$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft File: uG8rXtaXoSH08p1YIDcs8UBVEgs.mft (raw, json) Hash identifier: PfrwzTosXkvJCY9SWjPrGg6ltOtF7VgL4pJUGAvQBdI= Subject key identifier: BA:74:FE:0A:CA:DE:1E:E2:0C:9E:72:E8:F3:3C:31:2D:BC:3D:67:03 Authority key identifier: B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B Certificate issuer: /CN=A91AF0C6/serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft Manifest number: 013E Signing time: Fri 25 Apr 2025 03:29:12 +0000 Manifest this update: Fri 25 Apr 2025 03:29:11 +0000 Manifest next update: Fri 02 May 2025 03:29:11 +0000 Files and hashes: 1: uG8rXtaXoSH08p1YIDcs8UBVEgs.crl (hash: Knh/NnHeMbcTtgGaJ/DJCjY62qPxzcbKUgSYQ2ecPas=) 2: A915A3543FEC11EE99AC0F43C4F9AE02.roa (hash: go8uCjvo0RCrR73Y9GSlxE8uDTmJOu4MaZ77GeOcrFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:29:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0C6, serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B Validity Not Before: Apr 25 03:29:11 2025 GMT Not After : May 2 03:29:11 2025 GMT Subject: CN=680b0188-0a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5c:fa:ea:d6:fb:b7:0e:91:73:e6:ad:98:b3: 16:a0:80:d9:7b:86:c5:7b:65:94:90:39:eb:5d:7d: be:43:4b:cc:f9:83:66:a3:65:20:a8:b3:56:79:6a: 49:fc:5d:9d:e7:6f:89:6f:25:70:5d:9f:d5:c3:e2: 8b:27:ef:9f:67:a4:b6:62:40:4d:34:1c:ed:53:ac: ee:a0:ed:66:60:3c:77:1f:93:2f:0d:ea:d2:72:b6: 29:23:52:e9:87:c0:e7:d0:6d:ef:c9:f9:18:ea:51: b1:94:13:08:87:bd:95:8a:94:2a:5f:1b:8d:da:8c: db:c5:98:99:fa:a8:fd:95:49:4f:12:92:56:8b:2e: 22:cd:cd:20:12:87:51:61:3f:f7:15:ab:40:73:4e: 5f:85:81:a4:9d:41:76:f3:16:2d:56:d9:4d:43:58: e0:dd:97:03:c0:2e:6e:8a:bf:ad:e5:d0:d4:3b:d9: b6:2f:bf:eb:c8:32:e8:93:7d:fa:0f:15:f5:b1:b0: 94:eb:e5:55:75:ed:7f:c7:ae:09:83:3b:31:12:b9: 7f:25:20:37:0d:b1:5b:b8:c5:92:23:60:3e:64:1d: d5:0f:96:ce:9e:95:00:85:5c:27:68:84:53:52:08: 61:75:4e:d9:94:73:05:82:5a:3a:e3:bd:b6:a9:25: ae:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:74:FE:0A:CA:DE:1E:E2:0C:9E:72:E8:F3:3C:31:2D:BC:3D:67:03 X509v3 Authority Key Identifier: keyid:B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:bd:dc:19:10:29:92:b1:52:1a:f5:c0:9e:aa:da:b6:e2:19: 97:21:d7:3a:06:62:76:e9:bd:3a:49:b4:b9:c1:b6:e8:d4:bd: a1:9b:68:1f:a3:17:60:e6:da:c1:93:53:8b:25:75:7c:6e:0c: 18:c3:30:50:1f:cd:d7:4e:a4:24:1b:0f:ab:4d:69:7d:4b:d2: b3:06:32:77:ee:b7:7b:7b:40:ed:ed:a7:a8:37:d2:74:7c:d6: 09:16:c6:f7:c5:67:e9:58:ef:ab:c8:38:29:9f:05:89:a7:32: 42:04:6f:1a:56:48:56:8b:d0:b2:f1:3f:7b:ae:0c:ae:42:87: 99:da:ad:0e:26:f4:36:c7:56:4b:a6:c5:53:8c:a1:c5:6f:b5: 55:9b:20:f4:3a:5e:b8:c8:77:d5:de:22:96:95:ef:69:1c:b6: 28:64:b2:03:3d:d3:4e:12:d4:16:c8:8f:6a:8c:ce:fc:fb:82: af:36:59:f5:29:04:c3:22:90:5f:45:97:07:41:3d:48:6c:be: e0:aa:8c:a3:72:55:d3:e1:20:7e:fc:9e:fc:7c:06:d6:cc:76: 4d:d5:41:b5:1a:5d:66:d0:d2:77:71:84:8e:d0:5f:30:46:57: c4:17:ae:b5:46:4c:5b:15:a7:2c:9a:78:b0:b3:d0:a1:7c:ee: 7a:ca:ef:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQzYxMTAvBgNVBAUTKEI4NkYyQjVFRDY5N0ExMjFGNEYyOUQ1ODIwMzcyQ0Yx NDA1NTEyMEIwHhcNMjUwNDI1MDMyOTExWhcNMjUwNTAyMDMyOTExWjAYMRYwFAYD VQQDEw02ODBiMDE4OC0wYTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1z66tb7tw6Rc+atmLMWoIDZe4bFe2WUkDnrXX2+Q0vM+YNmo2UgqLNWeWpJ /F2d52+JbyVwXZ/Vw+KLJ++fZ6S2YkBNNBztU6zuoO1mYDx3H5MvDerScrYpI1Lp h8Dn0G3vyfkY6lGxlBMIh72VipQqXxuN2ozbxZiZ+qj9lUlPEpJWiy4izc0gEodR YT/3FatAc05fhYGknUF28xYtVtlNQ1jg3ZcDwC5uir+t5dDUO9m2L7/ryDLok336 DxX1sbCU6+VVde1/x64JgzsxErl/JSA3DbFbuMWSI2A+ZB3VD5bOnpUAhVwnaIRT UghhdU7ZlHMFglo64722qSWulQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLp0/grK 3h7iDJ5y6PM8MS28PWcDMB8GA1UdIwQYMBaAFLhvK17Wl6Eh9PKdWCA3LPFAVRIL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBDNi8zRkNFQkQyMjNG RUMxMUVFQURGNUQzMzhDNEY5QUUwMi91RzhyWHRhWG9TSDA4cDFZSURjczhVQlZF Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VHOHJYdGFYb1NIMDhwMVlJRGNzOFVCVkVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBDNi8zRkNFQkQyMjNGRUMxMUVFQURGNUQzMzhDNEY5QUUwMi91RzhyWHRhWG9T SDA4cDFZSURjczhVQlZFZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUvdwZECmSsVIa9cCeqtq24hmXIdc6BmJ26b06SbS5wbbo1L2hm2gf oxdg5trBk1OLJXV8bgwYwzBQH83XTqQkGw+rTWl9S9KzBjJ37rd7e0Dt7aeoN9J0 fNYJFsb3xWfpWO+ryDgpnwWJpzJCBG8aVkhWi9Cy8T97rgyuQoeZ2q0OJvQ2x1ZL psVTjKHFb7VVmyD0Ol64yHfV3iKWle9pHLYoZLIDPdNOEtQWyI9qjM78+4KvNln1 KQTDIpBfRZcHQT1IbL7gqoyjclXT4SB+/J78fAbWzHZN1UG1Gl1m0NJ3cYSO0F8w RlfEF661RkxbFacsmniws9ChfO56yu/6 -----END CERTIFICATE-----Generated at Sat Apr 26 04:24:32 2025 by rpki-client