$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft File: U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json) Hash identifier: Y+Ti+R45F3e4gqzbvng9fEJqNpoCpg+9Xt5lVlcmHKM= Subject key identifier: A8:43:8E:F6:9D:7F:CE:35:E8:41:EC:E5:16:FE:C6:3A:97:46:19:AB Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF Certificate issuer: /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Certificate serial: 0D27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft Manifest number: 0CD3 Signing time: Thu 24 Apr 2025 18:08:43 +0000 Manifest this update: Thu 24 Apr 2025 18:08:42 +0000 Manifest next update: Thu 01 May 2025 18:08:42 +0000 Files and hashes: 1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: TLYpxyBc3yZ7z0PHcpPKjWzOPt5TYFbPA4RMh9vvpUI=) 2: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: hDelh3PoJsz9R6GZhIRg0nobcW1v03O1xgV8RZIJ1VA=) 3: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: yXlaLhbx5YRuGCOCxZS+UVUBHLhciPfPZJOpJ77jS10=) 4: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: 6pM1TQdNb79+DA6IOYbwXDIQvGxFIYUOEy7bg1GioZ4=) 5: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: KHH4guWZz2QPTGfSHIABOFeNEzmNYAkAEdSlj0Q8gIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3367 (0xd27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Validity Not Before: Apr 24 18:08:42 2025 GMT Not After : May 1 18:08:42 2025 GMT Subject: CN=680a7e2b-7002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e5:ad:93:0f:49:e3:ae:f4:62:0e:e1:b4:bb: 08:4e:9c:fa:cb:00:f4:a3:0c:27:60:7d:27:4b:03: c3:88:4e:c4:90:bf:b8:26:16:ed:b7:a6:93:e0:2c: 03:2c:cd:8c:b5:60:96:8f:43:2b:f3:34:cf:f9:e4: 09:47:7e:c4:8d:01:8c:6d:77:09:1e:4a:39:8d:9b: e2:b5:32:a0:35:b6:a1:ec:a3:02:f8:4d:87:37:1f: 02:a0:ec:be:59:f6:55:4a:1d:b5:3e:2c:7a:eb:b7: 35:d6:61:c6:0d:f9:e0:92:a2:3a:4f:ab:96:50:3d: 8a:78:81:82:4d:e4:01:89:66:19:96:0f:ae:b7:a7: 29:ea:ef:90:47:b9:d8:83:d6:9e:c9:a2:89:46:bb: c3:70:94:16:ff:4c:f3:40:19:b3:16:48:c5:58:e8: 08:71:d3:02:81:c7:f7:b8:39:5d:ed:f7:60:b5:c3: b4:16:41:ca:5c:e4:69:cf:1d:9f:ce:a8:44:78:c2: 5b:30:00:59:74:94:6e:45:0e:a6:d2:6a:e5:3f:a5: 56:04:b1:e3:9e:84:15:6b:c2:dd:b6:22:65:1b:b2: 37:52:0f:b4:0f:66:80:5d:5f:81:46:b0:b6:ac:9e: f3:ff:87:b6:5c:c2:7e:cb:66:a3:87:64:04:f7:ff: 9b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:43:8E:F6:9D:7F:CE:35:E8:41:EC:E5:16:FE:C6:3A:97:46:19:AB X509v3 Authority Key Identifier: keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:8b:70:c6:d7:5e:43:e9:e3:0d:68:0b:45:30:d0:42:f5:2e: 74:e2:a5:49:02:22:ca:4b:ec:cc:eb:2c:33:43:9f:99:a8:38: 8b:8a:a9:e7:f7:0c:d4:99:e2:ba:c3:2f:91:3a:71:f1:a5:10: be:0c:7f:03:af:26:70:0f:39:50:3c:13:57:d8:58:39:26:3b: bd:1a:46:8c:3c:32:17:bb:d3:80:a4:11:fb:7b:c3:50:b6:05: 62:2b:ab:09:09:bd:73:ae:c4:9c:a8:19:73:58:d1:97:25:d4: 38:38:04:77:d1:74:0b:60:b6:6f:15:80:37:11:82:40:5f:d8: 78:84:00:a6:f3:d8:c9:4f:be:6d:1a:57:6f:b9:f1:95:a1:ba: e5:34:a2:23:c9:0d:2c:86:a0:5d:c0:ef:33:7f:b3:1d:b8:60: db:af:92:e9:66:3a:8f:b8:4f:f7:af:cd:02:65:0e:b0:52:82: e5:53:b1:2a:78:8d:2e:19:61:60:e2:8d:ee:06:4a:08:e9:ad: ec:15:b4:20:2d:2e:29:21:58:ae:4a:e5:fa:45:ff:4b:d9:0e: 64:64:b5:72:fc:d6:f9:2e:78:a6:c4:b8:f2:2e:e7:bf:33:44: ec:95:31:07:37:38:37:a8:3f:67:9f:a9:a2:3c:26:d9:d2:43: bb:78:e8:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4NUMxMTAvBgNVBAUTKDUzNzRDNkU3NUYxODYwNTI0NTVBMkQ4REE1MjkyRkVG MDA5Q0M5QUYwHhcNMjUwNDI0MTgwODQyWhcNMjUwNTAxMTgwODQyWjAYMRYwFAYD VQQDEw02ODBhN2UyYi03MDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+Wtkw9J4670Yg7htLsITpz6ywD0owwnYH0nSwPDiE7EkL+4Jhbtt6aT4CwD LM2MtWCWj0Mr8zTP+eQJR37EjQGMbXcJHko5jZvitTKgNbah7KMC+E2HNx8CoOy+ WfZVSh21Pix667c11mHGDfngkqI6T6uWUD2KeIGCTeQBiWYZlg+ut6cp6u+QR7nY g9aeyaKJRrvDcJQW/0zzQBmzFkjFWOgIcdMCgcf3uDld7fdgtcO0FkHKXORpzx2f zqhEeMJbMABZdJRuRQ6m0mrlP6VWBLHjnoQVa8LdtiJlG7I3Ug+0D2aAXV+BRrC2 rJ7z/4e2XMJ+y2ajh2QE9/+bsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhDjvad f8416EHs5Rb+xjqXRhmrMB8GA1UdIwQYMBaAFFN0xudfGGBSRVotjaUpL+8AnMmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODg1Qy81QzE5Rjg0MkYy NjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlGSkZXaTJOcFNrdjd3Q2N5 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UzVEc1MThZWUZKRldpMk5wU2t2N3dDY3lhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODg1Qy81QzE5Rjg0MkYyNjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlG SkZXaTJOcFNrdjd3Q2N5YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsi3DG115D6eMNaAtFMNBC9S504qVJAiLKS+zM6ywzQ5+ZqDiLiqnn 9wzUmeK6wy+ROnHxpRC+DH8DryZwDzlQPBNX2Fg5Jju9GkaMPDIXu9OApBH7e8NQ tgViK6sJCb1zrsScqBlzWNGXJdQ4OAR30XQLYLZvFYA3EYJAX9h4hACm89jJT75t GldvufGVobrlNKIjyQ0shqBdwO8zf7MduGDbr5LpZjqPuE/3r80CZQ6wUoLlU7Eq eI0uGWFg4o3uBkoI6a3sFbQgLS4pIViuSuX6Rf9L2Q5kZLVy/Nb5LnimxLjyLue/ M0TslTEHNzg3qD9nn6miPCbZ0kO7eOgs -----END CERTIFICATE-----Generated at Sat Apr 26 13:43:44 2025 by rpki-client