$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft File: UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft (raw, json) Hash identifier: QR7n9gFk6Nh549U9VWxwkAdusKv/5Vrno2E9v4rSQzQ= Subject key identifier: 7F:2C:15:04:7F:86:6A:47:8C:BB:D9:AC:C1:DE:E9:68:96:42:A0:E8 Authority key identifier: 50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C Certificate issuer: /CN=A91A1630/serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft Manifest number: B4 Signing time: Fri 25 Apr 2025 05:01:19 +0000 Manifest this update: Fri 25 Apr 2025 05:01:19 +0000 Manifest next update: Fri 02 May 2025 05:01:19 +0000 Files and hashes: 1: UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl (hash: qWJav+pqUJcU43gbIaT1RrQJW1Cph/Wydgmwt5AbJ8Y=) 2: 18141426114211EFA0FF3956C4F9AE02.roa (hash: wOKkXFecaGXCjByRcpDkGbc7Cdo2VuRpcxeBnTZ+uS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1630, serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C Validity Not Before: Apr 25 05:01:19 2025 GMT Not After : May 2 05:01:19 2025 GMT Subject: CN=680b171f-2044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:24:b9:47:1e:d1:b7:98:b4:da:e1:5d:4c:8f: 63:b1:9d:b2:3f:97:06:1e:98:fb:8a:7c:4b:4a:31: 28:8e:a4:09:eb:e4:e7:a6:02:e0:c9:bd:5c:71:d7: 90:7c:d0:2a:64:39:aa:98:78:a3:a7:f2:53:08:90: cb:65:ed:46:ff:3c:48:13:c9:6a:63:ab:4d:4d:5d: 9a:99:e9:3b:d6:41:8a:b8:bf:a6:e7:91:cf:5c:06: c6:0d:b7:f4:65:a4:b1:d1:d9:45:54:a1:12:2c:65: 92:a0:cf:25:78:66:40:f7:cb:f6:39:ef:72:f5:c3: 2c:d7:38:85:20:cd:dd:0a:d0:cb:2f:39:b6:82:78: a2:77:fb:6e:db:5d:a1:29:26:64:23:db:4f:f3:6a: 66:bd:62:11:72:f4:7c:71:39:fb:d4:80:24:f1:72: 12:0f:45:2b:ed:1b:b9:da:37:13:c5:10:96:93:51: f2:bc:65:d7:b5:19:53:18:e8:73:52:2b:0b:16:62: 03:f9:43:81:fa:62:a5:49:9b:bd:a4:0c:fd:d9:a8: ed:2a:64:17:cb:fd:b1:b9:9a:d6:be:0f:46:ee:c4: 71:29:50:76:e8:7d:2c:2f:a5:aa:7b:6a:b0:2b:00: 29:62:ab:26:a1:c1:08:18:c6:54:63:13:a5:43:2b: b6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2C:15:04:7F:86:6A:47:8C:BB:D9:AC:C1:DE:E9:68:96:42:A0:E8 X509v3 Authority Key Identifier: keyid:50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:11:5a:a7:b8:d5:d0:d9:c0:83:4b:1a:43:24:57:40:9c:df: 4f:15:cf:f4:78:9d:ce:1e:f9:95:78:c0:4a:2a:68:2f:19:77: 90:d7:5e:e9:ef:5b:cf:b2:da:b9:77:4e:26:9b:99:13:dd:35: 98:c9:67:31:29:15:e6:d2:54:ae:52:da:f5:a7:b8:bb:5c:37: c8:76:fb:f0:40:99:69:4d:bf:74:c2:65:17:7d:24:6a:49:09: 16:e6:99:ea:fe:8c:1b:bb:87:7b:97:f2:74:ec:9a:15:fa:cb: 5f:3c:88:e7:d9:60:a2:6f:e2:5e:0f:d7:a7:52:d9:16:a8:df: 8b:99:4b:35:e6:7a:e2:c8:ad:88:2f:62:e2:1a:d7:79:bd:7d: bd:21:48:4e:1d:9b:3c:27:57:1b:dc:8e:c4:b3:a1:27:f0:cc: aa:36:b9:d0:85:42:50:3a:14:fe:25:35:d4:c9:94:f8:a2:b7: 1c:04:50:a3:fa:07:40:cf:04:58:df:8a:e9:5f:e0:4d:8f:b8: 14:fe:dc:6b:17:f5:ec:bb:73:0a:e3:e7:78:98:be:5f:ef:9d: 2f:98:6e:f3:d5:aa:35:6a:91:77:91:b3:1b:b0:e7:fd:e6:3a: 0c:8a:ea:06:dc:e6:be:d6:90:7c:ee:cf:46:02:9b:80:b2:b2: ee:17:db:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE2MzAxMTAvBgNVBAUTKDUwRThGMDRCOTAwOEZFQTFFNUMzMUY2NEU3NjNEQURF RDI1M0E2MEMwHhcNMjUwNDI1MDUwMTE5WhcNMjUwNTAyMDUwMTE5WjAYMRYwFAYD VQQDEw02ODBiMTcxZi0yMDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4yS5Rx7Rt5i02uFdTI9jsZ2yP5cGHpj7inxLSjEojqQJ6+TnpgLgyb1ccdeQ fNAqZDmqmHijp/JTCJDLZe1G/zxIE8lqY6tNTV2amek71kGKuL+m55HPXAbGDbf0 ZaSx0dlFVKESLGWSoM8leGZA98v2Oe9y9cMs1ziFIM3dCtDLLzm2gniid/tu212h KSZkI9tP82pmvWIRcvR8cTn71IAk8XISD0Ur7Ru52jcTxRCWk1HyvGXXtRlTGOhz UisLFmID+UOB+mKlSZu9pAz92ajtKmQXy/2xuZrWvg9G7sRxKVB26H0sL6Wqe2qw KwApYqsmocEIGMZUYxOlQyu2VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8sFQR/ hmpHjLvZrMHe6WiWQqDoMB8GA1UdIwQYMBaAFFDo8EuQCP6h5cMfZOdj2t7SU6YM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTYzMC8xNTI3NEYwRTEx NDExMUVGOEYxNzg3MEZDNEY5QUUwMi9VT2p3UzVBSV9xSGx3eDlrNTJQYTN0SlRw Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPandTNUFJX3FIbHd4OWs1MlBhM3RKVHBndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTYzMC8xNTI3NEYwRTExNDExMUVGOEYxNzg3MEZDNEY5QUUwMi9VT2p3UzVBSV9x SGx3eDlrNTJQYTN0SlRwZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrEVqnuNXQ2cCDSxpDJFdAnN9PFc/0eJ3OHvmVeMBKKmgvGXeQ117p 71vPstq5d04mm5kT3TWYyWcxKRXm0lSuUtr1p7i7XDfIdvvwQJlpTb90wmUXfSRq SQkW5pnq/owbu4d7l/J07JoV+stfPIjn2WCib+JeD9enUtkWqN+LmUs15nriyK2I L2LiGtd5vX29IUhOHZs8J1cb3I7Es6En8MyqNrnQhUJQOhT+JTXUyZT4orccBFCj +gdAzwRY34rpX+BNj7gU/txrF/Xsu3MK4+d4mL5f750vmG7z1ao1apF3kbMbsOf9 5joMiuoG3Oa+1pB87s9GApuAsrLuF9tY -----END CERTIFICATE-----Generated at Sat Apr 26 05:13:45 2025 by rpki-client