$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft File: uOpx0E7INugYCHPJ6dQM0uNVNwE.mft (raw, json) Hash identifier: 2KAPmuZ4xs1WxmO3RoMFUpZ28Qq37Rvph3tCL0HHRvk= Subject key identifier: AF:D3:5A:73:39:11:14:DD:70:7B:E0:AD:74:21:B7:A1:04:19:A7:D4 Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 Certificate issuer: /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft Manifest number: 01D3 Signing time: Fri 25 Apr 2025 02:02:43 +0000 Manifest this update: Fri 25 Apr 2025 02:02:42 +0000 Manifest next update: Fri 02 May 2025 02:02:42 +0000 Files and hashes: 1: uOpx0E7INugYCHPJ6dQM0uNVNwE.crl (hash: Q+QoFZSXDOyWuQzcLOnYKoH0S2XQhmjGMqiFY2Gc0Cw=) 2: CC74271E8A8711ED98572D26C4F9AE02.roa (hash: rGioCcK4Zr+knzNA5J2qJp6M9oaPBmCCilGkVDkio+Y=) 3: C9E35E848A8711ED98572D26C4F9AE02.roa (hash: eHox8CScwy17I91npttE3xAPIO9P1S6yAPyglPvKM8k=) 4: 4865D4707C3111EFBD9FF572C4F9AE02.roa (hash: nGayQSIhHNj55hF0Vf/Lo4S3bo5wcu1gOdllnD1y6Pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCF10, serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Validity Not Before: Apr 25 02:02:42 2025 GMT Not After : May 2 02:02:42 2025 GMT Subject: CN=680aed42-e99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:49:70:20:5e:0b:76:4d:29:41:ca:ea:05: b3:43:1f:51:cc:c8:b9:19:c1:45:6b:08:3a:2c:c2: 47:be:a2:37:89:19:48:6a:fc:84:b6:94:3d:c6:f7: 9d:4b:bc:e2:c0:fd:97:9d:48:78:23:ae:01:b2:70: 04:3f:a2:4c:95:7f:35:08:77:ee:43:48:cc:74:ba: 87:ce:12:ae:36:f8:f9:60:35:8f:c4:ab:d4:53:4e: f8:c2:ab:fb:a9:43:bb:94:7f:b3:a0:11:7e:2e:1f: 8d:3f:87:e4:26:77:46:87:81:70:02:e7:7d:b1:8c: d0:c8:55:f4:72:99:66:4c:dd:96:ee:f4:3a:2a:eb: 84:33:a4:7f:70:e7:c8:e7:81:83:61:9d:31:70:15: 09:e4:8f:64:03:65:64:fb:84:ba:8c:fc:9b:33:6e: f4:6f:65:4e:73:1e:ea:4b:f2:7d:80:14:90:eb:ea: 0d:24:d5:a0:6d:8e:9b:81:68:21:b3:9f:3a:9d:77: ef:c6:89:f1:c6:db:96:b0:6c:df:36:13:99:13:aa: e0:4a:2e:25:bb:36:3c:5d:48:fd:16:8a:ce:4a:b2: a1:1f:73:18:c1:c3:e7:cd:5f:c1:74:49:fb:42:dd: 18:c5:7d:0f:82:64:38:17:ae:8a:7b:b3:9e:a1:7f: 95:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D3:5A:73:39:11:14:DD:70:7B:E0:AD:74:21:B7:A1:04:19:A7:D4 X509v3 Authority Key Identifier: keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d5:32:e2:50:e1:89:4e:67:d9:4e:3f:69:50:7f:a4:0e:f8: c6:fa:25:64:da:19:c1:ab:3b:b4:52:0e:23:b0:57:fc:04:92: ca:d5:0d:46:02:74:6a:b7:b8:1a:eb:84:32:a1:97:8e:84:67: 12:c0:ae:7f:d4:d8:35:e7:41:96:88:c4:1c:43:f2:16:ba:bd: ad:11:c5:93:16:4e:6e:3e:d1:5f:af:2a:1c:9b:e6:6f:44:45: 5a:3b:d9:ad:11:e9:4c:11:08:10:94:5f:ba:e6:32:51:43:b5: 05:d0:e7:c0:42:2e:bd:70:b8:02:82:ef:3e:1a:c7:fe:85:ab: a6:e1:43:cd:39:86:29:b6:6e:2a:39:e5:26:59:f8:cf:b9:35: ec:ba:81:95:35:88:3b:ad:fc:49:68:6c:58:74:ec:db:b0:92: 2b:38:e4:8b:e8:bc:d6:dc:44:37:63:2e:43:4b:1d:c3:9c:57: dd:6b:c4:70:62:c9:a6:84:f1:6c:07:92:99:57:85:af:02:5d: 90:37:b3:37:14:fe:2a:91:06:6c:cd:a3:b8:0b:3a:21:44:3d: c1:5f:94:5d:40:39:0a:be:a0:44:bb:ee:e1:bf:bc:84:07:a2: 4c:95:32:59:06:02:a6:11:fe:71:87:91:52:15:bb:0f:77:11: dd:1a:1a:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NGMTAxMTAvBgNVBAUTKEI4RUE3MUQwNEVDODM2RTgxODA4NzNDOUU5RDQwQ0Qy RTM1NTM3MDEwHhcNMjUwNDI1MDIwMjQyWhcNMjUwNTAyMDIwMjQyWjAYMRYwFAYD VQQDEw02ODBhZWQ0Mi1lOTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8pJcCBeC3ZNKUHK6gWzQx9RzMi5GcFFawg6LMJHvqI3iRlIavyEtpQ9xved S7ziwP2XnUh4I64BsnAEP6JMlX81CHfuQ0jMdLqHzhKuNvj5YDWPxKvUU074wqv7 qUO7lH+zoBF+Lh+NP4fkJndGh4FwAud9sYzQyFX0cplmTN2W7vQ6KuuEM6R/cOfI 54GDYZ0xcBUJ5I9kA2Vk+4S6jPybM270b2VOcx7qS/J9gBSQ6+oNJNWgbY6bgWgh s586nXfvxonxxtuWsGzfNhOZE6rgSi4luzY8XUj9ForOSrKhH3MYwcPnzV/BdEn7 Qt0YxX0PgmQ4F66Ke7OeoX+VAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/TWnM5 ERTdcHvgrXQht6EEGafUMB8GA1UdIwQYMBaAFLjqcdBOyDboGAhzyenUDNLjVTcB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0YxMC9FQzY3MzMzRTYw OTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51Z1lDSFBKNmRRTTB1TlZO d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPcHgwRTdJTnVnWUNIUEo2ZFFNMHVOVk53RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0YxMC9FQzY3MzMzRTYwOTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51 Z1lDSFBKNmRRTTB1TlZOd0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa1TLiUOGJTmfZTj9pUH+kDvjG+iVk2hnBqzu0Ug4jsFf8BJLK1Q1G AnRqt7ga64QyoZeOhGcSwK5/1Ng150GWiMQcQ/IWur2tEcWTFk5uPtFfryocm+Zv REVaO9mtEelMEQgQlF+65jJRQ7UF0OfAQi69cLgCgu8+Gsf+haum4UPNOYYptm4q OeUmWfjPuTXsuoGVNYg7rfxJaGxYdOzbsJIrOOSL6LzW3EQ3Yy5DSx3DnFfda8Rw YsmmhPFsB5KZV4WvAl2QN7M3FP4qkQZszaO4CzohRD3BX5RdQDkKvqBEu+7hv7yE B6JMlTJZBgKmEf5xh5FSFbsPdxHdGho9 -----END CERTIFICATE-----Generated at Sat Apr 26 12:24:30 2025 by rpki-client