$ rpki-client -vvf rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft File: uXp_AVpzYHTfOERcmAdDeCGdKZU.mft (raw, json) Hash identifier: W9oU08xug+3P75/pne33g2WYzzh09M66QwPE0POFGWg= Subject key identifier: 22:E9:BC:84:BA:AB:DD:3E:94:97:C0:B5:7C:2A:D2:3C:0D:59:10:F4 Authority key identifier: B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95 Certificate issuer: /CN=A91320D4/serialNumber=B97A7F015A736074DF38445C98074378219D2995 Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft Manifest number: EE Signing time: Fri 25 Apr 2025 04:26:04 +0000 Manifest this update: Fri 25 Apr 2025 04:26:03 +0000 Manifest next update: Fri 02 May 2025 04:26:03 +0000 Files and hashes: 1: uXp_AVpzYHTfOERcmAdDeCGdKZU.crl (hash: 2mGrE4CMOPFJtX+3LSIja36Jc6070aaK80OBsvvECsw=) 2: BAB65090BD7811EEB634A117C4F9AE02.roa (hash: rOfi7pLc2YXhQ9Pw2aUr9rz0+D/rY6Ijcu5KC1k/f/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91320D4, serialNumber=B97A7F015A736074DF38445C98074378219D2995 Validity Not Before: Apr 25 04:26:03 2025 GMT Not After : May 2 04:26:03 2025 GMT Subject: CN=680b0edc-dedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2f:77:9a:4d:c4:3d:ce:a8:1d:af:34:d4:2c: f2:01:0c:7d:e8:a6:b5:01:2a:1c:3c:7d:ac:70:ac: 0c:73:de:60:ae:6f:f5:d6:bb:26:ae:1f:bb:ef:71: 60:46:f2:42:a0:1c:56:fb:d7:c4:f9:97:22:81:af: c8:32:3a:99:41:6d:55:3e:c9:17:e9:5f:47:af:ec: 43:d6:d2:75:fa:81:19:ea:03:4a:a4:3c:ac:12:a8: 63:0b:14:d9:07:4f:c6:77:5b:a3:10:7f:62:1c:ac: ab:b3:87:e6:32:1e:de:cd:64:5e:86:66:62:93:20: e9:ec:4e:4e:1a:a6:f3:41:57:5d:45:cc:af:5e:cd: 51:16:1f:12:26:27:85:29:4c:54:2f:c1:b1:02:34: 6b:53:83:75:c5:b3:c2:bf:74:6f:c9:20:20:b8:d5: 88:16:81:27:26:26:34:e1:80:3d:e9:40:35:cb:e0: 77:24:a6:ad:fc:17:53:92:99:58:bf:28:81:72:48: 1d:ab:e7:af:b5:21:51:c9:73:5a:22:db:16:7c:da: 49:3c:1f:e9:06:e3:54:17:0b:70:8d:f1:d4:b0:6f: ba:a5:11:e2:1c:10:23:0b:5e:f9:08:1e:a0:d0:cb: 95:5d:76:11:f5:58:48:3e:13:fe:67:49:39:a0:be: 67:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E9:BC:84:BA:AB:DD:3E:94:97:C0:B5:7C:2A:D2:3C:0D:59:10:F4 X509v3 Authority Key Identifier: keyid:B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:d2:c4:c1:98:b5:59:81:7f:14:51:84:b5:fd:4e:b5:c3:76: 01:fb:66:7e:03:31:78:91:5d:35:93:a6:e9:eb:49:8d:5c:7d: 99:c0:0d:47:d4:ac:5e:71:cd:d4:94:55:71:29:19:32:79:e8: 92:d4:81:51:70:04:37:31:56:b7:89:71:fa:ae:71:be:63:99: e6:2b:3e:96:c5:21:60:85:3f:2a:aa:00:34:a0:b6:47:b6:96: 70:b5:6d:ef:d4:5f:4f:a4:fd:cb:e2:c2:76:ef:d2:0f:ae:9b: 4f:97:6c:0f:23:1d:bb:d8:b1:00:94:16:55:25:c7:40:9b:5e: d0:ea:67:30:f1:de:e4:51:8e:fe:7d:a5:aa:c4:bd:09:fd:6f: 60:31:50:97:e6:56:02:7b:ed:25:24:1d:be:97:2e:ec:cc:2b: 31:50:33:de:25:2d:a0:b8:58:2e:3c:bd:3d:ea:40:fc:a3:f7: 44:da:50:e5:71:93:40:0e:ec:e8:c6:8f:49:20:80:ca:c5:cf: 54:06:34:48:9d:fc:dd:d5:db:b1:a8:1a:9f:5a:e6:54:04:25: 18:67:1f:2c:af:05:b2:0c:6c:5c:2a:42:b4:41:cf:37:51:b4: eb:d5:7c:07:98:ef:00:d6:49:f3:2a:21:6f:08:83:46:e9:5c: 70:4d:68:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzIwRDQxMTAvBgNVBAUTKEI5N0E3RjAxNUE3MzYwNzRERjM4NDQ1Qzk4MDc0Mzc4 MjE5RDI5OTUwHhcNMjUwNDI1MDQyNjAzWhcNMjUwNTAyMDQyNjAzWjAYMRYwFAYD VQQDEw02ODBiMGVkYy1kZWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwi93mk3EPc6oHa801CzyAQx96Ka1ASocPH2scKwMc95grm/11rsmrh+773Fg RvJCoBxW+9fE+Zciga/IMjqZQW1VPskX6V9Hr+xD1tJ1+oEZ6gNKpDysEqhjCxTZ B0/Gd1ujEH9iHKyrs4fmMh7ezWRehmZikyDp7E5OGqbzQVddRcyvXs1RFh8SJieF KUxUL8GxAjRrU4N1xbPCv3RvySAguNWIFoEnJiY04YA96UA1y+B3JKat/BdTkplY vyiBckgdq+evtSFRyXNaItsWfNpJPB/pBuNUFwtwjfHUsG+6pRHiHBAjC175CB6g 0MuVXXYR9VhIPhP+Z0k5oL5ngQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLpvIS6 q90+lJfAtXwq0jwNWRD0MB8GA1UdIwQYMBaAFLl6fwFac2B03zhEXJgHQ3ghnSmV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjBENC8wRTNGMEM2NkJD MTYxMUVFQjkwNTlDODZDNEY5QUUwMi91WHBfQVZwellIVGZPRVJjbUFkRGVDR2RL WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYcF9BVnB6WUhUZk9FUmNtQWREZUNHZEtaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjBENC8wRTNGMEM2NkJDMTYxMUVFQjkwNTlDODZDNEY5QUUwMi91WHBfQVZwellI VGZPRVJjbUFkRGVDR2RLWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC20sTBmLVZgX8UUYS1/U61w3YB+2Z+AzF4kV01k6bp60mNXH2ZwA1H 1Kxecc3UlFVxKRkyeeiS1IFRcAQ3MVa3iXH6rnG+Y5nmKz6WxSFghT8qqgA0oLZH tpZwtW3v1F9PpP3L4sJ279IPrptPl2wPIx272LEAlBZVJcdAm17Q6mcw8d7kUY7+ faWqxL0J/W9gMVCX5lYCe+0lJB2+ly7szCsxUDPeJS2guFguPL096kD8o/dE2lDl cZNADuzoxo9JIIDKxc9UBjRInfzd1duxqBqfWuZUBCUYZx8srwWyDGxcKkK0Qc83 UbTr1XwHmO8A1knzKiFvCING6VxwTWjc -----END CERTIFICATE-----Generated at Sat Apr 26 12:27:30 2025 by rpki-client