$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft File: UVabSMA4kUVORphTpn25Cb7CytY.mft (raw, json) Hash identifier: sP8LDm22oVsD0xEf4yvxfre8w7A6cixDk8Wh+9QXSFI= Subject key identifier: 8F:8A:0B:52:D9:F6:3E:D4:6B:46:45:EA:8C:7F:9E:2E:58:67:D9:4C Authority key identifier: 51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6 Certificate issuer: /CN=A91C7672/serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6 Certificate serial: 1BFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft Manifest number: 1BDE Signing time: Sat 12 Apr 2025 16:11:05 +0000 Manifest this update: Sat 12 Apr 2025 16:11:05 +0000 Manifest next update: Sat 19 Apr 2025 16:11:05 +0000 Files and hashes: 1: UVabSMA4kUVORphTpn25Cb7CytY.crl (hash: IDnlGhMx4q6ca/PVPjR3MnEFuoyie9XXSj5t6YFj5mA=) 2: 0A93D802C98211EE90C9B71DC4F9AE02.roa (hash: wDSYb3WQT7etul/IesOy0V9DTB8zpMuC+4DeX22WRy8=) 3: 2ADC134C973F11EEA24DBE15C4F9AE02.roa (hash: JZKHOUDlu06jRnQ1v4KmmKzdpSwhu9askiAeMGIAkyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 16:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7163 (0x1bfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7672, serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6 Validity Not Before: Apr 12 16:11:05 2025 GMT Not After : Apr 19 16:11:05 2025 GMT Subject: CN=67fa9099-a60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4c:dc:a6:d6:e3:db:b0:94:77:ce:02:7f:f1: 73:be:5d:18:f3:68:b3:21:43:ef:37:f7:63:21:4e: 80:68:c5:34:d6:2c:47:d9:ea:76:b4:49:f1:ca:2a: 71:8c:58:fa:94:43:b8:1c:1a:14:39:74:56:b4:b9: 51:e7:58:83:8b:d1:01:63:2b:fb:f9:84:ef:14:5b: c1:ab:7b:7d:e6:bf:c1:99:a1:ab:87:a7:d8:0f:a9: 1a:93:01:57:b9:c4:11:11:59:4f:9d:dd:88:04:45: 8c:89:78:39:d3:78:fc:e6:30:ef:a1:ee:cf:72:8f: 81:07:bd:35:9e:89:9c:cb:0c:d0:5e:4b:08:ef:9b: 8d:eb:fa:0e:a8:dc:d7:19:ec:f1:5b:75:b6:b1:60: 98:19:4c:10:c5:45:38:6d:f8:3c:1d:32:4b:93:30: ac:cf:28:4b:4a:21:54:15:90:35:3f:7f:8d:ef:95: c8:66:cc:1b:8d:0c:f8:ce:5b:50:a8:21:2e:83:8a: ec:9b:6d:73:e9:da:11:10:83:16:36:70:2e:bd:29: 2c:f4:72:50:86:c9:ba:b4:b1:e0:2e:d5:b9:7a:97: ef:fa:16:f9:77:fe:1b:08:d7:40:1e:1f:0b:1d:47: a3:d6:7c:26:86:43:7a:0b:33:f7:21:d4:a6:e8:b6: 4c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8A:0B:52:D9:F6:3E:D4:6B:46:45:EA:8C:7F:9E:2E:58:67:D9:4C X509v3 Authority Key Identifier: keyid:51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:7d:c6:dd:0c:79:e2:ac:b5:af:e1:d4:36:c7:32:c6:8a:43: c7:8e:01:ef:36:b3:af:eb:7b:6a:a6:df:58:b6:a2:ca:16:24: f3:94:75:15:7f:aa:77:44:50:10:5c:62:9e:5b:9d:78:d4:2b: eb:26:e8:1e:40:25:f1:5d:e1:c0:dd:f9:88:ff:76:be:a0:e3: 43:77:2b:1f:f3:de:66:c1:43:bd:f9:1f:6e:e3:7c:61:36:b4: e9:60:54:4a:a6:ba:06:84:33:2c:6a:8b:51:37:80:e9:e8:7b: f1:7c:38:04:53:3e:93:67:f4:bb:0b:47:83:af:f2:bd:ca:d3: ff:b9:bf:09:8d:95:f3:69:15:8d:75:bd:83:e2:23:42:e3:e4: 4a:6c:d7:1f:39:1d:36:6f:99:74:e2:d2:6b:a4:15:f6:22:5d: 24:3f:10:96:21:06:70:21:0e:0b:0b:31:1c:01:85:fb:47:c6: c3:c1:84:14:1c:ac:b4:a5:80:9d:67:09:3c:1a:9c:3e:d6:22: 05:7b:1c:f6:4b:19:f7:26:86:e2:fd:ea:b0:a1:32:73:7e:df: c3:63:3a:c2:0c:c1:40:35:9f:7c:3f:47:0b:70:70:3e:12:27: dd:40:74:0e:b8:55:e5:6e:02:31:4f:f6:19:a5:7d:59:82:e2: aa:cb:77:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc2NzIxMTAvBgNVBAUTKDUxNTY5QjQ4QzAzODkxNDU0RTQ2OTg1M0E2N0RCOTA5 QkVDMkNBRDYwHhcNMjUwNDEyMTYxMTA1WhcNMjUwNDE5MTYxMTA1WjAYMRYwFAYD VQQDEw02N2ZhOTA5OS1hNjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0zcptbj27CUd84Cf/Fzvl0Y82izIUPvN/djIU6AaMU01ixH2ep2tEnxyipx jFj6lEO4HBoUOXRWtLlR51iDi9EBYyv7+YTvFFvBq3t95r/BmaGrh6fYD6kakwFX ucQREVlPnd2IBEWMiXg503j85jDvoe7Pco+BB701nomcywzQXksI75uN6/oOqNzX GezxW3W2sWCYGUwQxUU4bfg8HTJLkzCszyhLSiFUFZA1P3+N75XIZswbjQz4zltQ qCEug4rsm21z6doREIMWNnAuvSks9HJQhsm6tLHgLtW5epfv+hb5d/4bCNdAHh8L HUej1nwmhkN6CzP3IdSm6LZMvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+KC1LZ 9j7Ua0ZF6ox/ni5YZ9lMMB8GA1UdIwQYMBaAFFFWm0jAOJFFTkaYU6Z9uQm+wsrW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzY3Mi80Mzc2NEJFQ0Y3 MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9VVmFiU01BNGtVVk9ScGhUcG4yNUNiN0N5 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VWYWJTTUE0a1VWT1JwaFRwbjI1Q2I3Q3l0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzY3Mi80Mzc2NEJFQ0Y3MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9VVmFiU01BNGtV Vk9ScGhUcG4yNUNiN0N5dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbfcbdDHnirLWv4dQ2xzLGikPHjgHvNrOv63tqpt9YtqLKFiTzlHUV f6p3RFAQXGKeW5141CvrJugeQCXxXeHA3fmI/3a+oONDdysf895mwUO9+R9u43xh NrTpYFRKproGhDMsaotRN4Dp6HvxfDgEUz6TZ/S7C0eDr/K9ytP/ub8JjZXzaRWN db2D4iNC4+RKbNcfOR02b5l04tJrpBX2Il0kPxCWIQZwIQ4LCzEcAYX7R8bDwYQU HKy0pYCdZwk8Gpw+1iIFexz2Sxn3Jobi/eqwoTJzft/DYzrCDMFANZ98P0cLcHA+ EifdQHQOuFXlbgIxT/YZpX1ZguKqy3cd -----END CERTIFICATE-----Generated at Sat Apr 12 23:42:41 2025 by rpki-client