$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft File: UylwC03drZ4_zcMnP00Y0-MEXcA.mft (raw, json) Hash identifier: 4dY68bISrHREyyHzBbHuy3CLCzPrNguNjjav1viWSDY= Subject key identifier: F9:71:89:11:28:09:69:85:58:7A:CB:CC:C2:30:F3:B4:6B:5B:E9:E0 Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 Certificate issuer: /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Certificate serial: 08CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft Manifest number: 191C Signing time: Fri 30 May 2025 17:32:12 +0000 Manifest this update: Fri 30 May 2025 17:32:12 +0000 Manifest next update: Fri 06 Jun 2025 17:32:12 +0000 Files and hashes: 1: UylwC03drZ4_zcMnP00Y0-MEXcA.crl (hash: F1HzRIye4ZFhTDDTZhObLE+G/whDVUywsXv38Bb0k5w=) 2: 31414558B0D511EFB17B942FC4F9AE02.roa (hash: mtUL6kpWcJ0s0WYAq9l26D9HLDGvLgZ5GCmZqFRcyjs=) 3: D9B56C8A7AB211EB99DAFE83C4F9AE02.roa (hash: F8NUI5IF7FjRVcKD/tqhJ5Q4QNzh0QGai7XMrRHjkus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2254 (0x8ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Validity Not Before: May 30 17:32:12 2025 GMT Not After : Jun 6 17:32:12 2025 GMT Subject: CN=6839eb9c-f027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:90:9f:9f:52:a7:4a:60:c2:d0:dd:e2:54:14: 79:d9:68:0f:50:96:a9:de:63:97:85:05:5e:7d:00: 8e:3f:89:d4:bd:3f:41:21:35:1f:c5:d1:15:27:09: 82:69:32:1c:aa:75:fe:98:89:07:4c:82:9e:c0:a4: 6f:79:6d:31:54:c0:78:15:b9:c7:ad:cf:9d:fd:f2: ab:e3:31:07:67:f0:93:0b:64:13:25:4f:e2:5b:ec: 6c:86:b4:8c:68:8f:4e:c0:49:8d:c9:29:60:e5:9c: 33:06:08:e9:38:ae:66:00:cb:7b:67:05:2f:ff:e7: 9b:5c:ec:db:58:7e:a0:3f:8b:fb:a4:e6:28:f3:b1: 3a:f8:47:76:85:11:f5:1f:b0:cc:06:f3:4a:08:45: 6c:0b:69:89:52:b1:ac:ae:9e:30:bd:7f:c4:2f:df: 14:90:88:e7:ae:b9:c7:15:40:5b:a7:a3:30:bd:7c: 38:d7:21:65:89:b2:45:ab:5b:c2:2c:a4:86:af:df: 1a:9b:24:5b:fd:02:e0:3f:31:bd:e1:2c:bb:87:d3: 95:fb:7d:4f:0b:a4:b4:71:99:39:69:19:ca:10:5d: cc:17:6f:0e:f3:2d:99:cb:95:59:56:9f:75:aa:eb: 76:bb:a9:76:5e:d6:15:41:66:8f:49:ac:6a:90:dd: 97:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:71:89:11:28:09:69:85:58:7A:CB:CC:C2:30:F3:B4:6B:5B:E9:E0 X509v3 Authority Key Identifier: keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:d9:af:7e:f4:d2:46:6d:a3:01:99:fc:dd:49:90:d6:f1:97: fe:ff:57:d6:66:4f:52:20:bc:26:f1:fb:5a:e6:5a:22:de:b7: e3:be:d3:d6:56:4a:c9:d3:6b:3d:f9:0e:ac:84:a8:c3:11:8d: e7:95:2d:35:33:05:a8:2d:36:4c:a2:4e:2b:af:da:c5:b2:a1: bd:39:61:de:f0:77:3a:46:7b:de:21:81:9e:54:0a:79:e6:f0: 8e:ee:34:5f:53:84:18:1a:5c:0b:7f:33:a1:a2:76:57:23:4b: 24:54:cb:c4:1e:a7:f6:21:4f:4a:a1:93:bf:78:e4:25:ab:84: de:ac:e6:ec:cd:7c:d9:ab:e3:d1:eb:ed:b3:e8:86:6c:93:63: dd:8d:f1:ea:24:74:6d:de:93:f3:9e:e5:3d:46:c0:d0:08:6b: fc:f5:c9:62:67:42:17:a4:31:61:ef:c2:cf:31:5a:33:60:65: 1f:13:e4:22:c9:df:ff:b9:83:c4:8e:10:8b:bd:6a:43:61:ae: 8a:c2:21:d3:a6:cf:e5:a8:34:fd:38:bc:5f:0a:ea:af:7f:35: 2a:5e:ab:42:ee:81:2c:54:47:03:23:26:fb:1e:e8:1f:c0:ae: fc:66:f2:ce:de:e8:85:2c:90:7b:db:cc:ff:d8:34:f8:c0:07: 09:37:90:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKDUzMjk3MDBCNEREREFEOUUzRkNEQzMyNzNGNEQxOEQz RTMwNDVEQzAwHhcNMjUwNTMwMTczMjEyWhcNMjUwNjA2MTczMjEyWjAYMRYwFAYD VQQDEw02ODM5ZWI5Yy1mMDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZCfn1KnSmDC0N3iVBR52WgPUJap3mOXhQVefQCOP4nUvT9BITUfxdEVJwmC aTIcqnX+mIkHTIKewKRveW0xVMB4FbnHrc+d/fKr4zEHZ/CTC2QTJU/iW+xshrSM aI9OwEmNySlg5ZwzBgjpOK5mAMt7ZwUv/+ebXOzbWH6gP4v7pOYo87E6+Ed2hRH1 H7DMBvNKCEVsC2mJUrGsrp4wvX/EL98UkIjnrrnHFUBbp6MwvXw41yFlibJFq1vC LKSGr98amyRb/QLgPzG94Sy7h9OV+31PC6S0cZk5aRnKEF3MF28O8y2Zy5VZVp91 qut2u6l2XtYVQWaPSaxqkN2XJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlxiREo CWmFWHrLzMIw87RrW+ngMB8GA1UdIwQYMBaAFFMpcAtN3a2eP83DJz9NGNPjBF3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJaNF96Y01uUDAwWTAtTUVY Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5bHdDMDNkclo0X3pjTW5QMDBZMC1NRVhjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJa NF96Y01uUDAwWTAtTUVYY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl2a9+9NJGbaMBmfzdSZDW8Zf+/1fWZk9SILwm8fta5loi3rfjvtPW VkrJ02s9+Q6shKjDEY3nlS01MwWoLTZMok4rr9rFsqG9OWHe8Hc6RnveIYGeVAp5 5vCO7jRfU4QYGlwLfzOhonZXI0skVMvEHqf2IU9KoZO/eOQlq4TerObszXzZq+PR 6+2z6IZsk2PdjfHqJHRt3pPznuU9RsDQCGv89cliZ0IXpDFh78LPMVozYGUfE+Qi yd//uYPEjhCLvWpDYa6KwiHTps/lqDT9OLxfCuqvfzUqXqtC7oEsVEcDIyb7Hugf wK78ZvLO3uiFLJB728z/2DT4wAcJN5DE -----END CERTIFICATE-----Generated at Sat May 31 17:31:53 2025 by rpki-client