$ rpki-client -vvf rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft File: uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft (raw, json) Hash identifier: GwyaXR5ujSeBhVNO4LWU6RTVQfaypWQKKQw+dE2/NSE= Subject key identifier: 79:75:AE:E4:C9:75:FA:E6:3D:F1:04:0A:26:9B:40:71:CA:75:51:FC Authority key identifier: B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6 Certificate issuer: /CN=A919D72D/serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6 Certificate serial: 0635 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft Manifest number: 062F Signing time: Fri 30 May 2025 22:55:11 +0000 Manifest this update: Fri 30 May 2025 22:55:10 +0000 Manifest next update: Fri 06 Jun 2025 22:55:10 +0000 Files and hashes: 1: uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl (hash: BTBpKKCim8Iajz4KEGOJJ+JqcooLmcEmoahMI/VH+14=) 2: 00C79724968F11EB9A79630BC4F9AE02.roa (hash: Y2zv5qoN2STM8iOeHa24FYyQDvrtP06yfpXTjv2gJRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1589 (0x635) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D72D, serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6 Validity Not Before: May 30 22:55:10 2025 GMT Not After : Jun 6 22:55:10 2025 GMT Subject: CN=683a374f-ae50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d0:41:02:a6:be:15:55:09:0d:04:88:30:ce: dd:0e:6a:dc:d8:8c:3d:bf:82:72:49:c8:a1:3c:08: 66:da:4f:d1:1b:ef:3d:15:bf:67:ff:1d:6e:9b:5e: f5:cc:f3:00:97:f4:82:3e:20:f1:2a:dc:00:90:b4: 79:df:d9:ba:7d:81:50:a2:ec:88:e2:ac:96:ed:d0: 56:2f:40:b3:65:4e:c7:a4:d8:e7:72:82:36:cc:7f: f8:56:12:5b:ab:ba:12:f5:9c:9e:70:47:aa:d1:31: f8:12:2c:8d:d0:bb:3f:45:4c:07:2f:f0:ea:2c:6f: c3:f1:9e:bc:d5:c5:6b:23:60:f9:d3:7e:94:01:f6: a6:d3:37:be:fe:d3:bf:6f:92:18:4c:29:78:92:6f: 5a:4e:02:e0:ff:4e:17:c5:65:a6:39:13:72:52:29: 2c:90:e2:c9:47:73:4d:52:0c:df:5d:ce:85:6c:b7: ae:8f:0f:5a:ff:2e:04:43:08:bd:0c:54:95:39:45: ba:ce:50:4a:ce:f4:7c:10:32:26:33:f0:1f:e5:29: 63:04:5f:fb:53:27:ac:9c:72:88:f3:5e:5a:44:f2: 28:be:6b:56:f2:75:b1:b8:5f:45:7c:b3:bf:72:c0: 9f:9d:65:06:91:fd:03:c0:e7:d4:6a:7a:2e:09:3c: ae:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:75:AE:E4:C9:75:FA:E6:3D:F1:04:0A:26:9B:40:71:CA:75:51:FC X509v3 Authority Key Identifier: keyid:B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:46:6d:00:2a:b5:a9:9f:86:77:7c:14:b9:fc:55:38:3a:f7: 8c:4c:37:b8:b5:87:62:ba:ed:d6:d4:ab:c1:54:43:cf:3b:5a: 90:dd:57:5c:e3:2b:e9:3c:90:0e:b2:e1:17:75:19:87:e5:2e: 5e:b7:3a:93:8f:64:9e:7d:9d:16:26:5e:fb:1a:07:b7:94:e4: be:e8:f4:ad:94:bd:4a:70:6f:24:0d:b6:d9:1e:a2:7f:56:f7: 30:5e:05:31:7c:74:8f:da:19:56:92:72:c6:25:a9:31:49:8c: 2e:be:1d:c7:e8:57:79:28:18:0a:a1:e1:27:99:8a:63:31:9d: f9:1e:b3:42:bb:f0:f4:99:f1:d0:8b:33:b6:74:62:93:b6:ee: ee:26:a5:12:c8:27:95:49:22:e2:77:f6:4f:71:7a:1c:4b:1d: 55:df:cc:e0:bb:2d:c3:95:10:ce:10:36:e9:7a:5a:f9:80:ba: 6b:d8:b9:0a:e2:06:19:ec:92:0e:ee:d0:2e:12:63:8f:1e:15: 0b:d9:c7:a7:88:9e:dc:88:59:25:6c:71:8b:69:7d:48:9a:a0: cd:f0:af:79:01:67:a9:03:b0:bd:b0:87:75:4d:ad:b9:25:b1: 6c:44:ca:c0:09:0c:58:7d:e3:14:4b:d7:9f:bd:6e:0c:7f:f7: 1d:27:8e:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ3MkQxMTAvBgNVBAUTKEI4RjYxQ0FCQjkxMTlENkMzNzY4NUYwQUJFMzRBRUUy NkEwMjE3RTYwHhcNMjUwNTMwMjI1NTEwWhcNMjUwNjA2MjI1NTEwWjAYMRYwFAYD VQQDEw02ODNhMzc0Zi1hZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtBBAqa+FVUJDQSIMM7dDmrc2Iw9v4JyScihPAhm2k/RG+89Fb9n/x1um171 zPMAl/SCPiDxKtwAkLR539m6fYFQouyI4qyW7dBWL0CzZU7HpNjncoI2zH/4VhJb q7oS9ZyecEeq0TH4EiyN0Ls/RUwHL/DqLG/D8Z681cVrI2D5036UAfam0ze+/tO/ b5IYTCl4km9aTgLg/04XxWWmORNyUikskOLJR3NNUgzfXc6FbLeujw9a/y4EQwi9 DFSVOUW6zlBKzvR8EDImM/Af5SljBF/7UyesnHKI815aRPIovmtW8nWxuF9FfLO/ csCfnWUGkf0DwOfUanouCTyuWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHl1ruTJ dfrmPfEECiabQHHKdVH8MB8GA1UdIwQYMBaAFLj2HKu5EZ1sN2hfCr40ruJqAhfm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDcyRC85OEJBNDZCNDk2 OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5XdzNhRjhLdmpTdTRtb0NG LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQWWNxN2tSbld3M2FGOEt2alN1NG1vQ0YtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDcyRC85OEJBNDZCNDk2OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5X dzNhRjhLdmpTdTRtb0NGLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxRm0AKrWpn4Z3fBS5/FU4OveMTDe4tYdiuu3W1KvBVEPPO1qQ3Vdc 4yvpPJAOsuEXdRmH5S5etzqTj2SefZ0WJl77Gge3lOS+6PStlL1KcG8kDbbZHqJ/ VvcwXgUxfHSP2hlWknLGJakxSYwuvh3H6Fd5KBgKoeEnmYpjMZ35HrNCu/D0mfHQ izO2dGKTtu7uJqUSyCeVSSLid/ZPcXocSx1V38zguy3DlRDOEDbpelr5gLpr2LkK 4gYZ7JIO7tAuEmOPHhUL2ceniJ7ciFklbHGLaX1ImqDN8K95AWepA7C9sId1Ta25 JbFsRMrACQxYfeMUS9efvW4Mf/cdJ454 -----END CERTIFICATE-----Generated at Sat May 31 17:22:03 2025 by rpki-client