$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft File: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json) Hash identifier: SYVKPnZRihWJ7+M18X9frlUGVpP52PdP8dFM2kG4oyQ= Subject key identifier: 46:F0:B5:9F:18:C7:1A:F3:7D:34:E5:1C:34:4A:07:E4:72:1D:0E:F4 Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B Certificate issuer: /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B Certificate serial: 034F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft Manifest number: 0340 Signing time: Fri 25 Apr 2025 00:50:35 +0000 Manifest this update: Fri 25 Apr 2025 00:50:34 +0000 Manifest next update: Fri 02 May 2025 00:50:34 +0000 Files and hashes: 1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: XlN6rKgS/59D1vNRSwhTJJZLm22tOBqU6kWzIReHXcU=) 2: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: F6jPBh9YlNU7RVZYywXLeNlWgnFuc8x8f5OICDCdyXk=) 3: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: 2CbWH78pD8qfhUqfDIT0bY8YAkS+SCmh9qliGFNOvyU=) 4: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: vsntEPAhq1q52SAuxi87DOT8T6ZFM5p3hlzlxYIzgx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 847 (0x34f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B Validity Not Before: Apr 25 00:50:34 2025 GMT Not After : May 2 00:50:34 2025 GMT Subject: CN=680adc5a-0a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:74:f4:66:af:8e:dc:d4:e6:22:84:63:95:ea: 2e:ca:6d:e4:7b:ee:bb:52:65:74:2f:b1:69:2e:20: d4:96:45:05:bd:75:4f:48:4d:af:1e:8c:f1:c7:84: 91:4d:c9:52:78:de:a0:9c:2c:13:19:66:71:4c:3c: f9:c7:a8:68:66:69:4c:73:ef:93:52:bf:cc:81:6d: 1e:1d:a6:95:57:19:bf:d6:18:44:6a:05:b6:52:ca: 45:50:cc:d5:f6:15:d3:3f:5b:54:bc:f4:c9:55:d8: 9f:b1:cd:58:72:56:2c:78:c3:21:2b:cc:2f:5a:0e: 7e:89:9a:f3:60:a1:f6:31:b4:9e:0b:14:d3:b4:fa: ab:6d:b0:a2:e3:31:0c:12:96:92:99:4c:a0:5f:c5: 3c:17:b0:7b:27:53:5a:e5:57:fa:1f:5a:b0:34:f9: 3f:3b:8a:44:bb:5f:ee:17:39:f5:44:c5:41:1f:2c: d7:7e:d1:e6:2a:dc:fe:0d:9a:42:e9:9e:c8:cf:7b: f5:03:5a:06:b3:f5:23:75:37:38:fd:56:42:09:b1: 0f:aa:bd:5a:fb:0b:20:f1:6e:84:28:b7:cb:71:b1: 38:b2:ff:77:2a:20:ae:06:9b:27:1d:a5:ec:d0:62: bf:10:e2:f2:da:c1:8d:85:68:7d:1f:17:1c:b3:36: 2b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F0:B5:9F:18:C7:1A:F3:7D:34:E5:1C:34:4A:07:E4:72:1D:0E:F4 X509v3 Authority Key Identifier: keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:2d:c8:f8:4b:22:bb:e0:d8:89:bc:78:36:7c:86:dc:bc:b5: 58:51:d5:06:63:9f:2d:20:41:da:01:df:fe:99:a7:89:a3:97: bc:8f:0e:cb:c2:f7:46:0d:a2:af:f1:52:c0:6d:fe:57:99:a0: 40:58:f8:7a:98:f6:da:50:98:80:bd:b0:47:6a:39:a0:97:da: 54:65:c3:8d:1f:1b:e5:93:e2:a2:6c:76:30:a3:75:cd:37:e8: 61:f8:6b:af:82:ef:7a:eb:4e:3c:6f:26:45:a9:2f:74:43:5a: d1:4f:f8:22:2d:2e:0a:81:c5:50:62:59:85:da:a6:65:e2:4e: 6b:cb:6e:b2:71:74:71:17:4c:33:4f:50:b7:ee:43:0e:8e:e0: b7:17:1d:3e:47:49:93:f8:3a:a8:ac:b7:2b:c6:76:0c:dc:21: 92:7c:49:10:ee:13:86:02:07:18:c7:ab:b8:2b:1c:c9:0a:b2: fa:e1:d3:19:ce:dc:73:b9:5e:91:9c:26:0e:db:f3:e9:88:b4: 17:2d:dd:f3:7d:9b:36:fa:c3:cd:89:c7:9a:47:59:f4:27:41: 9c:33:b7:2e:11:9f:d8:39:81:37:a1:2b:57:c1:75:20:03:2a: 5d:27:6b:ea:ef:c6:3d:5b:b7:3c:42:b9:77:ea:89:b5:a6:ee: 82:61:1c:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREQzcxMTAvBgNVBAUTKEI4ODkxMTE3ODA2OEQ1NzVERkRERjg0OTQwQ0FCRUFG NDUxQzhDMkIwHhcNMjUwNDI1MDA1MDM0WhcNMjUwNTAyMDA1MDM0WjAYMRYwFAYD VQQDEw02ODBhZGM1YS0wYTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXT0Zq+O3NTmIoRjleouym3ke+67UmV0L7FpLiDUlkUFvXVPSE2vHozxx4SR TclSeN6gnCwTGWZxTDz5x6hoZmlMc++TUr/MgW0eHaaVVxm/1hhEagW2UspFUMzV 9hXTP1tUvPTJVdifsc1YclYseMMhK8wvWg5+iZrzYKH2MbSeCxTTtPqrbbCi4zEM EpaSmUygX8U8F7B7J1Na5Vf6H1qwNPk/O4pEu1/uFzn1RMVBHyzXftHmKtz+DZpC 6Z7Iz3v1A1oGs/UjdTc4/VZCCbEPqr1a+wsg8W6EKLfLcbE4sv93KiCuBpsnHaXs 0GK/EOLy2sGNhWh9HxccszYriwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbwtZ8Y xxrzfTTlHDRKB+RyHQ70MB8GA1UdIwQYMBaAFLiJEReAaNV13934SUDKvq9FHIwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNERDNy9GM0YxMDIwRUJC MTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFYWGYzZmhKUU1xLXIwVWNq Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VJa1JGNEJvMVhYZjNmaEpRTXEtcjBVY2pDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NERDNy9GM0YxMDIwRUJCMTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFY WGYzZmhKUU1xLXIwVWNqQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5Lcj4SyK74NiJvHg2fIbcvLVYUdUGY58tIEHaAd/+maeJo5e8jw7L wvdGDaKv8VLAbf5XmaBAWPh6mPbaUJiAvbBHajmgl9pUZcONHxvlk+KibHYwo3XN N+hh+Guvgu966048byZFqS90Q1rRT/giLS4KgcVQYlmF2qZl4k5ry26ycXRxF0wz T1C37kMOjuC3Fx0+R0mT+DqorLcrxnYM3CGSfEkQ7hOGAgcYx6u4KxzJCrL64dMZ ztxzuV6RnCYO2/PpiLQXLd3zfZs2+sPNiceaR1n0J0GcM7cuEZ/YOYE3oStXwXUg AypdJ2vq78Y9W7c8Qrl36om1pu6CYRyQ -----END CERTIFICATE-----Generated at Sat Apr 26 05:24:47 2025 by rpki-client