$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft File: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft (raw, json) Hash identifier: NbFetWDL61LfRIj4+DDz0BlRHODplmTdtUPuO4ZEA30= Subject key identifier: 02:B1:EA:36:E1:B6:C8:22:22:20:59:D6:1B:CD:91:9D:C6:D1:87:A7 Authority key identifier: B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68 Certificate issuer: /CN=A91FA851/serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft Manifest number: EF Signing time: Fri 25 Apr 2025 04:24:19 +0000 Manifest this update: Fri 25 Apr 2025 04:24:18 +0000 Manifest next update: Fri 02 May 2025 04:24:18 +0000 Files and hashes: 1: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl (hash: pDRlj2AeODqc9AZ4Q6x+v76cuQAomxvK17dvYWKKEPo=) 2: 8FD49B16BAE411EE9198A471C4F9AE02.roa (hash: L0qfyKxG6EHzysnGwaUqdqXIinzIkFTO2ksscDrrvZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA851, serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968 Validity Not Before: Apr 25 04:24:18 2025 GMT Not After : May 2 04:24:18 2025 GMT Subject: CN=680b0e73-a4b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:36:49:20:52:80:ad:60:81:22:43:3c:e6:9f: aa:e9:b1:5b:f8:e8:bd:0a:35:c0:c0:27:bd:bf:22: a6:b4:70:dd:2a:94:de:d3:db:df:b6:ba:dc:f5:a1: cc:d0:3e:d9:43:18:b3:3a:6c:d0:c1:8b:10:c9:27: 75:84:1f:bf:2b:70:3c:bf:48:7e:88:be:5e:e2:4e: 76:4a:be:2d:d1:c8:ce:04:3b:27:48:04:ac:0e:a6: 64:86:98:c6:24:c7:65:c2:bb:19:ad:ec:db:dc:b5: a5:c5:d9:f5:01:2a:fd:f4:12:11:ec:16:11:7f:c4: 4d:02:99:95:21:1f:57:57:c3:1d:fb:58:59:4c:b7: 6d:05:e1:24:13:19:05:81:f2:1d:4c:82:e2:4a:30: 2c:c4:13:6e:56:9b:77:60:c7:ad:c0:bc:e3:23:23: 07:61:96:1c:81:11:bf:55:f1:28:38:36:9a:1e:00: 28:4a:58:dc:b1:d3:74:52:b5:80:d0:69:16:f4:3b: 88:b0:a9:d2:1e:73:06:dd:a5:ad:ec:2c:62:ed:56: a5:95:11:55:ce:3d:bc:d5:29:46:5b:2a:3a:8f:b5: ea:f3:a7:83:7d:6b:27:b1:1b:5f:3f:f3:bc:be:be: 0c:bb:3a:4d:45:fa:d8:2a:db:96:a2:42:be:58:4d: da:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B1:EA:36:E1:B6:C8:22:22:20:59:D6:1B:CD:91:9D:C6:D1:87:A7 X509v3 Authority Key Identifier: keyid:B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:a8:0f:f0:94:03:1f:c6:72:8d:d1:01:26:2d:bb:9b:88:69: f6:cf:10:14:bd:47:b8:96:64:1a:18:73:d7:65:7d:6f:72:79: 84:aa:5f:7c:31:4c:38:08:34:55:96:bc:5d:89:3d:42:03:c7: 93:2c:39:b9:01:c2:3b:a3:79:c4:f4:56:1e:02:b9:f3:32:b7: 7a:26:6c:8f:0d:dd:9b:90:0d:55:59:81:ef:4c:4d:1b:0e:94: 2e:72:1e:12:b5:4d:5f:76:27:4a:c9:db:15:6c:42:32:0d:59: 46:f9:c7:97:91:93:88:3f:dd:b7:5e:d4:40:48:73:46:11:25: ba:13:f5:d2:37:3d:21:81:3b:76:85:6f:87:5d:fe:e4:e6:b9: b4:47:02:ce:ab:e5:08:4a:67:1b:74:1d:6c:05:06:22:6a:e8: 5b:f3:78:23:83:92:18:96:de:ae:92:bc:35:dc:f2:c6:4a:d8: ed:ba:ed:b9:3b:97:ea:7d:99:41:dd:23:d6:b1:6d:c2:0c:2d: b7:cb:23:62:18:eb:de:9d:ce:05:b5:09:85:2f:16:22:fc:a7: a4:e5:cb:7b:8b:f5:d5:27:57:f5:d7:99:25:5d:72:e4:40:9a: 55:25:82:57:4e:11:ac:2d:f1:9b:69:13:f3:54:86:d7:b7:18: 76:1e:b5:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4NTExMTAvBgNVBAUTKEI5MjUwRkRFM0ZBQkQ1OUZBNTYwODIzMEZFQTdBMjND NEI0Qzg5NjgwHhcNMjUwNDI1MDQyNDE4WhcNMjUwNTAyMDQyNDE4WjAYMRYwFAYD VQQDEw02ODBiMGU3My1hNGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTZJIFKArWCBIkM85p+q6bFb+Oi9CjXAwCe9vyKmtHDdKpTe09vftrrc9aHM 0D7ZQxizOmzQwYsQySd1hB+/K3A8v0h+iL5e4k52Sr4t0cjOBDsnSASsDqZkhpjG JMdlwrsZrezb3LWlxdn1ASr99BIR7BYRf8RNApmVIR9XV8Md+1hZTLdtBeEkExkF gfIdTILiSjAsxBNuVpt3YMetwLzjIyMHYZYcgRG/VfEoODaaHgAoSljcsdN0UrWA 0GkW9DuIsKnSHnMG3aWt7Cxi7VallRFVzj281SlGWyo6j7Xq86eDfWsnsRtfP/O8 vr4MuzpNRfrYKtuWokK+WE3aEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKx6jbh tsgiIiBZ1hvNkZ3G0YenMB8GA1UdIwQYMBaAFLklD94/q9WfpWCCMP6nojxLTIlo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTg1MS85NUE2MTE5Q0I5 REYxMUVFOTRCNDI0MkFDNEY5QUUwMi91U1VQM2otcjFaLWxZSUl3X3FlaVBFdE1p V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VTVVAzai1yMVotbFlJSXdfcWVpUEV0TWlXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTg1MS85NUE2MTE5Q0I5REYxMUVFOTRCNDI0MkFDNEY5QUUwMi91U1VQM2otcjFa LWxZSUl3X3FlaVBFdE1pV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiqA/wlAMfxnKN0QEmLbubiGn2zxAUvUe4lmQaGHPXZX1vcnmEql98 MUw4CDRVlrxdiT1CA8eTLDm5AcI7o3nE9FYeArnzMrd6JmyPDd2bkA1VWYHvTE0b DpQuch4StU1fdidKydsVbEIyDVlG+ceXkZOIP923XtRASHNGESW6E/XSNz0hgTt2 hW+HXf7k5rm0RwLOq+UISmcbdB1sBQYiauhb83gjg5IYlt6ukrw13PLGStjtuu25 O5fqfZlB3SPWsW3CDC23yyNiGOvenc4FtQmFLxYi/Kek5ct7i/XVJ1f115klXXLk QJpVJYJXThGsLfGbaRPzVIbXtxh2HrWm -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:59 2025 by rpki-client