$ rpki-client -vvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft File: 0uwHkLxOvTQHyVB05rVrQAA4Eto.mft (raw, json) Hash identifier: St+BoCvoIhAptb91qws7QbKm329hI6cMlhbQMvBQuWg= Subject key identifier: 8D:7E:5E:59:00:20:96:F9:02:B2:C1:3A:39:9E:FC:10:8C:B7:52:E0 Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA Certificate issuer: /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Certificate serial: 0ABD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft Manifest number: 0AB5 Signing time: Thu 24 Apr 2025 19:22:48 +0000 Manifest this update: Thu 24 Apr 2025 19:22:48 +0000 Manifest next update: Thu 01 May 2025 19:22:48 +0000 Files and hashes: 1: 0uwHkLxOvTQHyVB05rVrQAA4Eto.crl (hash: /B2VTtnYRJr8CJUJ0wg0O7GkbQR2Dq7+pz1hBqjHDyU=) 2: 5E2A4C584ED911EAA7F1A521C4F9AE02.roa (hash: QAE/MC+xtHDwjDC4We28f6uqNECigc7G6Vc7+DGOZ34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:22:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2749 (0xabd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D87CF, serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Validity Not Before: Apr 24 19:22:48 2025 GMT Not After : May 1 19:22:48 2025 GMT Subject: CN=680a8f88-6018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a2:48:9a:c9:9d:f0:67:43:71:f9:cd:51:b9: b4:1c:b1:51:64:ff:13:c7:55:e3:89:f1:84:31:99: a2:62:c8:1f:f9:66:95:72:5b:23:4f:07:42:be:78: e0:09:02:0d:68:1c:24:44:ee:13:24:08:43:76:54: ea:46:80:c0:1e:6e:c6:8d:e2:f3:09:d2:ab:5b:90: f7:26:1d:46:0d:27:82:e7:ad:ee:d4:e2:24:5e:54: 54:15:ca:63:c3:3c:da:ba:8a:66:a9:e0:52:7b:ec: 26:d6:df:4d:11:9a:14:90:e6:e9:93:8f:c3:0c:fc: 0e:f4:f8:f8:03:5e:35:41:4a:45:a6:3e:da:4e:63: f9:e5:cc:7b:0b:f3:cb:71:67:57:ab:ae:d0:e8:13: fc:a7:2f:9a:5d:73:d7:a3:0e:ad:c5:82:6a:73:f7: 24:d3:ef:35:39:5a:88:66:ea:20:20:e8:45:91:4a: 61:9c:b1:98:10:c2:7e:8e:7a:d7:c0:7e:80:76:3d: 01:8e:aa:6c:ae:c8:ff:98:84:54:14:6c:31:9e:51: f2:c0:86:83:ef:1c:7c:d1:cb:33:23:18:b8:77:e5: 22:69:fe:bf:7a:82:a7:b3:7f:2f:8f:f8:32:22:cb: e0:a2:47:86:16:5d:0f:0e:96:be:10:2d:85:c7:18: 3a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7E:5E:59:00:20:96:F9:02:B2:C1:3A:39:9E:FC:10:8C:B7:52:E0 X509v3 Authority Key Identifier: keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f7:ff:0d:70:5b:a9:55:f6:46:73:8e:7d:08:fd:bd:85:6e: 44:4c:19:ce:04:7c:3d:27:1f:0d:6f:8f:6f:5e:db:c5:84:bc: 16:a2:1f:1f:9b:97:45:13:49:56:53:b4:79:41:5f:4a:71:df: 7b:19:dd:d3:8c:9a:84:1f:c1:15:ed:bf:ab:a5:0d:a2:1b:4b: 6c:00:cc:3c:eb:e8:57:fc:20:82:81:ce:8f:7a:ee:2b:c0:f6: 7c:b4:0c:af:63:be:6f:c2:b2:86:ee:83:82:54:7d:fd:50:f2: f3:c2:1e:3d:97:7a:1d:05:83:de:ec:4c:7e:fb:5c:97:56:b0: 9b:e0:19:0d:92:40:23:84:7d:7b:9a:c2:9b:e7:b7:69:a7:c7: fd:9c:4f:2a:b1:0b:b0:7a:28:85:b8:51:77:b7:e5:fc:b3:d5: 7f:c2:b4:43:d9:b8:64:99:d2:5d:ae:eb:dc:0e:35:fe:9f:35: 8d:b4:92:da:77:55:b2:ed:5f:e7:c8:cc:53:e1:7c:cd:2b:66: 28:43:06:51:ad:14:07:9f:51:f7:49:56:93:46:03:89:ba:60: 59:ac:74:0a:ca:4d:58:c1:e5:8a:d2:6f:f5:40:db:ba:ed:00: ac:5a:8d:e6:f5:f8:d8:00:ed:45:39:ee:39:48:ce:cb:b3:da: 54:72:03:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3Q0YxMTAvBgNVBAUTKEQyRUMwNzkwQkM0RUJEMzQwN0M5NTA3NEU2QjU2QjQw MDAzODEyREEwHhcNMjUwNDI0MTkyMjQ4WhcNMjUwNTAxMTkyMjQ4WjAYMRYwFAYD VQQDEw02ODBhOGY4OC02MDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6JImsmd8GdDcfnNUbm0HLFRZP8Tx1XjifGEMZmiYsgf+WaVclsjTwdCvnjg CQINaBwkRO4TJAhDdlTqRoDAHm7GjeLzCdKrW5D3Jh1GDSeC563u1OIkXlRUFcpj wzzauopmqeBSe+wm1t9NEZoUkObpk4/DDPwO9Pj4A141QUpFpj7aTmP55cx7C/PL cWdXq67Q6BP8py+aXXPXow6txYJqc/ck0+81OVqIZuogIOhFkUphnLGYEMJ+jnrX wH6Adj0Bjqpsrsj/mIRUFGwxnlHywIaD7xx80cszIxi4d+Uiaf6/eoKns38vj/gy IsvgokeGFl0PDpa+EC2Fxxg6PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1+XlkA IJb5ArLBOjme/BCMt1LgMB8GA1UdIwQYMBaAFNLsB5C8Tr00B8lQdOa1a0AAOBLa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODdDRi9FNjg1QjEyQTRF RDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZUUUh5VkIwNXJWclFBQTRF dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB1d0hrTHhPdlRRSHlWQjA1clZyUUFBNEV0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODdDRi9FNjg1QjEyQTRFRDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZU UUh5VkIwNXJWclFBQTRFdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO9/8NcFupVfZGc459CP29hW5ETBnOBHw9Jx8Nb49vXtvFhLwWoh8f m5dFE0lWU7R5QV9Kcd97Gd3TjJqEH8EV7b+rpQ2iG0tsAMw86+hX/CCCgc6Peu4r wPZ8tAyvY75vwrKG7oOCVH39UPLzwh49l3odBYPe7Ex++1yXVrCb4BkNkkAjhH17 msKb57dpp8f9nE8qsQuweiiFuFF3t+X8s9V/wrRD2bhkmdJdruvcDjX+nzWNtJLa d1Wy7V/nyMxT4XzNK2YoQwZRrRQHn1H3SVaTRgOJumBZrHQKyk1YweWK0m/1QNu6 7QCsWo3m9fjYAO1FOe45SM7Ls9pUcgM9 -----END CERTIFICATE-----Generated at Sat Apr 26 13:06:29 2025 by rpki-client