$ rpki-client -vvf rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft File: bUron6l6cWotkmYf8s9b08zcKfw.mft (raw, json) Hash identifier: iX7qb7aA+hb22QedsNHIMZpvJg26UNMHAHWkh7onQOQ= Subject key identifier: 3F:F6:84:81:6C:53:95:DA:9A:43:64:B3:0B:D0:3D:1E:B4:D9:8F:A0 Authority key identifier: 6D:4A:E8:9F:A9:7A:71:6A:2D:92:66:1F:F2:CF:5B:D3:CC:DC:29:FC Certificate issuer: /CN=A91778C2/serialNumber=6D4AE89FA97A716A2D92661FF2CF5BD3CCDC29FC Certificate serial: 1734 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft Manifest number: 16F7 Signing time: Thu 24 Apr 2025 16:41:36 +0000 Manifest this update: Thu 24 Apr 2025 16:41:35 +0000 Manifest next update: Thu 01 May 2025 16:41:35 +0000 Files and hashes: 1: bUron6l6cWotkmYf8s9b08zcKfw.crl (hash: 6W6PYphRfeltilz/5ZfT8R/bb5jJ7sG7Ni5v2MjNB00=) 2: 0EF775B2EFCD11EF92BCB66CC4F9AE02.roa (hash: N7nsErlzveEnISxiIX6awL6ZI+EjGdyZ1xE6eFlduvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.crl rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5940 (0x1734) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91778C2, serialNumber=6D4AE89FA97A716A2D92661FF2CF5BD3CCDC29FC Validity Not Before: Apr 24 16:41:35 2025 GMT Not After : May 1 16:41:35 2025 GMT Subject: CN=680a69c0-cf74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4b:50:f6:d3:80:ca:98:37:e3:a4:e0:dc:4e: d2:0b:b1:73:8a:c2:8c:40:2e:92:9d:fd:3d:32:87: 92:29:ad:31:6e:c7:46:e5:2f:01:ce:f1:8e:0a:b4: 68:68:9a:80:2d:12:ed:62:dd:69:27:8c:89:d0:5b: 38:b7:44:14:ac:af:ae:f1:60:5e:96:20:32:66:cf: fc:d9:b4:01:5d:42:a0:33:41:a0:fa:b6:17:52:2d: 3b:bf:e5:71:38:7c:85:c3:b1:db:e7:a8:af:2e:bc: 44:d3:08:b2:23:48:79:f5:8a:a8:ea:20:70:1f:b5: 7a:84:6f:e7:c1:de:71:d7:fb:32:52:11:08:26:bf: ef:1c:60:6b:5b:5a:bc:33:d1:5e:c0:f4:9a:97:36: 59:01:5c:9c:65:d2:77:c9:2a:54:57:93:bf:81:f6: 39:e1:8f:86:ba:20:79:23:73:35:c7:db:27:46:84: 76:11:71:9a:ee:5b:b7:9b:32:7d:79:64:9d:06:c3: cb:2d:3e:57:af:54:02:09:c0:a5:e1:cf:66:2a:e1: 72:80:32:04:3c:b4:32:f7:f7:3e:d1:16:48:c3:af: 3b:78:db:45:f4:63:76:2b:71:ad:3d:c2:db:07:a6: 65:af:d8:0d:4c:a8:e9:df:88:b5:42:ab:49:db:dd: 28:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F6:84:81:6C:53:95:DA:9A:43:64:B3:0B:D0:3D:1E:B4:D9:8F:A0 X509v3 Authority Key Identifier: keyid:6D:4A:E8:9F:A9:7A:71:6A:2D:92:66:1F:F2:CF:5B:D3:CC:DC:29:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:7b:c9:4e:ff:1d:31:c8:59:1a:ba:a1:02:eb:e3:7b:bf:b2: d1:a0:18:f7:5d:d1:74:e2:da:f6:a7:61:2a:a4:30:6e:90:d9: 71:a9:fe:fe:d4:2d:c2:4f:69:cb:6a:30:e4:81:35:81:c0:e8: e3:79:4d:8e:4f:e5:c3:24:e6:5b:8b:43:67:b1:6a:27:59:a9: 55:d1:f1:d1:8f:3a:fb:83:26:73:10:7f:ba:42:3d:bb:e5:71: 71:da:17:e0:ee:7e:4b:40:c3:ad:95:67:ec:3b:26:7a:a3:e9: 5f:af:65:be:5d:49:a9:80:3c:0f:2b:c6:13:38:29:20:72:1d: 1e:b1:ca:43:7f:da:3c:0b:c4:f3:ae:ed:ad:6e:68:bd:b3:8b: ad:fe:9e:09:0c:63:bf:30:db:1f:aa:32:06:61:21:4f:e2:71: 33:4b:20:5f:73:e0:44:33:fa:14:b2:59:08:fa:62:c0:f4:88: 9b:ac:bc:87:94:78:b2:ee:12:bb:6c:94:3d:f5:e7:b0:ab:9b: 60:6a:23:a4:3e:0f:ef:2a:e0:0f:30:f6:1f:1f:16:6c:df:b8: 8c:c5:76:7d:15:0a:9a:f1:69:a0:c0:44:48:65:7b:81:5b:bf: da:4a:f7:dd:04:14:07:01:47:20:13:e4:91:b9:ab:70:5c:39: 60:23:b6:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc4QzIxMTAvBgNVBAUTKDZENEFFODlGQTk3QTcxNkEyRDkyNjYxRkYyQ0Y1QkQz Q0NEQzI5RkMwHhcNMjUwNDI0MTY0MTM1WhcNMjUwNTAxMTY0MTM1WjAYMRYwFAYD VQQDEw02ODBhNjljMC1jZjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEtQ9tOAypg346Tg3E7SC7FzisKMQC6Snf09MoeSKa0xbsdG5S8BzvGOCrRo aJqALRLtYt1pJ4yJ0Fs4t0QUrK+u8WBeliAyZs/82bQBXUKgM0Gg+rYXUi07v+Vx OHyFw7Hb56ivLrxE0wiyI0h59Yqo6iBwH7V6hG/nwd5x1/syUhEIJr/vHGBrW1q8 M9FewPSalzZZAVycZdJ3ySpUV5O/gfY54Y+GuiB5I3M1x9snRoR2EXGa7lu3mzJ9 eWSdBsPLLT5Xr1QCCcCl4c9mKuFygDIEPLQy9/c+0RZIw687eNtF9GN2K3GtPcLb B6Zlr9gNTKjp34i1QqtJ290ovQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/2hIFs U5XamkNkswvQPR602Y+gMB8GA1UdIwQYMBaAFG1K6J+penFqLZJmH/LPW9PM3Cn8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzhDMi9FRDJCQkM3MEY4 ODcxMUU3OTIxRjg2NjhDNEY5QUUwMi9iVXJvbjZsNmNXb3RrbVlmOHM5YjA4emNL ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JVcm9uNmw2Y1dvdGttWWY4czliMDh6Y0tmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzhDMi9FRDJCQkM3MEY4ODcxMUU3OTIxRjg2NjhDNEY5QUUwMi9iVXJvbjZsNmNX b3RrbVlmOHM5YjA4emNLZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoe8lO/x0xyFkauqEC6+N7v7LRoBj3XdF04tr2p2EqpDBukNlxqf7+ 1C3CT2nLajDkgTWBwOjjeU2OT+XDJOZbi0NnsWonWalV0fHRjzr7gyZzEH+6Qj27 5XFx2hfg7n5LQMOtlWfsOyZ6o+lfr2W+XUmpgDwPK8YTOCkgch0escpDf9o8C8Tz ru2tbmi9s4ut/p4JDGO/MNsfqjIGYSFP4nEzSyBfc+BEM/oUslkI+mLA9IibrLyH lHiy7hK7bJQ99eewq5tgaiOkPg/vKuAPMPYfHxZs37iMxXZ9FQqa8WmgwERIZXuB W7/aSvfdBBQHAUcgE+SRuatwXDlgI7aq -----END CERTIFICATE-----Generated at Sat Apr 26 12:21:51 2025 by rpki-client