e3:0b:1a:66: 10:49:12:a0:53:30:41:6c:32:dd:07:cd:a6:6a:f3: 70:c7:bf:99:38:f7:4f:a1:ec:da:2f:9e:74:53:6e: 9b:90:22:d4:d0:4e:ce:f6:29:60:c7:6e:97:c3:67: 5c:9a:0b:a7:4b:c9:06:52:2b:25:df:9d:96:e4:ef: 02:ad:5c:72:ad:81:d9:8d:2b:e6:34:e6:52:6a:5c: a2:b5:97:83:9e:35:05:c4:b9:62:8a:7a:ef:87:a4: 90:f4:8e:58:f2:7f:92:9c:a6:e5:d4:e2:2c:f0:b8: 4c:99:b3:fa:28:b6:47:5f:db:19:ae:82:bd:41:c7: 0e:86:78:8a:f9:3e:7f:47:b9:c0:1e:a8:9d:f6:e4: 83:0a:c8:3d:76:d6:24:16:21:88:25:43:41:81:f9: 70:16:83:28:1a:f6:b2:0f:6b:cc:7d:23:3f:fc:45: 26:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:53:D7:04:52:FC:CC:59:B9:A7:56:47:55:49:34:58:CE:C0:3F:C4 X509v3 Authority Key Identifier: keyid:B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ca:d3:83:46:e9:93:21:f2:c5:5c:55:ba:94:eb:cb:b8:4c: 8a:3f:64:1a:bd:f6:1e:5e:6f:73:e6:52:29:d5:62:cf:ae:f2: 4d:27:f5:c7:49:30:a8:e6:01:c1:6c:59:d7:a4:21:bf:67:51: 9d:cb:b4:68:70:ed:49:c6:b4:01:25:24:81:ae:34:33:97:dc: 04:c1:23:48:1f:78:5c:65:11:01:e9:2b:ad:5c:5c:56:0c:00: bc:ec:4c:46:23:34:2f:3b:e3:fb:f9:b8:d2:7e:99:88:ea:ec: df:86:8a:02:55:74:ee:53:fb:e4:3e:bb:26:c9:1a:47:91:01: 20:52:db:c3:33:64:b7:b8:1d:a5:38:d4:09:2b:7b:ab:1f:86: 65:ca:98:8d:15:3d:ad:72:c7:bd:66:a3:7d:0b:70:5a:39:1b: ee:00:2b:c7:95:22:51:da:2c:ef:e7:34:9a:a2:0e:2d:7d:0f: 4b:7c:f4:f3:17:a5:a1:6c:91:55:6e:f9:7c:f5:b6:34:80:b7: 11:f8:46:7c:15:bf:8a:9b:5a:00:8b:c1:01:e8:c8:3d:40:78: 5f:ed:5a:ae:d1:7c:44:28:62:da:0c:fa:6d:7b:e6:04:d5:62: 63:06:ec:85:6e:0d:51:1c:35:e0:a6:5e:65:5a:55:a1:94:8c: f0:64:53:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCN0ExMTAvBgNVBAUTKEI5RkVCQkEwOUNGMTBCMjg3RUVEMkNFNTY3MjJCM0M5 QTBFRjEyRkYwHhcNMjUwNDA0MjAyMTA4WhcNMjUwNDExMjAyMTA4WjAYMRYwFAYD VQQDEw02N2YwM2YzNC02NjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVQhhPc2XM9uinAgxtofhEXSwX0yvkKaHqXG9r/hWb8m5vG0j4tQsj2ltEMO 4xdAFZqmQLPOJMRzeBZqvxU/uY+IMj4oe923ZGgYMd7VOIRgbc8rueMLGmYQSRKg UzBBbDLdB82mavNwx7+ZOPdPoezaL550U26bkCLU0E7O9ilgx26Xw2dcmgunS8kG Uisl352W5O8CrVxyrYHZjSvmNOZSalyitZeDnjUFxLliinrvh6SQ9I5Y8n+SnKbl 1OIs8LhMmbP6KLZHX9sZroK9QccOhniK+T5/R7nAHqid9uSDCsg9dtYkFiGIJUNB gflwFoMoGvayD2vMfSM//EUmrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBT1wRS /MxZuadWR1VJNFjOwD/EMB8GA1UdIwQYMBaAFLn+u6Cc8Qsofu0s5Wcis8mg7xL/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI3QS81RDIxMTg0QzhF QjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5aC03U3psWnlLenlhRHZF djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmNjdvSnp4Q3loLTdTemxaeUt6eWFEdkV2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkI3QS81RDIxMTg0QzhFQjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5 aC03U3psWnlLenlhRHZFdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANytODRumTIfLFXFW6lOvLuEyKP2QavfYeXm9z5lIp1WLPrvJNJ/XH STCo5gHBbFnXpCG/Z1Gdy7RocO1JxrQBJSSBrjQzl9wEwSNIH3hcZREB6SutXFxW DAC87ExGIzQvO+P7+bjSfpmI6uzfhooCVXTuU/vkPrsmyRpHkQEgUtvDM2S3uB2l ONQJK3urH4ZlypiNFT2tcse9ZqN9C3BaORvuACvHlSJR2izv5zSaog4tfQ9LfPTz F6WhbJFVbvl89bY0gLcR+EZ8Fb+Km1oAi8EB6Mg9QHhf7Vqu0XxEKGLaDPpte+YE 1WJjBuyFbg1RHDXgpl5lWlWhlIzwZFOE -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:08 2025 by rpki-client