$ rpki-client -vvf rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft File: 0ueOUsXby_XhhB2s5SeuqolKmnY.mft (raw, json) Hash identifier: mjzDv3FXHtlIZJLvk9cA0r/eBbXydmIXkZUzMKaKFzg= Subject key identifier: 8B:E0:55:3E:A9:05:EC:DC:4E:9B:49:B7:E0:B6:6E:47:9B:3C:60:7F Authority key identifier: D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76 Certificate issuer: /CN=A91262BD/serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76 Certificate serial: 0627 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft Manifest number: 0617 Signing time: Thu 24 Apr 2025 22:35:28 +0000 Manifest this update: Thu 24 Apr 2025 22:35:27 +0000 Manifest next update: Thu 01 May 2025 22:35:27 +0000 Files and hashes: 1: 0ueOUsXby_XhhB2s5SeuqolKmnY.crl (hash: NY8SA2L1Bvo5fhf9qhMoKbTAygurIFw/eLr7cqeLzLE=) 2: D0A31DDC8E6011EC93F6710FC4F9AE02.roa (hash: 56SXWg9vgGgESxFQOAJJzB+wTF1OQoT0wNilbJGbabc=) 3: CFD605CC8E6011EC93F6710FC4F9AE02.roa (hash: s1rfV8r68HE4TuansWzDnqISJzRH7RjJXWNUpk6BVJU=) 4: D19ABBB48E6011EC93F6710FC4F9AE02.roa (hash: 2Y9C9KiNax/FdL7eQM2hCoTzZKyNjRhe4AuCRgLGZn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1575 (0x627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262BD, serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76 Validity Not Before: Apr 24 22:35:27 2025 GMT Not After : May 1 22:35:27 2025 GMT Subject: CN=680abcaf-3e51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8c:a4:37:fc:ae:df:8f:2e:6c:11:03:50:85: c9:18:0e:4a:04:3d:bb:82:e9:6a:10:08:ee:13:77: 68:04:35:34:d5:1a:df:2b:fd:46:25:1a:b0:61:da: f1:2b:b7:0e:15:de:b9:74:f7:24:dd:17:65:62:9a: 96:cf:15:93:8a:7b:ae:c6:eb:fc:40:4c:82:32:e0: 66:ee:4d:3b:f6:27:fb:65:70:e4:31:bd:57:82:96: 43:d6:80:cc:01:4d:9d:3a:57:b9:c1:a4:78:35:e9: a8:a7:75:cd:b2:23:40:e5:cc:fa:56:b0:1d:91:bf: 08:4d:b7:44:a4:cc:94:63:ae:88:43:5c:f8:ce:cb: 10:bd:be:49:00:59:0f:a2:3d:89:34:4d:f9:9b:06: d0:6e:d9:09:ff:15:63:6b:07:e6:49:db:65:dc:0f: af:b3:a4:3e:e9:cc:45:2e:ab:61:a3:ec:51:08:d9: 46:25:0e:1a:43:45:15:59:fe:da:d4:0d:72:e6:8d: 44:91:a1:5e:30:33:58:e0:81:c5:c8:85:b2:7e:d3: 3b:ff:81:67:31:60:eb:ad:a9:93:42:12:03:7c:42: 85:65:e8:7d:a7:2e:9d:e8:fb:c5:dd:33:5a:be:2b: 79:a3:b5:2b:43:0a:34:20:31:cb:26:0a:e3:74:95: 86:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E0:55:3E:A9:05:EC:DC:4E:9B:49:B7:E0:B6:6E:47:9B:3C:60:7F X509v3 Authority Key Identifier: keyid:D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:02:44:90:c0:5a:0c:f0:83:47:18:4b:df:fc:90:60:46:65: 44:72:8c:c3:6f:14:15:ad:41:5d:18:2a:d8:e7:67:80:c6:a8: 3c:e3:95:a6:a1:29:ac:53:bf:62:40:4f:6b:f5:b9:8a:27:b3: 02:01:a2:9f:00:a8:2f:84:9d:55:23:9c:e1:d4:50:ce:be:f7: 17:e6:cb:92:8c:95:92:6a:27:60:1c:eb:52:0e:2a:d3:de:7a: 84:d1:7e:02:96:23:2d:2a:1c:71:46:df:a6:7d:22:44:2b:52: 9f:fe:79:81:10:a1:ea:bd:46:c0:69:51:be:6e:16:4f:81:e4: 00:c7:bc:ec:b9:32:94:d9:af:ba:30:7a:ac:99:d7:c2:18:4b: 44:41:66:b5:11:bc:1b:9c:23:cb:23:c1:f1:3b:36:ed:2a:c6: a8:d3:2b:d5:8f:39:4e:30:a3:a6:9c:7c:7b:54:c7:57:32:bb: c1:57:87:0b:34:44:13:55:3d:b0:bf:8e:5d:f3:af:22:58:6b: 1a:a8:3e:59:07:4e:8c:d2:38:66:91:ef:2c:78:05:4a:0f:c7: 0a:57:5e:84:9c:26:24:c3:9b:39:ad:04:28:96:06:19:f4:7c: 73:70:e0:59:fd:fe:9e:04:81:d3:86:ff:28:3c:25:ff:f0:cd: 42:70:80:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQkQxMTAvBgNVBAUTKEQyRTc4RTUyQzVEQkNCRjVFMTg0MURBQ0U1MjdBRUFB ODk0QTlBNzYwHhcNMjUwNDI0MjIzNTI3WhcNMjUwNTAxMjIzNTI3WjAYMRYwFAYD VQQDEw02ODBhYmNhZi0zZTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6oykN/yu348ubBEDUIXJGA5KBD27gulqEAjuE3doBDU01RrfK/1GJRqwYdrx K7cOFd65dPck3RdlYpqWzxWTinuuxuv8QEyCMuBm7k079if7ZXDkMb1XgpZD1oDM AU2dOle5waR4Nemop3XNsiNA5cz6VrAdkb8ITbdEpMyUY66IQ1z4zssQvb5JAFkP oj2JNE35mwbQbtkJ/xVjawfmSdtl3A+vs6Q+6cxFLqtho+xRCNlGJQ4aQ0UVWf7a 1A1y5o1EkaFeMDNY4IHFyIWyftM7/4FnMWDrramTQhIDfEKFZeh9py6d6PvF3TNa vit5o7UrQwo0IDHLJgrjdJWGZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvgVT6p BezcTptJt+C2bkebPGB/MB8GA1UdIwQYMBaAFNLnjlLF28v14YQdrOUnrqqJSpp2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJCRC9EM0YxMUYwRTk5 MTMxMUVCODYwRERCM0RDNEY5QUUwMi8wdWVPVXNYYnlfWGhoQjJzNVNldXFvbEtt blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB1ZU9Vc1hieV9YaGhCMnM1U2V1cW9sS21uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJCRC9EM0YxMUYwRTk5MTMxMUVCODYwRERCM0RDNEY5QUUwMi8wdWVPVXNYYnlf WGhoQjJzNVNldXFvbEttblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRAkSQwFoM8INHGEvf/JBgRmVEcozDbxQVrUFdGCrY52eAxqg845Wm oSmsU79iQE9r9bmKJ7MCAaKfAKgvhJ1VI5zh1FDOvvcX5suSjJWSaidgHOtSDirT 3nqE0X4CliMtKhxxRt+mfSJEK1Kf/nmBEKHqvUbAaVG+bhZPgeQAx7zsuTKU2a+6 MHqsmdfCGEtEQWa1EbwbnCPLI8HxOzbtKsao0yvVjzlOMKOmnHx7VMdXMrvBV4cL NEQTVT2wv45d868iWGsaqD5ZB06M0jhmke8seAVKD8cKV16EnCYkw5s5rQQolgYZ 9HxzcOBZ/f6eBIHThv8oPCX/8M1CcIB5 -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:50 2025 by rpki-client