$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft File: xUK94Lg0fDed4d4dgkOpLLlMh00.mft (raw, json) Hash identifier: 2msGZm0YeLx5rCaP4LKK1My6ySc7HZbBkX4N8L2eHwQ= Subject key identifier: 16:F3:E3:CA:05:24:7B:B1:BF:43:4F:CF:DE:B4:CB:06:3D:70:5E:48 Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D Certificate issuer: /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft Manifest number: F0 Signing time: Fri 25 Apr 2025 04:22:19 +0000 Manifest this update: Fri 25 Apr 2025 04:22:19 +0000 Manifest next update: Fri 02 May 2025 04:22:19 +0000 Files and hashes: 1: xUK94Lg0fDed4d4dgkOpLLlMh00.crl (hash: A5dJqPjBktpDrz6sY91mc9jZd7U+r/NYxLkoOQkmkC8=) 2: FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (hash: +xX3fyh3F9druR4nFxovnFPsJhxpAOsF0rFF0c+Rr5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB297, serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D Validity Not Before: Apr 25 04:22:19 2025 GMT Not After : May 2 04:22:19 2025 GMT Subject: CN=680b0dfb-6855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:61:ea:d7:d1:96:03:04:cc:d0:ce:65:04:28: d8:9e:d4:5e:a8:a4:b2:6b:c1:31:a3:a3:f5:f3:53: a9:c9:a8:9b:14:d0:b0:37:3a:e3:5a:e4:46:8b:da: 0b:14:ac:b9:0b:d0:01:af:97:b5:b3:57:2c:97:8b: d3:7a:d1:96:e9:18:8c:7d:0a:86:04:97:71:1d:4a: b3:09:91:cd:70:e8:2c:1c:fb:80:24:f7:df:d3:45: 8c:a1:11:06:53:8c:54:52:3c:a8:cf:3a:e0:4b:97: c3:e9:fc:2d:0a:a8:3c:57:d0:a5:e4:bb:53:e5:4d: a1:84:48:5a:c1:c8:52:a0:19:a8:be:16:22:cc:ff: 78:85:ea:a7:49:a7:64:e8:04:c4:76:1d:b4:d8:d1: a4:62:40:00:50:06:8b:8e:c2:32:7f:1c:54:a4:29: 8c:80:f7:c9:1d:9d:f9:32:fb:20:8e:d1:62:a1:ca: 70:6d:3c:af:cd:8d:4d:49:d6:0a:b7:12:3d:96:58: 43:68:d3:3e:3c:fc:33:eb:08:89:b1:d7:62:93:af: 64:79:2c:82:05:ba:63:e1:01:be:46:d5:89:fc:0a: 00:ec:b6:ea:bd:bb:01:0a:d3:c4:66:f6:eb:66:91: da:bb:e6:5a:36:96:eb:c1:6c:cd:3f:59:3a:33:e8: dc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F3:E3:CA:05:24:7B:B1:BF:43:4F:CF:DE:B4:CB:06:3D:70:5E:48 X509v3 Authority Key Identifier: keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:72:e9:cc:ff:63:1c:41:8f:d4:7b:85:95:50:1f:d7:ec:91: 68:c7:16:e5:f2:4d:2e:9d:72:c4:97:b9:15:d0:bd:79:b3:93: 72:c7:43:f2:ab:d6:03:83:e4:18:ef:9e:a7:63:b2:1c:93:76: e7:38:20:7b:dc:a9:be:ec:a0:e8:2d:5a:54:7f:b9:8c:a0:ee: 84:92:33:91:a6:91:d8:ee:32:38:8b:8f:33:fd:ec:7b:c3:87: e4:a0:87:83:ee:ca:f5:8e:8a:59:ee:4e:29:88:da:0c:76:51: d2:a6:37:51:66:3e:d0:a5:b1:82:ac:02:94:c5:54:aa:54:49: c8:e8:5b:7f:57:12:8b:00:b4:6d:3f:65:b7:56:9b:05:6d:8a: d0:f6:b0:98:d6:43:13:a9:35:18:e9:18:25:a1:93:c3:ae:02: 59:f3:ab:4d:20:d6:49:97:a1:a5:00:63:85:54:d5:af:e2:30: b5:9f:3d:b3:5f:b9:b2:4b:c7:80:95:cb:9c:26:46:13:f3:09: 2a:4f:fa:78:da:47:50:a3:c8:57:51:29:94:6b:e2:13:f6:49: b4:28:cc:0b:8e:77:78:06:1f:cd:c6:d5:9b:40:a5:21:ee:29: 51:ff:9b:20:b9:c5:5a:86:8e:28:e3:b2:88:21:c6:c1:f8:60: 9f:9e:c8:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIyOTcxMTAvBgNVBAUTKEM1NDJCREUwQjgzNDdDMzc5REUxREUxRDgyNDNBOTJD Qjk0Qzg3NEQwHhcNMjUwNDI1MDQyMjE5WhcNMjUwNTAyMDQyMjE5WjAYMRYwFAYD VQQDEw02ODBiMGRmYi02ODU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmHq19GWAwTM0M5lBCjYntReqKSya8Exo6P181OpyaibFNCwNzrjWuRGi9oL FKy5C9ABr5e1s1csl4vTetGW6RiMfQqGBJdxHUqzCZHNcOgsHPuAJPff00WMoREG U4xUUjyozzrgS5fD6fwtCqg8V9Cl5LtT5U2hhEhawchSoBmovhYizP94heqnSadk 6ATEdh202NGkYkAAUAaLjsIyfxxUpCmMgPfJHZ35MvsgjtFiocpwbTyvzY1NSdYK txI9llhDaNM+PPwz6wiJsddik69keSyCBbpj4QG+RtWJ/AoA7LbqvbsBCtPEZvbr ZpHau+ZaNpbrwWzNP1k6M+jcKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbz48oF JHuxv0NPz960ywY9cF5IMB8GA1UdIwQYMBaAFMVCveC4NHw3neHeHYJDqSy5TIdN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjI5Ny85QTg5MEU2RUI1 RTExMUVFQTBBNjE3NkRDNEY5QUUwMi94VUs5NExnMGZEZWQ0ZDRkZ2tPcExMbE1o MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVSzk0TGcwZkRlZDRkNGRna09wTExsTWgwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjI5Ny85QTg5MEU2RUI1RTExMUVFQTBBNjE3NkRDNEY5QUUwMi94VUs5NExnMGZE ZWQ0ZDRkZ2tPcExMbE1oMDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAcunM/2McQY/Ue4WVUB/X7JFoxxbl8k0unXLEl7kV0L15s5Nyx0Py q9YDg+QY756nY7Ick3bnOCB73Km+7KDoLVpUf7mMoO6EkjORppHY7jI4i48z/ex7 w4fkoIeD7sr1jopZ7k4piNoMdlHSpjdRZj7QpbGCrAKUxVSqVEnI6Ft/VxKLALRt P2W3VpsFbYrQ9rCY1kMTqTUY6RgloZPDrgJZ86tNINZJl6GlAGOFVNWv4jC1nz2z X7myS8eAlcucJkYT8wkqT/p42kdQo8hXUSmUa+IT9km0KMwLjnd4Bh/NxtWbQKUh 7ilR/5sgucVaho4o47KIIcbB+GCfnsh7 -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:14 2025 by rpki-client