$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft File: UxLzmab36w3c1RwDn4P3t6R6Xwk.mft (raw, json) Hash identifier: Km+2Wh9fLqQEA95/ltkljfZnBmumq/mzSZh+xhrDpeI= Subject key identifier: E1:EE:64:58:6E:C2:E9:8A:3B:03:A1:86:B9:31:91:53:57:C0:A6:EC Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Certificate serial: 34CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft Manifest number: 3439 Signing time: Sat 31 May 2025 15:20:21 +0000 Manifest this update: Sat 31 May 2025 15:20:21 +0000 Manifest next update: Sat 07 Jun 2025 15:20:21 +0000 Files and hashes: 1: UxLzmab36w3c1RwDn4P3t6R6Xwk.crl (hash: udQ4RYmNquQyhJXQX8+zpkNww/NRqXJPqxEqtB/HxPc=) 2: E48E2E94017211EBA18CC269C4F9AE02.roa (hash: ICLuCqdPid1RG8G/uczcAZrYY/Vhg9vDB0Y4ZuWrsgg=) 3: 95B5C59E2DCE11EEB652B16FC4F9AE02.roa (hash: esENVVA6EiNHoh8zYMrrGIlsPVgfxlInP1Q1Dqp1TX0=) 4: EB3FE1C61B6411ECAAB1D328C4F9AE02.roa (hash: vlPdQwiOxGdbOdhmlbrhpezVJ256bDBMeryFLzti+9k=) 5: 7350B2AE2BB011EEBF8C0962C4F9AE02.roa (hash: t0X2DtahA6cVGvL8LAxWIioK5JV3S/HBQuQOiXYnF58=) 6: 03C522BA8CF211ED8699F014C4F9AE02.roa (hash: osXWx1pbxHv+AmHj+bmzgWhkOOzEZkepu7gweinGAO4=) 7: E367308E8D8811EDB3C13D6CC4F9AE02.roa (hash: pxP+7JsX1QXgZ6389EUW7Rq0A265BP9eId8bGB02ABI=) 8: E474AF108D8811EDB3C13D6CC4F9AE02.roa (hash: hzE638zELYjKoWqOncVd2PWwcT0doUZBbmbjdlD3Egk=) 9: 8D6973CE77C311EE90D4BD46C4F9AE02.roa (hash: 3Qq37sSxACv5Ldn7kCrtNWP8w5ga3g9Ur/m7mESYzt4=) 10: 56C4FAF42D4511EAB70F247AC4F9AE02.roa (hash: 5OfOPHDKno3z0OXXcGhOFxPs0axjwDkS/h/HmudH3qQ=) 11: EF1D0466455311E98FA31F68C4F9AE02.roa (hash: OqgL79PVwss/L9YJSqF29Xvq2wNOU6UYyi3JyoLgqms=) 12: C2F17AB22DCE11EEA2884670C4F9AE02.roa (hash: V1fSCsWS5cdJM7voSc5ZTQaks8azUpLSc/ONX61tIJU=) 13: 2F20ECAE554211EF82D40732C4F9AE02.roa (hash: kXSKiPTBMMpV/v8BhM7mqRhZb0qkCrS5RGh8ixYaHOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13516 (0x34cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Validity Not Before: May 31 15:20:21 2025 GMT Not After : Jun 7 15:20:21 2025 GMT Subject: CN=683b1e35-3a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:60:f8:06:44:ac:15:4c:fb:fd:9e:71:71:94: 9d:cd:74:b9:c2:0a:c8:48:be:6a:64:b0:35:44:88: 08:03:f9:93:e7:c3:65:12:aa:dd:18:cd:ef:5d:bc: 28:01:fe:87:8c:a6:f8:fd:83:fc:b4:44:73:a0:8a: 70:7f:7b:9a:8c:8c:ce:4c:d2:f3:ad:f9:f3:8d:69: dc:65:49:4f:86:cf:cf:e0:6f:d3:36:49:36:7f:47: 5e:48:6a:bf:55:98:39:d7:e8:f3:67:ed:8b:62:ae: 9f:77:7d:16:90:86:bc:39:f2:00:8d:02:80:43:d7: 38:8b:38:ab:80:9e:d0:d2:d7:aa:40:4a:64:37:63: d2:94:30:26:cb:3e:80:5a:5c:b8:0b:32:fc:af:5c: 46:dd:6a:f6:49:8c:cd:34:a6:ff:46:db:46:90:46: 62:05:8a:82:b9:4e:e3:d2:bb:3d:13:6d:91:59:22: ae:12:52:47:6a:06:fe:ef:ed:16:86:b1:3f:66:df: 41:02:24:fd:fe:1c:d3:92:75:9e:85:40:dc:b6:6f: ab:ec:d7:f9:2a:79:0a:f5:6f:26:22:01:f8:10:c7: b7:2f:5a:51:66:23:67:0e:da:db:f7:94:7e:b5:3b: 18:15:f3:d4:d0:22:6f:db:a8:55:f3:f5:8f:22:f5: 70:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:EE:64:58:6E:C2:E9:8A:3B:03:A1:86:B9:31:91:53:57:C0:A6:EC X509v3 Authority Key Identifier: keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:b3:b2:09:17:e0:09:44:69:42:60:ff:17:b7:25:7c:c6:63: e9:62:e2:3a:9d:28:94:1c:db:35:76:e7:4b:98:f5:1b:70:bd: 7d:92:4c:6a:d1:cc:8c:6c:f3:bb:7b:4d:eb:c0:43:b3:62:33: 83:e7:29:cb:23:20:91:fa:45:b1:7b:ba:d4:6b:03:00:fd:b4: 69:3c:3c:46:b1:d3:ea:01:3e:ea:89:f2:78:f6:b6:10:5d:7b: 64:28:79:38:2d:41:bc:f9:91:2b:7a:1e:de:6c:69:71:23:d2: aa:b2:09:2d:65:f0:f2:91:f0:36:2c:13:3f:29:4c:09:ad:03: 8b:5b:89:5f:65:4a:e8:68:08:5c:cf:e7:b1:8e:7f:2e:47:5b: 7b:d6:b4:f2:51:dc:dd:72:12:dc:4c:e0:24:dc:0d:0e:7e:67: af:1b:5e:eb:6b:1c:39:6e:60:70:88:d8:20:1e:24:7d:42:5a: d6:b2:33:f0:0e:d1:3a:a9:fa:94:4d:df:b0:01:0e:f5:1c:7a: ab:ab:4d:b8:d5:59:bc:5e:13:28:ee:c9:78:52:a0:8b:04:4c: 15:94:d5:96:99:4d:e4:c9:64:52:3f:89:1c:35:79:51:aa:22: f2:1d:de:4a:57:df:d1:b4:73:7b:96:fa:a0:6e:28:ea:61:e5: 83:4f:a1:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJDN0ExMTAvBgNVBAUTKDUzMTJGMzk5QTZGN0VCMEREQ0Q1MUMwMzlGODNGN0I3 QTQ3QTVGMDkwHhcNMjUwNTMxMTUyMDIxWhcNMjUwNjA3MTUyMDIxWjAYMRYwFAYD VQQDEw02ODNiMWUzNS0zYTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmD4BkSsFUz7/Z5xcZSdzXS5wgrISL5qZLA1RIgIA/mT58NlEqrdGM3vXbwo Af6HjKb4/YP8tERzoIpwf3uajIzOTNLzrfnzjWncZUlPhs/P4G/TNkk2f0deSGq/ VZg51+jzZ+2LYq6fd30WkIa8OfIAjQKAQ9c4izirgJ7Q0teqQEpkN2PSlDAmyz6A Wly4CzL8r1xG3Wr2SYzNNKb/RttGkEZiBYqCuU7j0rs9E22RWSKuElJHagb+7+0W hrE/Zt9BAiT9/hzTknWehUDctm+r7Nf5KnkK9W8mIgH4EMe3L1pRZiNnDtrb95R+ tTsYFfPU0CJv26hV8/WPIvVwuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHuZFhu wumKOwOhhrkxkVNXwKbsMB8GA1UdIwQYMBaAFFMS85mm9+sN3NUcA5+D97ekel8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkM3QS80QzUyOEY3ODQ1 MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3M2MxUndEbjRQM3Q2UjZY d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4THptYWIzNnczYzFSd0RuNFAzdDZSNlh3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkM3QS80QzUyOEY3ODQ1MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3 M2MxUndEbjRQM3Q2UjZYd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCms7IJF+AJRGlCYP8XtyV8xmPpYuI6nSiUHNs1dudLmPUbcL19kkxq 0cyMbPO7e03rwEOzYjOD5ynLIyCR+kWxe7rUawMA/bRpPDxGsdPqAT7qifJ49rYQ XXtkKHk4LUG8+ZEreh7ebGlxI9KqsgktZfDykfA2LBM/KUwJrQOLW4lfZUroaAhc z+exjn8uR1t71rTyUdzdchLcTOAk3A0OfmevG17raxw5bmBwiNggHiR9QlrWsjPw DtE6qfqUTd+wAQ71HHqrq0241Vm8XhMo7sl4UqCLBEwVlNWWmU3kyWRSP4kcNXlR qiLyHd5KV9/RtHN7lvqgbijqYeWDT6EK -----END CERTIFICATE-----Generated at Sat May 31 16:41:56 2025 by rpki-client