$ rpki-client -vvf rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft File: UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft (raw, json) Hash identifier: C/17ty1ipRCePXhZ4IJ9MVpcTYb0Oms7ff5Mk2nwz6M= Subject key identifier: 2F:D4:9D:49:69:91:A6:4D:38:71:23:1D:D0:59:46:49:12:21:85:97 Authority key identifier: 51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23 Certificate issuer: /CN=A91383BF/serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft Manifest number: BB Signing time: Tue 13 May 2025 05:08:00 +0000 Manifest this update: Tue 13 May 2025 05:07:59 +0000 Manifest next update: Tue 20 May 2025 05:07:59 +0000 Files and hashes: 1: UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl (hash: rUJw+VFR0FE+Ue1uI0tGviidNDwPzBHVzN+JeD4ZKW8=) 2: C23053B019A911EF97366417C4F9AE02.roa (hash: YYki0NriwMd0PqjU0EOE6kz16/qKzKdVDNbbepKT0IA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383BF, serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623 Validity Not Before: May 13 05:07:59 2025 GMT Not After : May 20 05:07:59 2025 GMT Subject: CN=6822d3b0-9131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:39:8e:f8:1a:7c:ee:58:30:86:88:ab:c9:57: 09:ec:73:f3:5b:5b:23:ac:bd:49:22:b6:ed:89:bd: 80:d1:35:77:1f:96:29:e3:59:9d:39:00:49:e4:c9: 0e:f5:ea:3e:58:60:89:17:81:1e:45:45:5d:b5:1a: b2:ca:2b:06:9e:88:c5:cc:2e:41:a3:3b:ed:d6:85: 6a:77:ac:80:45:b7:45:24:77:b5:56:b8:af:09:6a: c3:94:15:f0:aa:75:35:0f:a6:88:67:ef:24:92:49: 8c:10:b4:63:ee:b1:25:e8:25:4f:af:3c:84:a4:b1: 03:1e:d9:89:df:75:04:79:3e:31:a2:81:d9:06:76: 7a:87:1e:30:a3:1d:c4:ae:f4:96:02:fe:12:89:e4: 6b:7a:b0:61:a4:0b:86:28:9a:5b:c4:fa:63:e1:b3: 79:7c:fd:52:de:2c:bf:8c:f9:df:13:8a:61:d4:a6: d3:b0:32:cb:32:dc:64:5c:bc:ce:ac:ca:88:09:cd: b0:f4:f3:31:47:99:81:ff:0f:a3:0a:ba:61:bd:20: bf:31:52:2a:57:ba:4f:2f:45:36:39:7b:4f:fb:48: 2d:20:99:71:06:9d:ad:2d:d0:d1:78:13:e9:63:8d: 7f:22:ca:15:01:05:cd:be:96:25:ee:eb:2b:70:2a: 7d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D4:9D:49:69:91:A6:4D:38:71:23:1D:D0:59:46:49:12:21:85:97 X509v3 Authority Key Identifier: keyid:51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:6e:bc:37:72:4b:bb:51:36:95:b1:db:96:f7:8c:e1:d5:fa: c2:8e:50:90:a4:7d:da:35:70:cb:46:62:f2:09:67:85:a8:6c: 7c:6f:a5:c0:3b:86:5c:50:a7:1e:a7:69:7f:c4:c9:9a:37:1f: d6:d7:2d:04:75:9b:be:2c:27:ad:f5:39:bb:4e:fc:e1:c8:ab: c8:e0:90:fb:26:c3:67:a2:d0:70:df:0f:06:39:75:b8:57:f1: 49:2a:4c:7b:dc:eb:23:cf:58:07:0d:8a:77:95:f8:00:46:2e: fc:88:eb:87:d2:a0:3d:e6:48:4b:f9:17:90:ae:1c:42:fa:86: 6e:88:47:14:ca:52:30:5f:f7:f3:6d:64:95:02:4c:2a:70:81: 91:17:17:87:b1:33:d5:1d:2d:0f:f2:aa:61:46:58:89:72:92: 2e:54:73:3b:6f:95:d9:ef:c4:76:30:4d:b1:0b:59:7d:a5:ee: dc:3a:0b:ba:22:5e:6e:af:cd:8d:90:2f:92:82:3f:53:c1:e1: 1d:83:7e:33:3d:1e:a8:3d:29:1e:60:ed:ce:94:f6:af:fd:4a: 82:77:e0:a6:40:e6:b5:1d:17:b3:24:5b:69:ed:11:6b:c9:4a: 0c:41:3e:15:ef:ba:99:26:3e:9c:05:93:27:b3:d1:bb:40:e3: 8a:07:da:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQkYxMTAvBgNVBAUTKDUxQTQ4MjU4RDRDRDZFMDFEMjQ1OEM1QjkyMTZFRkE0 NTIxMEI2MjMwHhcNMjUwNTEzMDUwNzU5WhcNMjUwNTIwMDUwNzU5WjAYMRYwFAYD VQQDEw02ODIyZDNiMC05MTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TmO+Bp87lgwhoiryVcJ7HPzW1sjrL1JIrbtib2A0TV3H5Yp41mdOQBJ5MkO 9eo+WGCJF4EeRUVdtRqyyisGnojFzC5Bozvt1oVqd6yARbdFJHe1VrivCWrDlBXw qnU1D6aIZ+8kkkmMELRj7rEl6CVPrzyEpLEDHtmJ33UEeT4xooHZBnZ6hx4wox3E rvSWAv4SieRrerBhpAuGKJpbxPpj4bN5fP1S3iy/jPnfE4ph1KbTsDLLMtxkXLzO rMqICc2w9PMxR5mB/w+jCrphvSC/MVIqV7pPL0U2OXtP+0gtIJlxBp2tLdDReBPp Y41/IsoVAQXNvpYl7usrcCp9EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/UnUlp kaZNOHEjHdBZRkkSIYWXMB8GA1UdIwQYMBaAFFGkgljUzW4B0kWMW5IW76RSELYj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCRi9GNjdDNjFFQTE5 ODExMUVGQTVBQzQ3NTNDNEY5QUUwMi9VYVNDV05UTmJnSFNSWXhia2hidnBGSVF0 aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VhU0NXTlROYmdIU1JZeGJraGJ2cEZJUXRpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCRi9GNjdDNjFFQTE5ODExMUVGQTVBQzQ3NTNDNEY5QUUwMi9VYVNDV05UTmJn SFNSWXhia2hidnBGSVF0aU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTbrw3cku7UTaVsduW94zh1frCjlCQpH3aNXDLRmLyCWeFqGx8b6XA O4ZcUKcep2l/xMmaNx/W1y0EdZu+LCet9Tm7TvzhyKvI4JD7JsNnotBw3w8GOXW4 V/FJKkx73Osjz1gHDYp3lfgARi78iOuH0qA95khL+ReQrhxC+oZuiEcUylIwX/fz bWSVAkwqcIGRFxeHsTPVHS0P8qphRliJcpIuVHM7b5XZ78R2ME2xC1l9pe7cOgu6 Il5ur82NkC+Sgj9TweEdg34zPR6oPSkeYO3OlPav/UqCd+CmQOa1HRezJFtp7RFr yUoMQT4V77qZJj6cBZMns9G7QOOKB9qZ -----END CERTIFICATE-----Generated at Wed May 14 19:44:30 2025 by rpki-client