$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft File: Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft (raw, json) Hash identifier: DtPQDqERYC7eAZgV1uxvM9DyoBuBSupQUIdvU+uoS3M= Subject key identifier: C4:DD:A5:4A:7F:18:F0:92:5A:F9:1B:CF:C1:FE:F8:47:5E:27:65:78 Authority key identifier: 52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94 Certificate issuer: /CN=A91AFA16/serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894 Certificate serial: 0B40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft Manifest number: 0B38 Signing time: Thu 24 Apr 2025 19:03:36 +0000 Manifest this update: Thu 24 Apr 2025 19:03:36 +0000 Manifest next update: Thu 01 May 2025 19:03:36 +0000 Files and hashes: 1: Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl (hash: 2KeO2HiiwRQ9DNlKJV+djVxduG9IzMBatASlk1IuBwY=) 2: 11DB043CF61E11EEB39BD261C4F9AE02.roa (hash: e4wDPqjhV3r7vEA4MsvAFc5ifRump5FxJZTH+nviBcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2880 (0xb40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFA16, serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894 Validity Not Before: Apr 24 19:03:36 2025 GMT Not After : May 1 19:03:36 2025 GMT Subject: CN=680a8b08-af40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d0:bd:d7:ea:48:a0:0d:54:28:3c:03:6b:df: 8c:1b:11:7d:78:97:ac:16:6a:3f:6b:5c:1c:61:8d: 47:72:b0:70:46:06:c8:d5:ba:34:fe:08:ae:fc:2d: 9f:d8:5a:de:99:b1:10:d2:22:2f:ab:bc:21:a4:01: ba:bf:51:78:90:cf:c5:07:1a:57:9f:e1:07:4c:ad: 35:ee:3e:cf:7c:d3:27:f9:17:7f:f6:f2:4a:0f:58: 9e:69:37:56:c6:6b:61:f4:3f:72:5b:98:74:72:ae: 52:db:83:72:ac:e7:be:29:9b:10:f1:15:c8:d6:ab: e0:4d:02:b8:5f:84:f0:74:f2:a3:a8:3a:ca:bb:60: ff:1c:f3:c7:b2:b2:19:fe:33:23:90:f8:97:d3:1a: 5a:e0:95:b0:f0:79:09:9a:42:90:ec:25:2b:06:7e: 0b:56:7d:91:04:b5:e2:0d:be:6f:08:e7:78:d5:26: ae:fd:c8:18:37:42:d0:13:3c:5b:84:8b:c2:5c:6d: 0e:2e:31:4a:7b:1f:cb:72:fc:6e:34:69:ab:30:d8: c8:ea:29:12:bb:07:45:23:1a:8a:85:0e:ab:ef:3f: 16:16:e4:e8:b2:69:a1:9a:39:26:6e:74:a7:32:a9: 6a:c6:ae:56:99:7c:b4:29:3f:40:c7:a4:e8:c1:70: 3b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DD:A5:4A:7F:18:F0:92:5A:F9:1B:CF:C1:FE:F8:47:5E:27:65:78 X509v3 Authority Key Identifier: keyid:52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:02:8c:bb:17:dd:ca:9f:b1:59:f4:6e:01:a9:3f:35:9e:08: 79:0b:b1:77:1f:c5:a7:d4:00:3d:d4:ed:6c:76:1c:b8:08:71: 39:b5:3d:79:03:0c:a1:1f:2c:a7:7a:43:b1:05:9f:24:95:46: 19:06:4c:e9:7e:40:f6:5c:8b:f7:a3:f5:b7:a8:c5:74:89:73: ea:f6:3b:5e:ea:45:2d:06:a1:a0:cb:ee:2d:c2:6a:c1:d8:fb: 32:f4:2d:91:d2:08:92:e5:1d:4e:90:af:dc:41:a2:9f:6b:cb: 40:f2:ee:94:1e:f8:c8:f6:bb:96:83:b6:ac:0c:20:8a:1f:34: 8a:d9:30:e8:0f:79:17:71:72:fd:d8:a9:98:fa:67:4d:05:e5: 07:fb:6a:c6:66:91:3a:0e:f8:b2:c0:cb:3f:d5:a8:03:12:1c: 9f:e8:ed:7b:32:31:03:ea:51:22:77:0d:9c:28:6f:03:6b:6e: 75:0a:02:07:b0:7a:f3:8f:d9:37:21:a4:a2:a7:32:d3:73:8a: ed:2a:78:d2:3e:8a:13:21:f5:d6:08:f8:d2:19:43:e3:ac:2f: 38:69:be:33:de:f1:02:15:17:76:bb:3e:d6:ab:ab:d3:ee:a9: 66:dc:c8:48:6e:b0:ad:c1:ad:9e:16:ce:0f:cf:51:23:3a:5f: 9a:9e:56:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZBMTYxMTAvBgNVBAUTKDUyRkQxREUyNERBRjhERDVGQzNBQTAwNzhCMDc3MzJG QzI3NDc4OTQwHhcNMjUwNDI0MTkwMzM2WhcNMjUwNTAxMTkwMzM2WjAYMRYwFAYD VQQDEw02ODBhOGIwOC1hZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9C91+pIoA1UKDwDa9+MGxF9eJesFmo/a1wcYY1HcrBwRgbI1bo0/giu/C2f 2FrembEQ0iIvq7whpAG6v1F4kM/FBxpXn+EHTK017j7PfNMn+Rd/9vJKD1ieaTdW xmth9D9yW5h0cq5S24NyrOe+KZsQ8RXI1qvgTQK4X4TwdPKjqDrKu2D/HPPHsrIZ /jMjkPiX0xpa4JWw8HkJmkKQ7CUrBn4LVn2RBLXiDb5vCOd41Sau/cgYN0LQEzxb hIvCXG0OLjFKex/LcvxuNGmrMNjI6ikSuwdFIxqKhQ6r7z8WFuTosmmhmjkmbnSn Mqlqxq5WmXy0KT9Ax6TowXA7mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTdpUp/ GPCSWvkbz8H++EdeJ2V4MB8GA1UdIwQYMBaAFFL9HeJNr43V/DqgB4sHcy/CdHiU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkExNi9DNTU0MjA4MDM1 QzkxMUVBQjRBRkNCMTVDNEY5QUUwMi9VdjBkNGsydmpkWDhPcUFIaXdkekw4SjBl SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V2MGQ0azJ2amRYOE9xQUhpd2R6TDhKMGVKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkExNi9DNTU0MjA4MDM1QzkxMUVBQjRBRkNCMTVDNEY5QUUwMi9VdjBkNGsydmpk WDhPcUFIaXdkekw4SjBlSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmAoy7F93Kn7FZ9G4BqT81ngh5C7F3H8Wn1AA91O1sdhy4CHE5tT15 AwyhHyynekOxBZ8klUYZBkzpfkD2XIv3o/W3qMV0iXPq9jte6kUtBqGgy+4twmrB 2Psy9C2R0giS5R1OkK/cQaKfa8tA8u6UHvjI9ruWg7asDCCKHzSK2TDoD3kXcXL9 2KmY+mdNBeUH+2rGZpE6DviywMs/1agDEhyf6O17MjED6lEidw2cKG8Da251CgIH sHrzj9k3IaSipzLTc4rtKnjSPooTIfXWCPjSGUPjrC84ab4z3vECFRd2uz7Wq6vT 7qlm3MhIbrCtwa2eFs4Pz1EjOl+anlZF -----END CERTIFICATE-----Generated at Sat Apr 26 13:00:27 2025 by rpki-client