$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft File: uRokzwRxERfIw7omSjM5Xad_kbQ.mft (raw, json) Hash identifier: fRnZuC2+ALYZwImmpWEpFkylnRXOHqnWgQX4WVE6f24= Subject key identifier: 62:E3:BD:4A:B9:4C:9F:00:42:11:5E:36:7E:53:B0:67:F0:31:34:0E Authority key identifier: B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4 Certificate issuer: /CN=A9133BB0/serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft Manifest number: 70 Signing time: Thu 13 Mar 2025 04:51:31 +0000 Manifest this update: Thu 13 Mar 2025 04:51:31 +0000 Manifest next update: Thu 20 Mar 2025 04:51:31 +0000 Files and hashes: 1: uRokzwRxERfIw7omSjM5Xad_kbQ.crl (hash: gUrlUxK2i4bHt65e1yVdf/zKdFP44Fr72LIOCQehv8Q=) 2: 27995372566911EF9D53B517C4F9AE02.roa (hash: xq/tIHChRUQ/SVgEnorDvzsCIu9u4UcNJR+//ggbghs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 04:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0 Validity Not Before: Mar 13 04:51:31 2025 GMT Not After : Mar 20 04:51:31 2025 GMT Subject: CN=67d26453-4e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e2:d3:eb:20:37:08:db:e7:30:ed:ca:ea:84: e4:4e:fb:fd:75:80:52:ec:e6:d4:0b:80:d3:6a:c3: 3f:cf:f0:1b:6e:7b:0d:ac:f6:a4:04:1e:b5:95:92: a3:79:02:6f:8b:12:7a:3b:1b:a3:47:f3:69:e1:83: 1d:5e:29:63:7d:53:c4:e2:16:22:0d:03:7a:75:5a: 7e:e2:a7:c4:3d:8d:37:2e:79:88:ba:a2:bd:bd:1e: 07:76:00:77:1f:26:41:53:0c:af:46:4a:cd:61:45: 01:f1:8d:ac:e8:9d:55:8c:9d:88:88:76:0f:31:28: 78:1b:ab:be:78:45:67:1a:20:ea:94:d4:f3:fa:63: 27:c3:0e:c1:09:6c:b8:1c:56:ba:b0:c1:58:b8:8a: 5f:46:9a:d1:2e:7a:2f:3b:8b:2a:d0:74:75:fe:10: 2b:3d:63:67:59:48:d7:fe:2a:6b:22:f5:74:b1:14: a8:ac:2a:26:76:dd:7b:f7:c7:31:1f:fb:5f:2c:65: bd:b0:64:3e:43:d9:45:e5:aa:29:b3:35:a1:77:88: ce:af:74:a6:13:67:e3:c5:3a:88:62:1d:bf:ad:5d: c9:4c:4a:20:c4:15:84:ad:c4:d3:4c:5f:dd:a6:11: e3:d0:58:d9:6f:b2:bd:67:07:3c:25:de:b3:b9:60: 1d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E3:BD:4A:B9:4C:9F:00:42:11:5E:36:7E:53:B0:67:F0:31:34:0E X509v3 Authority Key Identifier: keyid:B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:30:5b:5d:22:59:30:a1:a3:7e:6f:f9:b8:d7:c4:2c:9a:be: 3e:57:5e:59:38:18:98:47:e0:b7:54:6d:69:c0:98:11:fa:14: 9d:13:a2:6e:93:1c:e0:81:18:58:c6:0f:02:3f:60:25:1c:1b: 8a:86:70:ef:2b:00:41:bd:b1:33:25:fe:7d:6e:15:a7:c9:ea: 1a:81:35:f2:77:ea:03:cf:0a:77:70:e7:b8:08:90:f2:4d:81: 06:7b:1d:39:76:79:73:e1:b5:dc:ab:81:81:48:1a:36:cd:14: 58:f5:ec:01:62:27:ae:e7:8d:e5:46:e9:bb:40:85:f1:ce:8b: 01:a9:41:54:2a:73:6d:27:59:6a:4c:03:9e:37:70:db:96:58: f6:f1:b0:65:71:f3:59:11:e4:dc:17:8a:70:2e:11:0e:0d:79: ac:0e:d6:6a:c4:eb:2e:e8:2d:c7:cb:79:4f:c1:2e:f0:90:aa: 90:75:1e:1f:cd:53:57:90:42:7d:52:d4:2d:15:d8:fb:e2:69: d5:86:28:4a:26:f3:51:e6:fa:a9:de:ca:ec:59:39:19:61:c8: 10:97:9e:28:90:ed:8a:77:af:96:56:c4:74:af:26:49:4d:03: a1:fd:4f:52:90:f3:7f:39:ca:8b:09:f1:a5:ec:4d:3a:30:c5: a4:00:3b:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz M0JCMDExMC8GA1UEBRMoQjkxQTI0Q0YwNDcxMTExN0M4QzNCQTI2NEEzMzM5NURB NzdGOTFCNDAeFw0yNTAzMTMwNDUxMzFaFw0yNTAzMjAwNDUxMzFaMBgxFjAUBgNV BAMTDTY3ZDI2NDUzLTRlOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDj4tPrIDcI2+cw7crqhORO+/11gFLs5tQLgNNqwz/P8Btuew2s9qQEHrWVkqN5 Am+LEno7G6NH82nhgx1eKWN9U8TiFiINA3p1Wn7ip8Q9jTcueYi6or29Hgd2AHcf JkFTDK9GSs1hRQHxjazonVWMnYiIdg8xKHgbq754RWcaIOqU1PP6YyfDDsEJbLgc VrqwwVi4il9GmtEuei87iyrQdHX+ECs9Y2dZSNf+Kmsi9XSxFKisKiZ23Xv3xzEf +18sZb2wZD5D2UXlqimzNaF3iM6vdKYTZ+PFOohiHb+tXclMSiDEFYStxNNMX92m EePQWNlvsr1nBzwl3rO5YB2xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYuO9SrlM nwBCEV42flOwZ/AxNA4wHwYDVR0jBBgwFoAUuRokzwRxERfIw7omSjM5Xad/kbQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzQkIwL0I4NjVCMzdFNTY2 ODExRUY4RTZBNzc1REM0RjlBRTAyL3VSb2t6d1J4RVJmSXc3b21Tak01WGFkX2ti US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdVJva3p3UnhFUmZJdzdvbVNqTTVYYWRfa2JRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz QkIwL0I4NjVCMzdFNTY2ODExRUY4RTZBNzc1REM0RjlBRTAyL3VSb2t6d1J4RVJm SXc3b21Tak01WGFkX2tiUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIIwW10iWTCho35v+bjXxCyavj5XXlk4GJhH4LdUbWnAmBH6FJ0Tom6T HOCBGFjGDwI/YCUcG4qGcO8rAEG9sTMl/n1uFafJ6hqBNfJ36gPPCndw57gIkPJN gQZ7HTl2eXPhtdyrgYFIGjbNFFj17AFiJ67njeVG6btAhfHOiwGpQVQqc20nWWpM A543cNuWWPbxsGVx81kR5NwXinAuEQ4NeawO1mrE6y7oLcfLeU/BLvCQqpB1Hh/N U1eQQn1S1C0V2PviadWGKEom81Hm+qneyuxZORlhyBCXniiQ7Yp3r5ZWxHSvJklN A6H9T1KQ8385yosJ8aXsTTowxaQAO4g= -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:45 2025 by rpki-client