$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft File: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft (raw, json) Hash identifier: b3hOAde8VM832WJFyNzFGolf0eAWpADJVLGbxJwcnXw= Subject key identifier: 6B:58:E0:8C:EF:27:0B:86:EC:FA:4C:89:05:F1:74:FC:2B:3B:DC:17 Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF Certificate issuer: /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Certificate serial: 187F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft Manifest number: 1879 Signing time: Thu 24 Apr 2025 15:50:19 +0000 Manifest this update: Thu 24 Apr 2025 15:50:19 +0000 Manifest next update: Thu 01 May 2025 15:50:18 +0000 Files and hashes: 1: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl (hash: /7kiBMcXupMGs9eDEsDnDTusgfeX/XQnh6gUu1Tm5Z8=) 2: AE21A9C6818911EA81577016C4F9AE02.roa (hash: 7SxWILLdTrzJpYEt8Y/6XTCMP3sdZqZUyA4GDfqu88g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6271 (0x187f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Validity Not Before: Apr 24 15:50:19 2025 GMT Not After : May 1 15:50:18 2025 GMT Subject: CN=680a5dbb-41ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:10:23:95:1d:a4:6a:37:85:03:ce:2c:35:6d: 93:8f:ba:56:81:38:e3:23:4f:f7:6c:52:4c:f4:f0: a5:8e:19:dd:ee:bb:ac:a1:56:0c:6d:58:03:6f:75: ca:ed:99:d4:c6:70:96:c8:66:d9:cb:5d:b3:ab:fb: 6f:89:55:3a:fc:5d:ff:83:e4:da:17:70:58:b3:e9: 58:2c:60:19:09:16:16:d8:51:7d:a6:67:78:d0:cc: 2d:a4:be:37:13:2e:4e:14:ff:6e:bb:89:d2:b6:50: 5c:a1:50:c0:ec:46:f9:77:6a:08:77:34:f3:84:4b: ff:f3:49:85:6d:be:a0:6c:6b:cd:d4:0d:3d:0e:cc: 8b:81:1f:1a:52:31:a5:f9:52:ae:df:27:c3:2a:4a: 54:7f:18:26:d2:3f:91:64:52:ab:22:03:a0:82:6c: 03:19:60:e7:b9:25:21:4c:78:70:67:d2:a5:ac:b5: 41:f4:6c:5c:ed:9b:08:39:bf:66:36:35:d5:5d:62: d3:05:d9:fc:be:c8:8c:b2:fd:07:69:8b:2a:c8:7c: 4c:c7:23:08:1f:32:ae:49:21:84:0b:5c:a7:e5:eb: 53:9f:05:d5:02:f9:0c:9d:1c:b7:7a:f0:de:f8:24: e5:9d:36:79:4c:98:41:8b:ea:7f:74:97:fc:80:0d: e0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:58:E0:8C:EF:27:0B:86:EC:FA:4C:89:05:F1:74:FC:2B:3B:DC:17 X509v3 Authority Key Identifier: keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:a7:df:15:57:91:a1:a1:ed:b6:0e:a8:ee:b4:0a:87:43:ac: 84:3e:2d:d3:3c:57:9b:e2:d0:4a:3b:75:e5:43:e5:ac:81:79: b7:a4:04:7e:68:06:75:58:18:17:32:7d:7f:14:dc:60:bb:d1: be:75:dd:4d:2a:10:3a:dd:8f:f5:c4:a6:b8:47:db:e8:a9:f2: ef:69:ab:2b:13:e5:39:3c:75:9f:58:2f:bb:85:31:b7:65:3c: 99:5d:f1:5c:5a:8a:fe:a6:f4:f8:29:88:ad:b8:dc:35:da:50: 10:68:c9:cd:c4:9c:84:b7:0e:6f:cd:17:ea:97:f0:70:14:1b: 4d:70:dd:47:69:41:f9:70:e0:91:8c:7b:e0:fa:8d:2f:f7:b9: a1:00:a4:95:d2:1e:3b:5e:36:69:e0:36:83:a5:c4:e7:59:4f: ee:10:71:96:4d:40:c3:b2:2c:9e:54:ad:dd:16:84:b4:19:71: 3b:67:ef:19:3e:ff:1d:b3:48:9f:65:a7:0d:21:42:da:94:04: 3d:36:63:57:c1:e1:97:f9:59:58:4e:8e:8e:bf:54:5c:91:60: 96:2a:8b:d8:77:2b:97:a6:01:8d:46:9b:38:e6:29:97:c3:e0: f7:55:78:07:cf:96:b7:fe:d8:d6:16:66:1b:20:da:a7:09:7e: 30:aa:45:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKEQxNDc5RUY2MDM0MUUzOUVDQTE3MkU0Mzc2NDQzQTQ3 MTk3NUNCRUYwHhcNMjUwNDI0MTU1MDE5WhcNMjUwNTAxMTU1MDE4WjAYMRYwFAYD VQQDEw02ODBhNWRiYi00MWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhAjlR2kajeFA84sNW2Tj7pWgTjjI0/3bFJM9PCljhnd7rusoVYMbVgDb3XK 7ZnUxnCWyGbZy12zq/tviVU6/F3/g+TaF3BYs+lYLGAZCRYW2FF9pmd40MwtpL43 Ey5OFP9uu4nStlBcoVDA7Eb5d2oIdzTzhEv/80mFbb6gbGvN1A09DsyLgR8aUjGl +VKu3yfDKkpUfxgm0j+RZFKrIgOggmwDGWDnuSUhTHhwZ9KlrLVB9Gxc7ZsIOb9m NjXVXWLTBdn8vsiMsv0HaYsqyHxMxyMIHzKuSSGEC1yn5etTnwXVAvkMnRy3evDe +CTlnTZ5TJhBi+p/dJf8gA3gUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtY4Izv JwuG7PpMiQXxdPwrO9wXMB8GA1UdIwQYMBaAFNFHnvYDQeOeyhcuQ3ZEOkcZdcvv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS80ODJCQTE3MjlE MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1N0tGeTVEZGtRNlJ4bDF5 LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBVZWU5Z05CNDU3S0Z5NURka1E2UnhsMXktOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS80ODJCQTE3MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1 N0tGeTVEZGtRNlJ4bDF5LTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzp98VV5Ghoe22DqjutAqHQ6yEPi3TPFeb4tBKO3XlQ+WsgXm3pAR+ aAZ1WBgXMn1/FNxgu9G+dd1NKhA63Y/1xKa4R9voqfLvaasrE+U5PHWfWC+7hTG3 ZTyZXfFcWor+pvT4KYituNw12lAQaMnNxJyEtw5vzRfql/BwFBtNcN1HaUH5cOCR jHvg+o0v97mhAKSV0h47XjZp4DaDpcTnWU/uEHGWTUDDsiyeVK3dFoS0GXE7Z+8Z Pv8ds0ifZacNIULalAQ9NmNXweGX+VlYTo6Ov1RckWCWKovYdyuXpgGNRps45imX w+D3VXgHz5a3/tjWFmYbINqnCX4wqkVN -----END CERTIFICATE-----Generated at Sat Apr 26 15:03:48 2025 by rpki-client