$ rpki-client -vvf rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft File: uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft (raw, json) Hash identifier: Pq/9Bdd8V2OWm1zaXyBNOKx1v6hGF+iiFw2GD68zyfI= Subject key identifier: 27:56:FF:E6:C9:2E:02:6A:03:D8:06:FB:56:7D:E7:A0:3F:10:FA:22 Authority key identifier: B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6 Certificate issuer: /CN=A919D72D/serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6 Certificate serial: 0625 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft Manifest number: 061F Signing time: Sat 26 Apr 2025 22:25:23 +0000 Manifest this update: Sat 26 Apr 2025 22:25:22 +0000 Manifest next update: Sat 03 May 2025 22:25:22 +0000 Files and hashes: 1: uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl (hash: GrFBic4mSFo5aZ6+jQp90JvEnTgpVhnnelQOko3+ra8=) 2: 00C79724968F11EB9A79630BC4F9AE02.roa (hash: Y2zv5qoN2STM8iOeHa24FYyQDvrtP06yfpXTjv2gJRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1573 (0x625) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D72D, serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6 Validity Not Before: Apr 26 22:25:22 2025 GMT Not After : May 3 22:25:22 2025 GMT Subject: CN=680d5d52-822c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:53:91:e9:c3:a0:fb:79:2c:91:79:eb:ed:65: b2:1e:26:88:eb:59:e1:d2:bf:60:b3:c0:8f:e0:c3: 02:fd:8e:ba:0a:8d:21:44:1d:92:aa:3d:49:7b:b4: 35:64:75:62:c8:6f:04:03:b0:08:84:13:d0:ef:3f: 7c:e0:9c:01:fd:a7:8c:99:0e:7c:66:12:e2:90:08: 5b:16:62:8e:32:fb:3d:19:2f:65:35:de:f5:47:d4: 8b:d8:94:1e:43:1a:79:73:42:d4:45:7d:90:73:b3: 48:ae:87:11:8b:89:b8:f1:16:5f:a8:18:f4:7b:e6: 60:3e:ca:5f:e7:b2:54:86:f0:57:c3:53:9e:68:22: d5:e3:1a:66:1b:a0:e1:1d:b0:55:46:3b:2f:e2:f4: b8:8c:88:83:6d:dd:4d:cf:a9:a7:16:18:e3:32:22: 6e:ea:da:fb:05:fc:b6:96:30:2c:70:85:1f:50:09: 33:b8:02:03:6a:7f:5e:cd:c9:c2:77:ad:51:c8:54: a7:d0:33:bf:59:b0:eb:20:be:90:e1:65:a5:3e:76: 32:3e:72:7d:42:8c:26:cd:eb:21:31:01:4b:1a:cc: 34:73:36:1f:18:8f:45:d5:b6:c8:63:75:67:6f:bc: 5d:a6:ee:d8:9c:79:5e:58:bf:dc:54:db:d7:1a:c8: f3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:56:FF:E6:C9:2E:02:6A:03:D8:06:FB:56:7D:E7:A0:3F:10:FA:22 X509v3 Authority Key Identifier: keyid:B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:ce:c2:18:f8:35:d1:bc:53:1c:e3:59:06:d0:ef:f3:3c:20: 29:03:65:40:22:92:63:11:a3:ac:18:19:4d:ff:4a:f0:1a:b0: 5b:9a:6b:81:8d:52:05:82:b5:5d:47:ec:6a:2c:da:58:30:03: 91:53:22:88:c4:52:f6:2b:82:2b:59:67:aa:e0:3a:52:35:ed: b5:68:86:a8:27:30:1e:29:09:33:25:57:03:a5:17:59:f6:4c: 48:a3:6c:59:9c:c2:92:a9:90:5b:18:53:5a:20:47:bb:84:65: 0c:42:4d:6f:d0:73:6f:34:7f:52:7f:40:dc:37:12:da:4c:e2: 6d:94:bf:b5:a3:a9:bd:8c:0c:8f:a2:4c:7c:1b:a4:59:4a:1f: 82:ea:22:f4:fc:d8:4f:8e:a7:c3:19:f2:54:4e:d0:bd:5c:e9: 06:88:08:bd:dc:c8:a3:95:b7:17:df:ed:86:1b:9f:f9:da:62: 2a:e4:9f:57:ec:5c:6d:6e:75:9b:d8:8b:bf:c1:01:28:58:00: f3:aa:2f:8d:bd:11:3f:ba:e2:c0:e0:97:57:77:e5:31:7a:ea: 76:c0:98:45:fc:17:bf:d6:0e:07:cc:0e:c3:3c:8a:0a:e0:98: ef:60:6c:19:34:7a:bf:01:25:2a:6c:d3:aa:a7:1b:4f:05:fa: 90:e8:f7:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ3MkQxMTAvBgNVBAUTKEI4RjYxQ0FCQjkxMTlENkMzNzY4NUYwQUJFMzRBRUUy NkEwMjE3RTYwHhcNMjUwNDI2MjIyNTIyWhcNMjUwNTAzMjIyNTIyWjAYMRYwFAYD VQQDEw02ODBkNWQ1Mi04MjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FOR6cOg+3kskXnr7WWyHiaI61nh0r9gs8CP4MMC/Y66Co0hRB2Sqj1Je7Q1 ZHViyG8EA7AIhBPQ7z984JwB/aeMmQ58ZhLikAhbFmKOMvs9GS9lNd71R9SL2JQe Qxp5c0LURX2Qc7NIrocRi4m48RZfqBj0e+ZgPspf57JUhvBXw1OeaCLV4xpmG6Dh HbBVRjsv4vS4jIiDbd1Nz6mnFhjjMiJu6tr7Bfy2ljAscIUfUAkzuAIDan9ezcnC d61RyFSn0DO/WbDrIL6Q4WWlPnYyPnJ9QowmzeshMQFLGsw0czYfGI9F1bbIY3Vn b7xdpu7YnHleWL/cVNvXGsjzBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdW/+bJ LgJqA9gG+1Z956A/EPoiMB8GA1UdIwQYMBaAFLj2HKu5EZ1sN2hfCr40ruJqAhfm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDcyRC85OEJBNDZCNDk2 OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5XdzNhRjhLdmpTdTRtb0NG LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQWWNxN2tSbld3M2FGOEt2alN1NG1vQ0YtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDcyRC85OEJBNDZCNDk2OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5X dzNhRjhLdmpTdTRtb0NGLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1zsIY+DXRvFMc41kG0O/zPCApA2VAIpJjEaOsGBlN/0rwGrBbmmuB jVIFgrVdR+xqLNpYMAORUyKIxFL2K4IrWWeq4DpSNe21aIaoJzAeKQkzJVcDpRdZ 9kxIo2xZnMKSqZBbGFNaIEe7hGUMQk1v0HNvNH9Sf0DcNxLaTOJtlL+1o6m9jAyP okx8G6RZSh+C6iL0/NhPjqfDGfJUTtC9XOkGiAi93MijlbcX3+2GG5/52mIq5J9X 7FxtbnWb2Iu/wQEoWADzqi+NvRE/uuLA4JdXd+Uxeup2wJhF/Be/1g4HzA7DPIoK 4JjvYGwZNHq/ASUqbNOqpxtPBfqQ6PfF -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:01 2025 by rpki-client on console.sobornost.net