$ rpki-client -vvf rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft File: uc1X4v9PWLuVmpVBoxz99ml2GLI.mft (raw, json) Hash identifier: 1UfbnIDRIhbvx1Db3WsL2Jbj+jT7o/JmXg4srP/b3Q0= Subject key identifier: 51:23:0F:F6:77:A5:B7:6C:AB:52:59:CF:E6:00:91:3C:E3:A7:1E:FD Authority key identifier: B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2 Certificate issuer: /CN=A918E023/serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft Manifest number: 1D Signing time: Sat 31 May 2025 07:28:18 +0000 Manifest this update: Sat 31 May 2025 07:28:18 +0000 Manifest next update: Sat 07 Jun 2025 07:28:18 +0000 Files and hashes: 1: uc1X4v9PWLuVmpVBoxz99ml2GLI.crl (hash: aVae5cn+TxwCVndlW20IidB/TAKRIH/Njhj4ql4SnTI=) 2: C420B2B6111D11F0BE9ABA7AC4F9AE02.roa (hash: BmMWgtMQ3PCdQlZ5TlrzvWUUVUt35N0MZwh0nPjZPiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E023, serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2 Validity Not Before: May 31 07:28:18 2025 GMT Not After : Jun 7 07:28:18 2025 GMT Subject: CN=683aaf92-5d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c9:fd:5e:8f:4b:1e:cd:da:24:d7:30:e3:ad: 12:a7:57:38:85:74:fd:04:3b:2e:c5:4a:e2:9f:7a: 01:28:3a:60:37:47:80:42:38:77:f3:8a:54:00:f2: db:8a:ef:47:d1:ad:75:e1:9f:40:7a:9e:c5:54:70: 53:e1:bc:69:da:18:41:67:1e:bd:bc:01:26:22:85: 63:ea:a0:0c:50:91:a4:52:92:89:71:7b:03:bb:44: 30:8d:b8:b4:4e:df:48:5b:15:10:2b:7b:5b:67:19: ac:c9:03:34:74:49:d3:30:57:c7:90:0b:9e:4f:59: a9:53:81:fe:1b:48:ec:6b:28:7e:c2:80:df:5a:73: 6b:71:90:58:2b:23:75:de:83:07:6d:84:92:57:84: b5:a6:00:69:03:6c:eb:2a:2a:94:73:09:13:4f:d0: 0b:d8:85:5b:b0:bc:c5:9f:b9:5c:f2:8e:f3:f9:fc: 74:99:67:2a:55:35:8d:33:9b:18:d5:40:d9:e4:cf: 49:3f:37:f7:1f:61:61:27:dc:5e:01:2e:53:b3:de: 13:a9:9e:00:41:71:9a:81:ac:df:13:69:97:b6:c5: 67:6a:72:ed:c3:91:b1:56:a2:88:3c:05:af:d9:f0: ff:d7:30:fd:a7:f0:be:28:5a:7f:1e:da:c3:24:05: d4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:23:0F:F6:77:A5:B7:6C:AB:52:59:CF:E6:00:91:3C:E3:A7:1E:FD X509v3 Authority Key Identifier: keyid:B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:0b:31:47:17:3c:72:b1:b3:46:72:41:8b:69:79:13:3c:08: c8:02:1b:6c:88:d0:39:53:a0:bf:41:c0:88:9a:10:61:35:30: 7b:62:e3:c5:87:2f:57:48:00:3f:74:03:74:8b:a6:fc:5f:06: 0d:0f:fe:16:98:14:89:65:d3:86:4f:b6:a0:18:8f:2f:59:6a: ae:db:56:c5:8c:95:b0:b8:89:5b:4d:73:7b:67:31:ef:81:e0: 14:9b:ad:65:58:2a:ca:c7:bc:18:e7:26:49:7a:8a:07:31:74: 6a:b2:dc:04:9f:da:f9:d8:aa:71:81:a4:d3:9c:ab:16:2b:a9: ec:38:69:00:85:2b:32:82:70:7a:12:25:8e:59:1e:81:f2:a3: 44:89:1b:2b:0d:14:f5:5a:ce:a8:91:15:e6:3c:30:10:f6:08: 9d:fc:dc:3c:22:af:70:e1:7a:fb:c5:97:b2:af:01:3d:1d:56: b6:b8:fb:f8:96:78:b7:1e:2d:7a:0c:64:69:24:81:c3:41:98: fd:ee:4c:61:e9:2e:8b:ac:9a:04:1e:24:aa:7b:f1:d0:5f:ec: 46:06:b6:0e:1b:9e:6c:42:9f:a1:52:4c:9a:9f:12:8c:c6:0b: 86:70:f2:66:36:fc:97:6e:a6:7d:05:85:a2:0f:bd:e8:c0:04: d8:59:a6:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTAyMzExMC8GA1UEBRMoQjlDRDU3RTJGRjRGNThCQjk1OUE5NTQxQTMxQ0ZERjY2 OTc2MThCMjAeFw0yNTA1MzEwNzI4MThaFw0yNTA2MDcwNzI4MThaMBgxFjAUBgNV BAMTDTY4M2FhZjkyLTVkMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiyf1ej0sezdok1zDjrRKnVziFdP0EOy7FSuKfegEoOmA3R4BCOHfzilQA8tuK 70fRrXXhn0B6nsVUcFPhvGnaGEFnHr28ASYihWPqoAxQkaRSkolxewO7RDCNuLRO 30hbFRAre1tnGazJAzR0SdMwV8eQC55PWalTgf4bSOxrKH7CgN9ac2txkFgrI3Xe gwdthJJXhLWmAGkDbOsqKpRzCRNP0AvYhVuwvMWfuVzyjvP5/HSZZypVNY0zmxjV QNnkz0k/N/cfYWEn3F4BLlOz3hOpngBBcZqBrN8TaZe2xWdqcu3DkbFWoog8Ba/Z 8P/XMP2n8L4oWn8e2sMkBdRDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUSMP9nel t2yrUlnP5gCRPOOnHv0wHwYDVR0jBBgwFoAUuc1X4v9PWLuVmpVBoxz99ml2GLIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFMDIzL0E2NTRGRUYwMTEx QzExRjBCMTVBRjk3MEM0RjlBRTAyL3VjMVg0djlQV0x1Vm1wVkJveHo5OW1sMkdM SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWMxWDR2OVBXTHVWbXBWQm94ejk5bWwyR0xJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF MDIzL0E2NTRGRUYwMTExQzExRjBCMTVBRjk3MEM0RjlBRTAyL3VjMVg0djlQV0x1 Vm1wVkJveHo5OW1sMkdMSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJcLMUcXPHKxs0ZyQYtpeRM8CMgCG2yI0DlToL9BwIiaEGE1MHti48WH L1dIAD90A3SLpvxfBg0P/haYFIll04ZPtqAYjy9Zaq7bVsWMlbC4iVtNc3tnMe+B 4BSbrWVYKsrHvBjnJkl6igcxdGqy3ASf2vnYqnGBpNOcqxYrqew4aQCFKzKCcHoS JY5ZHoHyo0SJGysNFPVazqiRFeY8MBD2CJ383Dwir3DhevvFl7KvAT0dVra4+/iW eLceLXoMZGkkgcNBmP3uTGHpLousmgQeJKp78dBf7EYGtg4bnmxCn6FSTJqfEozG C4Zw8mY2/Jdupn0FhaIPvejABNhZpqs= -----END CERTIFICATE-----Generated at Sat May 31 17:10:15 2025 by rpki-client