$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft File: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft (raw, json) Hash identifier: CVooDIEahLMRI9YxGGtGf+Dds6f8ACq4KIhZiLD+F1M= Subject key identifier: 44:9F:51:7A:99:C5:AA:06:02:DE:21:D3:1C:72:68:6D:36:60:FA:CC Authority key identifier: B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD Certificate issuer: /CN=A9170829/serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD Certificate serial: 042D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft Manifest number: 054F Signing time: Sun 27 Apr 2025 00:04:31 +0000 Manifest this update: Sun 27 Apr 2025 00:04:30 +0000 Manifest next update: Sun 04 May 2025 00:04:30 +0000 Files and hashes: 1: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl (hash: bDvL+jykNvNeFNRL+Sky5TmNhwjlS3HgbLXfrF972WE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1069 (0x42d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170829, serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD Validity Not Before: Apr 27 00:04:30 2025 GMT Not After : May 4 00:04:30 2025 GMT Subject: CN=680d748e-b488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:50:65:2c:bf:3d:1f:85:45:d2:94:d5:2c:c2: 9e:63:59:90:a5:68:0f:63:5f:46:c7:c9:74:9b:af: 98:69:dd:37:6b:d9:74:83:ca:cc:ab:08:da:72:f9: 0f:53:9d:51:75:f1:e6:78:ac:65:59:04:e1:00:c1: 8a:f8:e9:62:20:d2:59:f9:33:5a:22:19:27:2f:77: 9c:a1:2c:03:f7:c3:22:ba:27:b2:b6:9f:a9:41:bb: f0:82:5f:bc:69:f0:fe:7b:c5:8d:5b:a0:ef:44:e5: 98:a7:08:de:d4:d7:b4:9e:56:fb:53:5a:e6:e7:76: 6a:7e:aa:48:e5:2b:e9:00:fa:fb:c3:e5:ae:d8:f9: 23:5e:40:a0:f4:93:57:74:b8:e1:c3:f6:69:c6:ce: 93:5a:9b:3b:14:cc:14:8f:12:d3:ef:eb:1b:66:1d: b3:90:2a:bf:c8:00:40:1e:1b:d6:b8:d0:b0:22:c1: cf:34:a0:dd:02:72:ff:23:f2:53:fc:7f:da:45:1e: d9:5c:9b:fe:66:ab:1b:a3:35:ac:a7:ae:1e:fe:f7: 56:b9:2a:1b:23:5c:67:df:9e:42:3a:8e:05:ca:0c: 5f:79:88:a2:37:20:4f:9d:ba:2b:c7:92:48:17:15: 99:04:bf:39:40:ff:88:b4:d6:2b:c7:84:18:5d:61: e7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9F:51:7A:99:C5:AA:06:02:DE:21:D3:1C:72:68:6D:36:60:FA:CC X509v3 Authority Key Identifier: keyid:B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:2d:ae:6a:b1:29:78:02:e4:c4:bb:33:42:d6:8f:36:0a:d9: c1:31:2d:1d:c8:38:ea:47:11:28:c7:b6:e6:6c:ec:d7:cf:3c: 70:00:19:a0:47:6f:c9:50:4b:8b:11:48:9b:a8:2d:53:b4:75: 6f:ef:79:88:f4:25:90:b4:d1:9b:4d:5a:6e:35:f6:d7:47:90: 28:22:b8:cf:fd:17:55:48:8b:e8:70:47:8d:86:0d:da:7e:1e: f1:bc:05:1d:d1:cb:57:f6:fb:fc:87:92:95:48:43:db:85:e9: 4d:2d:e9:0c:ff:08:d5:86:6c:51:09:b8:44:5f:81:5f:d3:ea: 5d:bb:c5:00:b2:79:ba:3c:c7:75:6b:67:07:6a:65:09:7e:57: b7:7b:63:71:53:19:67:e8:c8:6e:2d:b9:aa:04:a2:dd:7d:db: 4e:f9:be:0a:5b:20:81:0c:63:c2:59:db:d9:ae:23:1f:48:71: f3:4e:a0:c0:cb:47:fd:8f:4e:fc:ed:2a:8a:9e:71:89:d7:97: 21:67:a4:83:99:b2:08:e1:64:62:38:e4:a2:2b:e8:e0:0d:28: 90:ec:36:ff:c7:61:1e:07:7a:d7:c6:7f:26:76:98:50:70:e6: f3:7b:90:dd:05:a5:45:8c:3d:bc:9a:f9:01:d0:f9:28:50:ef: d3:70:ba:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA4MjkxMTAvBgNVBAUTKEI4Rjg0NkI0MzUzQjY0MjlBQzQwNDNGMzJCQjc4OTRD RjgzODU1RkQwHhcNMjUwNDI3MDAwNDMwWhcNMjUwNTA0MDAwNDMwWjAYMRYwFAYD VQQDEw02ODBkNzQ4ZS1iNDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFBlLL89H4VF0pTVLMKeY1mQpWgPY19Gx8l0m6+Yad03a9l0g8rMqwjacvkP U51RdfHmeKxlWQThAMGK+OliINJZ+TNaIhknL3ecoSwD98Miuieytp+pQbvwgl+8 afD+e8WNW6DvROWYpwje1Ne0nlb7U1rm53ZqfqpI5SvpAPr7w+Wu2PkjXkCg9JNX dLjhw/Zpxs6TWps7FMwUjxLT7+sbZh2zkCq/yABAHhvWuNCwIsHPNKDdAnL/I/JT /H/aRR7ZXJv+ZqsbozWsp64e/vdWuSobI1xn355COo4FygxfeYiiNyBPnborx5JI FxWZBL85QP+ItNYrx4QYXWHnbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESfUXqZ xaoGAt4h0xxyaG02YPrMMB8GA1UdIwQYMBaAFLj4RrQ1O2QprEBD8yu3iUz4OFX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi91UGhHdERVN1pDbXNRRVB6SzdlSlRQZzRW ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQaEd0RFU3WkNtc1FFUHpLN2VKVFBnNFZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDgyOS83NjY3QkVEMDYzQTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi91UGhHdERVN1pD bXNRRVB6SzdlSlRQZzRWZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByLa5qsSl4AuTEuzNC1o82CtnBMS0dyDjqRxEox7bmbOzXzzxwABmg R2/JUEuLEUibqC1TtHVv73mI9CWQtNGbTVpuNfbXR5AoIrjP/RdVSIvocEeNhg3a fh7xvAUd0ctX9vv8h5KVSEPbhelNLekM/wjVhmxRCbhEX4Ff0+pdu8UAsnm6PMd1 a2cHamUJfle3e2NxUxln6MhuLbmqBKLdfdtO+b4KWyCBDGPCWdvZriMfSHHzTqDA y0f9j0787SqKnnGJ15chZ6SDmbII4WRiOOSiK+jgDSiQ7Db/x2EeB3rXxn8mdphQ cObze5DdBaVFjD28mvkB0PkoUO/TcLq9 -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:03 2025 by rpki-client on console.sobornost.net