$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft File: R_UMlYv5z1RcYBresE-KBeEB2aU.mft (raw, json) Hash identifier: cwNLbOJvucfj4zGG0xLqPcPG+tXUYkILN2F5k7LK/UY= Subject key identifier: D7:9B:04:E2:A0:20:6C:E6:B7:76:6B:D8:B3:4A:EF:0D:34:DC:8E:E5 Authority key identifier: 47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5 Certificate issuer: /CN=A9153490/serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft Manifest number: C7 Signing time: Thu 13 Mar 2025 03:55:19 +0000 Manifest this update: Thu 13 Mar 2025 03:55:19 +0000 Manifest next update: Thu 20 Mar 2025 03:55:19 +0000 Files and hashes: 1: R_UMlYv5z1RcYBresE-KBeEB2aU.crl (hash: 98C0cooPzo4s9k5YjRceIGT0Uq8XD2dyLrzvL2CLe0A=) 2: 0F778EDCEBB411EE9D86095BC4F9AE02.roa (hash: CylyyzwIG08L70kRCG76cWxCrDSIPb2MuuRknQBCs64=) 3: 0F0A0C72EBB411EE9D86095BC4F9AE02.roa (hash: SQ0tWzqj2x2vx8fy9K7AJ1cebETDa6gFcypKPROA2yk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 03:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153490 Validity Not Before: Mar 13 03:55:19 2025 GMT Not After : Mar 20 03:55:19 2025 GMT Subject: CN=67d25727-f9c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cf:ea:3a:8a:62:e5:ac:69:0e:20:6e:e4:29: 7a:6c:42:6b:de:0f:2f:ce:55:1b:20:fe:6c:3d:25: 0e:72:b3:6b:26:7b:5c:41:44:2c:e1:59:57:1f:4a: 0b:12:0a:42:7a:e3:b8:90:d3:2d:50:70:28:c6:42: 07:1d:e8:f3:69:5a:8c:99:46:88:f8:4a:14:2e:0a: bf:31:a5:22:f5:fe:b8:27:6f:ea:76:2c:63:55:18: ce:cf:86:3b:5b:3e:06:9f:b1:f3:d2:8c:74:f0:a0: 9d:a1:bf:42:26:14:f9:71:28:3d:d3:57:59:c6:d1: a3:fb:11:2f:cb:5d:2f:f5:29:3e:06:a7:43:da:95: c6:07:de:d8:27:43:e3:87:53:ab:fb:8e:f6:9c:4e: 1c:97:44:d9:57:b2:3f:62:a6:7b:4a:13:3f:e5:6f: ce:cc:93:ab:a1:6f:7f:50:b4:34:da:82:0a:72:55: 43:d8:44:e9:dc:f3:7d:f5:3c:04:29:29:f2:e1:84: b7:cc:60:de:6a:70:6b:91:5e:79:c2:43:56:f0:ee: ef:bd:af:c1:55:63:21:81:ea:04:8d:d2:bb:fd:bd: 20:08:2b:3f:31:43:d2:5c:08:8e:2c:66:14:6a:a6: c0:ca:40:d8:3f:e7:25:2e:06:28:63:4a:c3:71:0c: 0f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9B:04:E2:A0:20:6C:E6:B7:76:6B:D8:B3:4A:EF:0D:34:DC:8E:E5 X509v3 Authority Key Identifier: keyid:47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:cf:2f:77:2b:b7:4c:9a:49:52:b9:79:94:7a:3f:6c:cd:97: bd:f1:f3:ac:dc:b0:33:67:5c:ae:f4:bd:c9:c1:33:90:4e:95: fc:e3:c4:a7:c4:9a:23:d7:88:9c:c5:41:d6:73:2b:ce:cc:83: 9d:58:6a:68:2f:42:bf:78:74:fd:fe:f3:da:d3:6b:3a:67:48: dd:2e:c1:76:6c:0c:75:85:a7:7d:69:68:9a:c9:7c:a9:4d:af: 13:6b:37:78:e1:fa:73:85:ae:9c:64:9c:32:9c:5a:f2:93:6a: 64:88:f1:e1:cc:4b:4e:99:b0:0b:95:ad:a6:c0:79:08:d5:62: ec:02:24:89:1e:7d:37:07:12:b7:69:b2:04:4c:26:6f:3c:b5: 6d:6b:46:2c:13:b0:41:af:77:23:e2:c7:10:cb:e1:4d:e3:b9: 7f:f1:24:bc:49:72:e9:64:61:42:c9:0c:2a:e0:e3:38:06:db: f8:f7:6f:a4:a1:0c:19:e3:80:22:1c:b1:bd:a9:08:64:4e:0f: 0e:d1:3c:74:97:2f:8a:92:c2:27:e5:37:0c:27:09:74:33:8e: ec:78:fb:78:3e:26:9b:db:54:de:dc:d0:77:d4:0c:43:42:96: 0c:55:8b:bf:54:c1:ef:09:14:0d:3a:71:bf:9d:8e:3d:92:2f: d4:2a:24:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0OTAxMTAvBgNVBAUTKDQ3RjUwQzk1OEJGOUNGNTQ1QzYwMUFERUIwNEY4QTA1 RTEwMUQ5QTUwHhcNMjUwMzEzMDM1NTE5WhcNMjUwMzIwMDM1NTE5WjAYMRYwFAYD VQQDEw02N2QyNTcyNy1mOWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvc/qOopi5axpDiBu5Cl6bEJr3g8vzlUbIP5sPSUOcrNrJntcQUQs4VlXH0oL EgpCeuO4kNMtUHAoxkIHHejzaVqMmUaI+EoULgq/MaUi9f64J2/qdixjVRjOz4Y7 Wz4Gn7Hz0ox08KCdob9CJhT5cSg901dZxtGj+xEvy10v9Sk+BqdD2pXGB97YJ0Pj h1Or+472nE4cl0TZV7I/YqZ7ShM/5W/OzJOroW9/ULQ02oIKclVD2ETp3PN99TwE KSny4YS3zGDeanBrkV55wkNW8O7vva/BVWMhgeoEjdK7/b0gCCs/MUPSXAiOLGYU aqbAykDYP+clLgYoY0rDcQwPVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNebBOKg IGzmt3Zr2LNK7w003I7lMB8GA1UdIwQYMBaAFEf1DJWL+c9UXGAa3rBPigXhAdml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQ5MC84RjUyNDg4RUQw NTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9SX1VNbFl2NXoxUmNZQnJlc0UtS0JlRUIy YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JfVU1sWXY1ejFSY1lCcmVzRS1LQmVFQjJhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzQ5MC84RjUyNDg4RUQwNTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9SX1VNbFl2NXox UmNZQnJlc0UtS0JlRUIyYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbzy93K7dMmklSuXmUej9szZe98fOs3LAzZ1yu9L3JwTOQTpX848Sn xJoj14icxUHWcyvOzIOdWGpoL0K/eHT9/vPa02s6Z0jdLsF2bAx1had9aWiayXyp Ta8Tazd44fpzha6cZJwynFryk2pkiPHhzEtOmbALla2mwHkI1WLsAiSJHn03BxK3 abIETCZvPLVta0YsE7BBr3cj4scQy+FN47l/8SS8SXLpZGFCyQwq4OM4Btv492+k oQwZ44AiHLG9qQhkTg8O0Tx0ly+KksIn5TcMJwl0M47sePt4Piab21Te3NB31AxD QpYMVYu/VMHvCRQNOnG/nY49ki/UKiTJ -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:01 2025 by rpki-client