$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft File: ux3tVEsnoTcZtI-wA3PNSeDehRc.mft (raw, json) Hash identifier: rCmvWODyihzzD4ZGE8mDQTnvo5iQUeRfRgiD5i6ZWx8= Subject key identifier: 4F:32:D5:83:FC:C5:1B:0C:E0:92:CF:1F:D3:8F:A4:35:A2:39:4B:C6 Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Certificate serial: 08B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft Manifest number: 08A6 Signing time: Wed 16 Apr 2025 20:19:31 +0000 Manifest this update: Wed 16 Apr 2025 20:19:31 +0000 Manifest next update: Wed 23 Apr 2025 20:19:31 +0000 Files and hashes: 1: ux3tVEsnoTcZtI-wA3PNSeDehRc.crl (hash: YSbvoHe4MjytKOfYJnkotVKzZT+K7WzWn5q83iO2UDk=) 2: 2B7215E2B54B11EA85EE266DC4F9AE02.roa (hash: HHCFckY7O591LILqzlA5i+TVYe0u7mT2Ya4XZsY3L5w=) 3: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (hash: vv1GYbA2AyqRD7ZSBeebG8Ws0r4NHNq0J0Vkh/R0ypw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 20:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2226 (0x8b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919123C, serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Validity Not Before: Apr 16 20:19:31 2025 GMT Not After : Apr 23 20:19:31 2025 GMT Subject: CN=680010d3-6e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:52:46:ec:1a:3b:39:1d:e9:6e:fe:a3:80:62: cf:ff:62:6d:eb:5d:6e:54:40:87:b5:c5:c6:52:7b: f1:5b:61:b2:b5:e4:be:56:ce:0a:5d:74:cc:e0:e5: a1:60:49:c1:ab:00:21:a9:85:63:84:2e:41:35:53: 05:0d:98:f9:04:a1:84:8b:e3:4e:68:6d:0e:04:d8: da:d7:b2:1d:91:6f:5f:b8:ef:f4:c0:77:ad:05:da: 18:0e:da:21:ca:4d:fe:8b:11:b7:46:98:98:0b:db: 0f:17:80:69:71:55:72:d8:cc:7d:13:f9:18:0a:01: 9c:6a:51:d4:e7:6a:97:47:92:dc:c9:ea:27:13:55: 4b:d0:fb:95:50:52:28:82:ed:f0:a4:84:94:e5:94: 55:2a:2d:42:c8:42:5b:20:f6:0e:2e:c6:31:82:02: dd:63:f0:c4:93:96:83:ee:60:df:f5:3c:d8:47:fc: 08:d2:18:c1:17:c7:23:02:22:58:f5:6b:5f:50:8d: fe:b1:29:23:15:2b:a6:46:49:bd:fd:43:16:04:54: 00:8c:9b:4f:e1:7a:a5:c5:a2:17:e3:5a:76:c5:bc: 79:27:8b:c9:6a:26:78:80:8d:17:2e:1f:9f:c8:95: e0:68:82:f8:7f:7e:9e:21:5b:a3:58:8c:3a:80:58: dd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:32:D5:83:FC:C5:1B:0C:E0:92:CF:1F:D3:8F:A4:35:A2:39:4B:C6 X509v3 Authority Key Identifier: keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:b5:f2:96:4d:40:c7:3b:7e:c4:a7:b6:81:8f:0a:e1:90:ae: 78:9f:67:39:08:99:35:04:b4:16:85:08:85:9e:07:27:64:eb: 53:67:24:e4:02:87:be:76:db:1b:42:be:06:5e:6d:77:4e:22: 46:47:20:38:ec:89:d3:89:6f:0f:c3:15:2f:f8:c1:e6:e4:82: 4b:5e:50:ff:f8:48:b4:11:59:4c:b0:6c:f2:71:55:7b:d2:6f: dd:55:5d:f6:ff:80:55:e1:ff:e8:0b:c1:75:7b:69:e3:bc:f3: 05:4d:eb:bb:ee:c5:6d:40:64:ed:84:f0:c1:e7:cc:f9:f3:2c: 3c:08:ea:ec:0b:6d:c2:a9:e0:9c:03:f9:91:05:9e:01:f9:fd: e3:53:3e:30:9e:eb:af:6f:94:70:8a:98:63:e7:a9:4e:2f:5b: 42:b8:16:18:39:11:d9:d1:92:85:70:0e:12:f3:a0:3e:91:79: 86:93:b9:78:82:a0:fc:20:04:49:f1:88:a7:f0:98:d3:74:f6: 70:58:97:8c:c1:d9:4b:de:53:47:bb:bf:88:0c:78:ee:e7:55: 69:21:d0:e1:46:79:d2:5b:c2:d9:f3:1c:08:49:9e:69:5e:c0: a2:68:f2:82:d7:fa:2a:7b:64:58:75:a2:4f:b6:ab:8c:7b:73: ee:68:26:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyM0MxMTAvBgNVBAUTKEJCMURFRDU0NEIyN0ExMzcxOUI0OEZCMDAzNzNDRDQ5 RTBERTg1MTcwHhcNMjUwNDE2MjAxOTMxWhcNMjUwNDIzMjAxOTMxWjAYMRYwFAYD VQQDEw02ODAwMTBkMy02ZTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lJG7Bo7OR3pbv6jgGLP/2Jt611uVECHtcXGUnvxW2GyteS+Vs4KXXTM4OWh YEnBqwAhqYVjhC5BNVMFDZj5BKGEi+NOaG0OBNja17IdkW9fuO/0wHetBdoYDtoh yk3+ixG3RpiYC9sPF4BpcVVy2Mx9E/kYCgGcalHU52qXR5LcyeonE1VL0PuVUFIo gu3wpISU5ZRVKi1CyEJbIPYOLsYxggLdY/DEk5aD7mDf9TzYR/wI0hjBF8cjAiJY 9WtfUI3+sSkjFSumRkm9/UMWBFQAjJtP4XqlxaIX41p2xbx5J4vJaiZ4gI0XLh+f yJXgaIL4f36eIVujWIw6gFjdbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8y1YP8 xRsM4JLPH9OPpDWiOUvGMB8GA1UdIwQYMBaAFLsd7VRLJ6E3GbSPsANzzUng3oUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTIzQy9FNTYyMUE2OEI1 NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9UY1p0SS13QTNQTlNlRGVo UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V4M3RWRXNub1RjWnRJLXdBM1BOU2VEZWhSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTIzQy9FNTYyMUE2OEI1NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9U Y1p0SS13QTNQTlNlRGVoUmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAtfKWTUDHO37Ep7aBjwrhkK54n2c5CJk1BLQWhQiFngcnZOtTZyTk Aoe+dtsbQr4GXm13TiJGRyA47InTiW8PwxUv+MHm5IJLXlD/+Ei0EVlMsGzycVV7 0m/dVV32/4BV4f/oC8F1e2njvPMFTeu77sVtQGTthPDB58z58yw8COrsC23CqeCc A/mRBZ4B+f3jUz4wnuuvb5Rwiphj56lOL1tCuBYYORHZ0ZKFcA4S86A+kXmGk7l4 gqD8IARJ8Yin8JjTdPZwWJeMwdlL3lNHu7+IDHju51VpIdDhRnnSW8LZ8xwISZ5p XsCiaPKC1/oqe2RYdaJPtquMe3PuaCYC -----END CERTIFICATE-----Generated at Fri Apr 18 17:42:49 2025 by rpki-client