$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft File: UdUxrvegh8GOMB4OaixjcbJkw-g.mft (raw, json) Hash identifier: EsNPiAxsLEqI0MDTwRXerfXsW+k1sIDFAk0PsYV0mnY= Subject key identifier: 74:ED:8E:58:1A:B7:B8:59:AB:FC:4C:05:29:02:8B:E5:13:29:2E:4E Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft Manifest number: 019E Signing time: Fri 25 Apr 2025 02:44:31 +0000 Manifest this update: Fri 25 Apr 2025 02:44:30 +0000 Manifest next update: Fri 02 May 2025 02:44:30 +0000 Files and hashes: 1: UdUxrvegh8GOMB4OaixjcbJkw-g.crl (hash: vZbyTSbgknWduo8rQucHlU5kz+yJ9L6LNL+yPwtAgSE=) 2: 891E633CB7F111EFA500D67CC4F9AE02.roa (hash: y1UQ1O1XftpyphxFOlftvNUIc8YKCDV+diHhEIBCjyQ=) 3: 7D215B2CC3C111EE8F83CE1AC4F9AE02.roa (hash: sUdZMd0Q+ciHznerisP4nkpWQvRZbfYqoJyi+8cz9Yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Validity Not Before: Apr 25 02:44:30 2025 GMT Not After : May 2 02:44:30 2025 GMT Subject: CN=680af70f-abd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d4:18:2c:40:2a:39:6b:3c:e2:1b:ae:5e:a4: 01:66:60:71:f9:c5:f4:65:44:3b:b2:4c:3d:7b:c0: 8f:39:41:fd:39:93:8a:95:b1:e3:e0:d7:8f:31:1f: e0:d1:08:d6:16:d8:9c:02:4c:fc:5e:90:16:a0:87: 52:4c:56:66:fc:44:b2:25:67:38:c9:c6:1d:33:b3: 61:85:3c:49:1a:c6:89:4b:6d:0e:a7:eb:42:3e:23: f6:46:14:d0:6c:d1:7e:12:f4:6a:cd:80:e4:c9:dc: 1f:2d:3f:d2:71:a7:95:91:e7:0c:70:39:c3:20:63: c5:41:06:66:79:1a:fe:9b:a3:d7:7e:fa:b8:63:24: ee:fd:d6:cd:e1:8f:8f:a6:c0:cc:2a:9e:7b:a8:7b: 4b:5e:71:c7:b0:00:b2:c9:ec:61:34:91:d5:97:1c: 74:28:94:e9:4d:81:46:f6:f4:b1:a5:2a:bf:59:17: e6:df:bb:fa:a9:b4:41:e0:4d:88:ea:05:a1:8d:3c: 09:b8:db:4a:95:4e:10:de:af:bf:b8:70:f4:49:29: b2:5d:86:34:e4:f8:ce:ff:25:4b:20:0c:32:3e:be: 18:b4:50:2a:c9:6e:9c:e0:92:0b:95:10:e4:1d:56: d6:2b:ba:b6:21:74:08:26:af:cd:89:f3:a4:16:03: 21:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:ED:8E:58:1A:B7:B8:59:AB:FC:4C:05:29:02:8B:E5:13:29:2E:4E X509v3 Authority Key Identifier: keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:32:2a:cd:70:6f:42:2c:b7:d5:d2:bc:92:7b:74:ee:93:0b: 64:c8:d2:f9:0d:40:ba:47:de:bb:1d:8e:4b:83:60:aa:16:79: b8:97:53:27:7e:cf:03:ca:b9:02:30:f0:64:34:19:9d:10:42: 25:3b:b3:bf:22:fa:b2:b5:40:16:93:48:3d:ca:90:8b:c8:f7: 21:20:09:47:9a:b8:5d:6a:4b:c2:6c:a5:39:c7:7c:ff:59:29: 7e:8f:54:35:01:a6:c7:6b:31:1f:f8:05:82:d1:a2:e9:c9:64: 84:a0:b2:14:52:50:02:5b:63:65:f4:d5:84:ee:fc:ac:e5:69: d6:af:76:5b:3f:e8:35:0d:3a:37:6d:b8:38:36:4a:00:68:47: 68:ce:d2:6f:4e:9a:32:61:ae:65:09:77:a7:68:c2:d9:09:58: c9:66:52:97:81:a5:ab:85:99:6e:69:ba:07:9e:0f:82:d3:95: 8e:b8:67:ff:36:46:01:89:76:6f:07:cb:41:bd:01:c2:80:2c: 36:26:6d:dd:81:a9:85:e3:d6:87:6d:dc:a4:40:f1:d6:bb:d0: bd:33:b7:a2:fe:35:26:fe:53:33:3a:e9:cb:d3:7e:84:e1:0f: 0f:2e:3c:6c:38:04:3e:d6:d9:01:24:b2:c5:bd:bb:d9:65:68: 53:d6:3e:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZBRkYxMTAvBgNVBAUTKDUxRDUzMUFFRjdBMDg3QzE4RTMwMUUwRTZBMkM2Mzcx QjI2NEMzRTgwHhcNMjUwNDI1MDI0NDMwWhcNMjUwNTAyMDI0NDMwWjAYMRYwFAYD VQQDEw02ODBhZjcwZi1hYmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4tQYLEAqOWs84huuXqQBZmBx+cX0ZUQ7skw9e8CPOUH9OZOKlbHj4NePMR/g 0QjWFticAkz8XpAWoIdSTFZm/ESyJWc4ycYdM7NhhTxJGsaJS20Op+tCPiP2RhTQ bNF+EvRqzYDkydwfLT/ScaeVkecMcDnDIGPFQQZmeRr+m6PXfvq4YyTu/dbN4Y+P psDMKp57qHtLXnHHsACyyexhNJHVlxx0KJTpTYFG9vSxpSq/WRfm37v6qbRB4E2I 6gWhjTwJuNtKlU4Q3q+/uHD0SSmyXYY05PjO/yVLIAwyPr4YtFAqyW6c4JILlRDk HVbWK7q2IXQIJq/NifOkFgMhkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTtjlga t7hZq/xMBSkCi+UTKS5OMB8GA1UdIwQYMBaAFFHVMa73oIfBjjAeDmosY3GyZMPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkFGRi9EMDYxMUYwNEND NDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4R09NQjRPYWl4amNiSmt3 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkVXhydmVnaDhHT01CNE9haXhqY2JKa3ctZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkFGRi9EMDYxMUYwNENDNDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4 R09NQjRPYWl4amNiSmt3LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSMirNcG9CLLfV0rySe3TukwtkyNL5DUC6R967HY5Lg2CqFnm4l1Mn fs8DyrkCMPBkNBmdEEIlO7O/IvqytUAWk0g9ypCLyPchIAlHmrhdakvCbKU5x3z/ WSl+j1Q1AabHazEf+AWC0aLpyWSEoLIUUlACW2Nl9NWE7vys5WnWr3ZbP+g1DTo3 bbg4NkoAaEdoztJvTpoyYa5lCXenaMLZCVjJZlKXgaWrhZluaboHng+C05WOuGf/ NkYBiXZvB8tBvQHCgCw2Jm3dgamF49aHbdykQPHWu9C9M7ei/jUm/lMzOunL036E 4Q8PLjxsOAQ+1tkBJLLFvbvZZWhT1j5a -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:41 2025 by rpki-client