$ rpki-client -vvf rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft File: _uphQ5owmLhcyxg7WkGqEq9Fyh4.mft (raw, json) Hash identifier: o9P9+XBFu4Ohh9TrDa0eOjwkGO054WJxcHrhZ8zkJHo= Subject key identifier: 69:0B:4D:59:FD:74:BE:7D:DB:43:71:96:C3:8A:2D:61:00:80:9B:60 Authority key identifier: FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E Certificate issuer: /CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E Certificate serial: 07B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft Manifest number: 07A5 Signing time: Thu 24 Apr 2025 21:05:03 +0000 Manifest this update: Thu 24 Apr 2025 21:05:03 +0000 Manifest next update: Thu 01 May 2025 21:05:03 +0000 Files and hashes: 1: _uphQ5owmLhcyxg7WkGqEq9Fyh4.crl (hash: 5IFBLqmA1d7rxahGMpuf9aVJJX+9KAv6RtZpXAWOGME=) 2: 5E141ECA055D11F0B9F0AF13C4F9AE02.roa (hash: XV8VZhNkhpIDo0T9GqAVKHHZUYHKcAXflYFOq8e8KjI=) 3: 2B219CDC1FE811EF96F54D5AC4F9AE02.roa (hash: KIN1tbUq4dppWJoCfbdzOmrfveInGP54V3tT2sZ6M0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1968 (0x7b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A19C8, serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E Validity Not Before: Apr 24 21:05:03 2025 GMT Not After : May 1 21:05:03 2025 GMT Subject: CN=680aa77f-d191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5a:9d:3d:7f:40:0f:36:7a:8d:3a:7a:d6:1c: 36:16:1f:62:15:a0:6a:31:14:1d:b4:2e:23:08:98: 9d:f6:f1:3d:f8:91:be:59:db:b4:26:5c:73:ce:fb: 64:3b:a6:45:b3:a1:cd:0d:32:43:76:df:fe:49:ce: bd:72:b5:c4:a3:4f:c2:ff:eb:c4:d0:7e:3c:e9:e2: bb:41:2c:01:8c:82:81:4b:90:c8:54:4b:dd:59:89: c0:62:5c:58:53:6c:27:2e:12:7b:9e:3a:94:c9:f9: 4d:b9:26:4b:d1:18:f4:59:7d:cd:e1:b6:7b:98:33: a5:03:e5:4a:52:b9:b1:2f:96:6e:e9:d2:c4:bd:af: 84:5e:ab:95:26:60:0c:81:78:62:7e:80:c3:70:99: 38:5e:c5:39:23:88:04:76:54:7a:10:3e:e7:00:1b: 1d:6e:0c:c4:3e:ce:9d:13:21:9d:b6:2c:11:2f:df: ea:e2:c6:66:6d:d3:59:68:a5:7a:b5:f4:13:b4:55: 04:ca:5f:3a:9b:96:5f:2c:d6:87:c5:23:9f:0e:84: 70:59:b9:5c:ef:ea:02:b1:ca:6d:ca:4c:71:85:4d: c7:9c:70:3f:58:d7:d6:4b:61:ff:57:a4:89:19:83: 55:a1:c2:0c:fa:91:23:be:a0:27:e1:50:2c:4c:3b: d4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0B:4D:59:FD:74:BE:7D:DB:43:71:96:C3:8A:2D:61:00:80:9B:60 X509v3 Authority Key Identifier: keyid:FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:fe:62:dc:bf:2a:7c:49:02:55:79:49:04:e9:80:c5:43:79: e4:8d:bd:86:4f:27:1e:71:8e:cd:d3:d3:03:7e:13:47:5e:5d: 36:4a:bc:09:43:a1:1a:d2:36:ff:ca:f9:9c:08:7d:30:a4:58: 72:60:42:2e:82:29:9e:05:a9:62:1d:ac:d5:aa:00:94:cc:b2: 16:67:92:ef:f2:a2:cd:76:1f:7a:82:74:04:52:2c:da:af:28: 61:0c:04:bd:49:4a:f4:14:b6:78:2a:72:a7:dc:df:ef:de:cb: 14:a2:0a:ff:93:7e:58:d5:2c:61:3f:6b:dd:62:5d:07:4e:ec: 83:83:b3:32:4f:6d:c0:ad:69:95:a8:db:ad:aa:3c:c6:f5:5b: 03:e8:71:43:63:ae:6f:3c:fa:9f:60:43:b5:5d:fb:dc:d4:5d: 14:0b:97:8f:ce:6e:ed:20:cc:72:8d:6f:e3:f0:70:87:c2:f7: de:07:e9:a4:c0:5e:a2:26:6e:a1:30:8b:f9:c3:9e:b5:8c:c2: b0:c4:a1:bd:ff:40:97:e7:3f:9f:3d:0d:6a:97:9a:f3:7f:a9: 52:5d:d4:84:0d:af:66:02:3e:a8:45:ed:31:6c:82:98:81:77: 91:c3:81:34:44:9e:fe:f4:60:72:ca:f7:e8:a3:24:97:c7:8c: f6:c7:26:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5QzgxMTAvBgNVBAUTKEZFRUE2MTQzOUEzMDk4Qjg1Q0NCMTgzQjVBNDFBQTEy QUY0NUNBMUUwHhcNMjUwNDI0MjEwNTAzWhcNMjUwNTAxMjEwNTAzWjAYMRYwFAYD VQQDEw02ODBhYTc3Zi1kMTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lqdPX9ADzZ6jTp61hw2Fh9iFaBqMRQdtC4jCJid9vE9+JG+Wdu0Jlxzzvtk O6ZFs6HNDTJDdt/+Sc69crXEo0/C/+vE0H486eK7QSwBjIKBS5DIVEvdWYnAYlxY U2wnLhJ7njqUyflNuSZL0Rj0WX3N4bZ7mDOlA+VKUrmxL5Zu6dLEva+EXquVJmAM gXhifoDDcJk4XsU5I4gEdlR6ED7nABsdbgzEPs6dEyGdtiwRL9/q4sZmbdNZaKV6 tfQTtFUEyl86m5ZfLNaHxSOfDoRwWblc7+oCscptykxxhU3HnHA/WNfWS2H/V6SJ GYNVocIM+pEjvqAn4VAsTDvUVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkLTVn9 dL5920NxlsOKLWEAgJtgMB8GA1UdIwQYMBaAFP7qYUOaMJi4XMsYO1pBqhKvRcoe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTlDOC9GNUE1RUVBQTAx NDExMUVCQTMzRjhFMTFDNEY5QUUwMi9fdXBoUTVvd21MaGN5eGc3V2tHcUVxOUZ5 aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191cGhRNW93bUxoY3l4ZzdXa0dxRXE5RnloNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTlDOC9GNUE1RUVBQTAxNDExMUVCQTMzRjhFMTFDNEY5QUUwMi9fdXBoUTVvd21M aGN5eGc3V2tHcUVxOUZ5aDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB/mLcvyp8SQJVeUkE6YDFQ3nkjb2GTycecY7N09MDfhNHXl02SrwJ Q6Ea0jb/yvmcCH0wpFhyYEIugimeBaliHazVqgCUzLIWZ5Lv8qLNdh96gnQEUiza ryhhDAS9SUr0FLZ4KnKn3N/v3ssUogr/k35Y1SxhP2vdYl0HTuyDg7MyT23ArWmV qNutqjzG9VsD6HFDY65vPPqfYEO1Xfvc1F0UC5ePzm7tIMxyjW/j8HCHwvfeB+mk wF6iJm6hMIv5w561jMKwxKG9/0CX5z+fPQ1ql5rzf6lSXdSEDa9mAj6oRe0xbIKY gXeRw4E0RJ7+9GByyvfooySXx4z2xyb2 -----END CERTIFICATE-----Generated at Sat Apr 26 04:26:21 2025 by rpki-client