$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft File: uoXZHSSsqengMR5VLb83WXY6Yro.mft (raw, json) Hash identifier: WoSfCZGgK0XMgwCN4dFf7A7ugU5QAim0wSPZuyzvNAk= Subject key identifier: 0B:5E:F1:93:C4:0C:EC:91:E0:96:6F:7B:C8:A4:E2:24:5F:65:C4:44 Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA Certificate issuer: /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft Manifest number: 95 Signing time: Thu 01 May 2025 05:21:39 +0000 Manifest this update: Thu 01 May 2025 05:21:38 +0000 Manifest next update: Thu 08 May 2025 05:21:38 +0000 Files and hashes: 1: uoXZHSSsqengMR5VLb83WXY6Yro.crl (hash: k53ZO3LQtq25ftiKLlBGjomMAn8xvYd5qoowc4/iuBc=) 2: C57D59A8457011EFA624C172C4F9AE02.roa (hash: ID73Pz3s55NAjs8USBhRX9L9yvmp5FUr9fdsYXFscuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 05:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B391F, serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA Validity Not Before: May 1 05:21:38 2025 GMT Not After : May 8 05:21:38 2025 GMT Subject: CN=681304e2-18fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c6:9a:7a:b8:87:bb:bd:1a:4d:76:f2:7e:52: 3c:a1:68:15:64:73:9a:67:0b:0e:ee:ec:77:bc:3f: 91:8e:bd:d3:d3:00:9e:c4:16:8a:8d:b6:3b:c1:13: 99:86:2b:72:3f:4e:d6:a9:1b:4d:27:51:fc:c1:30: 7f:35:c2:62:13:9c:b7:f2:0f:7a:3c:f8:82:48:8b: 84:9a:19:bc:5f:b9:26:c1:c7:4c:68:73:ab:19:b1: e4:35:86:01:f6:1f:10:ca:11:1e:d2:2c:41:59:a4: a2:ec:39:a3:b2:94:21:d4:33:6f:0d:88:84:41:5f: 1b:8c:1e:2f:22:f8:66:8b:08:c7:f4:ac:0f:4d:ca: 91:fe:07:2a:e6:8d:22:b6:a0:f5:63:1a:49:c8:bf: aa:d7:14:43:94:6d:5d:3b:f6:37:e2:fc:8f:d7:f9: 59:d1:0f:d4:52:cb:23:f4:56:74:57:28:41:ff:82: 13:36:c2:05:7d:7f:39:63:99:0d:b4:a7:73:9c:e1: 50:ad:cc:9f:34:45:fd:d8:2e:84:01:1b:41:dc:8f: 91:f1:40:5a:12:ce:07:88:73:e2:21:e1:e8:17:9a: 03:96:5f:3c:5d:e9:aa:d8:ff:52:65:8a:1d:43:af: 1e:08:6f:13:9e:3b:d8:0e:2f:3b:62:bf:d8:da:fd: f7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5E:F1:93:C4:0C:EC:91:E0:96:6F:7B:C8:A4:E2:24:5F:65:C4:44 X509v3 Authority Key Identifier: keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:42:5f:1d:86:b2:90:1d:87:33:37:fc:7b:fb:53:3e:d4:d4: 6d:f9:7f:8c:43:35:69:67:f9:b1:38:1d:4c:17:ad:5b:f8:6b: 9b:e9:37:04:da:26:51:c0:4a:f9:70:50:6a:e9:bd:d3:ab:08: c0:09:a4:5f:52:e4:5c:6f:79:f3:db:67:89:ad:7d:41:28:e7: 87:85:9b:47:6d:ab:2c:c3:54:9d:09:09:2b:41:00:ad:51:a7: 7c:7b:03:20:47:78:a5:d4:f1:3f:fe:23:c7:d2:79:25:3b:3c: cd:06:0e:4b:8a:fd:19:68:97:19:ee:67:19:3a:8f:07:8d:9c: c4:63:f9:06:dc:72:01:b9:47:47:42:43:c8:d2:4c:b6:14:0c: bc:73:25:ec:3b:09:9c:10:e3:7c:62:4d:89:14:89:bb:f9:ba: 72:59:2a:4b:25:c4:45:60:39:8b:b0:26:fa:70:48:fc:8d:f4: 84:3e:42:92:4e:72:53:24:00:7c:71:be:57:b6:ba:36:a3:e0: 90:22:b0:ed:04:0d:9c:45:0c:ae:3c:18:45:52:5f:02:88:03: a6:04:00:1d:de:cb:f9:f4:80:2d:8e:89:7b:90:79:71:4e:fc: 6c:fd:f6:ee:4a:ce:57:36:e3:62:b2:f0:f4:07:c6:d8:dc:1c: 02:b3:f5:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM5MUYxMTAvBgNVBAUTKEJBODVEOTFEMjRBQ0E5RTlFMDMxMUU1NTJEQkYzNzU5 NzYzQTYyQkEwHhcNMjUwNTAxMDUyMTM4WhcNMjUwNTA4MDUyMTM4WjAYMRYwFAYD VQQDEw02ODEzMDRlMi0xOGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1caaeriHu70aTXbyflI8oWgVZHOaZwsO7ux3vD+Rjr3T0wCexBaKjbY7wROZ hityP07WqRtNJ1H8wTB/NcJiE5y38g96PPiCSIuEmhm8X7kmwcdMaHOrGbHkNYYB 9h8QyhEe0ixBWaSi7DmjspQh1DNvDYiEQV8bjB4vIvhmiwjH9KwPTcqR/gcq5o0i tqD1YxpJyL+q1xRDlG1dO/Y34vyP1/lZ0Q/UUssj9FZ0VyhB/4ITNsIFfX85Y5kN tKdznOFQrcyfNEX92C6EARtB3I+R8UBaEs4HiHPiIeHoF5oDll88Xemq2P9SZYod Q68eCG8TnjvYDi87Yr/Y2v33DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAte8ZPE DOyR4JZve8ik4iRfZcREMB8GA1UdIwQYMBaAFLqF2R0krKnp4DEeVS2/N1l2OmK6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzkxRi81MDgzNUU2ODQ1 NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi91b1haSFNTc3FlbmdNUjVWTGI4M1dYWTZZ cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VvWFpIU1NzcWVuZ01SNVZMYjgzV1hZNllyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzkxRi81MDgzNUU2ODQ1NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi91b1haSFNTc3Fl bmdNUjVWTGI4M1dYWTZZcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGQl8dhrKQHYczN/x7+1M+1NRt+X+MQzVpZ/mxOB1MF61b+Gub6TcE 2iZRwEr5cFBq6b3TqwjACaRfUuRcb3nz22eJrX1BKOeHhZtHbassw1SdCQkrQQCt Uad8ewMgR3il1PE//iPH0nklOzzNBg5Liv0ZaJcZ7mcZOo8HjZzEY/kG3HIBuUdH QkPI0ky2FAy8cyXsOwmcEON8Yk2JFIm7+bpyWSpLJcRFYDmLsCb6cEj8jfSEPkKS TnJTJAB8cb5Xtro2o+CQIrDtBA2cRQyuPBhFUl8CiAOmBAAd3sv59IAtjol7kHlx Tvxs/fbuSs5XNuNisvD0B8bY3BwCs/V4 -----END CERTIFICATE-----Generated at Fri May 2 11:25:37 2025 by rpki-client