$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft File: uOVJaYlT9l5x-4S20zjAisF4Glo.mft (raw, json) Hash identifier: Rq+p9FJXkpsDFDSCfIaB4YrKD7RUpsTcsSEEFd0I5MY= Subject key identifier: 9B:E4:F0:99:D6:AA:63:4D:64:A7:03:05:9E:EF:98:35:2D:CD:58:CC Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A Certificate issuer: /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Certificate serial: 097F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft Manifest number: 0969 Signing time: Thu 24 Apr 2025 20:04:57 +0000 Manifest this update: Thu 24 Apr 2025 20:04:56 +0000 Manifest next update: Thu 01 May 2025 20:04:56 +0000 Files and hashes: 1: uOVJaYlT9l5x-4S20zjAisF4Glo.crl (hash: wvxdnchltYqD2Ee7GklSh1VHJHq0AGHcvhYCr/0kGdY=) 2: 4B31BDC4B76911ED8A503224C4F9AE02.roa (hash: sdPPzpmeuTxfNXX+Z4y10OZ5FdPq847kLyXykC/LAkQ=) 3: 3A489388B4F511EC83B0B46AC4F9AE02.roa (hash: G/uDm13Bf6tJyVNQOP+pm5ESZ5VRhWW8Z+gH8Z0T6aw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2431 (0x97f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5C70, serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Validity Not Before: Apr 24 20:04:56 2025 GMT Not After : May 1 20:04:56 2025 GMT Subject: CN=680a9969-2426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a1:aa:1e:4a:89:9e:2e:f4:3f:c4:62:45:a0: 55:9a:1c:eb:99:f6:86:ce:7c:5f:65:b7:4e:a0:9f: e7:42:e0:df:38:bf:b3:33:db:21:2d:b6:0c:7a:b3: cc:bb:ab:f6:cf:de:bb:8c:f4:da:74:b4:fa:90:ca: 86:81:49:6c:ca:63:81:ac:be:5e:f7:25:03:84:85: b9:14:cb:87:71:67:65:ce:0d:98:4f:8c:d5:25:98: 20:1d:fc:e3:bf:90:da:ca:19:7e:1b:cc:4f:69:38: ab:a7:5e:76:87:36:fa:a8:1c:e3:66:fd:c0:8f:aa: f4:76:7d:10:0e:9e:05:f6:3f:43:a4:15:67:3c:53: 30:fe:16:3c:84:1b:3e:84:0b:56:f1:3c:88:a4:37: 21:2c:c7:8d:03:b0:ac:db:39:2c:38:78:2d:97:fd: 10:fc:4d:22:3f:42:57:a4:20:c4:a4:91:4f:89:ad: 08:ab:90:2e:c7:ab:20:2f:4d:cc:87:f0:80:84:2d: 73:40:7e:9a:fe:e6:bc:7a:9b:cf:9e:6a:62:f3:ff: b4:d9:e9:ea:44:6e:7f:94:88:5a:d9:38:f6:9e:e1: ad:6d:fa:00:e3:74:5a:68:8a:6c:69:0f:85:51:01: 4c:b6:f2:3f:88:58:f6:3c:19:ce:ae:1d:0b:4a:77: 19:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E4:F0:99:D6:AA:63:4D:64:A7:03:05:9E:EF:98:35:2D:CD:58:CC X509v3 Authority Key Identifier: keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:ae:73:e4:23:3e:f9:65:08:71:65:4a:5e:b1:7e:9a:39:be: 4c:77:75:0c:c2:b7:2e:76:85:c9:99:44:30:a6:09:0d:c6:02: 12:c7:c2:9f:33:df:65:98:6d:99:39:1c:71:0b:36:70:bf:4b: d7:38:3a:ba:45:4e:51:7a:4a:a2:ca:e7:e8:16:a2:31:23:c7: dc:3d:ce:18:6e:26:f3:0c:3f:8f:89:22:28:9b:b8:4a:61:5c: 0b:35:06:02:fa:4f:f7:06:ee:85:d4:0f:3e:7a:fa:8f:dc:12: fd:a6:d1:4c:a5:3d:27:61:5c:7b:47:b7:a5:61:8b:f5:8b:73: 50:5b:43:35:a5:ae:f3:7d:a3:7c:34:4d:03:7e:da:c8:a9:c6: 2d:bd:ed:c7:1a:66:d8:ae:40:d2:8b:86:e4:70:79:a8:fc:2c: a3:5c:a6:f7:62:d6:79:c3:61:f6:b0:c7:ac:9f:40:0c:15:86: 25:b1:4c:85:5d:fa:bb:32:94:95:50:d6:cd:57:3a:19:c4:8e: f8:d8:08:04:a0:34:a3:b0:32:02:42:e2:04:be:06:b4:66:8b: f9:f6:38:9f:33:49:ef:a6:4b:70:c9:2a:7b:3d:11:bb:2d:bc: c4:38:4e:14:90:f2:e1:c6:6d:ba:57:6e:9a:55:97:ce:75:10: c6:7f:7c:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDNzAxMTAvBgNVBAUTKEI4RTU0OTY5ODk1M0Y2NUU3MUZCODRCNkQzMzhDMDhB QzE3ODFBNUEwHhcNMjUwNDI0MjAwNDU2WhcNMjUwNTAxMjAwNDU2WjAYMRYwFAYD VQQDEw02ODBhOTk2OS0yNDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqGqHkqJni70P8RiRaBVmhzrmfaGznxfZbdOoJ/nQuDfOL+zM9shLbYMerPM u6v2z967jPTadLT6kMqGgUlsymOBrL5e9yUDhIW5FMuHcWdlzg2YT4zVJZggHfzj v5Dayhl+G8xPaTirp152hzb6qBzjZv3Aj6r0dn0QDp4F9j9DpBVnPFMw/hY8hBs+ hAtW8TyIpDchLMeNA7Cs2zksOHgtl/0Q/E0iP0JXpCDEpJFPia0Iq5Aux6sgL03M h/CAhC1zQH6a/ua8epvPnmpi8/+02enqRG5/lIha2Tj2nuGtbfoA43RaaIpsaQ+F UQFMtvI/iFj2PBnOrh0LSncZhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvk8JnW qmNNZKcDBZ7vmDUtzVjMMB8GA1UdIwQYMBaAFLjlSWmJU/ZecfuEttM4wIrBeBpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUM3MC8yM0EwQUMwNjkx MDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDlsNXgtNFMyMHpqQWlzRjRH bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPVkphWWxUOWw1eC00UzIwempBaXNGNEdsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUM3MC8yM0EwQUMwNjkxMDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDls NXgtNFMyMHpqQWlzRjRHbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSrnPkIz75ZQhxZUpesX6aOb5Md3UMwrcudoXJmUQwpgkNxgISx8Kf M99lmG2ZORxxCzZwv0vXODq6RU5RekqiyufoFqIxI8fcPc4YbibzDD+PiSIom7hK YVwLNQYC+k/3Bu6F1A8+evqP3BL9ptFMpT0nYVx7R7elYYv1i3NQW0M1pa7zfaN8 NE0DftrIqcYtve3HGmbYrkDSi4bkcHmo/CyjXKb3YtZ5w2H2sMesn0AMFYYlsUyF Xfq7MpSVUNbNVzoZxI742AgEoDSjsDICQuIEvga0Zov59jifM0nvpktwySp7PRG7 LbzEOE4UkPLhxm26V26aVZfOdRDGf3yb -----END CERTIFICATE-----Generated at Sat Apr 26 12:38:54 2025 by rpki-client