$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft File: uf67oJzxCyh-7SzlZyKzyaDvEv8.mft (raw, json) Hash identifier: XOC3wCf/sz7lIurvGuaH4jHmyS6lN/hn6KUajrwKL/I= Subject key identifier: DD:96:78:6A:68:95:53:C4:93:6F:C8:11:0A:0B:4F:89:74:91:AA:38 Authority key identifier: B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF Certificate issuer: /CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Certificate serial: 0986 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft Manifest number: 0980 Signing time: Fri 30 May 2025 21:00:36 +0000 Manifest this update: Fri 30 May 2025 21:00:36 +0000 Manifest next update: Fri 06 Jun 2025 21:00:36 +0000 Files and hashes: 1: uf67oJzxCyh-7SzlZyKzyaDvEv8.crl (hash: OkIQXi+YZn8gc0WrxK10dZTuxntNgQKsoWXCJZJTkjM=) 2: 27030ADA8EB211EA9D09090FC4F9AE02.roa (hash: KzsEqYZi4RymBpkz6QVCB3ieArM+VhARkW/2ksmdU8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2438 (0x986) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB7A, serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Validity Not Before: May 30 21:00:36 2025 GMT Not After : Jun 6 21:00:36 2025 GMT Subject: CN=683a1c74-14ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ef:a8:61:64:50:b0:87:74:42:cc:ee:57:0c: 33:29:51:c9:59:99:51:9e:1f:db:dd:0f:c0:9a:9c: 26:64:ac:fe:d9:aa:69:84:f5:20:c5:dc:7a:b9:1c: 15:83:3d:86:2a:56:ba:16:10:a2:97:35:dc:5c:55: 0a:d6:3a:b7:b8:84:6b:e2:2a:a7:35:4b:ce:4d:df: f5:2b:d4:ec:05:4f:a8:f5:16:e1:11:3c:c7:9e:3c: ff:a0:e3:72:c5:e1:03:0e:e6:8b:d6:a2:ed:b6:0c: 42:53:e2:04:da:c0:d2:c6:15:34:de:42:e2:fb:c9: d6:18:eb:7c:45:2a:c8:6f:b3:d1:34:bc:71:c7:6c: e2:aa:09:14:5a:5b:8c:5f:f8:eb:2e:8a:2e:f2:f2: 17:eb:f2:34:af:1c:6f:13:d6:8f:06:a8:86:c3:78: 3f:84:84:62:0e:ce:68:31:0c:c3:9b:e4:e7:ac:4f: d6:f0:65:10:29:79:54:3e:70:3e:2b:eb:99:1c:3f: c5:fc:8b:59:0c:c5:09:f6:9a:11:05:68:b0:89:14: 77:dc:e3:ca:33:5c:a5:54:1a:af:7c:29:71:e8:ba: d6:36:5f:2b:6e:9b:09:e4:a6:c8:b3:ad:c9:d2:10: 71:c1:11:24:db:94:ac:85:be:98:a4:d0:cb:31:e5: 2e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:96:78:6A:68:95:53:C4:93:6F:C8:11:0A:0B:4F:89:74:91:AA:38 X509v3 Authority Key Identifier: keyid:B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:cc:e1:d7:5c:ff:e5:1e:b6:fc:3e:66:14:d1:9b:25:b5:36: d0:55:48:f4:97:b1:f1:66:af:47:7e:27:ed:2a:6b:e1:07:33: 32:12:9a:37:6e:a0:73:1e:6d:5a:b6:78:14:df:87:58:aa:28: 33:87:43:65:d7:88:17:05:6e:93:2d:a3:9e:62:29:80:87:32: 5f:c3:bd:63:18:22:51:72:ae:15:c9:81:5f:0b:bd:be:93:42: 5a:a7:19:05:c3:db:17:49:49:8d:ff:4c:19:17:83:a9:d8:5c: 9c:ff:81:ba:e3:7e:22:d9:97:e9:46:e1:4c:3d:9e:c6:01:17: fb:44:5c:41:a0:97:3b:b9:58:e0:b8:cd:f6:f4:76:58:4c:50: bf:30:b7:41:cd:8e:88:31:5e:83:72:21:62:fa:18:cb:d1:e6: 18:43:c8:15:11:47:f3:f5:a7:8f:fe:8e:fc:5a:4c:e9:79:c1: cc:6f:fb:81:d8:4d:e4:2f:49:3c:fd:52:ca:01:68:08:10:db: 5e:da:a7:b4:a6:81:1c:95:04:c5:38:12:6f:1c:4e:b3:dd:64: 0c:95:fc:fb:f1:64:ef:6a:56:68:cb:1e:6d:2b:f9:3a:d3:fd: dd:ae:34:6e:4e:39:63:a8:ce:d2:a8:6d:47:bb:06:a6:8b:c3: c0:ac:c9:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCN0ExMTAvBgNVBAUTKEI5RkVCQkEwOUNGMTBCMjg3RUVEMkNFNTY3MjJCM0M5 QTBFRjEyRkYwHhcNMjUwNTMwMjEwMDM2WhcNMjUwNjA2MjEwMDM2WjAYMRYwFAYD VQQDEw02ODNhMWM3NC0xNGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwe+oYWRQsId0QszuVwwzKVHJWZlRnh/b3Q/AmpwmZKz+2apphPUgxdx6uRwV gz2GKla6FhCilzXcXFUK1jq3uIRr4iqnNUvOTd/1K9TsBU+o9RbhETzHnjz/oONy xeEDDuaL1qLttgxCU+IE2sDSxhU03kLi+8nWGOt8RSrIb7PRNLxxx2ziqgkUWluM X/jrLoou8vIX6/I0rxxvE9aPBqiGw3g/hIRiDs5oMQzDm+TnrE/W8GUQKXlUPnA+ K+uZHD/F/ItZDMUJ9poRBWiwiRR33OPKM1ylVBqvfClx6LrWNl8rbpsJ5KbIs63J 0hBxwREk25Sshb6YpNDLMeUubQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2WeGpo lVPEk2/IEQoLT4l0kao4MB8GA1UdIwQYMBaAFLn+u6Cc8Qsofu0s5Wcis8mg7xL/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI3QS81RDIxMTg0QzhF QjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5aC03U3psWnlLenlhRHZF djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmNjdvSnp4Q3loLTdTemxaeUt6eWFEdkV2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkI3QS81RDIxMTg0QzhFQjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5 aC03U3psWnlLenlhRHZFdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBezOHXXP/lHrb8PmYU0ZsltTbQVUj0l7HxZq9HfiftKmvhBzMyEpo3 bqBzHm1atngU34dYqigzh0Nl14gXBW6TLaOeYimAhzJfw71jGCJRcq4VyYFfC72+ k0JapxkFw9sXSUmN/0wZF4Op2Fyc/4G6434i2ZfpRuFMPZ7GARf7RFxBoJc7uVjg uM329HZYTFC/MLdBzY6IMV6DciFi+hjL0eYYQ8gVEUfz9aeP/o78WkzpecHMb/uB 2E3kL0k8/VLKAWgIENte2qe0poEclQTFOBJvHE6z3WQMlfz78WTvalZoyx5tK/k6 0/3drjRuTjljqM7SqG1Huwami8PArMmx -----END CERTIFICATE-----Generated at Sat May 31 17:46:32 2025 by rpki-client