$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.mft File: uWfS7oK3russVByppRA7Wgym5xI.mft (raw, json) Hash identifier: Wz33Qh2SSoaJ2IXYg94mzEsGfxBAMHhTLe+ssHywURY= Subject key identifier: D6:B8:87:69:FB:B0:33:A7:F8:64:F7:B1:3E:D6:07:92:8F:71:65:AE Authority key identifier: B9:67:D2:EE:82:B7:AE:EB:2C:54:1C:A9:A5:10:3B:5A:0C:A6:E7:12 Certificate issuer: /CN=A9166E07/serialNumber=B967D2EE82B7AEEB2C541CA9A5103B5A0CA6E712 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uWfS7oK3russVByppRA7Wgym5xI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.mft Manifest number: 13 Signing time: Sat 31 May 2025 07:35:59 +0000 Manifest this update: Sat 31 May 2025 07:35:58 +0000 Manifest next update: Sat 07 Jun 2025 07:35:58 +0000 Files and hashes: 1: uWfS7oK3russVByppRA7Wgym5xI.crl (hash: uW1ZxrMtMLvFgIxYTZKkJ4YpD0aqV8gw0U96W4tfEL4=) 2: D7D79C92241A11F0A9D27045C4F9AE02.roa (hash: //G4AwnQA0nMb3DeflcQ+SQx5LkYQDI/08bvYQspQs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.crl rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uWfS7oK3russVByppRA7Wgym5xI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166E07, serialNumber=B967D2EE82B7AEEB2C541CA9A5103B5A0CA6E712 Validity Not Before: May 31 07:35:58 2025 GMT Not After : Jun 7 07:35:58 2025 GMT Subject: CN=683ab15e-04fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:48:83:dd:2c:ab:07:00:29:e4:21:83:9f:a9: d0:5c:d6:67:a7:4d:65:9a:8c:1d:75:bd:32:c2:a3: 0a:aa:6e:54:d2:00:85:cc:65:b7:72:5c:97:7e:9f: d8:99:a9:93:22:19:a1:1b:49:a0:3d:fa:7c:24:a2: 0a:49:8c:c9:ed:d8:38:28:84:86:18:7d:eb:a2:7f: b8:bc:65:54:9e:04:b8:24:21:c3:dd:c0:e9:55:51: b0:5d:d4:99:72:d8:12:0c:7b:7b:c0:80:cc:ed:81: de:33:df:83:3f:88:f8:54:15:84:12:b3:71:75:51: d9:5f:c3:5f:43:33:d8:52:20:d9:f0:0a:f4:f7:b9: 78:8f:d1:f3:ef:36:12:be:6a:8e:d3:93:cf:d1:ca: de:a4:00:47:37:d2:55:0a:67:9a:df:2b:df:bc:1f: 2e:b5:ab:2a:d3:36:e5:45:94:5a:7a:e6:3a:bb:69: 85:ad:7e:03:f9:f0:5d:3d:5e:59:b8:43:8f:ea:02: ad:1d:91:f6:6b:5b:29:2b:35:16:d4:8e:b2:1f:b9: 91:60:84:98:04:bb:e5:f0:09:84:8f:dd:28:56:82: f4:e2:42:c2:23:a2:5f:74:d4:59:de:56:c9:64:f4: ec:74:2a:d8:fa:5a:da:07:31:b6:62:93:77:23:db: 24:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B8:87:69:FB:B0:33:A7:F8:64:F7:B1:3E:D6:07:92:8F:71:65:AE X509v3 Authority Key Identifier: keyid:B9:67:D2:EE:82:B7:AE:EB:2C:54:1C:A9:A5:10:3B:5A:0C:A6:E7:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uWfS7oK3russVByppRA7Wgym5xI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ec:46:1c:f0:63:86:21:6d:a5:94:41:a0:80:e2:94:de:1d: 33:46:c7:2a:4a:b6:40:3a:72:55:63:b6:db:46:4e:cc:42:19: e6:d3:c5:fb:c5:4c:09:74:dd:df:7f:4d:e6:b1:26:cf:47:de: 5f:11:fa:fd:00:d7:ce:ad:14:d8:5b:77:9a:9e:c1:a0:56:19: cf:23:53:f7:73:8a:cf:3a:9e:f3:54:69:70:b9:ab:9f:5d:bd: 4f:5f:8b:37:d9:29:32:40:bd:7d:f0:3e:9a:72:2a:10:98:e4: 37:e5:0f:01:be:9b:9e:d9:37:ee:b3:44:87:cf:89:3d:60:54: 06:f0:43:da:9c:1e:06:e1:4b:76:ef:fc:75:34:82:0b:11:31: cb:31:f7:5f:89:7a:cd:55:a8:fd:8c:8b:d6:90:96:7c:72:2d: 40:7c:fb:f7:a5:6b:21:0d:52:c0:bd:f4:82:67:60:e4:68:b3: eb:92:0a:10:49:eb:b6:72:1a:cd:cc:ba:90:6d:1a:2d:97:f6: c0:50:06:d8:49:42:80:d3:58:93:33:4b:7d:9f:81:58:f9:9e: 11:5f:bc:ee:62:2a:44:69:aa:66:1c:41:1a:5b:79:dc:b6:a7: e3:fe:21:ba:b1:83:65:96:70:c3:69:65:be:9e:87:33:40:5f: 26:60:84:7e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NkUwNzExMC8GA1UEBRMoQjk2N0QyRUU4MkI3QUVFQjJDNTQxQ0E5QTUxMDNCNUEw Q0E2RTcxMjAeFw0yNTA1MzEwNzM1NThaFw0yNTA2MDcwNzM1NThaMBgxFjAUBgNV BAMTDTY4M2FiMTVlLTA0ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTSIPdLKsHACnkIYOfqdBc1menTWWajB11vTLCowqqblTSAIXMZbdyXJd+n9iZ qZMiGaEbSaA9+nwkogpJjMnt2DgohIYYfeuif7i8ZVSeBLgkIcPdwOlVUbBd1Jly 2BIMe3vAgMztgd4z34M/iPhUFYQSs3F1Udlfw19DM9hSINnwCvT3uXiP0fPvNhK+ ao7Tk8/Ryt6kAEc30lUKZ5rfK9+8Hy61qyrTNuVFlFp65jq7aYWtfgP58F09Xlm4 Q4/qAq0dkfZrWykrNRbUjrIfuZFghJgEu+XwCYSP3ShWgvTiQsIjol901FneVslk 9Ox0Ktj6WtoHMbZik3cj2yTzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1riHafuw M6f4ZPexPtYHko9xZa4wHwYDVR0jBBgwFoAUuWfS7oK3russVByppRA7Wgym5xIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2RTA3LzZCNTZEMUZBMjQx QTExRjA4RjA0QkU0NEM0RjlBRTAyL3VXZlM3b0szcnVzc1ZCeXBwUkE3V2d5bTV4 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdVdmUzdvSzNydXNzVkJ5cHBSQTdXZ3ltNXhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 RTA3LzZCNTZEMUZBMjQxQTExRjA4RjA0QkU0NEM0RjlBRTAyL3VXZlM3b0szcnVz c1ZCeXBwUkE3V2d5bTV4SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI/sRhzwY4YhbaWUQaCA4pTeHTNGxypKtkA6clVjtttGTsxCGebTxfvF TAl03d9/TeaxJs9H3l8R+v0A186tFNhbd5qewaBWGc8jU/dzis86nvNUaXC5q59d vU9fizfZKTJAvX3wPppyKhCY5DflDwG+m57ZN+6zRIfPiT1gVAbwQ9qcHgbhS3bv /HU0ggsRMcsx91+Jes1VqP2Mi9aQlnxyLUB8+/elayENUsC99IJnYORos+uSChBJ 67ZyGs3MupBtGi2X9sBQBthJQoDTWJMzS32fgVj5nhFfvO5iKkRpqmYcQRpbedy2 p+P+Ibqxg2WWcMNpZb6ehzNAXyZghH4= -----END CERTIFICATE-----Generated at Sat May 31 17:44:02 2025 by rpki-client