$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft File: Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft (raw, json) Hash identifier: iTHou9SIdAFeURJ6hREE+0564/+6BKiXv7ebVar8nY4= Subject key identifier: 20:33:38:EB:6F:00:D8:F2:B3:6E:4A:72:B9:B8:DC:58:3A:93:81:BE Authority key identifier: 52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94 Certificate issuer: /CN=A91AFA16/serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894 Certificate serial: 0B3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft Manifest number: 0B34 Signing time: Wed 16 Apr 2025 19:00:10 +0000 Manifest this update: Wed 16 Apr 2025 19:00:09 +0000 Manifest next update: Wed 23 Apr 2025 19:00:09 +0000 Files and hashes: 1: Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl (hash: i63HLAWcDnTjxMK0kW04Sfw8ZGHzH1jpLP2sU2tlqZE=) 2: 11DB043CF61E11EEB39BD261C4F9AE02.roa (hash: e4wDPqjhV3r7vEA4MsvAFc5ifRump5FxJZTH+nviBcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 19:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2876 (0xb3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFA16, serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894 Validity Not Before: Apr 16 19:00:09 2025 GMT Not After : Apr 23 19:00:09 2025 GMT Subject: CN=67fffe3a-fbee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:58:bd:ba:28:41:85:7b:c8:6d:82:9f:01:3c: c5:76:ed:7a:77:45:9b:8e:4c:46:17:17:71:41:af: 5b:0b:0c:4c:25:13:cd:67:3f:0e:b4:18:1c:27:94: e3:73:57:a8:82:e0:ab:75:bd:7f:2e:e5:57:0f:88: 66:69:e2:76:ac:74:9d:db:89:24:01:3c:10:f7:ca: 88:cb:88:01:6e:c0:bd:df:01:ef:9b:9f:a3:d2:23: f6:ec:a7:a8:dc:70:80:a3:44:0f:96:d1:59:f8:7d: b9:a8:cd:59:5c:c5:33:61:a2:3e:ca:1b:d9:a0:c7: 7d:62:0b:1a:db:99:fa:70:54:b7:b3:66:a6:1e:51: b2:70:28:48:a6:4b:21:e2:cb:20:33:4f:2d:4a:cd: ca:15:8e:36:ce:fe:76:8e:a4:7e:10:f4:91:a6:7a: 34:89:6a:6d:f2:8a:8d:14:af:65:01:95:2b:f5:a7: c1:e9:84:84:4c:2f:9b:ff:73:53:56:25:62:af:e0: da:48:0a:6a:ab:09:32:ca:73:95:46:27:77:e4:e2: bd:eb:16:51:ce:b1:be:d7:d2:58:ed:47:62:a9:87: 95:75:a0:63:c8:1b:45:15:b3:f0:1a:77:de:86:0e: 2e:f4:26:90:dd:b5:c3:31:50:e2:75:42:be:f8:11: 45:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:33:38:EB:6F:00:D8:F2:B3:6E:4A:72:B9:B8:DC:58:3A:93:81:BE X509v3 Authority Key Identifier: keyid:52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:93:9e:47:96:59:af:0c:a3:54:73:67:9b:5e:2d:b0:e7:94: b0:2f:bc:76:bb:eb:99:24:76:c8:05:4e:16:6f:0d:37:7a:02: 22:f2:6b:61:ad:18:03:9c:1e:78:dd:40:20:f9:b3:b0:28:56: f8:bd:a4:27:24:6c:3e:f4:96:ae:3a:e5:43:65:50:6c:c4:8d: 9e:2e:63:2f:d9:3b:a5:e5:6c:25:16:65:98:cd:b3:fd:cf:1e: 68:0f:66:97:67:86:b4:43:27:43:14:1d:d4:2e:28:67:7b:b7: 51:fa:34:39:80:0b:34:be:75:19:55:65:8f:7a:32:28:0c:4b: 83:c4:06:1f:fc:7f:5a:a3:75:88:c7:8b:cb:0f:2b:c1:2c:7b: 83:b9:79:88:22:b3:f8:69:27:0b:6d:15:a7:5d:21:da:96:95: 8a:33:22:2f:ec:b3:82:ee:c8:a2:79:21:85:e7:c7:df:75:7e: b6:92:49:e2:e4:e1:d4:25:2d:3d:4c:96:d6:62:ff:03:e0:73: f5:78:2f:ba:3f:a3:60:23:14:bd:fd:99:87:7d:d6:46:60:4b: 69:76:21:27:a4:27:b0:f3:73:05:22:4f:50:f1:19:0b:f5:36: 14:8d:f3:5f:02:d7:23:2e:36:81:2c:6d:61:67:f6:45:de:ba: 5f:58:ad:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZBMTYxMTAvBgNVBAUTKDUyRkQxREUyNERBRjhERDVGQzNBQTAwNzhCMDc3MzJG QzI3NDc4OTQwHhcNMjUwNDE2MTkwMDA5WhcNMjUwNDIzMTkwMDA5WjAYMRYwFAYD VQQDEw02N2ZmZmUzYS1mYmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlFi9uihBhXvIbYKfATzFdu16d0WbjkxGFxdxQa9bCwxMJRPNZz8OtBgcJ5Tj c1eoguCrdb1/LuVXD4hmaeJ2rHSd24kkATwQ98qIy4gBbsC93wHvm5+j0iP27Keo 3HCAo0QPltFZ+H25qM1ZXMUzYaI+yhvZoMd9Ygsa25n6cFS3s2amHlGycChIpksh 4ssgM08tSs3KFY42zv52jqR+EPSRpno0iWpt8oqNFK9lAZUr9afB6YSETC+b/3NT ViVir+DaSApqqwkyynOVRid35OK96xZRzrG+19JY7UdiqYeVdaBjyBtFFbPwGnfe hg4u9CaQ3bXDMVDidUK++BFFVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAzOOtv ANjys25Kcrm43Fg6k4G+MB8GA1UdIwQYMBaAFFL9HeJNr43V/DqgB4sHcy/CdHiU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkExNi9DNTU0MjA4MDM1 QzkxMUVBQjRBRkNCMTVDNEY5QUUwMi9VdjBkNGsydmpkWDhPcUFIaXdkekw4SjBl SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V2MGQ0azJ2amRYOE9xQUhpd2R6TDhKMGVKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkExNi9DNTU0MjA4MDM1QzkxMUVBQjRBRkNCMTVDNEY5QUUwMi9VdjBkNGsydmpk WDhPcUFIaXdkekw4SjBlSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOk55HllmvDKNUc2ebXi2w55SwL7x2u+uZJHbIBU4Wbw03egIi8mth rRgDnB543UAg+bOwKFb4vaQnJGw+9JauOuVDZVBsxI2eLmMv2Tul5WwlFmWYzbP9 zx5oD2aXZ4a0QydDFB3ULihne7dR+jQ5gAs0vnUZVWWPejIoDEuDxAYf/H9ao3WI x4vLDyvBLHuDuXmIIrP4aScLbRWnXSHalpWKMyIv7LOC7siieSGF58ffdX62kkni 5OHUJS09TJbWYv8D4HP1eC+6P6NgIxS9/ZmHfdZGYEtpdiEnpCew83MFIk9Q8RkL 9TYUjfNfAtcjLjaBLG1hZ/ZF3rpfWK2c -----END CERTIFICATE-----Generated at Fri Apr 18 17:12:14 2025 by rpki-client