$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft File: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft (raw, json) Hash identifier: 6Py/RNKWXj4mfPKv3jWA+e/90CtTSp6FQIfpZALb01k= Subject key identifier: 05:76:76:FC:86:32:58:20:00:ED:BD:2B:CC:AD:DD:23:42:96:C6:C1 Authority key identifier: 53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82 Certificate issuer: /CN=A91F3AF8/serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682 Certificate serial: 07A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft Manifest number: 079A Signing time: Thu 24 Apr 2025 21:06:51 +0000 Manifest this update: Thu 24 Apr 2025 21:06:50 +0000 Manifest next update: Thu 01 May 2025 21:06:50 +0000 Files and hashes: 1: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl (hash: p0hZI34+FdB9IqF1wVY8ulHHkDiWaDfDtF3/G3r1D4s=) 2: 3791632A030011EB909C3244C4F9AE02.roa (hash: dB3zmsBTd89CRpUWBbCoSsuPQSrK3XC84t7uk9x1cA8=) 3: CC08667A7A6011EB9BC9937BC4F9AE02.roa (hash: Z/3rZQtnqfOwNEnHVO1+ydXZ5JjAuPVHRMvibrG3oIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1958 (0x7a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3AF8, serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682 Validity Not Before: Apr 24 21:06:50 2025 GMT Not After : May 1 21:06:50 2025 GMT Subject: CN=680aa7eb-441e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:76:35:ba:bb:63:0d:e5:1c:d0:0e:34:d7:f0: 1f:6d:99:ae:71:f7:5c:6a:bd:f3:6a:20:f2:62:73: cd:33:99:1a:2f:56:23:f2:a6:fb:c1:69:9e:1a:83: 67:e5:c0:65:10:97:ba:b0:45:87:5f:d5:e5:6c:1a: f7:7e:44:5b:35:63:d7:de:98:c3:27:99:56:34:fa: 10:c9:f9:d8:1e:30:50:eb:e8:fb:fc:62:8f:18:2d: e4:1a:b3:c1:b1:d6:c4:b5:fa:8e:ca:6e:10:81:8d: 46:02:ce:f2:3f:3b:d9:c6:16:33:7e:29:01:54:bb: dc:01:45:4e:c7:6a:ce:33:ee:73:da:dd:e2:6f:0d: 3d:58:ab:b4:ac:3f:db:de:a5:7e:90:e2:43:b8:f6: 45:62:e8:75:99:f8:11:2b:10:2c:2f:3d:a3:7e:3c: e8:d3:01:90:80:53:0c:a3:d2:40:2d:d4:fa:d7:05: ca:20:02:44:ba:38:d4:f1:4a:01:f9:1d:87:7e:b8: e5:24:c2:2b:08:e3:dc:c4:f5:0b:54:5b:8d:74:35: 81:6b:70:2c:dc:a4:b7:bf:95:c6:a2:aa:e2:b1:51: 74:88:24:eb:29:26:06:39:e9:69:0f:67:2a:75:2b: d8:34:4e:1b:16:a5:d4:e0:4a:9b:9e:35:9e:b3:66: 95:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:76:76:FC:86:32:58:20:00:ED:BD:2B:CC:AD:DD:23:42:96:C6:C1 X509v3 Authority Key Identifier: keyid:53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:b0:a7:fc:bf:ad:b2:fc:69:93:c5:c3:2c:df:59:93:7a:78: d3:20:d9:d5:d1:ec:62:33:4f:36:53:a4:ee:df:51:0c:e8:32: 8a:9d:4b:a6:c9:9d:80:34:a4:16:fc:4b:cb:03:dd:f1:84:44: fd:c3:53:98:c0:3a:0d:33:be:6e:43:05:d8:b3:6f:54:c7:08: c6:0c:fc:a0:7e:02:4a:2d:fa:db:e8:e7:63:fa:73:0a:a5:c7: 4f:dd:48:10:96:e7:7b:ac:ed:1d:06:60:0a:da:d2:90:7b:97: 91:60:40:45:37:1b:0b:0a:dd:06:5a:ad:ed:0c:fb:57:cb:5f: 05:6c:35:8c:49:7f:c0:97:bb:a3:98:4d:ef:4a:47:73:62:a3: 2c:fa:65:56:08:f0:72:0c:0c:db:b2:3b:26:ca:44:f8:ff:97: 11:ab:46:11:3e:3e:bc:a6:13:6e:d0:54:f4:52:0c:af:b5:e7: 5d:78:0a:bf:02:5c:d7:a9:67:a9:30:05:92:08:ca:ed:ec:c0: f7:5b:df:f4:fa:af:d8:6c:02:8b:a1:43:fd:db:18:54:d7:72: df:ac:76:d0:d9:14:ac:35:f8:47:6b:84:8f:e2:94:69:0f:f5: a0:f0:2b:85:4f:46:b2:2d:f0:34:fb:e2:5c:1b:06:92:07:e4: c0:ea:71:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNBRjgxMTAvBgNVBAUTKDUzMEQyOUFEQzBGQjFDRjI4MzdEMzlCQjg2MzQzNDg2 QzFDNzE2ODIwHhcNMjUwNDI0MjEwNjUwWhcNMjUwNTAxMjEwNjUwWjAYMRYwFAYD VQQDEw02ODBhYTdlYi00NDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXY1urtjDeUc0A401/AfbZmucfdcar3zaiDyYnPNM5kaL1Yj8qb7wWmeGoNn 5cBlEJe6sEWHX9XlbBr3fkRbNWPX3pjDJ5lWNPoQyfnYHjBQ6+j7/GKPGC3kGrPB sdbEtfqOym4QgY1GAs7yPzvZxhYzfikBVLvcAUVOx2rOM+5z2t3ibw09WKu0rD/b 3qV+kOJDuPZFYuh1mfgRKxAsLz2jfjzo0wGQgFMMo9JALdT61wXKIAJEujjU8UoB +R2HfrjlJMIrCOPcxPULVFuNdDWBa3As3KS3v5XGoqrisVF0iCTrKSYGOelpD2cq dSvYNE4bFqXU4EqbnjWes2aVoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAV2dvyG MlggAO29K8yt3SNClsbBMB8GA1UdIwQYMBaAFFMNKa3A+xzyg305u4Y0NIbBxxaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0FGOC80ODI5N0ZFRTAy RkUxMUVCQjcwNjY0M0VDNEY5QUUwMi9VdzBwcmNEN0hQS0RmVG03aGpRMGhzSEhG b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V3MHByY0Q3SFBLRGZUbTdoalEwaHNISEZvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0FGOC80ODI5N0ZFRTAyRkUxMUVCQjcwNjY0M0VDNEY5QUUwMi9VdzBwcmNEN0hQ S0RmVG03aGpRMGhzSEhGb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTsKf8v62y/GmTxcMs31mTenjTINnV0exiM082U6Tu31EM6DKKnUum yZ2ANKQW/EvLA93xhET9w1OYwDoNM75uQwXYs29UxwjGDPygfgJKLfrb6Odj+nMK pcdP3UgQlud7rO0dBmAK2tKQe5eRYEBFNxsLCt0GWq3tDPtXy18FbDWMSX/Al7uj mE3vSkdzYqMs+mVWCPByDAzbsjsmykT4/5cRq0YRPj68phNu0FT0UgyvteddeAq/ AlzXqWepMAWSCMrt7MD3W9/0+q/YbAKLoUP92xhU13LfrHbQ2RSsNfhHa4SP4pRp D/Wg8CuFT0ayLfA0++JcGwaSB+TA6nHL -----END CERTIFICATE-----Generated at Sat Apr 26 03:46:31 2025 by rpki-client