$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft File: -uIUFNET23jVT-q6G2BvhUokC9E.mft (raw, json) Hash identifier: ZpXPeYTHX9yEcnOcppJWZCOgxmrk5hSDNOgDOalX5os= Subject key identifier: FA:E5:00:AB:0A:BA:7F:2D:16:D6:94:48:45:0E:E7:B4:3A:E7:F6:B2 Authority key identifier: FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1 Certificate issuer: /CN=A91BDA2A/serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1 Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft Manifest number: 016E Signing time: Fri 25 Apr 2025 02:59:42 +0000 Manifest this update: Fri 25 Apr 2025 02:59:42 +0000 Manifest next update: Fri 02 May 2025 02:59:42 +0000 Files and hashes: 1: -uIUFNET23jVT-q6G2BvhUokC9E.crl (hash: gZidZt5gc1dGM9RqjZXNt2K2M94zWwSimE6ZkOxlkxU=) 2: 05C6C85CF3C211ED8B9B1450C4F9AE02.roa (hash: nYA6dKLF7hZ2252OSmbcet0fM3uQj9FqvEVTxCVbcwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA2A, serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1 Validity Not Before: Apr 25 02:59:42 2025 GMT Not After : May 2 02:59:42 2025 GMT Subject: CN=680afa9e-30e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:91:b9:8b:1a:36:12:d1:3b:88:58:d1:af:9e: 29:29:82:3c:ae:0e:0a:d1:4e:fd:de:05:d9:d4:b9: 4d:55:38:f4:76:35:66:0c:1d:52:5e:49:42:fd:92: 90:66:c1:ee:84:66:cd:a7:86:38:a8:89:0a:3f:3d: e1:fc:7f:78:2e:73:6a:a7:5a:26:a4:c3:9a:0d:3b: 70:96:63:90:f2:f2:7d:8f:e0:f0:38:3b:a2:3f:5e: 1e:d7:d3:3c:34:3e:ab:43:96:13:8f:ae:d7:89:07: 91:fb:be:42:16:1b:df:89:43:1d:5e:b1:7d:18:f4: a3:ef:02:09:51:ca:2c:fb:43:a0:34:93:c7:a2:49: 44:cf:5a:d7:ff:69:35:03:fe:16:42:b3:66:24:7b: b9:9e:f5:c1:b7:66:f9:79:89:35:94:40:ce:23:f7: 4f:eb:e7:82:a8:e8:71:6d:66:5f:9c:a9:e2:13:89: 5f:97:ad:67:cf:41:77:6a:68:db:0e:7d:c3:57:f9: 2a:f1:90:b1:5a:23:2c:38:74:97:6c:82:83:47:f9: 72:e7:57:11:d0:ba:5d:19:fc:d2:26:ec:5e:f0:8a: 77:ce:b8:e9:cc:f3:fc:97:9d:21:dc:a8:b1:dd:48: f2:e3:c3:e3:39:c1:8a:93:48:b5:bc:54:c3:d7:3d: cb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E5:00:AB:0A:BA:7F:2D:16:D6:94:48:45:0E:E7:B4:3A:E7:F6:B2 X509v3 Authority Key Identifier: keyid:FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e0:20:2c:06:28:f4:10:44:5f:4d:2e:7e:96:d6:1a:3d:6b: c5:f2:34:3d:3c:53:ca:6d:1e:fd:fe:9e:e5:fb:1d:94:62:4a: 17:28:9d:6a:d9:6b:9f:78:fc:fc:d9:3f:e7:87:a7:b3:73:24: 99:97:12:36:f9:5f:e9:48:49:a7:05:ad:9b:28:14:b4:c4:e3: ee:0c:32:63:fe:44:58:53:4d:ac:73:6e:b9:6d:dc:3c:09:95: d6:d5:86:a3:68:37:f5:98:76:59:27:0b:10:a6:65:8a:cc:22: 60:00:62:80:18:23:6f:90:15:bf:d4:ee:c3:d8:2e:46:f1:0f: 66:8e:8a:22:12:79:41:82:0d:a1:9a:1e:39:5e:87:76:5e:70: b1:de:c5:93:39:25:10:be:19:ff:9e:90:c7:12:8a:de:f2:eb: fd:58:8b:8b:14:3e:62:61:f0:bc:51:f1:16:a6:86:12:85:51: 89:b9:15:c0:be:c8:fb:13:0c:30:43:a3:30:e0:44:93:f6:40: da:c2:30:d6:7d:2b:2f:f2:cb:71:df:58:0f:ea:c3:36:64:f4: 53:da:87:71:a2:7f:50:12:76:cd:27:8d:3b:cb:ff:4f:fe:34: 17:08:13:c0:ee:ec:ce:9e:d9:97:c0:cd:80:cf:19:58:3a:f5: 38:72:1c:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMkExMTAvBgNVBAUTKEZBRTIxNDE0RDExM0RCNzhENTRGRUFCQTFCNjA2Rjg1 NEEyNDBCRDEwHhcNMjUwNDI1MDI1OTQyWhcNMjUwNTAyMDI1OTQyWjAYMRYwFAYD VQQDEw02ODBhZmE5ZS0zMGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlpG5ixo2EtE7iFjRr54pKYI8rg4K0U793gXZ1LlNVTj0djVmDB1SXklC/ZKQ ZsHuhGbNp4Y4qIkKPz3h/H94LnNqp1ompMOaDTtwlmOQ8vJ9j+DwODuiP14e19M8 ND6rQ5YTj67XiQeR+75CFhvfiUMdXrF9GPSj7wIJUcos+0OgNJPHoklEz1rX/2k1 A/4WQrNmJHu5nvXBt2b5eYk1lEDOI/dP6+eCqOhxbWZfnKniE4lfl61nz0F3amjb Dn3DV/kq8ZCxWiMsOHSXbIKDR/ly51cR0LpdGfzSJuxe8Ip3zrjpzPP8l50h3Kix 3Ujy48PjOcGKk0i1vFTD1z3LWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrlAKsK un8tFtaUSEUO57Q65/ayMB8GA1UdIwQYMBaAFPriFBTRE9t41U/quhtgb4VKJAvR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEyQS8xNDc3MTFCMkYz QkUxMUVEOUE5QUM2NEZDNEY5QUUwMi8tdUlVRk5FVDIzalZULXE2RzJCdmhVb2tD OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11SVVGTkVUMjNqVlQtcTZHMkJ2aFVva0M5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REEyQS8xNDc3MTFCMkYzQkUxMUVEOUE5QUM2NEZDNEY5QUUwMi8tdUlVRk5FVDIz alZULXE2RzJCdmhVb2tDOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK4CAsBij0EERfTS5+ltYaPWvF8jQ9PFPKbR79/p7l+x2UYkoXKJ1q 2WufePz82T/nh6ezcySZlxI2+V/pSEmnBa2bKBS0xOPuDDJj/kRYU02sc265bdw8 CZXW1YajaDf1mHZZJwsQpmWKzCJgAGKAGCNvkBW/1O7D2C5G8Q9mjooiEnlBgg2h mh45Xod2XnCx3sWTOSUQvhn/npDHEore8uv9WIuLFD5iYfC8UfEWpoYShVGJuRXA vsj7EwwwQ6Mw4EST9kDawjDWfSsv8stx31gP6sM2ZPRT2odxon9QEnbNJ407y/9P /jQXCBPA7uzOntmXwM2AzxlYOvU4chye -----END CERTIFICATE-----Generated at Sat Apr 26 05:04:30 2025 by rpki-client