$ rpki-client -vvf rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft File: lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft (raw, json) Hash identifier: /uObjfdc1apTvf2AwfpcXaWsyFEhLs0JsJ+upk32eVU= Subject key identifier: 97:07:B5:60:38:B8:76:15:F7:7F:8B:00:82:4A:A8:5D:18:F9:DC:31 Authority key identifier: 95:45:9D:5D:1E:B0:40:95:FD:16:3F:0D:84:D1:F3:A4:6C:15:E4:F0 Certificate issuer: /CN=A9118749/serialNumber=95459D5D1EB04095FD163F0D84D1F3A46C15E4F0 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft Manifest number: 47 Signing time: Sun 01 Jun 2025 07:10:22 +0000 Manifest this update: Sun 01 Jun 2025 07:10:21 +0000 Manifest next update: Sun 08 Jun 2025 07:10:21 +0000 Files and hashes: 1: lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl (hash: /hiIXnyNyrbIyAhcg5G6fICHm8h6BvX8s3sl4tFahRU=) 2: 0D9D8C8CDC2311EFAEB2F679C4F9AE02.roa (hash: e53H18n/zt4tMpCTzx/LyyJ5rGfSmD0vKN+ZK6rIQ0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118749, serialNumber=95459D5D1EB04095FD163F0D84D1F3A46C15E4F0 Validity Not Before: Jun 1 07:10:21 2025 GMT Not After : Jun 8 07:10:21 2025 GMT Subject: CN=683bfcde-b04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b1:e2:a6:f3:66:64:1e:fc:17:e6:b9:4a:2b: 0a:41:93:84:06:88:e4:ba:48:b4:6c:ad:a6:3d:12: 35:84:2e:08:01:80:84:15:5e:6e:a8:df:8c:bd:b5: 45:77:be:2d:2a:57:f1:36:cb:0a:94:30:b4:9e:34: a0:0a:18:d8:44:dd:20:5c:22:a1:db:a4:d2:b8:de: 19:e0:8d:e6:69:29:aa:76:52:eb:51:90:86:bf:d5: 0e:cb:06:f8:e7:43:75:d3:76:14:30:16:15:53:7d: 59:2f:89:60:85:54:3c:b0:55:7d:1a:a4:1e:18:a6: eb:91:8b:76:7d:fa:49:85:4a:4e:5a:49:e1:51:49: fa:c8:9e:07:8b:f7:54:13:33:7a:10:04:01:a5:12: 90:cc:ff:75:61:4b:ff:72:68:e1:85:22:25:65:42: ca:18:5d:ce:3e:c1:1a:e1:60:b9:51:c7:0a:3d:d9: 82:7a:d5:dd:ca:a2:67:57:90:46:46:a6:a5:fe:38: 79:3b:aa:2d:c8:e3:43:c7:41:ad:2e:a0:54:c6:61: 34:46:89:d1:dc:02:ca:df:33:54:e5:e4:97:cc:7a: e5:93:21:d0:29:ae:5d:03:8f:68:37:e1:87:58:4c: aa:88:80:b1:36:b4:ad:b9:cf:bf:df:bd:8d:91:44: 41:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:07:B5:60:38:B8:76:15:F7:7F:8B:00:82:4A:A8:5D:18:F9:DC:31 X509v3 Authority Key Identifier: keyid:95:45:9D:5D:1E:B0:40:95:FD:16:3F:0D:84:D1:F3:A4:6C:15:E4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:d7:90:74:3e:77:9d:e9:1f:46:8b:fb:22:96:3e:6a:44:77: e1:5c:23:88:1e:12:00:a4:4b:02:50:60:04:01:db:4f:81:09: ce:ed:dd:d1:46:c6:a5:2f:32:70:a1:a8:c5:b8:f4:10:cb:c7: fb:a2:fb:a8:50:c9:b8:7b:31:60:69:37:61:1e:bf:e7:21:81: 66:20:26:6f:6e:b1:dc:fe:35:f9:59:e0:f2:53:13:91:c7:30: 7a:61:03:91:89:bc:ae:86:78:49:51:85:2f:96:45:ac:35:9a: 07:08:ba:ee:49:cf:07:27:b0:35:e4:a0:bc:85:f2:e1:0c:ec: 22:49:b2:75:09:9d:42:0c:72:73:fd:fa:27:50:92:41:1d:88: fd:6d:3b:c8:1b:77:1a:97:bf:d9:86:5e:56:86:7f:d9:57:ad: 42:a6:29:2e:5e:50:9a:c0:40:d9:a9:e7:de:bf:ae:a3:38:43: e5:cd:e9:49:74:fa:df:f6:00:be:1a:e7:a1:4e:d6:4b:07:be: 37:3e:91:19:71:56:ac:33:10:f9:dc:b1:a4:5b:36:be:ee:5b: b2:02:c4:5a:22:f6:0f:a2:61:65:d2:09:47:b2:73:7c:4f:f9: 91:d2:b8:8b:44:2e:54:bd:54:cd:ba:a6:e6:b3:95:a0:3b:b2: 9b:dd:5d:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODc0OTExMC8GA1UEBRMoOTU0NTlENUQxRUIwNDA5NUZEMTYzRjBEODREMUYzQTQ2 QzE1RTRGMDAeFw0yNTA2MDEwNzEwMjFaFw0yNTA2MDgwNzEwMjFaMBgxFjAUBgNV BAMTDTY4M2JmY2RlLWIwNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDzseKm82ZkHvwX5rlKKwpBk4QGiOS6SLRsraY9EjWELggBgIQVXm6o34y9tUV3 vi0qV/E2ywqUMLSeNKAKGNhE3SBcIqHbpNK43hngjeZpKap2UutRkIa/1Q7LBvjn Q3XTdhQwFhVTfVkviWCFVDywVX0apB4YpuuRi3Z9+kmFSk5aSeFRSfrIngeL91QT M3oQBAGlEpDM/3VhS/9yaOGFIiVlQsoYXc4+wRrhYLlRxwo92YJ61d3KomdXkEZG pqX+OHk7qi3I40PHQa0uoFTGYTRGidHcAsrfM1Tl5JfMeuWTIdAprl0Dj2g34YdY TKqIgLE2tK25z7/fvY2RREEPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlwe1YDi4 dhX3f4sAgkqoXRj53DEwHwYDVR0jBBgwFoAUlUWdXR6wQJX9Fj8NhNHzpGwV5PAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4NzQ5L0JBNTdEQkE2REMy MDExRUY5MUI1NDAxRUM0RjlBRTAyL2xVV2RYUjZ3UUpYOUZqOE5oTkh6cEd3VjVQ QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbFVXZFhSNndRSlg5Rmo4TmhOSHpwR3dWNVBBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 NzQ5L0JBNTdEQkE2REMyMDExRUY5MUI1NDAxRUM0RjlBRTAyL2xVV2RYUjZ3UUpY OUZqOE5oTkh6cEd3VjVQQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGjXkHQ+d53pH0aL+yKWPmpEd+FcI4geEgCkSwJQYAQB20+BCc7t3dFG xqUvMnChqMW49BDLx/ui+6hQybh7MWBpN2Eev+chgWYgJm9usdz+NflZ4PJTE5HH MHphA5GJvK6GeElRhS+WRaw1mgcIuu5JzwcnsDXkoLyF8uEM7CJJsnUJnUIMcnP9 +idQkkEdiP1tO8gbdxqXv9mGXlaGf9lXrUKmKS5eUJrAQNmp596/rqM4Q+XN6Ul0 +t/2AL4a56FO1ksHvjc+kRlxVqwzEPncsaRbNr7uW7ICxFoi9g+iYWXSCUeyc3xP +ZHSuItELlS9VM26puazlaA7spvdXR0= -----END CERTIFICATE-----Generated at Mon Jun 2 06:28:36 2025 by rpki-client