$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft File: 9UFCkkKfU9qxhrQuVkFJWagL6gg.mft (raw, json) Hash identifier: DkXAhlBFroAPPEk8bKvMw/d5SOXWtoXReSIKazGhUL8= Subject key identifier: 65:CF:6A:40:5D:12:3A:DE:61:41:80:29:BD:5B:8A:4E:6A:A3:D6:96 Authority key identifier: F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08 Certificate issuer: /CN=A91FB92B/serialNumber=F5414292429F53DAB186B42E56414959A80BEA08 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft Manifest number: 012E Signing time: Fri 25 Apr 2025 03:39:27 +0000 Manifest this update: Fri 25 Apr 2025 03:39:27 +0000 Manifest next update: Fri 02 May 2025 03:39:27 +0000 Files and hashes: 1: 9UFCkkKfU9qxhrQuVkFJWagL6gg.crl (hash: mNqASWhvqjm3Lcu7Z6wPZgOIxNpVhiklW2z4I4LZlwA=) 2: 25B9F9C454BE11EE810E4C27C4F9AE02.roa (hash: hIM8hUCuLsy66X6ZYsJbgYBhw69MQCF4aThPHyxIGMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB92B, serialNumber=F5414292429F53DAB186B42E56414959A80BEA08 Validity Not Before: Apr 25 03:39:27 2025 GMT Not After : May 2 03:39:27 2025 GMT Subject: CN=680b03ef-6c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6c:59:29:82:a8:a9:d0:bd:9b:af:32:50:d7: 41:df:5c:5b:f4:b6:eb:6e:1f:39:b2:f8:c1:7f:90: e0:2b:03:0c:7d:f1:ce:7b:d0:d6:1d:51:61:6b:75: 12:5b:43:f8:eb:ab:59:bf:d5:8a:cc:4c:62:76:4f: a9:45:aa:e8:a5:a1:18:d5:c7:04:22:4e:50:b9:30: 8e:cf:59:7d:62:6e:40:2f:f7:33:d6:b0:50:e4:c9: f6:56:71:9d:3f:11:ab:de:78:27:8e:57:92:45:74: 42:e4:c3:bb:8f:5a:3e:c2:9e:26:39:3c:7b:ce:20: 2d:fd:2c:61:a6:a3:31:47:56:9b:6b:28:39:1c:79: a9:34:d6:3b:4b:8d:22:4e:fb:b2:d2:58:53:ad:05: 86:ca:c7:14:02:63:14:ff:c8:93:22:82:7a:72:a3: f6:77:88:a1:44:1a:95:a3:65:3f:f1:4c:ea:6f:43: f8:f8:a4:09:ac:00:87:f9:8a:97:87:fb:ce:91:d9: 90:45:7a:5f:36:b5:71:17:08:3b:3e:5d:54:d4:8b: d5:92:1b:70:79:e0:75:a9:fa:e4:e6:a4:c5:3b:e3: fb:37:db:fd:aa:20:d8:55:40:09:dc:7e:db:fa:fa: 48:b5:96:33:59:1e:2c:6f:62:b8:b0:e9:77:3a:45: 90:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CF:6A:40:5D:12:3A:DE:61:41:80:29:BD:5B:8A:4E:6A:A3:D6:96 X509v3 Authority Key Identifier: keyid:F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:cf:7e:1a:26:db:bb:7b:5b:d3:fd:aa:06:b7:2c:a2:a8:07: 3e:cd:83:0e:5c:38:4e:5a:e4:d1:ce:b8:91:8b:0c:56:ce:f0: f7:bd:d3:dc:b4:31:3b:56:66:f0:9c:37:00:96:89:60:39:ab: f9:de:b0:ef:f9:9c:20:5e:d2:0c:d7:de:3a:53:2f:da:53:c2: 99:72:f3:d6:83:36:bd:90:22:18:2c:42:a8:be:e9:04:28:97: ec:88:b6:27:b0:4c:af:fc:74:29:ec:fe:e1:d9:bc:e2:6d:2e: 68:95:de:9c:79:79:bc:28:8c:1a:ee:4c:62:15:6e:0c:91:e3: 9d:b6:ab:a1:c6:22:e6:f5:65:89:90:6b:44:e5:d4:f5:f1:0a: a0:79:12:61:d2:b8:3d:bc:38:4c:7a:09:df:e4:fe:79:c6:dd: 36:fe:24:aa:72:e8:1e:39:ec:38:f0:80:b8:06:27:66:1a:47: c4:be:f6:42:7a:bc:7a:3f:dc:16:c2:73:50:fb:19:af:4d:0d: 42:94:c7:dd:19:57:82:cc:39:f6:f3:89:6d:1f:9c:2f:d9:db: e1:2c:a4:0b:40:27:18:0e:10:9b:81:2c:15:61:11:ef:88:8c: d2:e1:be:fa:7d:45:ff:9f:31:4e:83:a9:cf:7b:d8:15:5d:59: d4:5a:50:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI5MkIxMTAvBgNVBAUTKEY1NDE0MjkyNDI5RjUzREFCMTg2QjQyRTU2NDE0OTU5 QTgwQkVBMDgwHhcNMjUwNDI1MDMzOTI3WhcNMjUwNTAyMDMzOTI3WjAYMRYwFAYD VQQDEw02ODBiMDNlZi02YzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2xZKYKoqdC9m68yUNdB31xb9Lbrbh85svjBf5DgKwMMffHOe9DWHVFha3US W0P466tZv9WKzExidk+pRaropaEY1ccEIk5QuTCOz1l9Ym5AL/cz1rBQ5Mn2VnGd PxGr3ngnjleSRXRC5MO7j1o+wp4mOTx7ziAt/SxhpqMxR1abayg5HHmpNNY7S40i Tvuy0lhTrQWGyscUAmMU/8iTIoJ6cqP2d4ihRBqVo2U/8Uzqb0P4+KQJrACH+YqX h/vOkdmQRXpfNrVxFwg7Pl1U1IvVkhtweeB1qfrk5qTFO+P7N9v9qiDYVUAJ3H7b +vpItZYzWR4sb2K4sOl3OkWQ1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXPakBd EjreYUGAKb1bik5qo9aWMB8GA1UdIwQYMBaAFPVBQpJCn1PasYa0LlZBSVmoC+oI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyQi9DNDYwODFGMjU0 QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5cXhoclF1VmtGSldhZ0w2 Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVRkNra0tmVTlxeGhyUXVWa0ZKV2FnTDZnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjkyQi9DNDYwODFGMjU0QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5 cXhoclF1VmtGSldhZ0w2Z2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+z34aJtu7e1vT/aoGtyyiqAc+zYMOXDhOWuTRzriRiwxWzvD3vdPc tDE7VmbwnDcAlolgOav53rDv+ZwgXtIM1946Uy/aU8KZcvPWgza9kCIYLEKovukE KJfsiLYnsEyv/HQp7P7h2bzibS5old6ceXm8KIwa7kxiFW4MkeOdtquhxiLm9WWJ kGtE5dT18QqgeRJh0rg9vDhMegnf5P55xt02/iSqcugeOew48IC4BidmGkfEvvZC erx6P9wWwnNQ+xmvTQ1ClMfdGVeCzDn284ltH5wv2dvhLKQLQCcYDhCbgSwVYRHv iIzS4b76fUX/nzFOg6nPe9gVXVnUWlA9 -----END CERTIFICATE-----Generated at Sat Apr 26 04:25:47 2025 by rpki-client