$ rpki-client -vvf rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft File: UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft (raw, json) Hash identifier: dKMYy0krV5zq5w9ZvCX77XG3ONUXdgWzObLzkqmHbXY= Subject key identifier: 98:93:A3:AD:CD:96:1B:CB:F3:50:A8:CB:BF:8C:2A:FC:84:DB:D0:47 Authority key identifier: 50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1 Certificate issuer: /CN=A9130803/serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1 Certificate serial: 0BEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft Manifest number: 0BE5 Signing time: Fri 30 May 2025 18:58:26 +0000 Manifest this update: Fri 30 May 2025 18:58:25 +0000 Manifest next update: Fri 06 Jun 2025 18:58:25 +0000 Files and hashes: 1: UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl (hash: F9OTanWYwMQcO9c6UseJsdLH9Voz/f6+KNNLxQOpY+o=) 2: 8DC4FE4C175F11EAB3DB1F61C4F9AE02.roa (hash: 44EICOrdULHxxmbJqfrzipdifGEHemkJ/PfPJGyHNtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3052 (0xbec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130803, serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1 Validity Not Before: May 30 18:58:25 2025 GMT Not After : Jun 6 18:58:25 2025 GMT Subject: CN=6839ffd2-2b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9a:29:8a:33:ce:be:28:54:ad:b6:1b:3e:6e: 15:5e:4f:75:12:b6:23:3f:20:7b:4a:90:df:f4:ef: 44:aa:d6:bd:56:22:c4:a4:91:36:d6:35:7b:f9:18: b3:2d:ea:a0:21:bc:bf:19:fb:16:55:58:5a:0b:8c: be:27:cb:a6:23:1b:e8:1c:9d:f4:ec:4b:2b:21:ef: 4f:29:03:2f:3b:fd:fe:43:f6:97:c7:e8:3e:de:d3: 86:06:37:73:fa:47:cc:c3:91:32:ab:c2:1b:e7:e0: 0e:46:be:01:99:b6:3f:e6:3a:4c:9c:df:df:c2:47: 99:a5:e3:83:5a:c5:32:51:d1:d8:20:7a:4e:3f:e1: 0f:1d:68:5e:44:d9:74:40:8c:cb:bd:11:5a:3d:da: e2:25:c8:e5:a6:57:4d:73:2d:0a:03:78:76:b4:d2: 3a:ff:75:30:ce:82:7d:f4:9b:1f:82:32:16:73:72: 9f:92:d8:a3:ed:e1:13:fc:f2:95:f4:28:8c:bd:31: 94:66:ff:ef:a6:d8:2b:fc:84:01:9e:32:f5:53:c6: f5:9e:07:20:3f:16:76:a3:2f:af:a1:07:a0:88:f1: 14:ab:cd:f4:ed:30:78:d1:a6:fd:8d:2c:78:25:7a: 92:55:f9:b1:d5:7d:29:6b:35:ee:5a:aa:79:02:ae: c8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:93:A3:AD:CD:96:1B:CB:F3:50:A8:CB:BF:8C:2A:FC:84:DB:D0:47 X509v3 Authority Key Identifier: keyid:50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ec:d2:fb:83:f5:4a:93:64:93:f7:65:1d:e2:d0:6c:e9:98: a8:46:9f:a4:c6:c2:f9:d0:1d:54:20:6c:9a:40:b3:af:ed:62: a4:6f:38:36:38:84:65:26:77:2c:f9:96:98:a5:01:bb:a3:2d: f3:cd:3b:3b:8e:38:41:46:fa:17:c3:87:3c:7b:fc:39:6f:90: 83:82:9c:9b:ee:d8:66:85:8a:10:b8:74:11:38:8c:20:91:d9: 35:35:fc:9f:ea:10:c6:5f:89:6d:cc:6d:f2:ca:c2:6d:b3:e3: e8:a1:aa:da:b8:ae:34:80:ae:33:91:4b:10:33:59:9e:3b:12: 52:5b:7d:c3:61:05:a3:54:37:4a:61:5e:c2:3c:c8:3e:1c:75: 1b:d7:d4:a0:0f:c2:fa:20:c9:9d:fe:d0:2c:30:da:6e:26:44: 98:31:5a:50:a4:75:e0:b9:8c:e2:dc:5f:96:a4:cf:4d:fd:c2: 34:5a:f6:2d:09:77:ad:ba:bf:a3:55:cc:41:30:c1:95:64:bf: 11:2d:ec:91:4c:4d:4e:24:e3:10:f5:9b:ea:c6:0d:22:a6:4f: a3:17:65:79:df:e9:08:9c:be:5b:88:7b:bd:21:7a:72:a0:ce: 5e:e2:38:96:61:b5:e0:b7:2a:8c:2b:61:f5:4b:9a:9b:e6:ef: ff:4b:36:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4MDMxMTAvBgNVBAUTKDUwN0EwRUFGNDc1MUFDQjUyQzJDN0ZCRjk4MUQxMUJD RTgzNThCQTEwHhcNMjUwNTMwMTg1ODI1WhcNMjUwNjA2MTg1ODI1WjAYMRYwFAYD VQQDEw02ODM5ZmZkMi0yYjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmJopijPOvihUrbYbPm4VXk91ErYjPyB7SpDf9O9Eqta9ViLEpJE21jV7+Riz LeqgIby/GfsWVVhaC4y+J8umIxvoHJ307EsrIe9PKQMvO/3+Q/aXx+g+3tOGBjdz +kfMw5Eyq8Ib5+AORr4BmbY/5jpMnN/fwkeZpeODWsUyUdHYIHpOP+EPHWheRNl0 QIzLvRFaPdriJcjlpldNcy0KA3h2tNI6/3UwzoJ99JsfgjIWc3Kfktij7eET/PKV 9CiMvTGUZv/vptgr/IQBnjL1U8b1ngcgPxZ2oy+voQegiPEUq8307TB40ab9jSx4 JXqSVfmx1X0pazXuWqp5Aq7I8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiTo63N lhvL81Coy7+MKvyE29BHMB8GA1UdIwQYMBaAFFB6Dq9HUay1LCx/v5gdEbzoNYuh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDgwMy9EODZBQkYwMDE3 NUUxMUVBQThBMzMyNjBDNEY5QUUwMi9VSG9PcjBkUnJMVXNMSC1fbUIwUnZPZzFp NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIb09yMGRSckxVc0xILV9tQjBSdk9nMWk2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDgwMy9EODZBQkYwMDE3NUUxMUVBQThBMzMyNjBDNEY5QUUwMi9VSG9PcjBkUnJM VXNMSC1fbUIwUnZPZzFpNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA87NL7g/VKk2ST92Ud4tBs6ZioRp+kxsL50B1UIGyaQLOv7WKkbzg2 OIRlJncs+ZaYpQG7oy3zzTs7jjhBRvoXw4c8e/w5b5CDgpyb7thmhYoQuHQROIwg kdk1Nfyf6hDGX4ltzG3yysJts+PooarauK40gK4zkUsQM1meOxJSW33DYQWjVDdK YV7CPMg+HHUb19SgD8L6IMmd/tAsMNpuJkSYMVpQpHXguYzi3F+WpM9N/cI0WvYt CXetur+jVcxBMMGVZL8RLeyRTE1OJOMQ9Zvqxg0ipk+jF2V53+kInL5biHu9IXpy oM5e4jiWYbXgtyqMK2H1S5qb5u//SzZ3 -----END CERTIFICATE-----Generated at Sat May 31 17:47:19 2025 by rpki-client