$ rpki-client -vvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft File: UxdJCV5En9gqodtQ2oNAFyML3RM.mft (raw, json) Hash identifier: /n3WTdS53ZTSSTKiDFqS4LNi/b12WXyLMVxtNF3/pRg= Subject key identifier: 66:3F:6E:EA:0C:AF:6C:55:FB:05:78:66:84:A4:C0:C1:AF:01:C8:5E Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 Certificate issuer: /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Certificate serial: 0B7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft Manifest number: 0B76 Signing time: Fri 30 May 2025 19:15:00 +0000 Manifest this update: Fri 30 May 2025 19:14:59 +0000 Manifest next update: Fri 06 Jun 2025 19:14:59 +0000 Files and hashes: 1: UxdJCV5En9gqodtQ2oNAFyML3RM.crl (hash: ZCKujUxQ5flXW3N2MeHlqB9LD2HlDpAofNdC2uzRWaI=) 2: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (hash: b6SG981ws9YTohF7YJYfD6V/fAmms72gE/FD/yHhvRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2941 (0xb7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117754, serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Validity Not Before: May 30 19:14:59 2025 GMT Not After : Jun 6 19:14:59 2025 GMT Subject: CN=683a03b3-80c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:4e:7e:53:37:01:1a:1f:bc:f5:13:44:9d: 1c:5c:8e:f9:9e:3b:45:de:6c:a2:6e:b8:22:99:af: 6f:d2:66:78:cc:88:ee:31:22:71:82:c0:19:55:10: eb:18:c0:9a:97:95:39:99:d0:b0:e3:19:66:fe:47: a1:73:f2:5a:0d:d8:9d:35:bc:69:3f:c6:9d:a0:b0: 67:d6:e8:a6:7b:8b:d3:6b:44:c1:ac:d4:cf:f3:a7: 42:2a:6f:5e:a1:bb:9c:26:b3:27:37:be:7a:73:53: 30:af:76:53:bb:1d:78:13:5a:8f:23:17:73:2e:3c: 51:14:fa:02:f9:01:dc:bb:7d:91:f3:82:af:8b:df: 36:7b:b9:ff:7b:b4:f9:37:f7:83:c2:20:fa:95:e9: 0d:16:56:f9:fc:19:e1:27:da:5f:67:86:0e:64:a6: be:2d:00:2e:d1:35:7b:f7:86:35:3c:1d:af:0f:ad: b2:70:97:f6:0b:3c:c0:56:ed:92:34:33:a9:8b:6a: d9:a3:b8:39:17:1a:80:1a:52:93:2e:c7:5e:d9:ae: 07:c1:52:0b:2e:1d:33:b0:fc:b4:ad:52:e3:66:66: 4d:89:5d:c0:65:66:a6:4b:79:c8:bc:b7:c2:28:6f: 2b:4f:5d:93:4f:88:3c:dd:19:f5:2e:a7:df:15:f9: 0f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3F:6E:EA:0C:AF:6C:55:FB:05:78:66:84:A4:C0:C1:AF:01:C8:5E X509v3 Authority Key Identifier: keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:32:12:9a:72:38:b2:c7:59:dd:b6:b3:31:cb:1f:f4:bf:1d: 72:7a:8d:f5:db:e0:c8:aa:78:cd:0d:cb:9f:97:9a:10:d5:ea: a2:6a:bc:8c:da:f4:4d:92:be:68:a1:5d:64:e0:0f:f7:bf:87: 51:90:b9:ab:ec:02:8c:eb:26:c3:f1:3f:32:d9:32:e0:4c:d0: 97:24:8d:54:63:5f:9c:b8:7b:4b:54:28:a0:89:3e:2e:65:fe: 92:ed:ad:95:dd:96:7b:f8:eb:10:4e:1f:3f:d2:22:a8:17:82: a8:4d:5d:7e:08:9b:86:21:92:1a:f7:63:d9:8e:e2:4a:f3:72: 2f:b3:c2:bf:1c:31:75:f1:d4:0a:6c:e2:db:86:b1:ef:a4:49: 35:e7:a6:28:d5:13:8e:4b:4e:3e:21:f2:06:37:80:dc:2e:43: 9f:33:8d:08:ad:f7:6c:42:aa:66:80:e8:53:75:9f:ed:11:a8: 20:f8:0e:69:ee:f0:68:3e:01:7e:20:10:c6:01:d2:e5:eb:81: 4d:62:94:99:bd:5f:5b:88:99:47:fa:64:70:dc:af:38:e0:8c: d1:2f:66:bd:26:d0:a9:14:ce:b1:e0:a0:e3:00:88:ac:aa:d2: 99:67:f8:5e:f9:44:aa:be:e4:29:63:0d:03:b9:85:00:d8:9e: 0a:28:16:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3NTQxMTAvBgNVBAUTKDUzMTc0OTA5NUU0NDlGRDgyQUExREI1MERBODM0MDE3 MjMwQkREMTMwHhcNMjUwNTMwMTkxNDU5WhcNMjUwNjA2MTkxNDU5WjAYMRYwFAYD VQQDEw02ODNhMDNiMy04MGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRNOflM3ARofvPUTRJ0cXI75njtF3myibrgima9v0mZ4zIjuMSJxgsAZVRDr GMCal5U5mdCw4xlm/kehc/JaDdidNbxpP8adoLBn1uime4vTa0TBrNTP86dCKm9e obucJrMnN756c1Mwr3ZTux14E1qPIxdzLjxRFPoC+QHcu32R84Kvi982e7n/e7T5 N/eDwiD6lekNFlb5/BnhJ9pfZ4YOZKa+LQAu0TV794Y1PB2vD62ycJf2CzzAVu2S NDOpi2rZo7g5FxqAGlKTLsde2a4HwVILLh0zsPy0rVLjZmZNiV3AZWamS3nIvLfC KG8rT12TT4g83Rn1LqffFfkPnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGY/buoM r2xV+wV4ZoSkwMGvAcheMB8GA1UdIwQYMBaAFFMXSQleRJ/YKqHbUNqDQBcjC90T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzc1NC84QjMxNDVBRTJD OEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45Z3FvZHRRMm9OQUZ5TUwz Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4ZEpDVjVFbjlncW9kdFEyb05BRnlNTDNSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzc1NC84QjMxNDVBRTJDOEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45 Z3FvZHRRMm9OQUZ5TUwzUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATMhKacjiyx1ndtrMxyx/0vx1yeo312+DIqnjNDcufl5oQ1eqiaryM 2vRNkr5ooV1k4A/3v4dRkLmr7AKM6ybD8T8y2TLgTNCXJI1UY1+cuHtLVCigiT4u Zf6S7a2V3ZZ7+OsQTh8/0iKoF4KoTV1+CJuGIZIa92PZjuJK83Ivs8K/HDF18dQK bOLbhrHvpEk156Yo1ROOS04+IfIGN4DcLkOfM40IrfdsQqpmgOhTdZ/tEagg+A5p 7vBoPgF+IBDGAdLl64FNYpSZvV9biJlH+mRw3K844IzRL2a9JtCpFM6x4KDjAIis qtKZZ/he+USqvuQpYw0DuYUA2J4KKBbh -----END CERTIFICATE-----Generated at Sat May 31 17:50:37 2025 by rpki-client