$ rpki-client -vvf rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft File: rUk9yaPSQDSDYoWHBR93lRWJFnk.mft (raw, json) Hash identifier: ByExWKgtmfz9Q6ah9poK8k9Rbh5j0NG/APNRglU7ABU= Subject key identifier: 21:B8:B0:F4:9D:1B:46:0F:1F:DD:35:4B:D5:AB:89:41:79:51:4A:08 Authority key identifier: AD:49:3D:C9:A3:D2:40:34:83:62:85:87:05:1F:77:95:15:89:16:79 Certificate issuer: /CN=A918B418/serialNumber=AD493DC9A3D2403483628587051F779515891679 Certificate serial: 0253 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft Manifest number: 0250 Signing time: Sat 31 May 2025 02:01:18 +0000 Manifest this update: Sat 31 May 2025 02:01:17 +0000 Manifest next update: Sat 07 Jun 2025 02:01:17 +0000 Files and hashes: 1: rUk9yaPSQDSDYoWHBR93lRWJFnk.crl (hash: 340Qx3HwYav2+3GBOaFxP2r/pk6HhUBAzIJHJbzmw8U=) 2: 8275E1721C5311EDA75CF137C4F9AE02.roa (hash: ylAjtSurS2AriNqYAWDXwI4mJ+u3ceX6ZX3mIJq8z+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.crl rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 595 (0x253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B418, serialNumber=AD493DC9A3D2403483628587051F779515891679 Validity Not Before: May 31 02:01:17 2025 GMT Not After : Jun 7 02:01:17 2025 GMT Subject: CN=683a62ed-64b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:f9:76:9b:1d:3d:74:dd:e9:d3:4c:0b:8f: de:0f:4a:b2:92:06:f9:7e:71:45:38:78:86:3a:67: 76:53:8e:17:19:fc:70:86:fd:2f:a2:1f:66:69:7d: 7d:3a:ef:3c:68:6b:1a:93:0c:22:87:d0:71:40:ff: 16:49:a0:17:15:d4:a5:fb:01:e7:c1:c4:83:8b:b6: 8d:f4:a1:b3:d1:4c:06:57:21:8a:8d:5e:1b:4f:7a: a2:70:32:c8:88:8a:f2:cb:b3:d2:b2:67:a9:1f:67: b5:99:98:be:d8:58:26:a5:8c:ca:0b:50:31:d3:a4: d0:c5:3e:17:f7:71:56:da:99:fc:df:d4:5c:e9:c0: 31:77:02:ec:c2:f5:0a:94:8f:e0:f3:3d:81:23:8c: 6d:80:1d:fc:20:bd:cd:49:40:6c:49:9b:18:88:0e: 1f:7e:a5:b3:c1:77:5a:e6:5a:58:79:30:69:02:04: fa:28:2e:73:44:08:f5:7c:18:71:1c:c6:6f:64:36: d0:da:10:89:58:b7:c0:3a:a0:95:48:73:81:31:63: ff:49:01:65:0e:ea:63:cb:a4:df:ed:32:55:23:3f: 40:99:d3:51:5c:47:2c:9f:9a:92:30:29:f4:ec:06: 89:bd:73:04:08:9d:f9:8a:8c:80:cc:45:f0:22:ff: 41:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B8:B0:F4:9D:1B:46:0F:1F:DD:35:4B:D5:AB:89:41:79:51:4A:08 X509v3 Authority Key Identifier: keyid:AD:49:3D:C9:A3:D2:40:34:83:62:85:87:05:1F:77:95:15:89:16:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:0b:5f:98:ae:eb:5d:76:49:ae:6b:2b:a8:30:2f:4d:93:59: b4:85:08:f7:86:a5:da:14:0f:6b:fe:de:3e:14:86:3e:aa:d8: 3d:38:2f:33:23:ba:a2:9f:d2:55:0c:44:31:8d:10:72:93:0d: 70:d2:48:bd:f4:f3:d8:08:ec:7e:87:73:96:19:5a:5c:24:1e: 27:3d:85:ce:07:24:05:89:53:0e:05:7d:34:23:5a:c7:3f:54: aa:ea:c5:00:1e:c8:43:0d:36:bd:f8:66:03:13:d5:39:35:03: ff:b6:b6:a2:50:82:c6:ea:91:d4:b0:0e:ad:37:d7:d4:ba:61: b2:d2:8c:8b:c7:e9:bd:02:a1:2d:b8:39:30:4e:50:ab:c8:75: 9f:df:a5:4c:69:ff:6a:9a:ab:61:61:bd:24:e3:44:e5:eb:0c: 15:c9:1d:92:7c:39:41:4c:26:cc:2f:61:57:93:40:e2:30:f7: 29:16:08:de:40:ae:3b:c7:cc:f5:9c:2b:ae:c4:9b:3c:c1:a1: bb:85:72:c3:71:35:5d:e3:ea:7b:15:4f:a9:b0:00:fe:e2:82: 6a:26:ba:8f:56:88:b0:6d:6a:a0:e2:f1:d9:2f:4d:57:cf:48: 95:d2:12:10:4a:b2:07:52:17:1d:c6:1c:16:ff:99:ee:1d:89: 35:08:ab:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI0MTgxMTAvBgNVBAUTKEFENDkzREM5QTNEMjQwMzQ4MzYyODU4NzA1MUY3Nzk1 MTU4OTE2NzkwHhcNMjUwNTMxMDIwMTE3WhcNMjUwNjA3MDIwMTE3WjAYMRYwFAYD VQQDEw02ODNhNjJlZC02NGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyX5dpsdPXTd6dNMC4/eD0qykgb5fnFFOHiGOmd2U44XGfxwhv0voh9maX19 Ou88aGsakwwih9BxQP8WSaAXFdSl+wHnwcSDi7aN9KGz0UwGVyGKjV4bT3qicDLI iIryy7PSsmepH2e1mZi+2FgmpYzKC1Ax06TQxT4X93FW2pn839Rc6cAxdwLswvUK lI/g8z2BI4xtgB38IL3NSUBsSZsYiA4ffqWzwXda5lpYeTBpAgT6KC5zRAj1fBhx HMZvZDbQ2hCJWLfAOqCVSHOBMWP/SQFlDupjy6Tf7TJVIz9AmdNRXEcsn5qSMCn0 7AaJvXMECJ35ioyAzEXwIv9BRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCG4sPSd G0YPH901S9WriUF5UUoIMB8GA1UdIwQYMBaAFK1JPcmj0kA0g2KFhwUfd5UViRZ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjQxOC9BRDBEQzQ4MDFD NEYxMUVEQUFEMzEzODZDNEY5QUUwMi9yVWs5eWFQU1FEU0RZb1dIQlI5M2xSV0pG bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JVazl5YVBTUURTRFlvV0hCUjkzbFJXSkZuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjQxOC9BRDBEQzQ4MDFDNEYxMUVEQUFEMzEzODZDNEY5QUUwMi9yVWs5eWFQU1FE U0RZb1dIQlI5M2xSV0pGbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCC1+YrutddkmuayuoMC9Nk1m0hQj3hqXaFA9r/t4+FIY+qtg9OC8z I7qin9JVDEQxjRBykw1w0ki99PPYCOx+h3OWGVpcJB4nPYXOByQFiVMOBX00I1rH P1Sq6sUAHshDDTa9+GYDE9U5NQP/traiUILG6pHUsA6tN9fUumGy0oyLx+m9AqEt uDkwTlCryHWf36VMaf9qmqthYb0k40Tl6wwVyR2SfDlBTCbML2FXk0DiMPcpFgje QK47x8z1nCuuxJs8waG7hXLDcTVd4+p7FU+psAD+4oJqJrqPVoiwbWqg4vHZL01X z0iV0hIQSrIHUhcdxhwW/5nuHYk1CKu0 -----END CERTIFICATE-----Generated at Sat May 31 16:46:53 2025 by rpki-client