$ rpki-client -vvf rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft File: UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft (raw, json) Hash identifier: bvUqJ4pU7GaP7fyGV4XMn7HLVzhEZHbKvMyrVEIPx7Y= Subject key identifier: 2A:F1:FE:E6:C8:9E:F4:A9:83:A6:B1:8D:96:57:EC:0A:25:C9:09:F1 Authority key identifier: 53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 Certificate issuer: /CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft Manifest number: 0207 Signing time: Sat 31 May 2025 02:12:49 +0000 Manifest this update: Sat 31 May 2025 02:12:49 +0000 Manifest next update: Sat 07 Jun 2025 02:12:49 +0000 Files and hashes: 1: UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl (hash: pQkEwb5eo7dAxVWezdu3UbjOZt/CPa1LLC1xnOgqRSY=) 2: 58CA2F840D3E11F08AA20980C4F9AE02.roa (hash: o3WxnMuTVoZ5sDv98g86AWu9+ZVPEihcJKRFXeclwGE=) 3: ABBB590C0D3E11F081E68E80C4F9AE02.roa (hash: 21Xud0yuR+X8V9kV1r27e1DSMw9xVQDdRdNBmOLAKOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BAD6, serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Validity Not Before: May 31 02:12:49 2025 GMT Not After : Jun 7 02:12:49 2025 GMT Subject: CN=683a65a1-2247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:a5:2d:91:ae:eb:35:80:0f:f6:15:00:db: f0:ad:84:6d:82:fd:eb:5a:88:08:f8:80:e7:40:2e: f9:38:12:e2:e8:0b:8b:2c:6c:22:cf:f0:f4:9b:2c: 52:15:1b:7c:77:20:1e:e0:7b:71:61:4d:fd:46:d5: 4e:13:92:68:cb:19:ef:fc:21:a8:0b:5a:27:dc:ce: 73:3d:f5:a6:75:b8:46:56:75:dd:71:90:98:45:9a: e5:09:83:20:15:7f:75:88:8f:55:6a:cb:40:5b:8d: 5e:50:f5:bb:9e:74:33:8d:f8:60:9f:7d:7f:15:c2: f3:13:b3:72:4a:8f:81:eb:db:10:b9:a1:31:3b:e0: 1e:ce:65:38:07:b8:7b:88:dd:9b:71:b0:76:c9:a6: 31:9f:88:56:b1:fb:64:ae:0f:96:29:e5:8e:f1:7d: d6:a7:4c:a8:f3:31:88:17:13:f6:e8:7b:5d:6f:50: 8a:84:ab:70:9e:80:89:52:81:7a:22:2c:41:23:e1: c2:ef:40:71:a5:e4:74:45:fc:68:77:3b:04:d9:a0: 70:aa:d4:89:55:71:2d:4c:22:cf:48:08:7d:e4:0a: c2:81:f1:d2:70:4c:03:e6:7d:13:cc:3d:58:ee:ce: 01:cc:30:f6:7d:9d:21:80:ef:6b:14:c8:ca:aa:a6: de:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F1:FE:E6:C8:9E:F4:A9:83:A6:B1:8D:96:57:EC:0A:25:C9:09:F1 X509v3 Authority Key Identifier: keyid:53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:4a:01:0a:02:98:e9:2b:1c:da:bf:f0:68:be:43:55:d9:4e: 9b:35:dc:86:9a:6a:be:28:25:53:29:b5:90:a4:d6:f3:3d:a1: 29:c2:65:96:67:1d:ef:f6:bc:c6:d1:c1:7b:43:b1:29:4f:ef: 0c:52:60:d2:60:38:48:68:03:ff:cc:60:16:63:22:5e:e2:88: 4f:6e:27:99:e9:15:8c:8d:a7:5c:1b:70:2d:a1:73:6d:ba:34: 37:9c:56:0c:ed:54:71:3e:83:bf:c2:81:1b:42:7f:96:ea:0f: ee:45:cd:ce:98:e4:f8:11:63:d4:e4:ca:74:eb:3e:d9:5e:de: f0:48:92:78:d9:3f:3a:a4:86:8b:e2:0a:68:12:41:a3:b3:48: 70:83:18:ae:4a:3e:10:ec:e3:5f:c2:2a:89:66:54:3f:0a:fe: 11:9c:2e:d1:63:80:58:53:f0:0c:d2:e3:d7:f9:27:0d:de:9f: 6a:ee:1e:16:28:12:3c:69:6a:71:cb:fe:94:c8:87:a5:6f:54: b2:91:00:8f:72:f0:01:01:04:bc:7c:23:5a:26:f3:4a:95:95: fb:90:b0:7a:a7:f7:73:b2:bd:22:7a:40:ea:32:d1:1a:93:42: a9:8e:7d:6e:10:16:36:fb:c2:f9:3c:82:d8:4d:94:e2:84:19: 9e:bf:fa:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJBRDYxMTAvBgNVBAUTKDUzMzJGOUFGMzA1MkNGM0Y4NUVBQkREMEFBRDY4MTUy Mzk1MkU2NTYwHhcNMjUwNTMxMDIxMjQ5WhcNMjUwNjA3MDIxMjQ5WjAYMRYwFAYD VQQDEw02ODNhNjVhMS0yMjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqClLZGu6zWAD/YVANvwrYRtgv3rWogI+IDnQC75OBLi6AuLLGwiz/D0myxS FRt8dyAe4HtxYU39RtVOE5Joyxnv/CGoC1on3M5zPfWmdbhGVnXdcZCYRZrlCYMg FX91iI9VastAW41eUPW7nnQzjfhgn31/FcLzE7NySo+B69sQuaExO+AezmU4B7h7 iN2bcbB2yaYxn4hWsftkrg+WKeWO8X3Wp0yo8zGIFxP26Htdb1CKhKtwnoCJUoF6 IixBI+HC70BxpeR0RfxodzsE2aBwqtSJVXEtTCLPSAh95ArCgfHScEwD5n0TzD1Y 7s4BzDD2fZ0hgO9rFMjKqqbe3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrx/ubI nvSpg6axjZZX7AolyQnxMB8GA1UdIwQYMBaAFFMy+a8wUs8/heq90KrWgVI5UuZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkFENi9ENjRGNEU5QzNB RjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6LUY2cjNRcXRhQlVqbFM1 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6TDVyekJTenotRjZyM1FxdGFCVWpsUzVsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkFENi9ENjRGNEU5QzNBRjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6 LUY2cjNRcXRhQlVqbFM1bFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCASgEKApjpKxzav/BovkNV2U6bNdyGmmq+KCVTKbWQpNbzPaEpwmWW Zx3v9rzG0cF7Q7EpT+8MUmDSYDhIaAP/zGAWYyJe4ohPbieZ6RWMjadcG3AtoXNt ujQ3nFYM7VRxPoO/woEbQn+W6g/uRc3OmOT4EWPU5Mp06z7ZXt7wSJJ42T86pIaL 4gpoEkGjs0hwgxiuSj4Q7ONfwiqJZlQ/Cv4RnC7RY4BYU/AM0uPX+ScN3p9q7h4W KBI8aWpxy/6UyIelb1SykQCPcvABAQS8fCNaJvNKlZX7kLB6p/dzsr0iekDqMtEa k0Kpjn1uEBY2+8L5PILYTZTihBmev/pr -----END CERTIFICATE-----Generated at Sat May 31 16:36:51 2025 by rpki-client