$ rpki-client -vvf rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft File: 7UHN-Ie33i9cIBvogU8ejfPQIB8.mft (raw, json) Hash identifier: ZZ4xMXquZoo7iQ9oKgnpdbDh3OhxU7iOSovq+/qypUc= Subject key identifier: 91:17:FA:80:F2:EA:52:BC:FB:ED:00:B1:02:CC:64:77:A3:38:06:90 Authority key identifier: ED:41:CD:F8:87:B7:DE:2F:5C:20:1B:E8:81:4F:1E:8D:F3:D0:20:1F Certificate issuer: /CN=A916C832/serialNumber=ED41CDF887B7DE2F5C201BE8814F1E8DF3D0201F Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft Manifest number: 14 Signing time: Sat 31 May 2025 07:33:57 +0000 Manifest this update: Sat 31 May 2025 07:33:56 +0000 Manifest next update: Sat 07 Jun 2025 07:33:56 +0000 Files and hashes: 1: 7UHN-Ie33i9cIBvogU8ejfPQIB8.crl (hash: 3NBtjAXQ9fF7+IbdSaqS7ySQzxiWEXxOBvhqqMH1Xmw=) 2: AA3FBE4A1E6111F093F53B75C4F9AE02.roa (hash: LSRr7TMpx9Qi1u09QfccXCZNggaDKCGxTg8r/GddSHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.crl rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C832, serialNumber=ED41CDF887B7DE2F5C201BE8814F1E8DF3D0201F Validity Not Before: May 31 07:33:56 2025 GMT Not After : Jun 7 07:33:56 2025 GMT Subject: CN=683ab0e5-1e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:70:97:fd:d1:ab:84:e9:12:c1:78:c2:ce:45: ac:a2:9d:13:00:1d:d7:c6:50:5f:8e:a1:25:25:7d: cf:6d:18:31:e6:db:0b:06:01:a5:b3:89:5f:51:15: 44:78:90:3d:73:23:a5:05:f4:e4:be:b9:2a:f9:e5: ee:e4:e9:cd:71:1f:35:03:42:97:77:28:e4:66:96: 0f:56:66:1d:8c:d9:1f:0a:2a:c3:e2:c2:f3:72:37: b5:60:37:ed:7b:5f:77:17:87:9a:e1:70:26:da:bb: 95:e5:ae:02:55:cf:6d:2e:61:4f:e1:b7:89:34:be: 25:bc:0d:b3:4b:d3:10:c2:0f:4c:03:f9:13:a4:e2: f8:d1:9b:9d:96:0e:59:41:da:ab:44:a8:ba:7c:ec: 92:04:ae:11:09:f7:91:0b:29:38:26:ee:b1:6d:05: d3:4e:bd:fa:03:e0:7d:5a:f6:3d:7c:3f:72:09:79: 6d:88:37:bf:8d:de:f0:19:06:09:f9:98:40:fb:55: bb:49:9d:06:66:7b:87:42:c4:17:a9:dc:04:89:b2: f5:33:2e:f6:27:98:b9:59:56:2c:bf:f5:75:26:fa: 08:b1:67:bf:9a:2b:e3:41:37:eb:77:b4:06:07:e6: ce:db:a3:34:ba:0e:f5:d0:c7:b7:50:89:b2:19:78: e4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:17:FA:80:F2:EA:52:BC:FB:ED:00:B1:02:CC:64:77:A3:38:06:90 X509v3 Authority Key Identifier: keyid:ED:41:CD:F8:87:B7:DE:2F:5C:20:1B:E8:81:4F:1E:8D:F3:D0:20:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:ab:4c:83:c3:22:cd:9f:9e:b8:c6:61:cc:e9:09:85:78:da: 8b:e2:b1:87:59:c1:50:b6:06:95:7f:fe:18:16:38:fe:a9:fe: 09:88:71:f1:42:8d:02:dc:08:f3:64:8e:9f:ff:ec:7d:60:f9: 62:71:90:f9:21:ae:03:87:1c:58:10:d9:ac:64:55:40:8f:a1: e4:ee:36:b1:6b:55:08:a7:16:9d:70:b1:9c:c8:92:38:e9:85: d9:6f:c2:bc:dc:f2:ab:8b:c9:42:e7:5c:98:95:2f:4e:88:4d: 0b:54:5b:d3:19:36:07:6e:d5:7e:14:08:e3:c8:b2:7f:07:4b: 2b:1e:05:5f:2c:ec:c6:55:53:0a:07:8e:e6:8f:e8:9d:b4:0d: a8:39:83:77:d1:84:24:60:96:be:d0:7c:80:6a:82:e7:27:93: 84:83:5b:24:8a:f1:98:70:6a:b3:9c:9e:94:b2:9a:00:fd:b6: 88:ba:8d:59:1e:16:71:09:0a:fa:d3:67:6b:3a:3a:6f:5c:2e: b5:0d:0e:18:17:02:6e:03:89:b7:7e:09:ae:a5:2f:da:08:9d: 9f:e0:4c:f1:f3:87:60:67:69:72:f9:fc:e4:5c:89:78:29:4f: 5d:c3:46:9b:d0:c9:c8:8f:1e:04:94:a0:29:a0:39:1a:21:1d: 83:96:c2:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzgzMjExMC8GA1UEBRMoRUQ0MUNERjg4N0I3REUyRjVDMjAxQkU4ODE0RjFFOERG M0QwMjAxRjAeFw0yNTA1MzEwNzMzNTZaFw0yNTA2MDcwNzMzNTZaMBgxFjAUBgNV BAMTDTY4M2FiMGU1LTFlNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9cJf90auE6RLBeMLORayinRMAHdfGUF+OoSUlfc9tGDHm2wsGAaWziV9RFUR4 kD1zI6UF9OS+uSr55e7k6c1xHzUDQpd3KORmlg9WZh2M2R8KKsPiwvNyN7VgN+17 X3cXh5rhcCbau5XlrgJVz20uYU/ht4k0viW8DbNL0xDCD0wD+ROk4vjRm52WDllB 2qtEqLp87JIErhEJ95ELKTgm7rFtBdNOvfoD4H1a9j18P3IJeW2IN7+N3vAZBgn5 mED7VbtJnQZme4dCxBep3ASJsvUzLvYnmLlZViy/9XUm+gixZ7+aK+NBN+t3tAYH 5s7bozS6DvXQx7dQibIZeOSdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkRf6gPLq Urz77QCxAsxkd6M4BpAwHwYDVR0jBBgwFoAU7UHN+Ie33i9cIBvogU8ejfPQIB8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDODMyLzVCNjE4MDYwMUU2 MTExRjA5MzRGNkY3NEM0RjlBRTAyLzdVSE4tSWUzM2k5Y0lCdm9nVThlamZQUUlC OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN1VITi1JZTMzaTljSUJ2b2dVOGVqZlBRSUI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD ODMyLzVCNjE4MDYwMUU2MTExRjA5MzRGNkY3NEM0RjlBRTAyLzdVSE4tSWUzM2k5 Y0lCdm9nVThlamZQUUlCOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHSrTIPDIs2fnrjGYczpCYV42ovisYdZwVC2BpV//hgWOP6p/gmIcfFC jQLcCPNkjp//7H1g+WJxkPkhrgOHHFgQ2axkVUCPoeTuNrFrVQinFp1wsZzIkjjp hdlvwrzc8quLyULnXJiVL06ITQtUW9MZNgdu1X4UCOPIsn8HSyseBV8s7MZVUwoH juaP6J20Dag5g3fRhCRglr7QfIBqgucnk4SDWySK8ZhwarOcnpSymgD9toi6jVke FnEJCvrTZ2s6Om9cLrUNDhgXAm4Dibd+Ca6lL9oInZ/gTPHzh2BnaXL5/ORciXgp T13DRpvQyciPHgSUoCmgORohHYOWwts= -----END CERTIFICATE-----Generated at Sat May 31 17:30:16 2025 by rpki-client