$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft File: uRokzwRxERfIw7omSjM5Xad_kbQ.mft (raw, json) Hash identifier: ieGPWlXyDJF+36Cw2fYSPUazucGlJBSRVYW4NCQ1Ebc= Subject key identifier: EC:C9:AA:EB:CB:30:C6:C3:8F:99:62:D7:85:19:41:79:E1:D6:E1:38 Authority key identifier: B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4 Certificate issuer: /CN=A9133BB0/serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft Manifest number: 90 Signing time: Thu 15 May 2025 05:41:01 +0000 Manifest this update: Thu 15 May 2025 05:41:01 +0000 Manifest next update: Thu 22 May 2025 05:41:01 +0000 Files and hashes: 1: uRokzwRxERfIw7omSjM5Xad_kbQ.crl (hash: 4QuWtUDHjaFEvFhNE2audkLjc9Tu5ZoS08tUHe+HPf8=) 2: 27995372566911EF9D53B517C4F9AE02.roa (hash: xq/tIHChRUQ/SVgEnorDvzsCIu9u4UcNJR+//ggbghs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4 Validity Not Before: May 15 05:41:01 2025 GMT Not After : May 22 05:41:01 2025 GMT Subject: CN=68257e6d-b3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:54:37:8e:a6:5a:83:c5:8b:0f:ab:a8:5d:e9: 4b:f6:49:e4:5b:37:74:9f:e3:74:08:0b:3f:b0:75: 88:5f:cf:f8:e8:0c:4b:15:bd:d8:90:7d:23:9e:b5: 9a:fa:4c:d5:5a:fc:d5:85:7c:30:4b:c6:ff:74:1a: 73:bd:38:b5:2d:4a:1f:69:d6:12:40:20:51:85:f3: 27:4f:6d:9e:8e:97:e9:7c:40:02:1e:f3:66:53:a0: a3:a1:68:26:34:2d:47:c1:f4:67:e4:47:a4:40:f4: 1f:b2:f6:81:62:7e:41:d5:9e:94:a4:99:96:62:a0: 8a:7c:60:73:c6:f6:b6:bd:2a:dd:9e:49:82:e7:c3: 99:9e:95:d2:be:89:40:da:2c:af:96:dc:17:f6:17: ca:fa:53:6a:f7:5f:1c:e2:b7:5c:84:8b:dc:79:81: b4:08:54:a8:ab:8a:96:fb:df:f6:ae:b6:dd:2c:e3: 64:a5:3c:f8:fc:92:35:0a:4d:db:51:e2:9e:f3:fd: 76:b8:d8:d8:67:cf:27:5e:7c:9f:48:65:cb:25:66: 6b:31:52:d2:a9:26:a8:58:eb:97:4b:0c:ec:10:a8: 6c:fd:cb:26:a2:01:82:98:50:c5:74:c1:5a:1f:b2: 70:ba:f9:e8:46:ef:fe:0c:a3:3d:26:13:3b:fd:30: 23:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C9:AA:EB:CB:30:C6:C3:8F:99:62:D7:85:19:41:79:E1:D6:E1:38 X509v3 Authority Key Identifier: keyid:B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:7b:d7:e8:29:b7:27:31:87:30:27:3e:ff:ab:8d:bf:81:fd: e3:a0:b7:1b:28:a0:b2:ab:45:5c:d7:6f:d9:6e:a5:08:3f:c1: 8b:41:eb:ed:f4:17:e4:da:45:98:32:6f:a3:f5:34:8f:a2:ec: 1b:9f:f4:d2:9d:5b:b4:a3:fe:3f:c4:e6:ed:c2:0a:bc:6d:ac: 4d:f9:95:da:03:36:7e:89:55:2d:99:41:05:77:76:74:72:5a: 0f:e7:38:bd:da:c0:af:4a:d0:c9:fd:09:19:c9:3d:2d:e6:93: f6:b0:19:b9:b5:76:d3:98:76:b5:f2:b7:bb:0c:8a:29:94:01: 00:8b:3b:49:13:6b:7a:a7:57:13:e7:21:c0:7e:31:87:54:30: 5b:35:5f:1e:a5:ce:b5:e0:23:1c:41:37:b7:73:51:3e:84:41: fc:d2:aa:0d:27:c0:be:3f:d2:53:55:df:21:4a:51:66:9c:ec: e5:8d:82:c7:fa:43:27:3d:fb:24:89:b0:93:fe:da:7a:7d:ed: 6d:62:4f:26:0e:1c:a2:ab:90:7f:63:61:92:85:8a:21:38:0f: 18:d6:c2:d7:39:e0:37:a5:00:43:ca:0f:00:08:f1:2b:f1:b5: 21:3e:21:fa:4d:db:be:b3:19:7b:77:7a:25:02:08:8c:8a:7a: d7:46:47:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKEI5MUEyNENGMDQ3MTExMTdDOEMzQkEyNjRBMzMzOTVE QTc3RjkxQjQwHhcNMjUwNTE1MDU0MTAxWhcNMjUwNTIyMDU0MTAxWjAYMRYwFAYD VQQDEw02ODI1N2U2ZC1iM2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulQ3jqZag8WLD6uoXelL9knkWzd0n+N0CAs/sHWIX8/46AxLFb3YkH0jnrWa +kzVWvzVhXwwS8b/dBpzvTi1LUofadYSQCBRhfMnT22ejpfpfEACHvNmU6CjoWgm NC1HwfRn5EekQPQfsvaBYn5B1Z6UpJmWYqCKfGBzxva2vSrdnkmC58OZnpXSvolA 2iyvltwX9hfK+lNq918c4rdchIvceYG0CFSoq4qW+9/2rrbdLONkpTz4/JI1Ck3b UeKe8/12uNjYZ88nXnyfSGXLJWZrMVLSqSaoWOuXSwzsEKhs/csmogGCmFDFdMFa H7JwuvnoRu/+DKM9JhM7/TAjsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzJquvL MMbDj5li14UZQXnh1uE4MB8GA1UdIwQYMBaAFLkaJM8EcREXyMO6JkozOV2nf5G0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9CODY1QjM3RTU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi91Um9rendSeEVSZkl3N29tU2pNNVhhZF9r YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VSb2t6d1J4RVJmSXc3b21Tak01WGFkX2tiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0JCMC9CODY1QjM3RTU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi91Um9rendSeEVS Zkl3N29tU2pNNVhhZF9rYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQe9foKbcnMYcwJz7/q42/gf3joLcbKKCyq0Vc12/ZbqUIP8GLQevt 9Bfk2kWYMm+j9TSPouwbn/TSnVu0o/4/xObtwgq8baxN+ZXaAzZ+iVUtmUEFd3Z0 cloP5zi92sCvStDJ/QkZyT0t5pP2sBm5tXbTmHa18re7DIoplAEAiztJE2t6p1cT 5yHAfjGHVDBbNV8epc614CMcQTe3c1E+hEH80qoNJ8C+P9JTVd8hSlFmnOzljYLH +kMnPfskibCT/tp6fe1tYk8mDhyiq5B/Y2GShYohOA8Y1sLXOeA3pQBDyg8ACPEr 8bUhPiH6Tdu+sxl7d3olAgiMinrXRkeN -----END CERTIFICATE-----Generated at Fri May 16 19:10:03 2025 by rpki-client