$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft File: u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft (raw, json) Hash identifier: 2x1MSGUF6YRPC+ZyY5w/mdFCoptWBLu5d4frbmr8YAg= Subject key identifier: 96:07:3F:82:2A:11:E4:85:27:85:10:EB:B2:B6:33:2F:C7:B5:3E:7A Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 Certificate issuer: /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft Manifest number: 0130 Signing time: Fri 25 Apr 2025 03:36:13 +0000 Manifest this update: Fri 25 Apr 2025 03:36:13 +0000 Manifest next update: Fri 02 May 2025 03:36:13 +0000 Files and hashes: 1: u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl (hash: 5Tyta3CWdISVE8/nGAO2hd5jBFk6oBSnb2Z1BzngVCU=) 2: 9F5C80A8F3EB11EFBAF62455C4F9AE02.roa (hash: j93vJ2NAnCNQy/x2PjU9v6iPhwn1QcPjRO5LSFsSwNE=) 3: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (hash: aCNtxlW0MshwMMlV+N563xkNmlCQdXbxR/lNk+drIlA=) 4: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (hash: rOkP4Vb8B8/6UrNv3XnkLOomlf0wseQaO6Jnqbw75S0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Validity Not Before: Apr 25 03:36:13 2025 GMT Not After : May 2 03:36:13 2025 GMT Subject: CN=680b032d-c59c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:20:2a:3e:f1:93:14:b7:80:31:41:91:92:80: fc:e9:e8:49:6a:71:e3:04:09:5b:32:b9:44:6a:0c: 8a:5d:ef:d5:ea:1a:48:32:91:ff:a6:73:5e:4c:57: 2c:d5:fc:ba:52:bb:6f:7e:2d:99:11:f2:1a:bb:75: 8a:f3:6f:8e:c4:25:e1:55:0a:d6:5d:8d:fb:13:13: 98:11:89:83:6a:b8:eb:61:80:38:25:52:49:00:40: 41:2a:c4:b0:98:87:60:b3:67:85:00:ae:14:d0:38: f1:a3:97:de:01:19:e5:e4:ae:0a:04:6e:b8:fa:14: 74:ec:cb:78:ad:2a:cd:4f:b3:d1:d0:41:a0:f7:33: 6a:d1:d9:bd:03:e4:c1:b3:40:3a:bd:4b:76:73:48: 49:94:52:a5:97:ec:1a:0b:f1:11:a0:02:22:b9:71: 1d:f5:84:7d:ea:a7:08:82:3f:2f:df:f9:93:55:9a: 1b:d9:e6:f7:b3:ee:39:0b:fd:54:54:2f:a5:3e:a8: d2:ce:f1:7d:54:ae:7c:da:c5:39:b0:2e:eb:1e:42: ad:cb:2e:43:b0:61:3e:ab:7a:63:38:65:41:db:ff: ee:ce:1b:0f:2a:43:9b:a4:c5:8a:94:c1:78:23:ac: 88:fc:bb:58:a8:91:b2:99:10:df:0a:0b:71:8e:c7: 48:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:07:3F:82:2A:11:E4:85:27:85:10:EB:B2:B6:33:2F:C7:B5:3E:7A X509v3 Authority Key Identifier: keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:21:52:90:76:bc:70:5c:39:3f:02:34:2a:60:f4:d5:08:16: 94:53:79:ff:9b:26:de:46:26:b4:8d:99:0b:fa:6a:e9:d7:5c: 1b:15:2f:7f:f2:32:6b:31:6a:87:c6:e7:5a:70:a8:f2:7b:55: 70:e1:72:66:88:ab:28:81:4e:d5:99:82:1a:03:d7:5a:95:b9: 03:a0:00:79:39:b7:ea:90:2c:87:a5:2e:61:9f:33:05:44:f8: 7d:35:bc:58:e3:8e:e6:27:bb:aa:21:0e:27:4e:47:97:eb:26: 16:b5:95:62:0d:7c:a3:4e:b7:e3:b1:43:90:e5:09:39:9e:b6: b1:d9:fe:d5:52:9f:b2:20:64:fe:cc:ed:ef:86:bc:b8:0a:c4: 71:10:8f:37:e7:15:05:66:76:cc:21:03:54:08:b7:9b:39:4d: 67:bb:af:a4:2f:cb:d0:ee:04:dd:84:c4:80:b0:da:70:6a:70: f4:fb:17:70:24:9c:03:72:a7:c8:f2:53:4e:f7:12:09:03:1b: 93:1c:8f:90:41:8b:14:7e:94:1a:ee:80:7b:c9:d6:93:bc:a6: da:59:1b:3e:de:6a:f1:27:78:50:a1:b3:38:0f:8a:7e:24:2f: 72:ed:67:2e:7d:8c:b0:92:85:70:16:2b:8e:93:ff:95:e1:5e: 16:68:9f:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIyNjUxMTAvBgNVBAUTKEJCRUMyMTBFNzUyOUZEMzk3RjEzMzhGRkFDMURERDc4 M0MwRkFBMzIwHhcNMjUwNDI1MDMzNjEzWhcNMjUwNTAyMDMzNjEzWjAYMRYwFAYD VQQDEw02ODBiMDMyZC1jNTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiAqPvGTFLeAMUGRkoD86ehJanHjBAlbMrlEagyKXe/V6hpIMpH/pnNeTFcs 1fy6Urtvfi2ZEfIau3WK82+OxCXhVQrWXY37ExOYEYmDarjrYYA4JVJJAEBBKsSw mIdgs2eFAK4U0Djxo5feARnl5K4KBG64+hR07Mt4rSrNT7PR0EGg9zNq0dm9A+TB s0A6vUt2c0hJlFKll+waC/ERoAIiuXEd9YR96qcIgj8v3/mTVZob2eb3s+45C/1U VC+lPqjSzvF9VK582sU5sC7rHkKtyy5DsGE+q3pjOGVB2//uzhsPKkObpMWKlMF4 I6yI/LtYqJGymRDfCgtxjsdIkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYHP4Iq EeSFJ4UQ67K2My/HtT56MB8GA1UdIwQYMBaAFLvsIQ51Kf05fxM4/6wd3Xg8D6oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjI2NS85QTY2QUFERTUw ODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9UbF9FempfckIzZGVEd1Bx akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Utd2hEblVwX1RsX0V6al9yQjNkZUR3UHFqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjI2NS85QTY2QUFERTUwODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9U bF9FempfckIzZGVEd1BxakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2IVKQdrxwXDk/AjQqYPTVCBaUU3n/mybeRia0jZkL+mrp11wbFS9/ 8jJrMWqHxudacKjye1Vw4XJmiKsogU7VmYIaA9dalbkDoAB5ObfqkCyHpS5hnzMF RPh9NbxY447mJ7uqIQ4nTkeX6yYWtZViDXyjTrfjsUOQ5Qk5nrax2f7VUp+yIGT+ zO3vhry4CsRxEI835xUFZnbMIQNUCLebOU1nu6+kL8vQ7gTdhMSAsNpwanD0+xdw JJwDcqfI8lNO9xIJAxuTHI+QQYsUfpQa7oB7ydaTvKbaWRs+3mrxJ3hQobM4D4p+ JC9y7WcufYywkoVwFiuOk/+V4V4WaJ/V -----END CERTIFICATE-----Generated at Sat Apr 26 13:36:29 2025 by rpki-client