$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft File: uLRz022lJgglzQu_YvbsGQ00Ahg.mft (raw, json) Hash identifier: Z+AA3rk5/17o5xTed3e1jl+O/rI2eN/j2lWxyoIZSYQ= Subject key identifier: 68:C9:5A:F3:15:C5:9B:AE:A3:99:F5:A0:A3:39:C6:1C:0F:BE:C8:8C Authority key identifier: B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18 Certificate issuer: /CN=A91C5D81/serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218 Certificate serial: 3481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft Manifest number: 347B Signing time: Sun 20 Apr 2025 14:18:24 +0000 Manifest this update: Sun 20 Apr 2025 14:18:24 +0000 Manifest next update: Sun 27 Apr 2025 14:18:24 +0000 Files and hashes: 1: uLRz022lJgglzQu_YvbsGQ00Ahg.crl (hash: eBd/K18g8+opxz1YqscqCN1Q6/uAM4mmpXrO+ZaFVyM=) 2: 75C18F96305811EB94E3192FC4F9AE02.roa (hash: oI8UmPtI+e/lNHKPjl/mA09y7Gr50NMbgC5wn6SXx2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 14:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13441 (0x3481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D81, serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218 Validity Not Before: Apr 20 14:18:24 2025 GMT Not After : Apr 27 14:18:24 2025 GMT Subject: CN=68050230-7e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2e:2f:9e:53:89:90:09:b8:40:71:9f:45:96: 88:a6:84:c3:b2:6f:dc:d5:25:41:f5:cd:ca:73:42: 6d:1b:c1:11:97:88:bc:f3:85:9f:5d:7f:3e:ff:86: 0f:58:0b:a8:85:1a:22:f4:39:5c:bc:d2:66:1f:47: 6f:32:e4:2e:f3:e5:84:17:40:ee:4d:fa:46:00:4e: 0a:f9:d6:f4:59:d2:0a:ba:1e:f0:16:a1:3e:67:ac: 85:00:1b:8f:38:81:0b:77:7e:ab:ee:97:84:35:40: ff:07:c1:7e:08:dd:7e:58:65:72:8d:86:18:22:0d: ca:26:5e:f7:f4:2b:55:16:06:36:18:78:a3:5c:3a: 53:4a:1d:fe:23:92:b2:ab:83:44:30:60:25:68:cf: 3b:f4:bb:09:3e:11:ea:5a:87:45:fa:fb:7d:82:a7: b0:b7:6f:52:22:e9:5c:ea:19:7b:29:a9:a5:df:6b: a9:11:8c:0f:d5:57:7f:94:b6:93:49:8e:54:2d:77: 1f:4f:14:1a:a4:bb:df:63:10:fb:5b:90:cd:48:cc: 2b:b3:8d:5b:d8:44:df:a3:9d:1a:64:59:91:2f:e6: 56:d0:d6:f7:59:e4:7a:d0:19:8c:67:8f:bb:c8:f1: 35:de:7b:52:a6:48:3e:f3:c8:6e:65:d1:c3:31:c3: 6a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C9:5A:F3:15:C5:9B:AE:A3:99:F5:A0:A3:39:C6:1C:0F:BE:C8:8C X509v3 Authority Key Identifier: keyid:B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:79:cf:cf:59:c3:03:3f:5c:08:f0:f0:a6:55:5f:21:26:79: 4a:33:a2:56:82:1f:6d:fb:4f:1a:8d:19:4f:24:cb:5f:94:a0: 0d:29:84:a3:15:28:1a:dc:5e:4d:45:4b:1d:2b:c1:5b:68:75: 37:8b:29:d0:d1:01:7d:75:50:99:03:ee:3a:5f:ef:41:78:ff: ba:d3:2a:70:99:4f:7c:2b:50:b5:89:13:b9:cc:15:42:a4:aa: 67:d7:55:e2:b3:1b:29:d6:e8:83:34:54:06:09:62:7f:a0:30: 73:62:d0:be:d5:3e:6c:89:8e:9e:4b:a6:32:b8:78:55:87:c4: 24:fd:32:97:eb:31:7a:2e:31:06:34:19:0a:92:f2:3c:fd:af: 03:14:eb:6f:be:f9:27:98:fd:87:8b:b6:d8:15:e9:41:53:1e: 7d:af:1f:8b:ac:a8:4f:f1:62:5a:68:0e:2b:14:c3:ae:10:81: f1:40:48:ea:66:fe:ae:56:e1:27:81:ba:22:fd:0d:95:13:26: b0:a4:2e:be:c3:6b:37:96:a4:6e:ae:55:5e:b8:d6:79:10:7d: d1:aa:c6:74:04:e6:37:95:6f:c2:a3:9c:46:12:7a:0f:19:c7: be:48:df:47:91:ba:a3:94:0e:6a:29:d7:f1:d1:02:e4:bd:0b: 68:8b:8f:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVEODExMTAvBgNVBAUTKEI4QjQ3M0QzNkRBNTI2MDgyNUNEMEJCRjYyRjZFQzE5 MEQzNDAyMTgwHhcNMjUwNDIwMTQxODI0WhcNMjUwNDI3MTQxODI0WjAYMRYwFAYD VQQDEw02ODA1MDIzMC03ZTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4C4vnlOJkAm4QHGfRZaIpoTDsm/c1SVB9c3Kc0JtG8ERl4i884WfXX8+/4YP WAuohRoi9DlcvNJmH0dvMuQu8+WEF0DuTfpGAE4K+db0WdIKuh7wFqE+Z6yFABuP OIELd36r7peENUD/B8F+CN1+WGVyjYYYIg3KJl739CtVFgY2GHijXDpTSh3+I5Ky q4NEMGAlaM879LsJPhHqWodF+vt9gqewt29SIulc6hl7Kaml32upEYwP1Vd/lLaT SY5ULXcfTxQapLvfYxD7W5DNSMwrs41b2ETfo50aZFmRL+ZW0Nb3WeR60BmMZ4+7 yPE13ntSpkg+88huZdHDMcNq6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjJWvMV xZuuo5n1oKM5xhwPvsiMMB8GA1UdIwQYMBaAFLi0c9NtpSYIJc0Lv2L27BkNNAIY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQ4MS80NzA1OUREODFE NkUxMUUyOUI3NkFBQUYwOEIwMkNEMi91TFJ6MDIybEpnZ2x6UXVfWXZic0dRMDBB aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VMUnowMjJsSmdnbHpRdV9ZdmJzR1EwMEFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQ4MS80NzA1OUREODFENkUxMUUyOUI3NkFBQUYwOEIwMkNEMi91TFJ6MDIybEpn Z2x6UXVfWXZic0dRMDBBaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsec/PWcMDP1wI8PCmVV8hJnlKM6JWgh9t+08ajRlPJMtflKANKYSj FSga3F5NRUsdK8FbaHU3iynQ0QF9dVCZA+46X+9BeP+60ypwmU98K1C1iRO5zBVC pKpn11Xisxsp1uiDNFQGCWJ/oDBzYtC+1T5siY6eS6YyuHhVh8Qk/TKX6zF6LjEG NBkKkvI8/a8DFOtvvvknmP2Hi7bYFelBUx59rx+LrKhP8WJaaA4rFMOuEIHxQEjq Zv6uVuEngboi/Q2VEyawpC6+w2s3lqRurlVeuNZ5EH3RqsZ0BOY3lW/Co5xGEnoP Gce+SN9HkbqjlA5qKdfx0QLkvQtoi4/E -----END CERTIFICATE-----Generated at Sun Apr 20 22:05:46 2025 by rpki-client