$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft File: uSVP8yozKY2dXGFc_aRTFeFcfLU.mft (raw, json) Hash identifier: NIeDkyOqsenxVbVp0cKM9Zcjk/j/aor6qKXtuKUHheg= Subject key identifier: 47:91:BC:37:F0:19:C0:E0:0B:14:2A:10:91:6F:32:0E:DB:E4:38:6F Authority key identifier: B9:25:4F:F3:2A:33:29:8D:9D:5C:61:5C:FD:A4:53:15:E1:5C:7C:B5 Certificate issuer: /CN=A91F3043/serialNumber=B9254FF32A33298D9D5C615CFDA45315E15C7CB5 Certificate serial: 062E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft Manifest number: 0625 Signing time: Fri 04 Apr 2025 22:52:03 +0000 Manifest this update: Fri 04 Apr 2025 22:52:03 +0000 Manifest next update: Fri 11 Apr 2025 22:52:03 +0000 Files and hashes: 1: uSVP8yozKY2dXGFc_aRTFeFcfLU.crl (hash: /RNsmgkb43EKuxDK8+eCo8vm8cTZtrVNPoL0zq2pr/w=) 2: BDFE68F491FD11EB84408D16C4F9AE02.roa (hash: NiOCVi1ZAoRhfdZ2LF+ut8x9beDsO9AQBCdgx3wc2ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.crl rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1582 (0x62e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3043 Validity Not Before: Apr 4 22:52:03 2025 GMT Not After : Apr 11 22:52:03 2025 GMT Subject: CN=67f06293-e20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1d:79:54:9b:c0:b6:d7:80:3a:15:31:f9:9f: 41:82:b3:77:28:2f:de:c0:51:5f:14:84:27:bf:a0: 6a:c8:12:20:4a:ef:87:a1:c9:d2:46:a6:11:2f:5f: 7b:d6:86:82:45:94:05:e3:3e:0d:19:ec:47:66:c4: 4b:0c:cd:c1:57:a2:0b:5c:a5:5c:70:f0:09:a4:0a: 70:b5:f7:27:0f:77:7b:d4:ee:22:43:d3:92:2d:70: d2:ea:ee:a4:9c:75:d2:9e:34:46:ba:66:22:b9:b8: 8d:90:b5:00:fa:62:82:40:e5:12:e8:1c:6f:49:d3: ff:7c:bc:8a:aa:46:8f:f2:f7:78:06:3f:6b:98:fc: 57:02:08:3e:93:29:c4:9b:be:1f:47:df:e6:e7:bd: 75:3c:2b:11:1f:5e:9c:e7:99:af:3f:5c:8f:64:91: 2e:d0:0f:34:9a:11:ff:0f:b4:46:d6:d5:2e:fc:d9: c8:14:18:2f:4f:cb:de:ab:3f:6d:56:90:34:15:54: d3:bd:e3:86:a0:6a:ef:c1:d1:4b:63:4f:d4:bc:49: e1:bc:25:8d:3e:c4:46:aa:14:3d:92:49:d3:62:26: 77:a2:0a:f3:64:4b:0c:22:7c:43:8e:7e:d0:d3:84: a9:58:c1:de:40:12:50:92:15:64:94:78:b6:34:b4: b5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:91:BC:37:F0:19:C0:E0:0B:14:2A:10:91:6F:32:0E:DB:E4:38:6F X509v3 Authority Key Identifier: keyid:B9:25:4F:F3:2A:33:29:8D:9D:5C:61:5C:FD:A4:53:15:E1:5C:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:02:b0:aa:fc:b5:9f:63:6c:4d:09:ea:cd:f7:01:8a:c1:70: 0e:83:dc:21:5b:5c:de:6d:6c:14:7a:43:6a:fb:ac:6b:43:21: d5:68:66:2b:f0:0c:c7:bd:8b:18:1f:e9:0c:88:2c:90:74:09: 3f:ab:35:03:4d:80:8b:d0:96:b4:75:f7:ed:a0:70:12:cb:39: 0b:93:98:33:19:ef:85:96:44:ac:67:27:78:e3:a8:d3:c8:f3: d8:61:60:c5:10:63:fb:77:48:63:8f:ea:75:ea:27:f1:07:1b: 99:ef:aa:17:be:c0:b3:11:d3:c7:97:76:cf:4b:73:75:7f:e6: 41:81:db:f8:e2:41:aa:c0:91:e6:fe:8a:5d:21:9f:9e:c4:59: ff:e1:3c:41:1f:52:49:9e:0f:e0:90:0d:d9:2d:1c:64:bd:bd: 41:64:25:c0:0c:f2:c1:98:55:ad:28:02:ba:67:0c:2f:d7:e2: 3b:dc:0b:92:8f:67:30:59:c6:a1:ad:d7:c3:21:ce:39:2e:2b: 1a:d2:12:8a:0e:91:da:ba:f0:c8:89:9b:fa:8e:f4:54:56:02: ed:4d:ee:0d:56:de:b0:e4:fa:84:20:43:bc:16:2b:fb:56:4b: 8d:04:b5:bf:3d:cd:4e:db:8b:1b:fa:dd:22:1b:f3:35:70:df: 89:8c:60:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwNDMxMTAvBgNVBAUTKEI5MjU0RkYzMkEzMzI5OEQ5RDVDNjE1Q0ZEQTQ1MzE1 RTE1QzdDQjUwHhcNMjUwNDA0MjI1MjAzWhcNMjUwNDExMjI1MjAzWjAYMRYwFAYD VQQDEw02N2YwNjI5My1lMjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4B15VJvAtteAOhUx+Z9BgrN3KC/ewFFfFIQnv6BqyBIgSu+HocnSRqYRL197 1oaCRZQF4z4NGexHZsRLDM3BV6ILXKVccPAJpApwtfcnD3d71O4iQ9OSLXDS6u6k nHXSnjRGumYiubiNkLUA+mKCQOUS6BxvSdP/fLyKqkaP8vd4Bj9rmPxXAgg+kynE m74fR9/m5711PCsRH16c55mvP1yPZJEu0A80mhH/D7RG1tUu/NnIFBgvT8veqz9t VpA0FVTTveOGoGrvwdFLY0/UvEnhvCWNPsRGqhQ9kknTYiZ3ogrzZEsMInxDjn7Q 04SpWMHeQBJQkhVklHi2NLS1jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeRvDfw GcDgCxQqEJFvMg7b5DhvMB8GA1UdIwQYMBaAFLklT/MqMymNnVxhXP2kUxXhXHy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzA0My8zOTZDNUQ0MDkx RkMxMUVCQTk5OERCMTRDNEY5QUUwMi91U1ZQOHlvektZMmRYR0ZjX2FSVEZlRmNm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VTVlA4eW96S1kyZFhHRmNfYVJURmVGY2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzA0My8zOTZDNUQ0MDkxRkMxMUVCQTk5OERCMTRDNEY5QUUwMi91U1ZQOHlvektZ MmRYR0ZjX2FSVEZlRmNmTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARArCq/LWfY2xNCerN9wGKwXAOg9whW1zebWwUekNq+6xrQyHVaGYr 8AzHvYsYH+kMiCyQdAk/qzUDTYCL0Ja0dfftoHASyzkLk5gzGe+FlkSsZyd446jT yPPYYWDFEGP7d0hjj+p16ifxBxuZ76oXvsCzEdPHl3bPS3N1f+ZBgdv44kGqwJHm /opdIZ+exFn/4TxBH1JJng/gkA3ZLRxkvb1BZCXADPLBmFWtKAK6Zwwv1+I73AuS j2cwWcahrdfDIc45Lisa0hKKDpHauvDIiZv6jvRUVgLtTe4NVt6w5PqEIEO8Fiv7 VkuNBLW/Pc1O24sb+t0iG/M1cN+JjGBG -----END CERTIFICATE-----Generated at Sat Apr 5 03:54:02 2025 by rpki-client