$ rpki-client -vvf rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft File: uNk1BsinkdH5_6W2fDiBbdwD7ms.mft (raw, json) Hash identifier: M+N2OX1zph/3UD5okvESo+8jDs/oyCVh+LbCQVABh0s= Subject key identifier: 47:B4:82:D9:DF:AF:E5:CC:31:16:D2:5A:C3:77:03:D2:34:BF:5B:47 Authority key identifier: B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B Certificate issuer: /CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B Certificate serial: 0A37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft Manifest number: 0A31 Signing time: Fri 30 May 2025 19:56:58 +0000 Manifest this update: Fri 30 May 2025 19:56:57 +0000 Manifest next update: Fri 06 Jun 2025 19:56:57 +0000 Files and hashes: 1: uNk1BsinkdH5_6W2fDiBbdwD7ms.crl (hash: fwyhaOebdrPqlCb7/aFA59ST2p6Ie+y0mA59wB08N/Q=) 2: C01674A86BF011EA87B33D25C4F9AE02.roa (hash: 70ds0/DyF5wXCHSmR464rx4ZYg97rO4f023Z3VGG144=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2615 (0xa37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110DEC, serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B Validity Not Before: May 30 19:56:57 2025 GMT Not After : Jun 6 19:56:57 2025 GMT Subject: CN=683a0d8a-0031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4a:94:c2:0e:4d:5c:db:60:8b:e2:ae:5d:bf: 6e:b9:9e:87:30:45:fb:49:11:02:97:56:a1:cd:59: 29:1e:09:fa:e6:33:b7:2d:5a:f2:82:ed:50:08:2e: f8:ba:c4:83:08:24:aa:f0:a8:73:72:dd:d8:a2:66: d3:21:fa:88:ab:e5:4c:8a:b2:e3:5b:29:06:6e:d3: 73:4e:bf:13:97:fa:b8:ce:92:7b:c5:95:76:40:2a: 9a:b6:5a:95:34:2d:94:e8:b5:7b:37:04:76:10:80: 90:fe:e3:10:a9:6f:13:ea:88:63:ee:47:99:8f:c6: e0:d3:af:64:12:c8:f4:7d:dd:ad:c0:34:03:b0:f6: 38:a4:8e:5d:b2:97:83:2d:8d:e4:81:15:02:40:ce: 7f:4e:d4:e9:7f:48:2c:76:23:c6:77:70:3f:9d:4c: 12:0c:e9:59:db:b7:b5:e4:59:c3:7d:bb:c8:d2:fc: 48:e7:02:02:46:44:d6:01:b8:3d:e2:de:f4:cf:8d: de:b4:e8:36:af:d5:bd:12:ca:5b:d6:6a:c2:37:6d: a8:7e:49:ad:b9:f1:86:21:bf:bb:7c:a1:23:b1:86: 35:20:a7:76:f6:42:cc:bc:1c:43:c3:7e:20:0d:c0: ef:56:83:30:84:c1:f3:62:de:27:92:54:17:9a:48: 79:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B4:82:D9:DF:AF:E5:CC:31:16:D2:5A:C3:77:03:D2:34:BF:5B:47 X509v3 Authority Key Identifier: keyid:B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:11:f8:1c:e0:1e:71:6c:db:d9:77:6d:34:39:d8:58:e0:51: 21:0f:08:53:74:55:ee:58:db:bf:de:f4:1d:1b:a1:10:dc:94: 4f:16:db:b7:b2:42:2e:e3:64:5e:ef:05:6a:dd:e2:ee:bb:7d: 50:da:f1:a6:29:70:69:96:68:99:d2:4d:21:4a:ba:fc:b3:7e: b0:f5:69:f8:6b:fe:6d:16:68:3a:1b:a0:9b:d6:48:4c:33:9b: 66:46:40:f3:17:ce:9d:e6:9d:02:8a:27:43:f9:1f:47:2b:0e: f8:3e:26:f8:32:41:c3:99:71:fe:af:f0:cc:3c:41:94:fc:b7: a2:f1:66:8b:e3:1a:f8:33:50:68:e0:49:d1:16:e2:0a:f2:4e: 36:33:fe:9b:51:25:45:d4:07:b3:31:92:e5:9c:59:89:83:95: 4a:fe:e0:9c:51:55:23:14:b3:6c:ec:a6:6b:78:3a:a2:d3:56: a1:43:35:fb:a8:97:75:32:c4:2b:1d:7c:e3:df:34:40:f6:38: 68:f1:40:b0:79:d7:49:c2:18:f1:4c:be:40:95:1b:eb:5d:3f: e7:e8:9f:9c:54:90:98:1b:c4:9c:ac:f6:cf:a3:bd:ee:31:3a: 6a:12:d9:25:85:26:e6:fd:02:97:56:42:c3:b0:f2:53:90:19: 6f:6b:f1:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBERUMxMTAvBgNVBAUTKEI4RDkzNTA2QzhBNzkxRDFGOUZGQTVCNjdDMzg4MTZE REMwM0VFNkIwHhcNMjUwNTMwMTk1NjU3WhcNMjUwNjA2MTk1NjU3WjAYMRYwFAYD VQQDEw02ODNhMGQ4YS0wMDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0qUwg5NXNtgi+KuXb9uuZ6HMEX7SRECl1ahzVkpHgn65jO3LVrygu1QCC74 usSDCCSq8Khzct3YombTIfqIq+VMirLjWykGbtNzTr8Tl/q4zpJ7xZV2QCqatlqV NC2U6LV7NwR2EICQ/uMQqW8T6ohj7keZj8bg069kEsj0fd2twDQDsPY4pI5dspeD LY3kgRUCQM5/TtTpf0gsdiPGd3A/nUwSDOlZ27e15FnDfbvI0vxI5wICRkTWAbg9 4t70z43etOg2r9W9Espb1mrCN22ofkmtufGGIb+7fKEjsYY1IKd29kLMvBxDw34g DcDvVoMwhMHzYt4nklQXmkh5AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEe0gtnf r+XMMRbSWsN3A9I0v1tHMB8GA1UdIwQYMBaAFLjZNQbIp5HR+f+ltnw4gW3cA+5r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMERFQy8xNzJEMEEyNDZC RUYxMUVBQTI2QTVFMjJDNEY5QUUwMi91TmsxQnNpbmtkSDVfNlcyZkRpQmJkd0Q3 bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VOazFCc2lua2RINV82VzJmRGlCYmR3RDdtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MERFQy8xNzJEMEEyNDZCRUYxMUVBQTI2QTVFMjJDNEY5QUUwMi91TmsxQnNpbmtk SDVfNlcyZkRpQmJkd0Q3bXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVEfgc4B5xbNvZd200OdhY4FEhDwhTdFXuWNu/3vQdG6EQ3JRPFtu3 skIu42Re7wVq3eLuu31Q2vGmKXBplmiZ0k0hSrr8s36w9Wn4a/5tFmg6G6Cb1khM M5tmRkDzF86d5p0CiidD+R9HKw74Pib4MkHDmXH+r/DMPEGU/Lei8WaL4xr4M1Bo 4EnRFuIK8k42M/6bUSVF1AezMZLlnFmJg5VK/uCcUVUjFLNs7KZreDqi01ahQzX7 qJd1MsQrHXzj3zRA9jho8UCweddJwhjxTL5AlRvrXT/n6J+cVJCYG8ScrPbPo73u MTpqEtklhSbm/QKXVkLDsPJTkBlva/G2 -----END CERTIFICATE-----Generated at Sat May 31 17:01:24 2025 by rpki-client