$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft File: Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft (raw, json) Hash identifier: 1X9gDA9w1C3kx35wSzltlilh4I613xYkbXFTfkHK0X4= Subject key identifier: 09:04:97:F7:FF:C5:54:27:8D:86:48:8A:B9:2B:80:F6:4E:47:E8:32 Authority key identifier: 53:0F:CD:29:9E:77:5B:8A:CB:27:52:A0:3A:FA:A7:D1:81:E5:00:EE Certificate issuer: /CN=A913DC32/serialNumber=530FCD299E775B8ACB2752A03AFAA7D181E500EE Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft Manifest number: 2C Signing time: Sat 31 May 2025 07:18:42 +0000 Manifest this update: Sat 31 May 2025 07:18:42 +0000 Manifest next update: Sat 07 Jun 2025 07:18:42 +0000 Files and hashes: 1: Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl (hash: P1lpMUV50aBdjZ/XWRxfZciCkXD8nyMzXOuWn2EmAD0=) 2: 455B2534FD0811EF85ADED79C4F9AE02.roa (hash: EqPvfZWybFxDEzuqUOMumy7hGqKdVROQozF26OVvW/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DC32, serialNumber=530FCD299E775B8ACB2752A03AFAA7D181E500EE Validity Not Before: May 31 07:18:42 2025 GMT Not After : Jun 7 07:18:42 2025 GMT Subject: CN=683aad52-d934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:32:9e:8b:29:7c:77:6a:2e:14:36:35:93:de: 4f:16:6e:5c:ad:1e:6a:cd:3b:94:36:1a:49:d6:b4: fe:3f:cc:a8:41:8b:6b:fd:a4:1a:50:a8:3b:ed:d7: 2f:cf:c4:bf:3b:9c:9f:cb:41:2c:cd:30:36:1e:e1: b5:79:19:45:55:4e:de:68:0c:03:f7:51:0a:30:07: cb:eb:f0:d3:ae:3d:5f:39:48:88:6f:d3:5a:ec:8e: 39:d4:a5:18:75:33:89:70:9d:c1:5f:57:45:46:56: 83:c0:1d:75:73:c0:e1:c2:5f:d5:bc:43:20:54:8d: a6:d2:47:64:79:c7:ca:a0:22:ba:62:d3:a6:0c:d7: ac:1f:3f:c1:84:0d:24:36:34:f2:8f:b8:01:7d:05: 3e:1b:74:26:9a:ee:37:33:a7:4d:a5:23:77:7e:ed: 00:f9:db:25:80:2f:52:eb:97:4c:1d:a1:b4:35:a0: d7:d5:3c:21:ae:19:5d:20:dd:95:17:4d:f1:cf:d8: 41:bc:8b:6c:13:c6:14:47:e6:0c:00:89:86:3b:86: 11:e3:4c:52:66:5f:0a:04:f7:39:18:67:fe:50:3b: 05:20:9e:de:06:a8:8d:47:66:f6:32:f5:6a:5a:38: 0e:1f:d6:58:8e:74:fa:db:4e:72:c8:f1:f2:45:fa: b4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:04:97:F7:FF:C5:54:27:8D:86:48:8A:B9:2B:80:F6:4E:47:E8:32 X509v3 Authority Key Identifier: keyid:53:0F:CD:29:9E:77:5B:8A:CB:27:52:A0:3A:FA:A7:D1:81:E5:00:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:f5:27:3e:75:1d:76:d1:ec:a4:7b:00:d2:c6:74:ba:e5:70: af:5e:29:e6:e0:3a:23:7e:d6:1f:0e:5a:29:d9:63:94:66:81: 1c:dd:ec:07:7c:a4:21:40:d5:fa:d7:04:3a:fe:f1:54:b7:78: e9:f2:2c:72:68:f6:00:c5:40:1b:18:4b:09:bc:d5:64:8e:f8: d8:d9:20:14:09:bb:de:93:9a:ce:13:6c:54:b7:26:1a:7a:1f: 7a:38:97:76:4c:30:83:f7:e8:b9:9a:42:ed:0d:b4:62:1b:20: 8b:fc:ba:7b:34:83:d1:6b:fe:6c:b6:24:33:62:28:63:31:1e: 36:30:1a:7d:26:88:0b:52:bc:d4:78:79:92:ac:a5:46:82:f0: 61:ef:c8:16:ea:4d:dc:8a:da:83:5e:67:f5:50:ac:aa:5c:fc: 9b:39:2c:e6:c4:76:64:e4:3d:47:cc:38:fd:51:d0:ee:54:91: 15:01:cb:7f:1a:d7:8c:e2:2a:74:9a:e0:54:84:94:7d:67:3b: bd:94:11:6e:dd:7c:e2:fc:8a:60:63:b7:7e:b7:f0:04:cb:8f: 77:b8:56:c2:1a:fc:e6:9c:34:fe:1a:29:5a:c4:77:a3:d4:ed: 0a:89:37:ba:ce:b7:b2:12:70:c0:37:61:2b:95:53:ac:e4:f9: 89:d5:a7:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REMzMjExMC8GA1UEBRMoNTMwRkNEMjk5RTc3NUI4QUNCMjc1MkEwM0FGQUE3RDE4 MUU1MDBFRTAeFw0yNTA1MzEwNzE4NDJaFw0yNTA2MDcwNzE4NDJaMBgxFjAUBgNV BAMTDTY4M2FhZDUyLWQ5MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjMp6LKXx3ai4UNjWT3k8WblytHmrNO5Q2GknWtP4/zKhBi2v9pBpQqDvt1y/P xL87nJ/LQSzNMDYe4bV5GUVVTt5oDAP3UQowB8vr8NOuPV85SIhv01rsjjnUpRh1 M4lwncFfV0VGVoPAHXVzwOHCX9W8QyBUjabSR2R5x8qgIrpi06YM16wfP8GEDSQ2 NPKPuAF9BT4bdCaa7jczp02lI3d+7QD52yWAL1Lrl0wdobQ1oNfVPCGuGV0g3ZUX TfHP2EG8i2wTxhRH5gwAiYY7hhHjTFJmXwoE9zkYZ/5QOwUgnt4GqI1HZvYy9Wpa OA4f1liOdPrbTnLI8fJF+rS7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCQSX9//F VCeNhkiKuSuA9k5H6DIwHwYDVR0jBBgwFoAUUw/NKZ53W4rLJ1KgOvqn0YHlAO4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEQzMyLzg0MEExNkIwRkNG RDExRUZBREI4NjExNUM0RjlBRTAyL1V3X05LWjUzVzRyTEoxS2dPdnFuMFlIbEFP NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVXdfTktaNTNXNHJMSjFLZ092cW4wWUhsQU80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE QzMyLzg0MEExNkIwRkNGRDExRUZBREI4NjExNUM0RjlBRTAyL1V3X05LWjUzVzRy TEoxS2dPdnFuMFlIbEFPNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABT1Jz51HXbR7KR7ANLGdLrlcK9eKebgOiN+1h8OWinZY5RmgRzd7Ad8 pCFA1frXBDr+8VS3eOnyLHJo9gDFQBsYSwm81WSO+NjZIBQJu96Tms4TbFS3Jhp6 H3o4l3ZMMIP36LmaQu0NtGIbIIv8uns0g9Fr/my2JDNiKGMxHjYwGn0miAtSvNR4 eZKspUaC8GHvyBbqTdyK2oNeZ/VQrKpc/Js5LObEdmTkPUfMOP1R0O5UkRUBy38a 14ziKnSa4FSElH1nO72UEW7dfOL8imBjt3638ATLj3e4VsIa/OacNP4aKVrEd6PU 7QqJN7rOt7IScMA3YSuVU6zk+YnVp0E= -----END CERTIFICATE-----Generated at Sat May 31 16:55:06 2025 by rpki-client