$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft File: xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft (raw, json) Hash identifier: Ng8DEVBwJc0NEKvt6f3ujjQzq8JKFj2AEfSe5Kx6/lY= Subject key identifier: 90:70:92:A4:9F:A1:37:60:AD:7A:F7:F8:5D:08:64:3E:9A:9E:8B:C9 Authority key identifier: C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4 Certificate issuer: /CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft Manifest number: 01A2 Signing time: Sat 31 May 2025 03:07:32 +0000 Manifest this update: Sat 31 May 2025 03:07:32 +0000 Manifest next update: Sat 07 Jun 2025 03:07:32 +0000 Files and hashes: 1: xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl (hash: +Zv4TXeFaONWaMOr9kKNR3ziJgAkxCcmXMGLhwjV/sY=) 2: 19E19DA0E5CE11EDB697BC74C4F9AE02.roa (hash: 8oKi9g3FW28uCT296akypss1lnTC3S8VPwt27zeBIKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D5, serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4 Validity Not Before: May 31 03:07:32 2025 GMT Not After : Jun 7 03:07:32 2025 GMT Subject: CN=683a7274-97f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:ac:44:1b:67:d8:03:1b:2b:c3:bd:a2:22: 20:cd:77:97:80:84:88:b7:db:1c:b3:31:dd:16:36: 92:d7:c9:b9:ed:a6:d6:f2:d9:4a:c7:58:fd:2c:6c: 05:c3:ff:c8:c9:20:9a:71:07:76:18:db:0f:96:7c: ba:54:62:d1:45:7f:3e:db:bd:38:77:3c:46:50:9d: 6c:b5:3f:76:48:73:24:fb:1a:2a:d9:d2:58:ea:43: 09:ad:7a:5e:89:4a:4d:7a:9f:9a:1c:c6:de:70:b5: 51:a1:bf:42:f5:a8:c7:c5:3a:62:68:53:a9:d4:5e: 77:30:94:90:64:93:70:dd:f2:f2:32:ca:cd:88:a9: dd:5d:46:2f:c2:a5:6d:46:b6:52:51:7a:0e:75:d2: a4:16:4a:a7:ad:50:75:5b:02:58:a4:2a:c2:cd:93: f0:05:8a:6c:3b:9a:7c:bb:c0:dd:ba:84:ef:65:da: 64:9e:d0:f1:8c:c6:3a:fe:28:8f:19:ec:a2:61:bb: 47:81:28:73:42:4e:b5:47:b4:34:ab:63:0c:9f:77: 4e:e2:7f:6c:18:88:48:fd:80:0f:f0:2d:ed:c8:47: 48:cf:22:03:a9:a3:0f:14:c8:b3:2d:18:d3:d4:9a: 1f:58:0a:35:99:31:7c:43:23:68:df:f2:b1:21:eb: d6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:70:92:A4:9F:A1:37:60:AD:7A:F7:F8:5D:08:64:3E:9A:9E:8B:C9 X509v3 Authority Key Identifier: keyid:C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4a:30:50:9f:fa:b3:2f:72:81:ea:ae:c8:7b:a2:e9:c0:45: 6e:6d:2e:b8:70:4b:0b:ff:bc:85:96:02:89:48:f0:dd:ab:6f: c9:20:cb:90:89:1f:5c:00:40:2a:12:12:25:60:2b:4a:dc:16: 6b:35:d5:4b:f0:c2:d8:02:b4:91:f9:9a:0b:62:26:a2:af:2b: ba:3c:c0:24:d7:53:06:59:d9:52:5d:37:83:89:28:d8:b8:11: fb:59:d8:36:f1:a4:c8:3a:62:02:7a:1d:cf:6f:99:43:64:11: ff:18:cb:58:7c:b3:c4:48:7b:89:2f:d4:ea:de:d5:15:9c:89: f7:6d:bf:12:7b:d4:46:d7:c4:cc:e9:79:0f:8a:79:96:08:e7: 32:ec:c8:61:ff:71:33:6d:ae:1c:d4:8d:74:dc:70:c4:ac:ee: 3c:4a:0f:52:84:53:d0:55:c0:7e:3a:b0:6c:1f:3f:34:4b:00: 77:23:9d:d8:cb:40:0a:9a:80:e0:c7:a7:15:f9:4a:50:74:d9: 90:56:c0:99:58:85:7e:14:c5:aa:d6:be:6f:67:f2:f3:3d:62: ee:88:81:93:11:d4:50:59:71:fb:ce:a6:ee:8e:69:7e:39:38: a5:2a:24:25:cd:62:f6:65:a5:95:6b:b3:be:01:2b:79:17:b9: 37:5a:b1:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDUxMTAvBgNVBAUTKEM1NDUyNUU5NzA1QkQ2OUQ2MTQyNERCRUU3QjA0OTNG NUZENkYwQTQwHhcNMjUwNTMxMDMwNzMyWhcNMjUwNjA3MDMwNzMyWjAYMRYwFAYD VQQDEw02ODNhNzI3NC05N2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwF6sRBtn2AMbK8O9oiIgzXeXgISIt9scszHdFjaS18m57abW8tlKx1j9LGwF w//IySCacQd2GNsPlny6VGLRRX8+2704dzxGUJ1stT92SHMk+xoq2dJY6kMJrXpe iUpNep+aHMbecLVRob9C9ajHxTpiaFOp1F53MJSQZJNw3fLyMsrNiKndXUYvwqVt RrZSUXoOddKkFkqnrVB1WwJYpCrCzZPwBYpsO5p8u8DduoTvZdpkntDxjMY6/iiP GeyiYbtHgShzQk61R7Q0q2MMn3dO4n9sGIhI/YAP8C3tyEdIzyIDqaMPFMizLRjT 1JofWAo1mTF8QyNo3/KxIevW7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBwkqSf oTdgrXr3+F0IZD6anovJMB8GA1UdIwQYMBaAFMVFJelwW9adYUJNvuewST9f1vCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFENS8zNDMzNjFFRUND OEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFwMWhRazItNTdCSlAxX1c4 S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVVWw2WEJiMXAxaFFrMi01N0JKUDFfVzhLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFENS8zNDMzNjFFRUNDOEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFw MWhRazItNTdCSlAxX1c4S1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMSjBQn/qzL3KB6q7Ie6LpwEVubS64cEsL/7yFlgKJSPDdq2/JIMuQ iR9cAEAqEhIlYCtK3BZrNdVL8MLYArSR+ZoLYiairyu6PMAk11MGWdlSXTeDiSjY uBH7Wdg28aTIOmICeh3Pb5lDZBH/GMtYfLPESHuJL9Tq3tUVnIn3bb8Se9RG18TM 6XkPinmWCOcy7Mhh/3Ezba4c1I103HDErO48Sg9ShFPQVcB+OrBsHz80SwB3I53Y y0AKmoDgx6cV+UpQdNmQVsCZWIV+FMWq1r5vZ/LzPWLuiIGTEdRQWXH7zqbujml+ OTilKiQlzWL2ZaWVa7O+ASt5F7k3WrFk -----END CERTIFICATE-----Generated at Sat May 31 17:24:49 2025 by rpki-client