$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft File: UyhhbneUVH65zpK0qPBF5LLMwPw.mft (raw, json) Hash identifier: +XatANs9qhzL93SOiKngMjXNLFPkBi8Evinn2t66ILY= Subject key identifier: 67:46:C6:10:58:00:77:B3:0B:85:52:02:6D:33:1B:86:75:48:25:59 Authority key identifier: 53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC Certificate issuer: /CN=A91847A0/serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC Certificate serial: 1CFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft Manifest number: 1CF1 Signing time: Thu 24 Apr 2025 16:10:40 +0000 Manifest this update: Thu 24 Apr 2025 16:10:39 +0000 Manifest next update: Thu 01 May 2025 16:10:39 +0000 Files and hashes: 1: UyhhbneUVH65zpK0qPBF5LLMwPw.crl (hash: okAHzIVLA2c6OsQwJFhCxxNjS/7is2+MZQNprWbSyA0=) 2: 82E0D450BC5011E6B01A8D4CC4F9AE02.roa (hash: 0pFtdAh/nKnP5eoxsGxODsFcMEqhXHUTJ4P3f5IMFhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7421 (0x1cfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A0, serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC Validity Not Before: Apr 24 16:10:39 2025 GMT Not After : May 1 16:10:39 2025 GMT Subject: CN=680a6280-c4e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:92:40:c4:5e:b7:85:43:91:78:6b:77:0e:36: 50:72:6f:56:af:05:48:bc:61:07:34:b3:0a:fc:46: 4f:8b:12:e2:b3:e9:4b:41:1b:45:77:dd:86:3e:8d: c9:58:53:96:91:39:96:b3:56:e5:ab:74:d2:ed:41: 72:7c:2d:13:69:bb:41:cc:69:8c:a1:b4:d2:16:31: 31:60:5f:ff:66:e2:1d:b7:3f:0d:20:08:0d:c9:24: 48:25:eb:73:9d:e4:91:cf:50:a0:88:74:32:64:67: 68:10:b4:69:69:de:cc:4f:0c:48:5b:21:d1:9c:18: 79:3b:da:e6:70:af:e5:33:48:79:4a:cb:da:ab:d2: 43:bd:17:a3:ea:12:d3:94:b1:39:41:43:6b:64:c9: e1:87:e2:bd:69:57:2c:18:5e:97:63:cc:93:99:ee: 38:7e:13:6f:dd:fd:0b:97:2e:fe:ba:02:d0:a3:1d: 5f:75:13:22:55:0b:f5:28:2f:9d:13:fa:5c:75:7a: 91:e5:a8:2e:3e:e3:b9:b1:5d:d5:d6:ff:83:96:03: 96:0c:23:f4:ae:e2:04:2d:4a:41:71:a4:f7:17:53: 66:8d:48:80:85:c3:10:a4:21:88:6c:44:86:da:6d: 41:af:69:7d:18:dd:a3:2d:a7:d2:b6:e7:9a:02:d5: 13:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:46:C6:10:58:00:77:B3:0B:85:52:02:6D:33:1B:86:75:48:25:59 X509v3 Authority Key Identifier: keyid:53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:de:8d:81:a6:6a:49:49:ee:f7:41:b6:74:3c:33:65:39:bc: 95:37:50:48:6f:04:ad:8e:48:06:90:87:f9:c0:31:3a:4e:99: 9a:b9:58:d2:23:5d:b6:4c:8d:43:7d:98:0c:7a:a4:aa:ad:e5: c8:40:55:cd:03:ef:a0:38:7a:da:4e:04:eb:7c:4f:2b:db:12: 88:6b:10:f0:81:62:2e:ee:b2:89:be:6f:d3:82:dd:4f:87:2d: aa:73:0d:32:b3:39:7d:d2:65:6d:6f:9c:ba:22:9f:a5:46:53: 8f:f6:96:b9:19:2d:d7:78:25:2f:ec:7c:f8:07:ce:f3:e3:f0: c6:0e:65:e9:d3:42:d6:50:35:15:c6:b4:3d:1a:51:bf:bd:3a: 91:6c:aa:f7:54:2f:80:22:0d:d4:75:5c:75:d8:50:61:76:8a: b9:78:60:77:3c:8c:7b:53:9c:28:49:38:5e:e9:fd:d8:4a:2c: 5d:b1:54:8b:36:a8:84:45:1a:71:9f:13:36:c8:90:29:cf:c9: 8b:36:cc:95:f3:72:9c:29:9a:9c:35:bd:6a:84:4a:19:c0:02: 9e:4e:a0:a1:ca:16:76:d6:59:36:78:2f:e1:fc:fd:4c:e3:67: 4c:48:cd:01:12:70:a2:65:84:b7:7c:75:c2:fd:4d:a6:71:1a: e2:f4:ea:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTAxMTAvBgNVBAUTKDUzMjg2MTZFNzc5NDU0N0VCOUNFOTJCNEE4RjA0NUU0 QjJDQ0MwRkMwHhcNMjUwNDI0MTYxMDM5WhcNMjUwNTAxMTYxMDM5WjAYMRYwFAYD VQQDEw02ODBhNjI4MC1jNGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05JAxF63hUOReGt3DjZQcm9WrwVIvGEHNLMK/EZPixLis+lLQRtFd92GPo3J WFOWkTmWs1blq3TS7UFyfC0TabtBzGmMobTSFjExYF//ZuIdtz8NIAgNySRIJetz neSRz1CgiHQyZGdoELRpad7MTwxIWyHRnBh5O9rmcK/lM0h5Ssvaq9JDvRej6hLT lLE5QUNrZMnhh+K9aVcsGF6XY8yTme44fhNv3f0Lly7+ugLQox1fdRMiVQv1KC+d E/pcdXqR5aguPuO5sV3V1v+DlgOWDCP0ruIELUpBcaT3F1NmjUiAhcMQpCGIbESG 2m1Br2l9GN2jLafStueaAtUT+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdGxhBY AHezC4VSAm0zG4Z1SCVZMB8GA1UdIwQYMBaAFFMoYW53lFR+uc6StKjwReSyzMD8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMC8wRTRBRDEyOEJD NEYxMUU2QkFGMUMyNEFDNEY5QUUwMi9VeWhoYm5lVVZINjV6cEswcVBCRjVMTE13 UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5aGhibmVVVkg2NXpwSzBxUEJGNUxMTXdQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMC8wRTRBRDEyOEJDNEYxMUU2QkFGMUMyNEFDNEY5QUUwMi9VeWhoYm5lVVZI NjV6cEswcVBCRjVMTE13UHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC3o2BpmpJSe73QbZ0PDNlObyVN1BIbwStjkgGkIf5wDE6TpmauVjS I122TI1DfZgMeqSqreXIQFXNA++gOHraTgTrfE8r2xKIaxDwgWIu7rKJvm/Tgt1P hy2qcw0yszl90mVtb5y6Ip+lRlOP9pa5GS3XeCUv7Hz4B87z4/DGDmXp00LWUDUV xrQ9GlG/vTqRbKr3VC+AIg3UdVx12FBhdoq5eGB3PIx7U5woSThe6f3YSixdsVSL NqiERRpxnxM2yJApz8mLNsyV83KcKZqcNb1qhEoZwAKeTqChyhZ21lk2eC/h/P1M 42dMSM0BEnCiZYS3fHXC/U2mcRri9Ory -----END CERTIFICATE-----Generated at Sat Apr 26 12:31:55 2025 by rpki-client