$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft File: S-UGizexYyUw_1Ijhue3-wGI6eo.mft (raw, json) Hash identifier: H8mLMCsoBLeuIiiQ+rlGlk81awM1q/q1/mtAhZnmOpY= Subject key identifier: B0:5E:41:9D:02:1A:B1:9D:84:3C:DE:9C:B3:50:F2:41:A9:64:33:C6 Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA Certificate issuer: /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft Manifest number: 010B Signing time: Sun 01 Jun 2025 04:45:09 +0000 Manifest this update: Sun 01 Jun 2025 04:45:09 +0000 Manifest next update: Sun 08 Jun 2025 04:45:09 +0000 Files and hashes: 1: S-UGizexYyUw_1Ijhue3-wGI6eo.crl (hash: 2683Yq9KPkop+XNECjLQPfjpFoMD0Oi1pQmiicZ1wb8=) 2: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (hash: PrkTvOXkxIIDm1NyNDWg8hQLP2IiT8tO2SVVH/dIBvI=) 3: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (hash: s22fNuehfcR8cdi3cFR8Z1yPLk8LwMQLolDpdzgZgc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Validity Not Before: Jun 1 04:45:09 2025 GMT Not After : Jun 8 04:45:09 2025 GMT Subject: CN=683bdad5-0f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:48:9f:eb:a6:f2:5f:a9:76:67:87:c8:4e:5e: 3d:75:f4:d6:3d:65:69:8d:ce:c3:8f:01:ab:69:70: 60:ce:93:a2:5d:3e:8e:b4:6c:39:b9:d3:01:55:e4: 80:e9:f6:41:5a:af:0c:bd:57:21:da:37:35:07:19: 33:ef:78:3e:67:f7:11:3d:52:e8:c5:93:b9:95:7c: f1:c9:8b:d4:6f:36:8d:c0:d0:af:79:da:21:73:a8: b1:c4:a4:b3:b7:49:97:9d:d5:24:b1:d7:75:ae:dc: 34:9c:64:11:8c:f1:f1:c9:2f:1a:13:a3:68:ac:60: 0e:cb:5a:c5:37:24:4d:e1:1d:27:39:93:5d:6f:2d: 88:c8:b4:d5:cc:8f:26:c3:a5:55:7c:51:ca:7a:27: 04:7c:44:df:ff:45:62:6b:ad:31:2f:40:f2:80:fc: ed:04:f5:5f:5f:e9:c1:55:1c:2d:c9:3e:a5:10:ea: 1a:22:08:53:c6:b6:d7:79:53:59:b0:5a:68:60:cc: 56:5d:9b:a1:d8:e2:0f:24:46:b2:26:44:ea:77:6e: b7:a5:2d:22:31:cc:93:39:ed:8a:2d:b3:01:67:82: 17:44:fb:5a:86:45:ae:55:d8:54:a7:b3:74:bd:a9: 87:68:5e:02:0a:74:00:f5:1b:4c:b5:92:ac:54:13: de:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5E:41:9D:02:1A:B1:9D:84:3C:DE:9C:B3:50:F2:41:A9:64:33:C6 X509v3 Authority Key Identifier: keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:84:fc:b3:78:b1:a1:eb:f5:cf:56:1d:10:44:e0:f4:4d:74: 81:ec:12:fc:ec:24:95:38:5c:f5:4b:1d:f2:1a:5b:b7:b9:db: 52:fc:04:7a:ac:a8:01:30:58:b1:3d:4d:b8:0f:8b:35:e6:8a: 84:75:75:b8:b2:d0:22:70:b2:86:52:74:12:f1:37:e1:f0:ed: 17:a5:2c:67:5b:da:af:2f:ac:fb:ad:44:24:e5:61:06:24:ac: 3a:1c:a1:fe:26:cc:51:34:a7:75:4e:34:c5:5e:bf:0e:25:86: d5:6c:50:bb:dc:f2:4d:15:a1:2f:b7:de:20:3e:86:89:cb:94: b1:78:41:99:a0:72:8e:1c:ba:90:cb:98:18:58:f3:2f:da:80: 92:b9:ec:6f:cc:18:90:08:ce:39:4a:2b:e1:25:2f:b1:e4:2e: 2f:10:f2:1e:5b:d8:43:dc:87:be:7f:92:cb:a6:de:cd:36:c0: 63:45:78:e4:4b:c4:2f:69:7b:0c:7b:07:9f:49:87:c6:95:ff: a6:d1:30:5b:32:36:68:e0:ba:3b:91:c6:cb:45:47:e6:28:f6: 08:6f:73:f8:72:e7:75:48:60:8d:aa:f7:c5:70:2b:56:38:c4: 5e:aa:23:2b:e7:5b:1d:4b:d0:c8:40:7e:94:1a:cc:4c:9d:eb: 6c:cf:de:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDRCRTUwNjhCMzdCMTYzMjUzMEZGNTIyMzg2RTdCN0ZC MDE4OEU5RUEwHhcNMjUwNjAxMDQ0NTA5WhcNMjUwNjA4MDQ0NTA5WjAYMRYwFAYD VQQDEw02ODNiZGFkNS0wZjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30if66byX6l2Z4fITl49dfTWPWVpjc7DjwGraXBgzpOiXT6OtGw5udMBVeSA 6fZBWq8MvVch2jc1Bxkz73g+Z/cRPVLoxZO5lXzxyYvUbzaNwNCvedohc6ixxKSz t0mXndUksdd1rtw0nGQRjPHxyS8aE6NorGAOy1rFNyRN4R0nOZNdby2IyLTVzI8m w6VVfFHKeicEfETf/0Via60xL0DygPztBPVfX+nBVRwtyT6lEOoaIghTxrbXeVNZ sFpoYMxWXZuh2OIPJEayJkTqd263pS0iMcyTOe2KLbMBZ4IXRPtahkWuVdhUp7N0 vamHaF4CCnQA9RtMtZKsVBPeIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBeQZ0C GrGdhDzenLNQ8kGpZDPGMB8GA1UdIwQYMBaAFEvlBos3sWMlMP9SI4bnt/sBiOnq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy9FODBGMTM3Q0I5 OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5VXdfMUlqaHVlMy13R0k2 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1MtVUdpemV4WXlVd18xSWpodWUzLXdHSTZlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy9FODBGMTM3Q0I5OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5 VXdfMUlqaHVlMy13R0k2ZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKhPyzeLGh6/XPVh0QROD0TXSB7BL87CSVOFz1Sx3yGlu3udtS/AR6 rKgBMFixPU24D4s15oqEdXW4stAicLKGUnQS8Tfh8O0XpSxnW9qvL6z7rUQk5WEG JKw6HKH+JsxRNKd1TjTFXr8OJYbVbFC73PJNFaEvt94gPoaJy5SxeEGZoHKOHLqQ y5gYWPMv2oCSuexvzBiQCM45SivhJS+x5C4vEPIeW9hD3Ie+f5LLpt7NNsBjRXjk S8QvaXsMewefSYfGlf+m0TBbMjZo4Lo7kcbLRUfmKPYIb3P4cud1SGCNqvfFcCtW OMReqiMr51sdS9DIQH6UGsxMnetsz94t -----END CERTIFICATE-----Generated at Mon Jun 2 20:04:20 2025 by rpki-client