$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft File: T_UoRyFcSiLp8RSebL_t901hzos.mft (raw, json) Hash identifier: 00QvoReWANhW6sHVu1hbGZYKmBnpVFVvlnfLmrOkpww= Subject key identifier: 39:9A:CA:04:8B:22:A1:0D:EB:34:E0:FC:36:82:05:29:FE:5F:9B:16 Authority key identifier: 4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B Certificate issuer: /CN=A91F33A5/serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B Certificate serial: 0345 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft Manifest number: 0321 Signing time: Fri 25 Apr 2025 01:02:43 +0000 Manifest this update: Fri 25 Apr 2025 01:02:42 +0000 Manifest next update: Fri 02 May 2025 01:02:42 +0000 Files and hashes: 1: T_UoRyFcSiLp8RSebL_t901hzos.crl (hash: T+tHgH8xLum7lfFE25WATfNlkQULXAq4RUI47Nyf0ZU=) 2: 23D7B1B81EDD11ED83B7963BC4F9AE02.roa (hash: +NKVmmAlTqfQ2iMjaVoJrXMEpqc9NIqiFPPAM8s8GoM=) 3: D9750E78F01111EFB1720645C4F9AE02.roa (hash: N5u2+srCZYEKTDhtP+lxLTAjcpl++wd0KdnyCpSI0Uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 837 (0x345) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B Validity Not Before: Apr 25 01:02:42 2025 GMT Not After : May 2 01:02:42 2025 GMT Subject: CN=680adf32-c70d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:63:1c:46:25:d4:19:28:5d:3b:2f:12:40:71: d1:7d:25:86:8a:b9:80:31:96:f5:af:03:36:b1:d0: a5:8d:86:87:f6:c5:16:a7:de:78:98:c9:e3:07:24: 35:ff:de:a7:7b:51:d1:a3:e4:78:62:94:06:6c:a1: 27:89:6c:8a:c0:bd:55:ff:c1:46:18:ac:3a:e2:ed: 61:cc:21:03:02:f6:38:85:b0:8c:68:57:ab:f9:b8: 76:b3:ae:b0:33:a7:ec:05:1e:88:15:0f:95:50:20: a4:79:ba:97:bd:d6:c8:92:2d:5e:32:4b:20:f1:15: 13:8d:7b:0a:50:17:0a:bc:ba:ab:4e:1c:6c:1a:59: ad:16:e1:b3:25:60:70:0e:92:a1:cf:12:fe:46:29: 7d:94:45:d1:d1:0a:af:f2:fc:9f:aa:52:fc:00:9c: 64:a4:fe:98:5c:91:dd:e9:f9:58:81:c6:43:88:ac: b3:49:33:83:e8:0f:2d:8d:e7:88:70:0f:16:5e:74: d1:01:dc:03:9d:40:48:9e:3c:ef:d9:4f:82:54:2c: 63:96:32:25:42:21:76:49:c8:54:42:c8:87:13:8a: 96:92:21:7a:24:02:64:7e:d0:b1:5d:21:95:8f:86: 9b:01:7b:06:15:21:8f:54:5b:00:30:a3:da:31:91: 4e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9A:CA:04:8B:22:A1:0D:EB:34:E0:FC:36:82:05:29:FE:5F:9B:16 X509v3 Authority Key Identifier: keyid:4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:89:06:4c:7e:41:d2:cc:f1:4c:55:59:a2:4c:c0:7d:74:d6: d8:18:84:60:39:b9:41:7b:c1:a1:5d:65:45:65:d1:51:ed:81: 22:17:ad:89:05:b0:6b:cd:91:bc:38:97:b2:2a:68:6b:65:36: 0f:9f:95:24:92:2f:8f:1d:e5:85:e5:db:99:05:2c:98:86:d4: 17:e3:ca:ea:25:84:72:74:17:90:23:df:7d:fb:f8:c9:64:f5: c7:1b:69:11:28:88:f7:77:32:7a:52:d8:af:f8:78:7d:19:05: bd:5d:b4:ef:ce:da:a6:ea:85:04:f2:4a:f7:c5:53:a5:76:08: b7:5a:0a:a2:8b:93:b1:64:88:55:a5:b6:6a:b7:3b:67:31:5f: 9a:41:ae:7b:be:85:63:a6:f3:fe:5f:bb:1f:c1:a8:70:fd:c1: 53:e4:e7:fa:86:fb:0e:44:99:35:26:72:2f:5c:c6:0b:ee:14: 82:a2:49:0f:0d:20:67:34:e1:c4:eb:74:6e:a9:3b:78:57:46: 0b:1b:6f:a1:c4:40:8e:95:72:87:02:6c:cf:dd:11:d2:37:97: 56:f9:67:62:3f:83:5c:0d:49:04:22:3c:87:9d:b6:4b:d9:1e: 51:a5:69:c4:83:ff:5d:f5:e8:b5:92:49:81:b4:aa:a8:09:b9: b0:64:56:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKDRGRjUyODQ3MjE1QzRBMjJFOUYxMTQ5RTZDQkZFREY3 NEQ2MUNFOEIwHhcNMjUwNDI1MDEwMjQyWhcNMjUwNTAyMDEwMjQyWjAYMRYwFAYD VQQDEw02ODBhZGYzMi1jNzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2McRiXUGShdOy8SQHHRfSWGirmAMZb1rwM2sdCljYaH9sUWp954mMnjByQ1 /96ne1HRo+R4YpQGbKEniWyKwL1V/8FGGKw64u1hzCEDAvY4hbCMaFer+bh2s66w M6fsBR6IFQ+VUCCkebqXvdbIki1eMksg8RUTjXsKUBcKvLqrThxsGlmtFuGzJWBw DpKhzxL+Ril9lEXR0Qqv8vyfqlL8AJxkpP6YXJHd6flYgcZDiKyzSTOD6A8tjeeI cA8WXnTRAdwDnUBInjzv2U+CVCxjljIlQiF2SchUQsiHE4qWkiF6JAJkftCxXSGV j4abAXsGFSGPVFsAMKPaMZFOEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmaygSL IqEN6zTg/DaCBSn+X5sWMB8GA1UdIwQYMBaAFE/1KEchXEoi6fEUnmy/7fdNYc6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xMTg3MDk3MkQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi9UX1VvUnlGY1NpTHA4UlNlYkxfdDkwMWh6 b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RfVW9SeUZjU2lMcDhSU2ViTF90OTAxaHpvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xMTg3MDk3MkQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi9UX1VvUnlGY1Np THA4UlNlYkxfdDkwMWh6b3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwiQZMfkHSzPFMVVmiTMB9dNbYGIRgOblBe8GhXWVFZdFR7YEiF62J BbBrzZG8OJeyKmhrZTYPn5Ukki+PHeWF5duZBSyYhtQX48rqJYRydBeQI999+/jJ ZPXHG2kRKIj3dzJ6Utiv+Hh9GQW9XbTvztqm6oUE8kr3xVOldgi3Wgqii5OxZIhV pbZqtztnMV+aQa57voVjpvP+X7sfwahw/cFT5Of6hvsORJk1JnIvXMYL7hSCokkP DSBnNOHE63RuqTt4V0YLG2+hxECOlXKHAmzP3RHSN5dW+WdiP4NcDUkEIjyHnbZL 2R5RpWnEg/9d9ei1kkmBtKqoCbmwZFYg -----END CERTIFICATE-----Generated at Sat Apr 26 12:24:46 2025 by rpki-client