$ rpki-client -vvf rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft File: 1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft (raw, json) Hash identifier: 5X6RegHZctW+zi5itAjR7oUf3bTdemy+uAdTlzjX0FA= Subject key identifier: 59:D4:EB:25:FD:88:07:9C:AA:52:A4:F3:55:51:49:DA:EB:C2:F5:F6 Authority key identifier: D5:4B:F3:99:BE:1B:65:9B:13:23:14:B8:21:93:3A:20:BA:38:B9:6A Certificate issuer: /CN=A9123E38/serialNumber=D54BF399BE1B659B132314B821933A20BA38B96A Certificate serial: 16D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft Manifest number: 16AD Signing time: Sat 31 May 2025 16:40:49 +0000 Manifest this update: Sat 31 May 2025 16:40:49 +0000 Manifest next update: Sat 07 Jun 2025 16:40:49 +0000 Files and hashes: 1: 1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl (hash: NMzjYmjrcR3WMh3FgOaP++db2nZIXtnwUR2IpN4Jfps=) 2: 24CFDABE00EC11E8AAC4DD6EC4F9AE02.roa (hash: ecERzKe4aH7s8rjg9Kt6Wo+1pU9CBduLgX3EVStj1rs=) 3: 0F2AF0F0AFDA11EAAED1C066C4F9AE02.roa (hash: FZkT4Kxe1dq9738R7EN3qc8IS8Q1dJKnESpThw2bzlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 16:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5846 (0x16d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123E38, serialNumber=D54BF399BE1B659B132314B821933A20BA38B96A Validity Not Before: May 31 16:40:49 2025 GMT Not After : Jun 7 16:40:49 2025 GMT Subject: CN=683b3111-546d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:d9:66:6c:12:a7:a9:0c:37:4d:58:66:f5: a5:c8:e9:a4:39:2d:63:12:7a:4a:52:c5:b8:e1:21: e3:00:33:53:d4:81:1e:e7:c6:2a:53:4c:b7:dc:50: 5d:b5:fc:56:a6:d6:8a:82:d8:0b:6f:b4:59:e6:c3: 4e:2a:e0:02:51:a0:4f:30:3e:7c:75:87:8f:8a:ca: f7:ba:2b:7a:1c:d6:5d:72:ce:5f:72:28:3a:dc:79: ef:89:05:31:f1:4f:31:d0:47:2d:47:77:eb:88:47: e6:7d:7a:77:e9:e8:97:05:e9:34:8b:6e:f7:de:10: 29:6c:8e:10:8d:87:47:b1:10:21:38:e7:0f:2a:75: 3c:22:4f:65:08:4e:f4:54:03:9a:5c:86:6f:28:0a: c2:24:de:03:00:9a:b5:cd:e8:61:c5:96:2b:e9:d8: e8:2a:8a:35:90:e8:c6:ab:ff:43:87:11:9c:9a:83: 38:9a:b2:33:26:79:28:07:18:ca:4a:4c:f2:f3:fe: 05:f7:82:96:39:ec:20:83:02:70:99:65:12:06:64: c8:8e:88:ed:f9:ad:45:d0:c2:a8:f2:6e:07:c8:12: a3:7b:22:db:a5:c2:da:82:7a:42:9c:79:d3:9e:65: 56:85:d5:cc:a1:04:4c:4f:7e:e6:9f:56:ed:0e:2f: 41:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D4:EB:25:FD:88:07:9C:AA:52:A4:F3:55:51:49:DA:EB:C2:F5:F6 X509v3 Authority Key Identifier: keyid:D5:4B:F3:99:BE:1B:65:9B:13:23:14:B8:21:93:3A:20:BA:38:B9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:57:5c:1c:40:38:ea:12:18:b9:02:bb:0d:4a:14:49:2a:0c: 0e:41:fe:7d:60:c7:fb:5d:2e:9a:64:78:5d:1c:24:8a:de:30: d1:67:27:cb:22:0b:f6:3d:9c:e9:78:d6:06:f1:3b:86:81:a5: 05:42:5a:8e:03:14:31:39:9d:a7:4e:68:d3:5f:73:73:bf:db: fe:3b:72:9b:11:93:33:43:97:f0:45:1b:6b:4d:9c:17:d6:ab: a4:96:1a:98:b1:61:3a:f7:42:aa:10:9d:4a:b8:9b:d3:68:d2: 07:84:e4:e3:9c:74:f1:d0:cc:d2:f6:c1:30:19:68:1c:1c:de: 4b:05:ec:2e:02:40:87:b6:34:bc:42:a4:41:ef:07:a0:90:6a: 53:c6:0c:7b:63:98:cc:0c:4d:f3:ce:2e:eb:b3:75:6d:de:ca: 8d:59:0e:8c:59:bb:ca:d9:04:9e:0e:8d:79:b4:87:a6:53:f2: da:fa:98:a9:29:af:f1:2d:ac:ab:4e:c2:46:6d:c3:1b:69:ef: 49:88:63:97:7a:22:e1:ca:e3:8e:ae:b2:1b:46:b4:75:e9:f1: 55:e3:8a:5b:47:08:2c:7a:31:86:5d:37:2b:f5:62:19:b7:bd: 16:ec:58:d8:2a:ce:5b:9e:44:61:1a:52:eb:83:ac:9e:e2:cb: 1c:fd:db:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNFMzgxMTAvBgNVBAUTKEQ1NEJGMzk5QkUxQjY1OUIxMzIzMTRCODIxOTMzQTIw QkEzOEI5NkEwHhcNMjUwNTMxMTY0MDQ5WhcNMjUwNjA3MTY0MDQ5WjAYMRYwFAYD VQQDEw02ODNiMzExMS01NDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuY3ZZmwSp6kMN01YZvWlyOmkOS1jEnpKUsW44SHjADNT1IEe58YqU0y33FBd tfxWptaKgtgLb7RZ5sNOKuACUaBPMD58dYePisr3uit6HNZdcs5fcig63HnviQUx 8U8x0EctR3friEfmfXp36eiXBek0i2733hApbI4QjYdHsRAhOOcPKnU8Ik9lCE70 VAOaXIZvKArCJN4DAJq1zehhxZYr6djoKoo1kOjGq/9DhxGcmoM4mrIzJnkoBxjK Skzy8/4F94KWOewggwJwmWUSBmTIjojt+a1F0MKo8m4HyBKjeyLbpcLagnpCnHnT nmVWhdXMoQRMT37mn1btDi9B5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnU6yX9 iAecqlKk81VRSdrrwvX2MB8GA1UdIwQYMBaAFNVL85m+G2WbEyMUuCGTOiC6OLlq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0UzOC9BMTA4N0QzNjAw RUExMUU4QkM5M0IxNkJDNEY5QUUwMi8xVXZ6bWI0Ylpac1RJeFM0SVpNNklMbzR1 V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFVdnptYjRiWlpzVEl4UzRJWk02SUxvNHVXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0UzOC9BMTA4N0QzNjAwRUExMUU4QkM5M0IxNkJDNEY5QUUwMi8xVXZ6bWI0Ylpa c1RJeFM0SVpNNklMbzR1V28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkV1wcQDjqEhi5ArsNShRJKgwOQf59YMf7XS6aZHhdHCSK3jDRZyfL Igv2PZzpeNYG8TuGgaUFQlqOAxQxOZ2nTmjTX3Nzv9v+O3KbEZMzQ5fwRRtrTZwX 1quklhqYsWE690KqEJ1KuJvTaNIHhOTjnHTx0MzS9sEwGWgcHN5LBewuAkCHtjS8 QqRB7wegkGpTxgx7Y5jMDE3zzi7rs3Vt3sqNWQ6MWbvK2QSeDo15tIemU/La+pip Ka/xLayrTsJGbcMbae9JiGOXeiLhyuOOrrIbRrR16fFV44pbRwgsejGGXTcr9WIZ t70W7FjYKs5bnkRhGlLrg6ye4ssc/dtD -----END CERTIFICATE-----Generated at Sat May 31 17:45:08 2025 by rpki-client