$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft File: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft (raw, json) Hash identifier: HDcng0rgzjO3qbG5hEXVIblFeC4oom4GRahOktgMa7U= Subject key identifier: FF:95:54:4E:47:67:C4:01:5F:69:BB:60:70:FE:F8:4B:07:01:80:2B Authority key identifier: B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD Certificate issuer: /CN=A9170829/serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft Manifest number: 056F Signing time: Sat 31 May 2025 00:34:30 +0000 Manifest this update: Sat 31 May 2025 00:34:30 +0000 Manifest next update: Sat 07 Jun 2025 00:34:30 +0000 Files and hashes: 1: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl (hash: FcAQIXyQN81QAlCHi/QaXSCDnAx2n7CYWxrgavmmyrQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170829, serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD Validity Not Before: May 31 00:34:30 2025 GMT Not After : Jun 7 00:34:30 2025 GMT Subject: CN=683a4e96-9c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:55:fd:dd:92:c6:43:d5:55:e2:60:02:dc:60: af:8c:7e:73:37:a3:77:9e:88:d9:1c:23:a6:29:72: 1b:8a:69:0f:5f:77:f2:4f:4d:23:14:e9:4a:98:53: a9:45:9a:d9:db:c7:04:52:21:4d:50:66:8f:24:9d: 18:79:5b:3a:e1:a1:0e:dc:83:b2:6f:f2:55:cf:52: 28:c3:00:2f:1a:42:34:3e:f0:e8:16:24:6c:30:24: df:ec:dc:7b:b6:a2:95:fa:10:90:e3:32:94:7b:6f: e7:63:17:69:ef:11:97:76:41:df:63:fd:7c:a2:db: c8:f6:33:1f:88:75:7b:b8:14:4c:97:34:f5:8a:4b: dd:0c:93:fb:be:58:1f:9b:8d:ab:e1:40:93:01:b0: 97:21:6b:28:cd:64:a0:7d:76:8d:74:91:30:c5:48: 46:e3:9c:43:b0:31:d0:12:54:01:d1:4a:af:05:94: 05:f5:6e:63:1d:81:d0:19:02:dc:e5:ad:69:6c:bc: 6e:20:9f:a7:ce:ad:4d:98:1a:d3:61:1c:39:a5:be: 58:7b:b4:85:e7:8d:c5:77:32:2a:00:6b:52:3d:a8: 73:54:0a:1e:2e:79:10:ad:38:99:ae:1a:02:66:93: af:46:40:6a:d8:22:35:68:3b:d7:af:38:89:f2:12: 67:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:95:54:4E:47:67:C4:01:5F:69:BB:60:70:FE:F8:4B:07:01:80:2B X509v3 Authority Key Identifier: keyid:B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:c8:a9:9f:94:23:82:fb:5d:ff:c7:ce:ce:02:3e:9c:86:bc: a5:a3:a5:72:d2:06:d4:12:7c:18:14:2b:79:28:47:18:7b:d5: a7:4a:08:6a:ff:a6:14:58:e6:8a:1c:c3:56:9f:dd:48:51:9f: f0:46:f9:18:07:b4:e2:2b:de:a7:bf:d1:d5:e4:f9:f9:10:a1: b4:1f:a8:42:e3:17:3e:f4:9a:76:72:ba:61:da:6f:fb:8b:a6: 4f:0e:6d:d9:98:41:dc:48:b3:8a:f0:a3:d8:d3:69:a7:92:db: 17:ac:02:7e:21:9d:35:a0:ca:03:7f:77:49:8a:05:4e:a6:1b: 7b:ad:f0:66:9f:2e:16:d0:b7:be:7a:40:15:5e:b2:9e:c8:f0: fa:3e:c3:26:cf:55:da:55:db:70:5c:8d:40:f6:56:44:80:4c: 88:e8:b4:af:71:48:b8:15:72:65:86:ad:46:d7:cd:ac:c5:74: 40:06:27:78:76:f8:78:c8:2a:78:d3:b1:60:73:1f:12:8c:75: 9f:71:b6:1b:40:a4:99:54:5b:4a:17:a1:30:d9:2f:ef:8f:bb: 10:eb:82:6f:89:c9:58:8b:6f:e6:67:6e:90:24:42:d3:83:5d: 2c:35:2e:3b:5c:2c:39:7e:76:9e:91:72:c7:62:7e:27:eb:cc: fa:3a:fb:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA4MjkxMTAvBgNVBAUTKEI4Rjg0NkI0MzUzQjY0MjlBQzQwNDNGMzJCQjc4OTRD RjgzODU1RkQwHhcNMjUwNTMxMDAzNDMwWhcNMjUwNjA3MDAzNDMwWjAYMRYwFAYD VQQDEw02ODNhNGU5Ni05YzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnVX93ZLGQ9VV4mAC3GCvjH5zN6N3nojZHCOmKXIbimkPX3fyT00jFOlKmFOp RZrZ28cEUiFNUGaPJJ0YeVs64aEO3IOyb/JVz1IowwAvGkI0PvDoFiRsMCTf7Nx7 tqKV+hCQ4zKUe2/nYxdp7xGXdkHfY/18otvI9jMfiHV7uBRMlzT1ikvdDJP7vlgf m42r4UCTAbCXIWsozWSgfXaNdJEwxUhG45xDsDHQElQB0UqvBZQF9W5jHYHQGQLc 5a1pbLxuIJ+nzq1NmBrTYRw5pb5Ye7SF543FdzIqAGtSPahzVAoeLnkQrTiZrhoC ZpOvRkBq2CI1aDvXrziJ8hJnRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+VVE5H Z8QBX2m7YHD++EsHAYArMB8GA1UdIwQYMBaAFLj4RrQ1O2QprEBD8yu3iUz4OFX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi91UGhHdERVN1pDbXNRRVB6SzdlSlRQZzRW ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQaEd0RFU3WkNtc1FFUHpLN2VKVFBnNFZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDgyOS83NjY3QkVEMDYzQTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi91UGhHdERVN1pD bXNRRVB6SzdlSlRQZzRWZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTyKmflCOC+13/x87OAj6chrylo6Vy0gbUEnwYFCt5KEcYe9WnSghq /6YUWOaKHMNWn91IUZ/wRvkYB7TiK96nv9HV5Pn5EKG0H6hC4xc+9Jp2crph2m/7 i6ZPDm3ZmEHcSLOK8KPY02mnktsXrAJ+IZ01oMoDf3dJigVOpht7rfBmny4W0Le+ ekAVXrKeyPD6PsMmz1XaVdtwXI1A9lZEgEyI6LSvcUi4FXJlhq1G182sxXRABid4 dvh4yCp407Fgcx8SjHWfcbYbQKSZVFtKF6Ew2S/vj7sQ64JviclYi2/mZ26QJELT g10sNS47XCw5fnaekXLHYn4n68z6Ovuy -----END CERTIFICATE-----Generated at Sat May 31 17:22:14 2025 by rpki-client