$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft File: uzvV1-GZJNhitqQb80x_27vpHG0.mft (raw, json) Hash identifier: WCaIGIyu4qGFrl89LQrbtb3zJW+t1EyH58NGz2CqBb4= Subject key identifier: 9C:A6:94:BC:B2:88:D4:1A:27:77:E8:95:69:C2:45:DC:AD:2E:80:E0 Authority key identifier: BB:3B:D5:D7:E1:99:24:D8:62:B6:A4:1B:F3:4C:7F:DB:BB:E9:1C:6D Certificate issuer: /CN=A91CA735/serialNumber=BB3BD5D7E19924D862B6A41BF34C7FDBBBE91C6D Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft Manifest number: 7A Signing time: Wed 09 Apr 2025 05:36:52 +0000 Manifest this update: Wed 09 Apr 2025 05:36:52 +0000 Manifest next update: Wed 16 Apr 2025 05:36:52 +0000 Files and hashes: 1: uzvV1-GZJNhitqQb80x_27vpHG0.crl (hash: zP1ETHOVcbPbiWOlPL+Y2MnXgFxWm7eSp7M9S2f2mNw=) 2: 385E3308639D11EFB668775FC4F9AE02.roa (hash: eNc808XmgTxpLtRIT7niEKuCkRcSHI+EmPPrY6RhaNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.crl rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA735 Validity Not Before: Apr 9 05:36:52 2025 GMT Not After : Apr 16 05:36:52 2025 GMT Subject: CN=67f60774-8d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:57:dd:35:b0:34:76:7f:ad:cc:3b:72:17:94: a1:5f:54:d6:0e:e5:18:47:ef:15:d0:c9:fc:ff:7f: e7:7b:ae:77:42:fe:0b:53:de:e7:e7:6d:7a:f2:7b: c0:95:3a:70:54:32:fd:3e:fa:6d:4b:20:75:33:b5: dd:30:79:17:8c:dd:21:5e:8e:85:5a:9a:b2:64:e0: b2:9e:28:ab:ab:f4:93:5a:d2:e7:46:00:1f:2e:ca: c8:b5:ae:8f:db:be:99:41:f5:58:4c:36:8a:3c:66: 56:1b:6f:7d:1d:fa:9c:02:da:58:b4:cb:5e:df:f9: 8c:a6:0d:0f:2a:d0:e3:4a:a6:42:a2:31:e3:52:d2: 5a:d8:bf:d6:1a:2e:d7:23:6f:1f:fd:d3:83:f4:d2: e0:69:ea:c0:29:1c:b2:9c:43:9f:b5:5f:0c:ea:16: 27:2d:ff:61:6e:f1:5d:18:36:a0:59:5c:f6:6f:a9: 6b:70:99:29:be:80:f3:b2:bc:39:8c:98:ed:7e:bd: f3:ee:90:b4:2c:f4:cb:11:cb:d8:d3:39:cb:2e:80: 10:75:93:1e:71:72:3d:03:32:21:fe:47:09:d8:f6: 31:9f:3b:1d:54:b8:1c:6a:6e:eb:ac:d8:d7:32:99: 2b:f8:d2:01:fc:f4:79:7e:90:63:72:85:d9:a9:ee: 02:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A6:94:BC:B2:88:D4:1A:27:77:E8:95:69:C2:45:DC:AD:2E:80:E0 X509v3 Authority Key Identifier: keyid:BB:3B:D5:D7:E1:99:24:D8:62:B6:A4:1B:F3:4C:7F:DB:BB:E9:1C:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:50:cf:3d:e5:72:4f:a9:6b:db:85:62:6f:d1:08:17:86:c7: 9c:e8:05:9f:77:12:b9:f5:89:c2:99:cf:3c:dc:62:b8:e2:b5: 79:0a:22:fe:92:12:71:df:8a:28:75:f5:a2:f4:e9:bc:38:48: 39:40:7e:b5:c4:83:13:3f:fa:03:14:80:26:28:ba:20:35:44: db:73:03:ff:a3:ae:9c:95:44:75:41:ed:6f:ae:e3:e8:e5:89: 76:a9:85:f8:f0:18:09:f9:e6:47:ff:d6:63:2d:0f:15:2b:50: 2d:6b:c3:d5:08:fa:40:d3:ec:aa:fe:92:42:6a:6f:27:5c:e1: 29:2d:aa:39:9f:4a:77:06:89:f6:7f:a1:f4:37:eb:c3:a6:f4: 2b:90:7a:b3:86:28:a0:b8:1b:94:cd:8d:d2:57:2d:3a:a3:5b: e1:f5:27:f2:5e:75:73:ea:3f:d6:d1:2b:c4:c7:d9:29:b6:bc: 04:34:cf:d9:f4:8d:9b:3b:52:5d:18:82:f9:86:6c:13:86:0b: 7b:ec:04:5c:2f:8b:aa:8d:80:ce:9a:c1:26:5a:a3:cd:f1:f9: b3:95:1b:f4:8d:91:9e:08:dd:cf:a1:0c:88:a3:c0:cc:86:92: 2c:58:20:28:e6:b9:ae:94:2e:2d:e8:e1:7b:53:bf:da:76:21: 4c:dc:45:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTczNTExMC8GA1UEBRMoQkIzQkQ1RDdFMTk5MjREODYyQjZBNDFCRjM0QzdGREJC QkU5MUM2RDAeFw0yNTA0MDkwNTM2NTJaFw0yNTA0MTYwNTM2NTJaMBgxFjAUBgNV BAMTDTY3ZjYwNzc0LThkMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfV901sDR2f63MO3IXlKFfVNYO5RhH7xXQyfz/f+d7rndC/gtT3ufnbXrye8CV OnBUMv0++m1LIHUztd0weReM3SFejoVamrJk4LKeKKur9JNa0udGAB8uysi1ro/b vplB9VhMNoo8ZlYbb30d+pwC2li0y17f+YymDQ8q0ONKpkKiMeNS0lrYv9YaLtcj bx/904P00uBp6sApHLKcQ5+1XwzqFict/2Fu8V0YNqBZXPZvqWtwmSm+gPOyvDmM mO1+vfPukLQs9MsRy9jTOcsugBB1kx5xcj0DMiH+RwnY9jGfOx1UuBxqbuus2Ncy mSv40gH89Hl+kGNyhdmp7gLZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnKaUvLKI 1Bond+iVacJF3K0ugOAwHwYDVR0jBBgwFoAUuzvV1+GZJNhitqQb80x/27vpHG0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBNzM1L0M3RjQ0MUM2NjM5 QjExRUY5QjREMkE1REM0RjlBRTAyL3V6dlYxLUdaSk5oaXRxUWI4MHhfMjd2cEhH MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdXp2VjEtR1pKTmhpdHFRYjgweF8yN3ZwSEcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB NzM1L0M3RjQ0MUM2NjM5QjExRUY5QjREMkE1REM0RjlBRTAyL3V6dlYxLUdaSk5o aXRxUWI4MHhfMjd2cEhHMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIJQzz3lck+pa9uFYm/RCBeGx5zoBZ93Ern1icKZzzzcYrjitXkKIv6S EnHfiih19aL06bw4SDlAfrXEgxM/+gMUgCYouiA1RNtzA/+jrpyVRHVB7W+u4+jl iXaphfjwGAn55kf/1mMtDxUrUC1rw9UI+kDT7Kr+kkJqbydc4SktqjmfSncGifZ/ ofQ368Om9CuQerOGKKC4G5TNjdJXLTqjW+H1J/JedXPqP9bRK8TH2Sm2vAQ0z9n0 jZs7Ul0YgvmGbBOGC3vsBFwvi6qNgM6awSZao83x+bOVG/SNkZ4I3c+hDIijwMyG kixYICjmua6ULi3o4XtTv9p2IUzcRfo= -----END CERTIFICATE-----Generated at Thu Apr 10 23:59:29 2025 by rpki-client