$ rpki-client -vvf rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft File: uXp_AVpzYHTfOERcmAdDeCGdKZU.mft (raw, json) Hash identifier: Q4eTM35IJtwqfsBQjfFZ6l9+TdKRZs4F9jgbLy8CEbg= Subject key identifier: EF:BF:C0:AF:2C:CA:53:4A:EF:23:D8:F7:B9:04:B4:D5:0F:ED:29:66 Authority key identifier: B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95 Certificate issuer: /CN=A91320D4/serialNumber=B97A7F015A736074DF38445C98074378219D2995 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft Manifest number: F6 Signing time: Sun 11 May 2025 04:06:50 +0000 Manifest this update: Sun 11 May 2025 04:06:49 +0000 Manifest next update: Sun 18 May 2025 04:06:49 +0000 Files and hashes: 1: uXp_AVpzYHTfOERcmAdDeCGdKZU.crl (hash: dd50QpsZkJWO+koUIkWMaYv2lGMzgmprqNIlFoxOKZU=) 2: BAB65090BD7811EEB634A117C4F9AE02.roa (hash: rOfi7pLc2YXhQ9Pw2aUr9rz0+D/rY6Ijcu5KC1k/f/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91320D4, serialNumber=B97A7F015A736074DF38445C98074378219D2995 Validity Not Before: May 11 04:06:49 2025 GMT Not After : May 18 04:06:49 2025 GMT Subject: CN=68202259-ede0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:64:29:11:c7:ce:4b:c5:e2:5c:d3:04:0b:dd: 41:dc:30:f5:f0:8c:52:2b:00:2b:c1:64:a8:92:3a: 52:b3:d4:e2:d3:01:37:86:d8:71:db:2b:34:23:aa: bc:37:b1:78:36:48:16:d8:6e:e9:dc:1f:59:10:ca: 4b:f5:8c:55:80:26:21:e7:f8:38:f9:30:5a:36:17: f8:ca:96:77:00:66:e8:e1:56:07:1f:51:1d:77:39: 50:68:e1:0c:53:5f:01:d7:d6:04:76:e1:c5:82:61: 08:dd:b0:4f:38:07:a6:28:ab:c7:9b:3e:af:43:44: 9b:3b:e7:84:7b:b1:26:25:b9:82:ea:f9:60:0d:bd: 63:f5:68:1d:70:3c:4c:74:f3:45:d0:f0:76:27:d5: 3a:0d:a9:e4:61:d3:4c:e3:53:26:ff:19:38:40:90: 1a:53:c8:15:70:ea:5d:b3:41:6e:45:02:be:a4:41: 8e:23:07:37:c7:e5:b2:4d:03:d2:91:f7:01:41:47: 23:3c:23:57:f6:61:7c:d4:87:1e:20:bb:c2:26:80: f7:8b:b2:ae:06:64:b3:f9:e0:86:cb:2c:09:e7:de: 37:be:90:e1:64:a5:77:ba:b3:53:cd:73:00:28:2b: 3b:d3:9d:e1:f2:4e:16:36:c2:52:54:45:d6:fa:75: 8b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BF:C0:AF:2C:CA:53:4A:EF:23:D8:F7:B9:04:B4:D5:0F:ED:29:66 X509v3 Authority Key Identifier: keyid:B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:05:8c:73:ce:ef:46:eb:fd:b2:34:25:59:a2:2c:52:12:a2: b5:fd:f6:fd:33:27:00:70:f9:a2:38:20:3b:43:0e:db:56:97: 85:c1:1f:09:24:c7:19:9f:37:68:28:31:7e:a6:d5:4b:ac:51: 58:af:d4:18:56:d8:01:af:60:ca:7b:d5:fd:cd:5f:e2:53:0e: a1:bf:4f:73:8f:eb:53:76:e4:11:96:ac:97:aa:cd:16:be:b8: 23:e0:7a:dd:76:16:a7:c2:34:ee:d9:8f:13:e5:c8:73:3a:c2: fe:20:44:4e:02:2b:7b:46:f8:2b:fa:3c:5a:e9:2b:39:f8:8d: 43:57:bf:a9:c5:c1:b9:31:b7:96:22:09:2b:78:61:a5:c1:a9: 38:86:39:8e:bc:62:c9:18:b5:6f:43:6d:d6:a2:1d:1e:a3:c6: 80:4b:70:6e:bb:15:31:3f:82:ea:cb:07:d2:17:8c:f1:9d:ce: a3:db:34:c3:7d:6e:0f:39:a0:16:77:6d:0b:53:0d:e3:af:3c: f2:6c:ce:53:24:5b:99:14:74:96:1e:03:66:0b:6c:ba:07:4c: 29:0b:51:bd:3e:30:40:9c:af:6c:36:1d:6e:cf:ec:39:c0:25: e6:88:13:9a:cd:59:19:64:fc:27:ec:77:5e:20:8c:ff:f4:66: b2:a5:d6:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzIwRDQxMTAvBgNVBAUTKEI5N0E3RjAxNUE3MzYwNzRERjM4NDQ1Qzk4MDc0Mzc4 MjE5RDI5OTUwHhcNMjUwNTExMDQwNjQ5WhcNMjUwNTE4MDQwNjQ5WjAYMRYwFAYD VQQDEw02ODIwMjI1OS1lZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmmQpEcfOS8XiXNMEC91B3DD18IxSKwArwWSokjpSs9Ti0wE3hthx2ys0I6q8 N7F4NkgW2G7p3B9ZEMpL9YxVgCYh5/g4+TBaNhf4ypZ3AGbo4VYHH1EddzlQaOEM U18B19YEduHFgmEI3bBPOAemKKvHmz6vQ0SbO+eEe7EmJbmC6vlgDb1j9WgdcDxM dPNF0PB2J9U6DankYdNM41Mm/xk4QJAaU8gVcOpds0FuRQK+pEGOIwc3x+WyTQPS kfcBQUcjPCNX9mF81IceILvCJoD3i7KuBmSz+eCGyywJ5943vpDhZKV3urNTzXMA KCs7053h8k4WNsJSVEXW+nWLUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+/wK8s ylNK7yPY97kEtNUP7SlmMB8GA1UdIwQYMBaAFLl6fwFac2B03zhEXJgHQ3ghnSmV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjBENC8wRTNGMEM2NkJD MTYxMUVFQjkwNTlDODZDNEY5QUUwMi91WHBfQVZwellIVGZPRVJjbUFkRGVDR2RL WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYcF9BVnB6WUhUZk9FUmNtQWREZUNHZEtaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjBENC8wRTNGMEM2NkJDMTYxMUVFQjkwNTlDODZDNEY5QUUwMi91WHBfQVZwellI VGZPRVJjbUFkRGVDR2RLWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcBYxzzu9G6/2yNCVZoixSEqK1/fb9MycAcPmiOCA7Qw7bVpeFwR8J JMcZnzdoKDF+ptVLrFFYr9QYVtgBr2DKe9X9zV/iUw6hv09zj+tTduQRlqyXqs0W vrgj4HrddhanwjTu2Y8T5chzOsL+IEROAit7Rvgr+jxa6Ss5+I1DV7+pxcG5MbeW IgkreGGlwak4hjmOvGLJGLVvQ23Woh0eo8aAS3BuuxUxP4LqywfSF4zxnc6j2zTD fW4POaAWd20LUw3jrzzybM5TJFuZFHSWHgNmC2y6B0wpC1G9PjBAnK9sNh1uz+w5 wCXmiBOazVkZZPwn7HdeIIz/9GaypdZ7 -----END CERTIFICATE-----Generated at Mon May 12 21:36:09 2025 by rpki-client