$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft File: 4UieBUVuksrXFYRyAOSnXWw-Q84.mft (raw, json) Hash identifier: W7iU0flGUBT2TZhgQieOI4xoNhN53MHNGtkZHO3EaBo= Subject key identifier: EC:8B:0B:8B:3B:78:7F:B4:A8:A3:09:E8:93:9D:6C:77:2D:EA:62:AC Authority key identifier: E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE Certificate issuer: /CN=A91F6AE0/serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE Certificate serial: 02B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft Manifest number: 02B0 Signing time: Fri 25 Apr 2025 01:14:49 +0000 Manifest this update: Fri 25 Apr 2025 01:14:49 +0000 Manifest next update: Fri 02 May 2025 01:14:49 +0000 Files and hashes: 1: 4UieBUVuksrXFYRyAOSnXWw-Q84.crl (hash: 2qrj1owC4fHze+pXi6IcrqSggYlCDhVODN0bIw3Mhqc=) 2: E2DF828CF20211ECBCC9B986C4F9AE02.roa (hash: tfUuxZjAK76Q4T6Ge0ulThHXULE82KNLMMQeccievfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 693 (0x2b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6AE0, serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE Validity Not Before: Apr 25 01:14:49 2025 GMT Not After : May 2 01:14:49 2025 GMT Subject: CN=680ae209-641a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:14:d7:6b:1a:e9:f7:40:f7:60:6a:79:01:2a: 72:01:d6:42:37:5e:7d:d1:40:9b:c6:cb:c2:fc:ba: 62:4f:f1:10:f6:e2:3c:a0:fb:9f:05:e0:5f:1e:b7: 5a:6a:03:cf:f7:96:57:10:1f:8d:14:07:57:96:52: 3f:7f:d0:99:3b:b3:17:5c:40:c8:18:73:63:9c:96: e5:68:97:ca:57:a2:3a:b0:06:95:be:14:9f:3c:99: d4:e4:1e:8d:40:5c:ab:0e:8c:b9:3f:01:1a:a6:5f: 12:b5:11:a9:2f:4e:c2:2c:ee:29:70:56:d8:18:f2: 8f:a7:d2:b8:22:45:96:6c:17:a7:7e:2c:e6:7c:ee: f8:f0:2f:ca:0c:5f:8a:16:1b:44:b5:9f:04:1c:44: f9:29:6d:1c:f5:e3:9c:8e:c5:a7:1c:e3:18:d5:a5: 14:c3:9a:2b:08:93:be:74:5b:5c:dd:6b:ee:ab:c2: 9c:2f:40:1e:89:6f:f4:6f:8f:a5:ab:a5:44:60:ec: 2b:48:32:ae:b7:38:aa:f5:61:55:e6:f6:47:5a:f9: 98:85:65:3c:76:19:94:5a:50:65:4f:35:d3:93:b3: 64:87:99:14:54:ce:31:bb:a3:3b:67:99:ac:b9:81: f4:f9:54:9a:82:fc:04:01:4e:06:53:c8:9a:6f:de: b1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8B:0B:8B:3B:78:7F:B4:A8:A3:09:E8:93:9D:6C:77:2D:EA:62:AC X509v3 Authority Key Identifier: keyid:E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c4:7a:c4:08:a6:d5:38:92:34:03:0b:c8:9e:70:e6:e7:74: d3:3f:bf:2a:8c:17:74:6b:ee:98:93:77:2a:c7:d7:58:52:af: 6b:3a:4b:e1:f1:2c:ba:75:15:cd:85:1a:54:6f:32:63:9c:4f: 61:cb:9f:32:55:fa:1c:d5:5b:c5:56:0a:cd:cd:7f:42:4a:f7: b5:7c:b6:bf:7e:9a:fb:09:e5:6b:bd:38:0f:5a:07:5c:29:1b: dd:da:5e:f8:c6:0e:67:3d:89:3c:e7:f7:7a:13:37:11:da:64: 7d:6e:50:75:24:70:91:28:5d:5c:43:ba:54:4b:d0:80:4b:62: 81:d6:8d:79:62:c8:ba:fc:42:4d:b2:db:af:80:fb:04:fa:ce: 85:bf:79:6a:72:7f:2b:88:8d:67:eb:c0:1c:c8:cc:3f:68:ca: e4:57:da:81:47:39:5f:ca:ba:71:36:11:c3:a9:3b:68:93:23: dc:e4:e6:d3:84:3e:5c:c9:ca:43:62:80:a3:72:b1:a8:10:21: ca:3e:38:59:06:52:a2:17:7c:4d:87:15:56:8c:ad:26:58:57: 89:4d:37:e0:26:6c:ff:a5:26:22:d4:af:04:4d:ff:ee:bc:1f: ea:af:09:ab:19:05:12:81:cf:90:e3:a2:96:ce:0b:66:60:ee: d4:6a:17:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZBRTAxMTAvBgNVBAUTKEUxNDg5RTA1NDU2RTkyQ0FENzE1ODQ3MjAwRTRBNzVE NkMzRTQzQ0UwHhcNMjUwNDI1MDExNDQ5WhcNMjUwNTAyMDExNDQ5WjAYMRYwFAYD VQQDEw02ODBhZTIwOS02NDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhTXaxrp90D3YGp5ASpyAdZCN1590UCbxsvC/LpiT/EQ9uI8oPufBeBfHrda agPP95ZXEB+NFAdXllI/f9CZO7MXXEDIGHNjnJblaJfKV6I6sAaVvhSfPJnU5B6N QFyrDoy5PwEapl8StRGpL07CLO4pcFbYGPKPp9K4IkWWbBenfizmfO748C/KDF+K FhtEtZ8EHET5KW0c9eOcjsWnHOMY1aUUw5orCJO+dFtc3Wvuq8KcL0AeiW/0b4+l q6VEYOwrSDKutziq9WFV5vZHWvmYhWU8dhmUWlBlTzXTk7Nkh5kUVM4xu6M7Z5ms uYH0+VSagvwEAU4GU8iab96x+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyLC4s7 eH+0qKMJ6JOdbHct6mKsMB8GA1UdIwQYMBaAFOFIngVFbpLK1xWEcgDkp11sPkPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkFFMC9GQTA0N0Y1NEYx RkMxMUVDOTlCMkNCNkJDNEY5QUUwMi80VWllQlVWdWtzclhGWVJ5QU9TblhXdy1R ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVaWVCVVZ1a3NyWEZZUnlBT1NuWFd3LVE4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkFFMC9GQTA0N0Y1NEYxRkMxMUVDOTlCMkNCNkJDNEY5QUUwMi80VWllQlVWdWtz clhGWVJ5QU9TblhXdy1RODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPxHrECKbVOJI0AwvInnDm53TTP78qjBd0a+6Yk3cqx9dYUq9rOkvh 8Sy6dRXNhRpUbzJjnE9hy58yVfoc1VvFVgrNzX9CSve1fLa/fpr7CeVrvTgPWgdc KRvd2l74xg5nPYk85/d6EzcR2mR9blB1JHCRKF1cQ7pUS9CAS2KB1o15Ysi6/EJN stuvgPsE+s6Fv3lqcn8riI1n68AcyMw/aMrkV9qBRzlfyrpxNhHDqTtokyPc5ObT hD5cycpDYoCjcrGoECHKPjhZBlKiF3xNhxVWjK0mWFeJTTfgJmz/pSYi1K8ETf/u vB/qrwmrGQUSgc+Q46KWzgtmYO7UahfB -----END CERTIFICATE-----Generated at Sat Apr 26 13:57:24 2025 by rpki-client