$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft File: u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft (raw, json) Hash identifier: w49a7f23n2GvFWpvge79hWDu3Zd4OIv9E3PibYmv+Zc= Subject key identifier: 80:99:A0:4C:F9:C8:7A:49:BB:8F:1E:A4:7F:26:42:C2:EC:E1:B4:43 Authority key identifier: BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0 Certificate issuer: /CN=A91CEE85/serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft Manifest number: 97 Signing time: Tue 29 Apr 2025 06:21:23 +0000 Manifest this update: Tue 29 Apr 2025 06:21:22 +0000 Manifest next update: Tue 06 May 2025 06:21:22 +0000 Files and hashes: 1: u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl (hash: mjDZFz8OLQfKvpe8XxKuMjzasS/fh2reP9SWVAQUID0=) 2: 4D189DD4728311EFA9CECE43C4F9AE02.roa (hash: Ge+55CQegGWCZISlkeWVyEDQbw8xhE1lFYLjXYnwl5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 06:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE85, serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0 Validity Not Before: Apr 29 06:21:22 2025 GMT Not After : May 6 06:21:22 2025 GMT Subject: CN=68106fe2-3328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c1:a4:27:6d:c4:32:d9:f0:79:96:f5:1c:95: 45:1e:c8:ea:53:d1:51:2b:80:e7:2a:0d:f5:e9:4a: 73:ab:33:55:14:09:2a:c0:4b:49:7a:57:8d:ea:77: 71:5d:9a:3c:ed:26:24:d9:9a:f9:e6:a6:f0:76:0d: 76:03:04:c3:33:6f:3b:2f:08:8e:1d:f5:ed:8c:b4: 49:da:e8:77:1d:51:dd:dc:dd:7a:85:81:ea:a1:7e: 8a:57:e8:f2:f8:9f:ea:af:50:5d:52:2f:63:84:08: ab:36:40:5e:25:be:bd:38:ee:6e:78:52:be:f0:d6: 9f:37:b2:93:a2:7c:25:f5:c8:c7:64:2b:b8:c3:1c: 44:95:9b:15:48:0e:1a:14:af:6b:05:a5:d8:86:51: 9b:91:38:44:87:21:68:d7:e9:a7:fc:29:54:45:b7: 44:61:a7:82:07:ea:60:86:c1:d4:e1:f7:77:95:51: 25:10:ce:e6:98:40:5c:45:de:39:36:2a:dc:50:25: a4:05:4f:cb:3b:13:87:e2:80:3d:4f:d3:21:81:f3: 5f:67:38:25:c2:18:bf:ac:91:2c:41:95:32:4e:4b: 9a:40:d2:db:da:88:4c:98:1f:5b:0e:11:ca:60:60: 73:95:68:5b:0f:10:2b:6d:6b:c7:10:71:d7:20:21: a1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:99:A0:4C:F9:C8:7A:49:BB:8F:1E:A4:7F:26:42:C2:EC:E1:B4:43 X509v3 Authority Key Identifier: keyid:BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:2f:f3:ab:5b:dc:8f:94:b0:ea:9d:fe:0e:ae:70:0f:ce:28: 3c:85:da:85:bb:ca:97:7a:4a:5a:51:b6:6b:c9:fa:a8:f8:24: 6a:b5:4c:52:13:56:bf:d2:50:6a:36:3f:a8:2a:05:8f:7c:25: 55:03:92:bf:eb:6e:61:26:8b:00:5f:f1:1c:a3:31:be:f2:2d: 27:de:46:6d:3b:f5:77:77:93:5c:85:84:11:ba:01:02:f2:d7: 42:2e:9c:4b:2f:f2:b1:26:8e:22:5e:2b:33:09:fb:f7:b0:07: ad:ac:2a:43:f9:dc:ab:b0:3c:40:ca:ac:43:c2:fd:86:1a:c3: 2f:7e:77:ec:5c:d2:4b:d7:25:54:bc:22:19:df:91:6f:bb:9c: d1:9f:59:b4:22:ce:85:fc:95:cf:5d:f4:ed:c6:43:6a:c4:4c: 59:45:8c:5d:da:d9:67:54:d6:5c:8b:4f:71:52:e3:00:62:3c: f9:80:9b:3c:60:d5:c4:d0:a1:ff:17:3f:01:4a:1d:d9:ff:e2: 44:dd:25:a8:e0:33:d6:3a:e0:94:5c:ae:36:0f:34:05:1c:57: dc:c3:48:84:ec:67:d9:f8:2d:5b:49:2d:61:ea:56:04:e3:df: f3:d4:5f:70:bd:4d:a3:d7:fc:6f:80:62:5a:52:a5:0b:a7:ff: 68:50:08:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VFODUxMTAvBgNVBAUTKEJCRTgwM0ZCNzU3RTBDNDdEMzIwNDU0NTIxODdCNzRB RTI3MTExRjAwHhcNMjUwNDI5MDYyMTIyWhcNMjUwNTA2MDYyMTIyWjAYMRYwFAYD VQQDEw02ODEwNmZlMi0zMzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMGkJ23EMtnweZb1HJVFHsjqU9FRK4DnKg316UpzqzNVFAkqwEtJeleN6ndx XZo87SYk2Zr55qbwdg12AwTDM287LwiOHfXtjLRJ2uh3HVHd3N16hYHqoX6KV+jy +J/qr1BdUi9jhAirNkBeJb69OO5ueFK+8NafN7KTonwl9cjHZCu4wxxElZsVSA4a FK9rBaXYhlGbkThEhyFo1+mn/ClURbdEYaeCB+pghsHU4fd3lVElEM7mmEBcRd45 NircUCWkBU/LOxOH4oA9T9MhgfNfZzglwhi/rJEsQZUyTkuaQNLb2ohMmB9bDhHK YGBzlWhbDxArbWvHEHHXICGh4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICZoEz5 yHpJu48epH8mQsLs4bRDMB8GA1UdIwQYMBaAFLvoA/t1fgxH0yBFRSGHt0ricRHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU4NS8wNUE3Q0U2ODQ1 QUUxMUVGQjQzNUVCNkZDNEY5QUUwMi91LWdELTNWLURFZlRJRVZGSVllM1N1SnhF ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtZ0QtM1YtREVmVElFVkZJWWUzU3VKeEVmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUU4NS8wNUE3Q0U2ODQ1QUUxMUVGQjQzNUVCNkZDNEY5QUUwMi91LWdELTNWLURF ZlRJRVZGSVllM1N1SnhFZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUL/OrW9yPlLDqnf4OrnAPzig8hdqFu8qXekpaUbZryfqo+CRqtUxS E1a/0lBqNj+oKgWPfCVVA5K/625hJosAX/EcozG+8i0n3kZtO/V3d5NchYQRugEC 8tdCLpxLL/KxJo4iXiszCfv3sAetrCpD+dyrsDxAyqxDwv2GGsMvfnfsXNJL1yVU vCIZ35Fvu5zRn1m0Is6F/JXPXfTtxkNqxExZRYxd2tlnVNZci09xUuMAYjz5gJs8 YNXE0KH/Fz8BSh3Z/+JE3SWo4DPWOuCUXK42DzQFHFfcw0iE7GfZ+C1bSS1h6lYE 49/z1F9wvU2j1/xvgGJaUqULp/9oUAiX -----END CERTIFICATE-----Generated at Wed Apr 30 19:09:08 2025 by rpki-client