$ rpki-client -vvf rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft File: uFvtmb90CrrVo5nJ31_plipt6PE.mft (raw, json) Hash identifier: RpsuwZP1iqzvQwPG5fN9gGQAz4b+yBiL7Le6XUiM1u0= Subject key identifier: 2A:EF:EF:0C:89:22:6A:64:8C:FA:E2:C8:4F:A7:EB:80:86:70:F4:C2 Authority key identifier: B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 Certificate issuer: /CN=A9195DE5/serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Certificate serial: 07CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft Manifest number: 07B4 Signing time: Wed 02 Apr 2025 21:09:53 +0000 Manifest this update: Wed 02 Apr 2025 21:09:52 +0000 Manifest next update: Wed 09 Apr 2025 21:09:52 +0000 Files and hashes: 1: uFvtmb90CrrVo5nJ31_plipt6PE.crl (hash: z7vyK5nDM6XktN2D3zWf3MOfhmcryFN1R8LZcZxpFt0=) 2: 709F917AF74111EF98C99938C4F9AE02.roa (hash: 1qf+iawoit0ys+iUAf7LEY7HtRnvUIOTI+MZhHCWuYU=) 3: C7ADA138F4C011EAA7B25986C4F9AE02.roa (hash: G5UBtJsfZQZ4SV+yPTNK/ejUFIGmrip9sZG7FP0b4Cg=) 4: C8633DEAF4C011EAA7B25986C4F9AE02.roa (hash: ux6FaGhfWyv2H1NDOSXEk7LrVXGwR7MCaj2E49kXMHg=) 5: 70017B5CF74111EF98C99938C4F9AE02.roa (hash: 2qfdADfdo36JxITYdf4pd34OcKO4BbP5IH9WNGohmvk=) 6: C6EDD52EF4C011EAA7B25986C4F9AE02.roa (hash: qyqw3i3GL6h/SgQPPtxyHJkhrm/uWWSr5nGAKt/Qapg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1996 (0x7cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195DE5 Validity Not Before: Apr 2 21:09:52 2025 GMT Not After : Apr 9 21:09:52 2025 GMT Subject: CN=67eda7a1-1f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:45:8f:88:80:65:7b:24:05:03:7e:1c:4e:44: b4:33:31:25:5b:8d:1a:f2:65:9b:5b:80:c8:a6:9c: f8:38:9b:16:a4:0a:52:ed:5a:6c:d3:43:0d:11:b8: fe:ba:f3:f0:ff:e9:e3:f1:18:4f:a7:fc:ce:74:ea: 27:01:4c:fd:ff:46:a7:a3:5c:4f:38:a6:4e:b0:5f: fa:a3:41:c8:bc:5b:72:39:1f:0f:03:f7:e0:c2:38: 8b:07:73:bf:90:71:32:56:a6:91:f3:ca:f1:c8:bc: f2:cb:55:5f:98:8f:2c:5d:5f:07:86:4d:f8:a8:36: 53:92:eb:05:bc:22:8e:9a:12:8c:cf:94:0d:bc:a2: c7:75:31:5f:dc:39:41:69:40:94:c2:38:98:74:cc: 8c:61:75:97:97:5e:4f:33:52:50:39:d5:40:39:7e: 76:7a:04:17:b8:88:ef:88:41:9a:0b:6f:41:98:15: 34:8c:5c:70:16:48:a9:c3:e8:80:d8:55:92:ac:6b: e2:1e:25:f9:68:e6:01:53:4e:d5:cc:43:49:16:56: 50:f6:80:f9:e0:52:b6:13:21:7b:3e:ce:87:66:ca: 69:60:7c:24:12:42:2e:0f:41:11:ef:d6:6c:78:9c: a7:e1:10:44:da:31:f0:e7:2f:02:c3:12:36:21:49: 82:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EF:EF:0C:89:22:6A:64:8C:FA:E2:C8:4F:A7:EB:80:86:70:F4:C2 X509v3 Authority Key Identifier: keyid:B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:dc:37:d0:ed:d3:75:e4:63:ed:7f:3f:85:97:d0:54:6e:e8: d3:29:60:b1:df:ba:cd:22:aa:11:ff:c8:9e:e5:b5:05:2a:12: 28:30:2e:2e:83:0f:7d:d0:35:16:48:99:9f:05:fe:20:ce:19: 9c:26:5e:c7:07:9d:8a:8d:80:ee:b2:86:3b:ab:58:3d:b1:d2: db:6a:b9:e9:9f:30:00:8f:54:72:d6:ac:02:a2:12:28:41:98: 56:68:db:9b:80:cb:83:44:93:90:cc:5e:08:ea:31:61:e8:fa: 55:cf:51:81:36:67:8c:f8:da:f0:90:14:1c:b9:bb:6a:a8:5c: 23:e6:07:2a:3a:36:d1:3d:8c:d9:e5:5a:64:5b:9d:90:45:e9: 0b:4b:9d:34:db:01:04:1c:59:3d:0d:8d:98:f3:17:60:40:96: 61:dc:a0:25:ec:49:3d:a7:99:29:5c:94:38:71:fd:02:35:61: 86:13:1b:58:08:b2:e3:86:13:e5:ea:bb:82:4a:79:a2:09:49: 63:40:6c:f2:c7:51:fa:02:35:a4:dd:bf:80:c0:32:ea:ca:1f: e9:c9:bf:2c:12:f2:52:2e:03:1d:42:36:d1:c9:87:36:ea:76: 60:bf:57:d2:2c:1d:f5:b3:05:bd:32:b9:d7:94:55:c0:67:00: 92:ef:1c:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVERTUxMTAvBgNVBAUTKEI4NUJFRDk5QkY3NDBBQkFENUEzOTlDOURGNUZFOTk2 MkE2REU4RjEwHhcNMjUwNDAyMjEwOTUyWhcNMjUwNDA5MjEwOTUyWjAYMRYwFAYD VQQDEw02N2VkYTdhMS0xZjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmUWPiIBleyQFA34cTkS0MzElW40a8mWbW4DIppz4OJsWpApS7Vps00MNEbj+ uvPw/+nj8RhPp/zOdOonAUz9/0ano1xPOKZOsF/6o0HIvFtyOR8PA/fgwjiLB3O/ kHEyVqaR88rxyLzyy1VfmI8sXV8Hhk34qDZTkusFvCKOmhKMz5QNvKLHdTFf3DlB aUCUwjiYdMyMYXWXl15PM1JQOdVAOX52egQXuIjviEGaC29BmBU0jFxwFkipw+iA 2FWSrGviHiX5aOYBU07VzENJFlZQ9oD54FK2EyF7Ps6HZsppYHwkEkIuD0ER79Zs eJyn4RBE2jHw5y8CwxI2IUmCiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrv7wyJ ImpkjPriyE+n64CGcPTCMB8GA1UdIwQYMBaAFLhb7Zm/dAq61aOZyd9f6ZYqbejx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NURFNS9FM0VENjVEOEY0 QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENyclZvNW5KMzFfcGxpcHQ2 UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VGdnRtYjkwQ3JyVm81bkozMV9wbGlwdDZQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NURFNS9FM0VENjVEOEY0QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENy clZvNW5KMzFfcGxpcHQ2UEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz3DfQ7dN15GPtfz+Fl9BUbujTKWCx37rNIqoR/8ie5bUFKhIoMC4u gw990DUWSJmfBf4gzhmcJl7HB52KjYDusoY7q1g9sdLbarnpnzAAj1Ry1qwCohIo QZhWaNubgMuDRJOQzF4I6jFh6PpVz1GBNmeM+NrwkBQcubtqqFwj5gcqOjbRPYzZ 5VpkW52QRekLS5002wEEHFk9DY2Y8xdgQJZh3KAl7Ek9p5kpXJQ4cf0CNWGGExtY CLLjhhPl6ruCSnmiCUljQGzyx1H6AjWk3b+AwDLqyh/pyb8sEvJSLgMdQjbRyYc2 6nZgv1fSLB31swW9MrnXlFXAZwCS7xzO -----END CERTIFICATE-----Generated at Fri Apr 4 18:23:51 2025 by rpki-client