$ rpki-client -vvf rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft File: uXp_AVpzYHTfOERcmAdDeCGdKZU.mft (raw, json) Hash identifier: IhS3S+nlATWmzCfkn84cSSfwc8s6KyGVOffzD18R6ak= Subject key identifier: 98:9D:30:71:59:E8:52:44:5A:21:86:E7:97:29:9B:EA:AC:9C:66:9D Authority key identifier: B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95 Certificate issuer: /CN=A91320D4/serialNumber=B97A7F015A736074DF38445C98074378219D2995 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft Manifest number: FF Signing time: Sat 31 May 2025 04:47:34 +0000 Manifest this update: Sat 31 May 2025 04:47:34 +0000 Manifest next update: Sat 07 Jun 2025 04:47:34 +0000 Files and hashes: 1: uXp_AVpzYHTfOERcmAdDeCGdKZU.crl (hash: KHstOWHwOvhMfP/iMZKXXHqAz/RquqT5vxvANoO83xw=) 2: BAB65090BD7811EEB634A117C4F9AE02.roa (hash: rOfi7pLc2YXhQ9Pw2aUr9rz0+D/rY6Ijcu5KC1k/f/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91320D4, serialNumber=B97A7F015A736074DF38445C98074378219D2995 Validity Not Before: May 31 04:47:34 2025 GMT Not After : Jun 7 04:47:34 2025 GMT Subject: CN=683a89e6-0759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fa:c1:3e:7c:86:96:fe:38:aa:f6:11:df:58: 25:57:82:c4:86:2d:7a:65:ea:4b:34:2c:4e:2f:dc: c9:ea:e0:de:a8:e9:53:b3:0a:5e:cf:34:1d:44:b4: 00:4d:60:f2:7c:05:1c:da:22:f1:be:24:6a:f9:aa: cd:ea:07:32:52:f3:e5:ce:cc:38:a8:9c:8e:ae:36: c4:e3:27:eb:dd:8a:74:35:b2:c7:c5:22:4b:86:5c: 34:ef:fa:f4:11:c3:56:dc:c9:f3:45:63:6d:20:54: ca:ff:83:eb:aa:b0:a6:af:96:1e:20:1e:e0:2f:b5: f5:b5:0e:bd:12:4c:a4:70:b1:54:99:ec:42:97:e0: 61:30:b7:48:8f:ec:46:7b:8d:5e:02:44:bd:cf:b5: b8:02:d3:d2:78:04:8b:4d:3d:63:44:93:ca:d9:ff: 83:48:41:6a:a2:14:8a:3b:25:44:9f:0e:bd:e2:1e: ef:43:d7:41:74:e3:c6:d1:83:cb:51:8c:0f:7a:bf: fa:84:88:11:db:72:55:4b:9b:4a:70:7c:c6:94:9d: fc:0b:52:c6:7a:9e:c9:b7:a5:c0:fe:a9:cb:f9:1e: 94:d0:41:4e:eb:d2:29:04:27:2f:38:07:e4:92:42: f8:8a:51:86:ee:c1:5a:39:ad:3b:dc:2d:92:77:9b: b8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9D:30:71:59:E8:52:44:5A:21:86:E7:97:29:9B:EA:AC:9C:66:9D X509v3 Authority Key Identifier: keyid:B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:27:a8:fa:ec:c5:11:1e:97:f9:0f:31:cb:99:a4:56:db:12: 49:28:26:e9:74:47:41:5d:3d:16:ec:27:73:ec:97:f9:d6:f0: 93:fe:78:bb:e4:b8:bc:f8:ef:e9:0a:08:ce:79:79:b8:a9:92: 0b:31:3b:39:cb:9c:8e:47:2a:ee:4b:94:a3:a7:7e:04:19:d6: 66:0b:53:27:67:d3:26:3f:97:c1:84:4a:82:69:f3:e8:7d:73: a9:b2:44:f9:ca:79:67:20:43:df:d4:ac:2b:f0:77:53:e3:8b: 07:62:96:8b:8a:34:85:01:51:2f:49:3a:6e:25:d4:17:75:0e: 3e:20:e4:a5:3a:8d:5e:4e:ef:7b:5c:17:c9:bd:65:75:36:38: c9:2c:3c:e8:83:d1:9d:cb:93:ad:6e:47:b9:e0:3f:f2:f1:6c: 4d:2b:c4:70:22:94:87:0a:20:fe:63:e9:f0:41:00:ff:0c:b3: 13:43:e8:8c:c6:c1:8b:c1:6f:9e:3e:f4:22:18:7e:65:89:a0: b8:01:89:a3:8a:75:1e:78:d3:60:d3:05:fe:1c:30:10:5a:ad: ad:5d:16:ca:c5:3e:8e:1f:57:c2:51:21:5e:ad:01:cc:16:a2: d4:10:70:4f:b3:10:07:f9:1f:d4:b6:6a:24:18:05:ed:73:34: ae:da:fb:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzIwRDQxMTAvBgNVBAUTKEI5N0E3RjAxNUE3MzYwNzRERjM4NDQ1Qzk4MDc0Mzc4 MjE5RDI5OTUwHhcNMjUwNTMxMDQ0NzM0WhcNMjUwNjA3MDQ0NzM0WjAYMRYwFAYD VQQDEw02ODNhODllNi0wNzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvrBPnyGlv44qvYR31glV4LEhi16ZepLNCxOL9zJ6uDeqOlTswpezzQdRLQA TWDyfAUc2iLxviRq+arN6gcyUvPlzsw4qJyOrjbE4yfr3Yp0NbLHxSJLhlw07/r0 EcNW3MnzRWNtIFTK/4PrqrCmr5YeIB7gL7X1tQ69EkykcLFUmexCl+BhMLdIj+xG e41eAkS9z7W4AtPSeASLTT1jRJPK2f+DSEFqohSKOyVEnw694h7vQ9dBdOPG0YPL UYwPer/6hIgR23JVS5tKcHzGlJ38C1LGep7Jt6XA/qnL+R6U0EFO69IpBCcvOAfk kkL4ilGG7sFaOa073C2Sd5u4ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJidMHFZ 6FJEWiGG55cpm+qsnGadMB8GA1UdIwQYMBaAFLl6fwFac2B03zhEXJgHQ3ghnSmV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjBENC8wRTNGMEM2NkJD MTYxMUVFQjkwNTlDODZDNEY5QUUwMi91WHBfQVZwellIVGZPRVJjbUFkRGVDR2RL WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYcF9BVnB6WUhUZk9FUmNtQWREZUNHZEtaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjBENC8wRTNGMEM2NkJDMTYxMUVFQjkwNTlDODZDNEY5QUUwMi91WHBfQVZwellI VGZPRVJjbUFkRGVDR2RLWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKJ6j67MURHpf5DzHLmaRW2xJJKCbpdEdBXT0W7Cdz7Jf51vCT/ni7 5Li8+O/pCgjOeXm4qZILMTs5y5yORyruS5Sjp34EGdZmC1MnZ9MmP5fBhEqCafPo fXOpskT5ynlnIEPf1Kwr8HdT44sHYpaLijSFAVEvSTpuJdQXdQ4+IOSlOo1eTu97 XBfJvWV1NjjJLDzog9Gdy5Otbke54D/y8WxNK8RwIpSHCiD+Y+nwQQD/DLMTQ+iM xsGLwW+ePvQiGH5liaC4AYmjinUeeNNg0wX+HDAQWq2tXRbKxT6OH1fCUSFerQHM FqLUEHBPsxAH+R/UtmokGAXtczSu2vuY -----END CERTIFICATE-----Generated at Sat May 31 16:55:07 2025 by rpki-client