$ rpki-client -vvf rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft File: uttpn6AqlXLm70n0-Rof4Kc8LI0.mft (raw, json) Hash identifier: rGDZiK8XBm5EwLQ1K+GNqpQEG0FY7+7nyZzdRqdb+Nc= Subject key identifier: 14:AB:98:5B:2A:56:40:31:CD:03:99:75:DF:6B:E4:48:B7:7E:60:4A Authority key identifier: BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D Certificate issuer: /CN=A91E27B9/serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D Certificate serial: 07F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft Manifest number: 07E4 Signing time: Thu 24 Apr 2025 20:54:36 +0000 Manifest this update: Thu 24 Apr 2025 20:54:36 +0000 Manifest next update: Thu 01 May 2025 20:54:36 +0000 Files and hashes: 1: uttpn6AqlXLm70n0-Rof4Kc8LI0.crl (hash: vdIJdbSVc0Mo9fpccM35QyvyT9a6CvUHh1YYQ6/AMfk=) 2: C8BD376C3ADF11EC85EB255FC4F9AE02.roa (hash: wZOUAFh3yH4xpJik8Ps1Fk72+HENAnV8sf4x6n94egk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2041 (0x7f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E27B9, serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D Validity Not Before: Apr 24 20:54:36 2025 GMT Not After : May 1 20:54:36 2025 GMT Subject: CN=680aa50c-0993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6c:fd:40:92:86:eb:6c:fe:91:4d:c2:b5:af: 15:0c:3d:36:07:2c:12:af:09:a9:ea:ec:42:de:89: af:52:e8:f1:80:97:aa:6c:5a:b1:1b:94:22:a6:47: 9c:30:bf:e5:db:09:0f:ba:26:55:74:c4:b9:39:99: 04:ac:80:ef:2c:f0:1f:1b:4d:c6:14:4e:fb:b4:04: 32:72:63:ea:09:48:39:dd:fb:c3:2d:70:76:dd:bf: 7c:4b:8b:cf:4e:86:b8:05:7f:ec:e4:50:92:58:71: d3:ba:84:61:40:03:d1:b1:af:51:a5:7c:82:23:87: e5:a2:f0:99:df:17:bc:fd:aa:20:0c:7d:f2:0f:5f: ad:1a:fa:cd:4c:01:75:3d:bb:05:5f:79:a5:5b:7a: 9e:13:76:a6:8c:22:44:76:ab:49:16:cd:b3:75:27: 4c:61:04:23:38:15:fe:52:a9:66:00:d5:e1:4a:cb: d0:33:c1:c0:c0:87:cf:41:31:5a:7e:02:6b:56:38: 3c:48:44:53:f3:eb:f6:52:b3:ee:f6:c2:3e:cc:9d: 91:b3:5b:f6:19:88:a1:2e:08:57:2a:4c:7e:0e:86: ef:c8:13:7a:96:85:77:6f:32:41:40:02:17:b8:54: 06:f2:fd:06:7d:10:ea:d2:fb:6f:67:2d:8c:5d:c1: 8b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AB:98:5B:2A:56:40:31:CD:03:99:75:DF:6B:E4:48:B7:7E:60:4A X509v3 Authority Key Identifier: keyid:BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:cd:a8:73:d0:25:95:3a:81:77:52:bf:ce:0c:a0:26:fb:93: b7:b2:06:5a:6a:9a:a4:50:25:1e:f0:84:8c:31:23:bb:9c:73: 31:50:7a:d3:e6:69:e6:88:39:c1:aa:bf:88:35:9d:6a:c7:cb: 9c:c1:a3:8a:c2:5d:0c:ef:0a:15:ae:10:11:41:97:28:0d:86: 3e:5e:d0:d9:c7:e4:2f:3e:d3:84:3c:e4:77:b7:64:54:59:25: df:6e:79:43:82:2b:e5:dd:82:e6:f2:ca:22:a5:2c:3c:66:20: aa:47:b8:c7:b2:05:c5:47:ec:7f:fa:b2:6e:78:76:b6:d2:e9: 66:da:85:05:27:51:1c:d8:81:50:1f:5e:12:4c:2d:8c:ad:17: a2:14:07:dd:76:84:5b:8c:6f:fa:2b:93:49:45:c8:e8:c3:d9: ea:70:d9:d5:99:59:ce:d6:6b:0c:47:e3:74:f4:52:0b:55:42: ed:d3:74:c6:a0:a9:7a:e6:de:6b:46:11:a6:25:52:33:d5:cf: 46:c6:74:f9:08:e3:e9:0b:05:d4:1d:5f:0e:2b:d4:64:a3:c2: 3d:ba:47:8a:f3:ce:3d:e4:3f:d5:94:3c:6b:8b:a6:12:95:3b: 39:01:40:1c:d9:b6:92:b2:1e:93:6d:89:4f:d7:ca:7e:88:f7: dd:b6:21:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3QjkxMTAvBgNVBAUTKEJBREI2OTlGQTAyQTk1NzJFNkVGNDlGNEY5MUExRkUw QTczQzJDOEQwHhcNMjUwNDI0MjA1NDM2WhcNMjUwNTAxMjA1NDM2WjAYMRYwFAYD VQQDEw02ODBhYTUwYy0wOTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnmz9QJKG62z+kU3Cta8VDD02BywSrwmp6uxC3omvUujxgJeqbFqxG5Qipkec ML/l2wkPuiZVdMS5OZkErIDvLPAfG03GFE77tAQycmPqCUg53fvDLXB23b98S4vP Toa4BX/s5FCSWHHTuoRhQAPRsa9RpXyCI4flovCZ3xe8/aogDH3yD1+tGvrNTAF1 PbsFX3mlW3qeE3amjCJEdqtJFs2zdSdMYQQjOBX+UqlmANXhSsvQM8HAwIfPQTFa fgJrVjg8SERT8+v2UrPu9sI+zJ2Rs1v2GYihLghXKkx+DobvyBN6loV3bzJBQAIX uFQG8v0GfRDq0vtvZy2MXcGL5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSrmFsq VkAxzQOZdd9r5Ei3fmBKMB8GA1UdIwQYMBaAFLrbaZ+gKpVy5u9J9PkaH+CnPCyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjdCOS84NEJBNzQ4MkYw Q0UxMUVBODkxQjJDNzZDNEY5QUUwMi91dHRwbjZBcWxYTG03MG4wLVJvZjRLYzhM STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V0dHBuNkFxbFhMbTcwbjAtUm9mNEtjOExJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjdCOS84NEJBNzQ4MkYwQ0UxMUVBODkxQjJDNzZDNEY5QUUwMi91dHRwbjZBcWxY TG03MG4wLVJvZjRLYzhMSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3zahz0CWVOoF3Ur/ODKAm+5O3sgZaapqkUCUe8ISMMSO7nHMxUHrT 5mnmiDnBqr+INZ1qx8ucwaOKwl0M7woVrhARQZcoDYY+XtDZx+QvPtOEPOR3t2RU WSXfbnlDgivl3YLm8soipSw8ZiCqR7jHsgXFR+x/+rJueHa20ulm2oUFJ1Ec2IFQ H14STC2MrReiFAfddoRbjG/6K5NJRcjow9nqcNnVmVnO1msMR+N09FILVULt03TG oKl65t5rRhGmJVIz1c9GxnT5COPpCwXUHV8OK9Rko8I9ukeK88495D/VlDxri6YS lTs5AUAc2baSsh6TbYlP18p+iPfdtiG/ -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:39 2025 by rpki-client