$ rpki-client -vvf rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft File: UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft (raw, json) Hash identifier: WDy5L1Mq4NcY6TdpzRtSGLXjU/iPrDYf7fOXyD3J4aA= Subject key identifier: 71:59:15:02:06:F5:A9:CF:4E:7D:0A:D3:60:34:69:05:80:C1:C2:14 Authority key identifier: 52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36 Certificate issuer: /CN=A916B30C/serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft Manifest number: 0102 Signing time: Sat 31 May 2025 04:40:39 +0000 Manifest this update: Sat 31 May 2025 04:40:38 +0000 Manifest next update: Sat 07 Jun 2025 04:40:38 +0000 Files and hashes: 1: UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl (hash: 9TpvbWagWI1C3+Npar5UK4ytNAYUis5QiVPGK1RTU4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B30C, serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836 Validity Not Before: May 31 04:40:38 2025 GMT Not After : Jun 7 04:40:38 2025 GMT Subject: CN=683a8847-7c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:61:9a:98:21:6d:d1:4e:56:e6:b2:e0:34:53: 0b:71:bf:b6:ef:32:0c:c3:52:91:84:c5:84:12:2a: eb:ab:49:bb:63:e3:e2:f2:8a:bb:ed:aa:a2:c1:ae: ff:0b:54:17:71:a6:9a:fd:f3:26:0a:de:88:09:40: ba:59:7a:1a:80:40:b1:52:46:2c:fe:2b:fb:63:38: 2c:e9:d6:c4:e5:fd:94:f7:0c:12:07:94:ca:0f:8c: 53:0a:7c:b2:72:18:a0:08:97:a1:03:aa:d8:b3:30: 82:4c:d6:7c:53:d8:37:d6:8b:45:fd:8f:e8:6e:1f: 5b:72:20:50:3c:fe:d4:50:f4:0d:7e:44:21:bc:95: 60:52:18:f3:e6:87:f9:c1:ac:c7:04:ab:e5:8d:1c: bb:aa:06:40:83:40:be:c4:2c:b5:e9:46:ca:ef:ff: a6:54:a6:af:07:09:00:bb:29:4f:86:9e:13:2c:e0: e9:76:84:69:94:c1:84:9b:e3:1c:49:10:3e:b2:02: e9:79:5f:43:8a:b4:17:08:46:2f:ab:d8:1a:3f:89: 47:a4:cf:94:5c:34:fa:00:41:4a:98:9d:d8:bd:be: e3:2e:66:75:28:c9:e2:a0:af:4f:92:d1:7b:80:af: 46:c8:1a:a8:f9:c1:12:f5:58:8d:a8:27:16:d4:7c: 47:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:59:15:02:06:F5:A9:CF:4E:7D:0A:D3:60:34:69:05:80:C1:C2:14 X509v3 Authority Key Identifier: keyid:52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:7e:3b:8a:5e:09:71:4c:0c:47:ff:77:3f:91:2e:e3:fa:03: 4b:5e:5d:a2:f2:f0:6d:7b:fe:f2:49:f5:31:54:9c:7c:8b:52: a0:a2:4d:b5:a5:50:47:70:27:88:7f:92:ef:27:01:5c:62:e6: ce:ec:0b:a7:cd:e7:0a:2e:2e:3c:46:98:e0:6e:6d:ad:bf:ed: 57:cb:49:4c:d8:a3:d1:e5:ef:50:33:6e:4b:66:cd:c7:df:6f: 80:57:7d:93:28:0f:1a:ca:68:1b:e6:ed:97:11:4d:9a:99:80: 9d:1d:7e:60:fa:e0:d8:32:84:7f:e7:f7:3c:52:f6:6a:1c:6d: 4a:2d:78:da:a4:bd:3f:f1:a5:d1:f4:cb:27:9f:28:0f:03:9d: 8b:33:4a:fc:b9:50:a7:9c:23:eb:24:07:1f:6d:a2:09:fc:13: 39:4a:8f:9e:ff:19:13:12:ae:cc:55:e2:80:ea:b7:00:1f:4b: 12:35:61:b4:f5:15:e9:ca:1d:c3:00:47:27:97:c3:8f:df:fa: 9b:a0:6f:bc:d4:33:cf:08:a7:90:9a:fc:e9:13:4f:8c:0f:f0: 8a:cf:b5:84:b5:ca:6d:a8:92:7f:44:c2:be:63:82:29:6a:5b: 3c:5f:8c:14:5d:6a:6a:b7:0b:bb:59:c8:14:58:42:10:00:8a: ad:1a:22:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIzMEMxMTAvBgNVBAUTKDUyQjNFODNCMTYyMUFGQjNEQ0NGMEFDRjY3RjI3RUUw QjFENkM4MzYwHhcNMjUwNTMxMDQ0MDM4WhcNMjUwNjA3MDQ0MDM4WjAYMRYwFAYD VQQDEw02ODNhODg0Ny03YzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWGamCFt0U5W5rLgNFMLcb+27zIMw1KRhMWEEirrq0m7Y+Pi8oq77aqiwa7/ C1QXcaaa/fMmCt6ICUC6WXoagECxUkYs/iv7Yzgs6dbE5f2U9wwSB5TKD4xTCnyy chigCJehA6rYszCCTNZ8U9g31otF/Y/obh9bciBQPP7UUPQNfkQhvJVgUhjz5of5 wazHBKvljRy7qgZAg0C+xCy16UbK7/+mVKavBwkAuylPhp4TLODpdoRplMGEm+Mc SRA+sgLpeV9DirQXCEYvq9gaP4lHpM+UXDT6AEFKmJ3Yvb7jLmZ1KMnioK9PktF7 gK9GyBqo+cES9ViNqCcW1HxHDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFZFQIG 9anPTn0K02A0aQWAwcIUMB8GA1UdIwQYMBaAFFKz6DsWIa+z3M8Kz2fyfuCx1sg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMwQy85QTg3NTQzQUIw NUUxMUVFOTdDNzhCNzVDNEY5QUUwMi9VclBvT3hZaHI3UGN6d3JQWl9KLTRMSFd5 RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyUG9PeFlocjdQY3p3clBaX0otNExIV3lEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjMwQy85QTg3NTQzQUIwNUUxMUVFOTdDNzhCNzVDNEY5QUUwMi9VclBvT3hZaHI3 UGN6d3JQWl9KLTRMSFd5RFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXfjuKXglxTAxH/3c/kS7j+gNLXl2i8vBte/7ySfUxVJx8i1Kgok21 pVBHcCeIf5LvJwFcYubO7AunzecKLi48Rpjgbm2tv+1Xy0lM2KPR5e9QM25LZs3H 32+AV32TKA8aymgb5u2XEU2amYCdHX5g+uDYMoR/5/c8UvZqHG1KLXjapL0/8aXR 9MsnnygPA52LM0r8uVCnnCPrJAcfbaIJ/BM5So+e/xkTEq7MVeKA6rcAH0sSNWG0 9RXpyh3DAEcnl8OP3/qboG+81DPPCKeQmvzpE0+MD/CKz7WEtcptqJJ/RMK+Y4Ip als8X4wUXWpqtwu7WcgUWEIQAIqtGiIz -----END CERTIFICATE-----Generated at Sat May 31 17:24:48 2025 by rpki-client