$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft File: UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft (raw, json) Hash identifier: mf6ZGHBAvZ26G/odr9k/AntOCckWKHe+ch1+h9mCg2o= Subject key identifier: 43:04:44:CC:E5:F4:66:B6:C8:E4:E7:93:6A:BD:83:3D:AB:27:67:FC Authority key identifier: 52:F3:E7:FB:5E:D8:53:37:F7:E1:9E:10:73:3D:49:0C:2B:1C:0B:64 Certificate issuer: /CN=A91A3277/serialNumber=52F3E7FB5ED85337F7E19E10733D490C2B1C0B64 Certificate serial: 0321 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UvPn-17YUzf34Z4Qcz1JDCscC2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft Manifest number: 031C Signing time: Fri 25 Apr 2025 00:56:29 +0000 Manifest this update: Fri 25 Apr 2025 00:56:28 +0000 Manifest next update: Fri 02 May 2025 00:56:28 +0000 Files and hashes: 1: UvPn-17YUzf34Z4Qcz1JDCscC2Q.crl (hash: nabINxYSgr9Dvst7ZO71WBSKzS0S0YKWiJb+y1eJN2E=) 2: F52D264EC6C211EC87251528C4F9AE02.roa (hash: o082/qE7KnRTR5fE6jGL87EK8Un5n2KKqzOv1p2PmKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.crl rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UvPn-17YUzf34Z4Qcz1JDCscC2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 801 (0x321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3277, serialNumber=52F3E7FB5ED85337F7E19E10733D490C2B1C0B64 Validity Not Before: Apr 25 00:56:28 2025 GMT Not After : May 2 00:56:28 2025 GMT Subject: CN=680addbc-d107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:90:56:2b:4d:b2:a6:79:14:32:0b:44:10:5a: fb:c5:b8:f4:1e:d0:6f:95:a5:bc:3c:3b:eb:ef:20: ed:ea:34:ec:96:93:a0:e6:15:fc:6e:fb:72:50:c7: 78:7b:a7:b1:f6:cc:4e:29:1e:8e:5d:1d:b0:83:af: 80:bb:ae:82:f1:a3:5b:7d:a0:fe:d1:18:48:a1:b9: e2:87:a9:1f:51:72:17:4a:88:70:28:d7:b3:f4:cc: 88:13:9c:1c:81:f8:1c:50:25:67:d2:4f:26:49:a0: 3e:14:fd:22:f9:c3:3e:9c:cc:07:e8:d6:2c:e4:5d: 67:c7:c8:a9:8a:ec:3c:e5:d7:21:fc:a3:71:6b:e6: 6b:ac:d2:e5:42:10:9d:16:ba:b7:f0:16:1d:82:40: 3d:ed:6c:c4:fa:ef:9c:07:7f:82:af:ef:87:be:1c: cb:07:7c:f8:90:a9:5e:83:d0:48:4d:40:f4:d4:02: dd:a4:15:7f:0e:82:9f:ab:ad:61:4a:89:cc:49:0b: 74:ce:a8:ec:9a:09:40:1b:e9:e9:e1:99:95:d6:bd: 99:f1:6b:45:b4:44:36:96:74:b1:33:13:18:3e:17: 61:a6:71:95:47:fd:e0:f3:bb:e1:39:2c:40:7f:9f: fe:07:2a:35:62:dd:bd:3e:a7:f7:38:08:6b:1b:98: 8f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:04:44:CC:E5:F4:66:B6:C8:E4:E7:93:6A:BD:83:3D:AB:27:67:FC X509v3 Authority Key Identifier: keyid:52:F3:E7:FB:5E:D8:53:37:F7:E1:9E:10:73:3D:49:0C:2B:1C:0B:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UvPn-17YUzf34Z4Qcz1JDCscC2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:ee:15:0e:bc:93:ee:a3:ee:f4:d4:d2:64:f2:4a:c3:da:6d: 58:9e:7c:42:50:1e:e1:57:41:8c:f1:eb:c5:3b:7b:0c:cc:14: 4f:d4:c8:1b:6d:ac:0f:1e:e2:59:81:bb:79:05:50:43:e7:0d: 16:c4:d5:71:8b:38:ac:89:77:5c:3f:23:06:55:91:c8:da:6c: fa:2f:2e:5e:75:11:b7:21:aa:47:9d:c5:e2:a2:c1:5f:cb:13: ae:95:c5:f4:10:03:2e:b5:32:dd:80:47:79:7f:dd:28:7a:21: 2b:78:cc:9c:98:68:e6:a1:e0:17:00:9d:1b:0f:cd:ae:fd:d9: cf:fe:69:5e:6b:77:6c:bb:a2:44:e1:af:c4:0f:ec:91:76:f5: 2b:03:11:1a:b3:0b:02:17:ac:6a:4e:9c:a1:be:74:b7:d7:8f: af:aa:6b:db:f1:2e:e3:f1:d9:c7:0b:5e:60:dd:34:d7:8f:5a: 9e:38:73:89:4a:52:b0:07:99:8c:97:4a:de:da:6c:63:bb:b9: 2f:6b:ca:ff:fd:6a:9f:de:97:83:45:06:c1:a0:de:5b:fa:42: 1f:c2:f4:07:cf:00:9a:26:c8:6c:06:2b:aa:e0:42:f0:54:5a: 96:13:2b:6e:01:c9:f8:05:6e:77:ac:fa:2b:87:41:52:a7:83: 9f:cc:d4:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMyNzcxMTAvBgNVBAUTKDUyRjNFN0ZCNUVEODUzMzdGN0UxOUUxMDczM0Q0OTBD MkIxQzBCNjQwHhcNMjUwNDI1MDA1NjI4WhcNMjUwNTAyMDA1NjI4WjAYMRYwFAYD VQQDEw02ODBhZGRiYy1kMTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pBWK02ypnkUMgtEEFr7xbj0HtBvlaW8PDvr7yDt6jTslpOg5hX8bvtyUMd4 e6ex9sxOKR6OXR2wg6+Au66C8aNbfaD+0RhIobnih6kfUXIXSohwKNez9MyIE5wc gfgcUCVn0k8mSaA+FP0i+cM+nMwH6NYs5F1nx8ipiuw85dch/KNxa+ZrrNLlQhCd Frq38BYdgkA97WzE+u+cB3+Cr++HvhzLB3z4kKleg9BITUD01ALdpBV/DoKfq61h SonMSQt0zqjsmglAG+np4ZmV1r2Z8WtFtEQ2lnSxMxMYPhdhpnGVR/3g87vhOSxA f5/+Byo1Yt29Pqf3OAhrG5iPtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMERMzl 9Ga2yOTnk2q9gz2rJ2f8MB8GA1UdIwQYMBaAFFLz5/te2FM39+GeEHM9SQwrHAtk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzI3Ny9DMUIwMjI5NkM2 QzAxMUVDQTg1NEQ2MjdDNEY5QUUwMi9VdlBuLTE3WVV6ZjM0WjRRY3oxSkRDc2ND MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V2UG4tMTdZVXpmMzRaNFFjejFKRENzY0MyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzI3Ny9DMUIwMjI5NkM2QzAxMUVDQTg1NEQ2MjdDNEY5QUUwMi9VdlBuLTE3WVV6 ZjM0WjRRY3oxSkRDc2NDMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX7hUOvJPuo+701NJk8krD2m1YnnxCUB7hV0GM8evFO3sMzBRP1Mgb bawPHuJZgbt5BVBD5w0WxNVxizisiXdcPyMGVZHI2mz6Ly5edRG3IapHncXiosFf yxOulcX0EAMutTLdgEd5f90oeiEreMycmGjmoeAXAJ0bD82u/dnP/mlea3dsu6JE 4a/ED+yRdvUrAxEaswsCF6xqTpyhvnS314+vqmvb8S7j8dnHC15g3TTXj1qeOHOJ SlKwB5mMl0re2mxju7kva8r//Wqf3peDRQbBoN5b+kIfwvQHzwCaJshsBiuq4ELw VFqWEytuAcn4BW53rPorh0FSp4OfzNQM -----END CERTIFICATE-----Generated at Sat Apr 26 13:10:49 2025 by rpki-client