$ rpki-client -vvf rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft File: cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft (raw, json) Hash identifier: PzkwkqpbONiFmIgaKVgQ//vQbPq3eyRyGYzV/ac8osQ= Subject key identifier: 96:16:E5:57:FF:F4:EE:51:98:15:A6:11:2B:7C:E2:F6:2C:8E:9F:85 Authority key identifier: 71:4B:A2:8D:D8:35:A7:D4:19:70:1F:AD:37:2A:34:B7:C6:6C:FA:A0 Certificate issuer: /CN=A91238D6/serialNumber=714BA28DD835A7D419701FAD372A34B7C66CFAA0 Certificate serial: 2261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft Manifest number: 222F Signing time: Fri 16 May 2025 16:05:49 +0000 Manifest this update: Fri 16 May 2025 16:05:48 +0000 Manifest next update: Fri 23 May 2025 16:05:48 +0000 Files and hashes: 1: cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl (hash: Tq4qJtn4B2iSjKlzT2l5f3Ud/juvo5O+XOlPUBwMeqw=) 2: BB62FBD82AEC11EA972CB627C4F9AE02.roa (hash: KdmEZEpKoLyIMn6+XZO0IZiKVzRjxKxZXmexqgggUFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 16:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8801 (0x2261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91238D6, serialNumber=714BA28DD835A7D419701FAD372A34B7C66CFAA0 Validity Not Before: May 16 16:05:48 2025 GMT Not After : May 23 16:05:48 2025 GMT Subject: CN=6827625c-a220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:48:b6:ab:35:59:1e:38:be:87:23:be:dd:2e: 27:d3:63:15:e4:a0:55:ae:e5:d1:49:ba:19:52:b7: 90:4e:d6:e4:fd:96:d0:8f:7e:ab:30:5e:6b:91:67: fb:a5:c6:bf:dc:00:f5:70:ff:02:df:f5:3b:54:9e: 3e:7d:bd:b4:cf:ca:1f:27:37:ea:75:e9:fd:cc:67: 89:ec:40:34:e4:1a:e9:f9:a9:e6:1f:84:07:7f:5c: 53:aa:47:2b:95:54:e0:52:63:dd:03:ed:6f:41:4c: bb:8d:0e:90:94:21:aa:74:e3:e5:84:47:84:18:2d: a1:c0:ae:bf:2b:09:83:ab:53:5f:82:7e:cc:ed:3c: 88:5e:06:64:06:ca:4d:45:b6:cf:bc:3d:a9:26:7f: 99:21:0f:41:e8:d0:97:66:ef:26:b6:e7:7e:fe:8c: c8:4c:03:fd:27:8b:c2:da:8c:5f:7c:a4:a8:85:2a: c6:d8:6c:7d:2a:3e:c4:25:0b:7f:9c:71:5c:4f:58: 22:94:90:b4:36:b4:9f:97:37:d2:4b:d2:05:2c:0e: 55:48:69:1e:ef:76:e8:dd:11:a7:e6:79:2f:da:1a: ce:a8:13:06:be:dc:ee:e2:24:60:55:0f:4f:b8:31: 66:62:e1:c2:b7:32:6d:58:a7:5d:29:45:68:65:3c: a9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:16:E5:57:FF:F4:EE:51:98:15:A6:11:2B:7C:E2:F6:2C:8E:9F:85 X509v3 Authority Key Identifier: keyid:71:4B:A2:8D:D8:35:A7:D4:19:70:1F:AD:37:2A:34:B7:C6:6C:FA:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:69:e5:0c:d0:8a:05:76:17:07:64:4c:b2:46:44:b2:c1:aa: d0:4f:7e:b4:56:7c:1b:59:46:e2:df:20:0e:6f:aa:74:dd:32: f1:6e:ca:8f:d7:6a:15:0d:a2:89:a2:dc:49:56:37:88:45:87: 29:7a:4b:9e:dc:4b:7b:d6:74:ac:27:f9:44:3f:e9:1e:1a:41: 47:c8:bd:82:22:a2:a6:a8:a7:21:1b:be:3b:be:7f:f8:d2:2d: 80:76:eb:73:22:91:a6:ce:33:8c:3d:a0:3e:a4:d3:8e:18:e5: 89:8f:79:92:3f:f2:04:62:19:4f:80:94:b8:c4:8f:8c:64:db: 42:af:68:ae:a2:3c:88:60:11:3a:62:dd:e7:2a:1b:2d:65:04: 4e:ae:56:6c:a9:5d:91:9a:1d:ac:b0:a4:74:5e:79:70:ff:73: 9c:e7:b4:f6:d6:41:55:a1:a1:ff:1f:57:51:6c:98:bc:1e:96: ca:27:3d:c9:e8:1d:95:35:20:ae:03:16:86:5b:a5:7c:cd:13: be:62:5a:98:1f:0a:c3:0d:f9:3e:5d:b4:14:f4:5c:27:1b:fc: c6:0f:55:5c:89:a7:45:93:c3:bb:66:e1:5e:c1:c1:2f:de:dc: 3a:0a:42:e9:13:58:e6:c0:51:12:f8:44:0a:f3:d8:2d:8e:ed: 28:04:ca:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICImEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4RDYxMTAvBgNVBAUTKDcxNEJBMjhERDgzNUE3RDQxOTcwMUZBRDM3MkEzNEI3 QzY2Q0ZBQTAwHhcNMjUwNTE2MTYwNTQ4WhcNMjUwNTIzMTYwNTQ4WjAYMRYwFAYD VQQDEw02ODI3NjI1Yy1hMjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAski2qzVZHji+hyO+3S4n02MV5KBVruXRSboZUreQTtbk/ZbQj36rMF5rkWf7 pca/3AD1cP8C3/U7VJ4+fb20z8ofJzfqden9zGeJ7EA05Brp+anmH4QHf1xTqkcr lVTgUmPdA+1vQUy7jQ6QlCGqdOPlhEeEGC2hwK6/KwmDq1Nfgn7M7TyIXgZkBspN RbbPvD2pJn+ZIQ9B6NCXZu8mtud+/ozITAP9J4vC2oxffKSohSrG2Gx9Kj7EJQt/ nHFcT1gilJC0NrSflzfSS9IFLA5VSGke73bo3RGn5nkv2hrOqBMGvtzu4iRgVQ9P uDFmYuHCtzJtWKddKUVoZTypEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYW5Vf/ 9O5RmBWmESt84vYsjp+FMB8GA1UdIwQYMBaAFHFLoo3YNafUGXAfrTcqNLfGbPqg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzhENi8yODk5MDUzMEJF NTQxMUU1OERDQzQzNTdDNEY5QUUwMi9jVXVpamRnMXA5UVpjQi10TnlvMHQ4WnMt cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NVdWlqZGcxcDlRWmNCLXROeW8wdDhacy1xQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzhENi8yODk5MDUzMEJFNTQxMUU1OERDQzQzNTdDNEY5QUUwMi9jVXVpamRnMXA5 UVpjQi10TnlvMHQ4WnMtcUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyaeUM0IoFdhcHZEyyRkSywarQT360VnwbWUbi3yAOb6p03TLxbsqP 12oVDaKJotxJVjeIRYcpekue3Et71nSsJ/lEP+keGkFHyL2CIqKmqKchG747vn/4 0i2AdutzIpGmzjOMPaA+pNOOGOWJj3mSP/IEYhlPgJS4xI+MZNtCr2iuojyIYBE6 Yt3nKhstZQROrlZsqV2Rmh2ssKR0Xnlw/3Oc57T21kFVoaH/H1dRbJi8HpbKJz3J 6B2VNSCuAxaGW6V8zRO+YlqYHwrDDfk+XbQU9FwnG/zGD1VciadFk8O7ZuFewcEv 3tw6CkLpE1jmwFES+EQK89gtju0oBMoq -----END CERTIFICATE-----Generated at Sat May 17 12:10:25 2025 by rpki-client