$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft File: uxh7m1B2e7e7wih3IL02wLjQaJY.mft (raw, json) Hash identifier: VGR0bBH9gnEA+u1HZGj3h+5jPOVElD6kbV1XBPrQnFI= Subject key identifier: DF:B9:DA:7A:24:7D:FC:5B:06:DA:8C:00:0F:3B:21:D6:CB:C0:E3:19 Authority key identifier: BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96 Certificate issuer: /CN=A9191E43/serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896 Certificate serial: 02E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft Manifest number: 02E5 Signing time: Sat 31 May 2025 01:31:05 +0000 Manifest this update: Sat 31 May 2025 01:31:04 +0000 Manifest next update: Sat 07 Jun 2025 01:31:04 +0000 Files and hashes: 1: uxh7m1B2e7e7wih3IL02wLjQaJY.crl (hash: 6ofvKAMjXomFYMuudMiGiWEBE+N9V/tk0Fiyxzz4Q78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 741 (0x2e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E43, serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896 Validity Not Before: May 31 01:31:04 2025 GMT Not After : Jun 7 01:31:04 2025 GMT Subject: CN=683a5bd9-898c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c1:6d:d1:bc:f7:c1:6b:ee:24:95:2d:e0:64: bc:51:60:11:be:78:7e:41:f1:ae:02:24:a5:39:24: b3:d4:6d:97:4c:d9:2b:52:38:b2:6f:ec:64:99:17: 4c:52:6f:3d:c3:ba:23:05:f7:82:87:12:dc:f0:37: 20:85:31:19:45:f6:56:b9:12:f4:32:b9:d0:bb:ea: 54:ac:93:d4:87:5a:2a:b2:3e:fc:5b:86:7e:d3:69: ca:95:1c:34:05:db:02:02:e2:4c:d7:2b:98:1d:fd: 58:0f:da:82:c7:06:b8:c0:56:e1:ca:60:57:e0:05: 45:ba:37:2b:58:42:d4:0e:e4:67:87:19:cd:f0:1a: 1c:fe:78:8e:0a:0c:f4:58:54:58:0c:59:a9:02:e1: 43:fa:ce:3a:4b:26:2c:be:28:ae:bb:9d:5d:e8:ba: 9b:c9:76:54:c3:68:85:64:3f:40:da:d5:43:c7:c1: 1d:d3:a9:13:5b:54:8d:aa:ff:f8:9e:21:28:99:77: 4e:6d:ea:43:43:bf:1c:5a:f5:a4:34:a4:b7:85:8e: c2:6d:3b:c8:15:25:4b:98:ea:7f:7d:14:3d:da:b9: 9e:8d:68:13:be:0e:0c:da:c0:ed:c9:c6:61:00:dd: 9e:6e:5f:7f:05:0a:01:b9:9f:d6:58:70:07:81:f2: 78:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B9:DA:7A:24:7D:FC:5B:06:DA:8C:00:0F:3B:21:D6:CB:C0:E3:19 X509v3 Authority Key Identifier: keyid:BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:21:38:6d:df:db:9d:1d:bc:ce:67:39:8c:73:b0:aa:29:c6: 17:b8:a5:0b:cf:af:92:4e:fa:b9:47:1a:7a:5a:1a:20:64:cd: 88:02:98:95:cd:90:2c:a5:d4:92:60:8c:7e:98:a6:aa:fa:90: 86:8b:92:e4:e8:2d:f4:3e:14:27:97:84:de:b9:79:e9:2b:9a: 58:2d:f3:4e:6c:8a:ef:ef:e7:d6:f0:99:42:a1:ab:48:01:59: 5a:1d:33:97:f7:b3:f3:47:47:e7:7e:3c:5d:b9:75:5b:c6:18: 92:bb:bf:1d:6e:ff:4c:81:e5:6d:9d:fb:46:ec:ed:ec:14:d2: f8:d5:43:92:85:14:d6:8b:50:8d:ea:0a:7a:db:18:19:80:51: cc:33:87:7f:40:0f:c3:3c:d2:35:a3:58:58:73:d1:2c:ec:01: 9a:0c:40:18:50:7e:e1:b2:dd:21:99:7c:c9:39:2f:1e:81:01: 06:db:34:cb:57:e6:fd:4b:a0:1c:65:5f:2a:57:f5:1d:11:04: a2:fc:8a:58:9c:72:ad:3c:96:c4:fa:39:2c:47:27:f4:ce:86: 9b:8a:88:64:f4:73:77:5f:73:ab:fa:82:f8:4e:fd:27:b6:31: 69:85:ef:c1:0d:00:db:34:3e:98:77:b6:2b:0d:ba:a7:f3:f7: 82:ac:b6:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFNDMxMTAvBgNVBAUTKEJCMTg3QjlCNTA3NjdCQjdCQkMyMjg3NzIwQkQzNkMw QjhEMDY4OTYwHhcNMjUwNTMxMDEzMTA0WhcNMjUwNjA3MDEzMTA0WjAYMRYwFAYD VQQDEw02ODNhNWJkOS04OThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cFt0bz3wWvuJJUt4GS8UWARvnh+QfGuAiSlOSSz1G2XTNkrUjiyb+xkmRdM Um89w7ojBfeChxLc8DcghTEZRfZWuRL0MrnQu+pUrJPUh1oqsj78W4Z+02nKlRw0 BdsCAuJM1yuYHf1YD9qCxwa4wFbhymBX4AVFujcrWELUDuRnhxnN8Boc/niOCgz0 WFRYDFmpAuFD+s46SyYsviiuu51d6LqbyXZUw2iFZD9A2tVDx8Ed06kTW1SNqv/4 niEomXdObepDQ78cWvWkNKS3hY7CbTvIFSVLmOp/fRQ92rmejWgTvg4M2sDtycZh AN2ebl9/BQoBuZ/WWHAHgfJ40QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+52nok ffxbBtqMAA87IdbLwOMZMB8GA1UdIwQYMBaAFLsYe5tQdnu3u8IodyC9NsC40GiW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU0My81MDhEQTExOEUy MDExMUVDOTdDQjMxNUNDNEY5QUUwMi91eGg3bTFCMmU3ZTd3aWgzSUwwMndMalFh SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V4aDdtMUIyZTdlN3dpaDNJTDAyd0xqUWFKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUU0My81MDhEQTExOEUyMDExMUVDOTdDQjMxNUNDNEY5QUUwMi91eGg3bTFCMmU3 ZTd3aWgzSUwwMndMalFhSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3ITht39udHbzOZzmMc7CqKcYXuKULz6+STvq5Rxp6WhogZM2IApiV zZAspdSSYIx+mKaq+pCGi5Lk6C30PhQnl4TeuXnpK5pYLfNObIrv7+fW8JlCoatI AVlaHTOX97PzR0fnfjxduXVbxhiSu78dbv9MgeVtnftG7O3sFNL41UOShRTWi1CN 6gp62xgZgFHMM4d/QA/DPNI1o1hYc9Es7AGaDEAYUH7hst0hmXzJOS8egQEG2zTL V+b9S6AcZV8qV/UdEQSi/IpYnHKtPJbE+jksRyf0zoabiohk9HN3X3Or+oL4Tv0n tjFphe/BDQDbND6Yd7YrDbqn8/eCrLaU -----END CERTIFICATE-----Generated at Sat May 31 17:27:56 2025 by rpki-client