$ rpki-client -vvf rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft File: _UnAZPyj6S3swYqPUElLIfwB8lY.mft (raw, json) Hash identifier: jOHXf2v1pj51zo3KvBRf1aGuntpRaKvUT/1JlvAsPNg= Subject key identifier: 4F:DE:B6:76:FD:FD:53:DB:C9:76:AA:5E:AC:EA:77:E3:31:56:A0:E5 Authority key identifier: FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56 Certificate issuer: /CN=A91934DE/serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256 Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft Manifest number: 0191 Signing time: Sun 11 May 2025 02:32:54 +0000 Manifest this update: Sun 11 May 2025 02:32:54 +0000 Manifest next update: Sun 18 May 2025 02:32:54 +0000 Files and hashes: 1: _UnAZPyj6S3swYqPUElLIfwB8lY.crl (hash: fl58wjcDq7JEwYg0r4uUIughgWtWgtQ8EJMvLi6/8Qo=) 2: 358556D2D98F11EDA9A38028C4F9AE02.roa (hash: w60npFN7Kaoau14A8nUumKIk6Z7FI9jzoRmBuAraQgw=) 3: 05F11BACDF4A11EDA4190947C4F9AE02.roa (hash: xNw6lqRZVzml6zGHz7sRyZFWQnA5LMwPw8PJ9UjVWeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91934DE, serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256 Validity Not Before: May 11 02:32:54 2025 GMT Not After : May 18 02:32:54 2025 GMT Subject: CN=68200c56-2ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:7d:72:f3:b9:47:51:c5:de:33:8c:f7:75: 87:14:68:0b:8e:e1:a8:cc:99:d9:24:af:70:e4:53: 30:ad:6a:80:34:d8:12:06:cc:54:57:3f:5e:45:06: 3c:9f:ea:a5:b2:55:4b:56:e6:e2:3e:3f:aa:9c:d4: 54:07:5d:ec:2f:59:a9:ff:9e:69:28:67:83:96:0e: 81:79:fd:03:c7:0e:34:78:0e:2a:f9:75:0e:1d:78: 97:a0:4c:69:34:42:bb:3e:36:2c:18:79:a2:09:01: 85:d4:55:95:c3:57:5c:5c:24:16:69:00:34:79:41: f7:9b:40:ff:10:0c:18:71:a3:69:0e:69:6b:91:e6: b2:ac:28:36:9d:e3:6e:3a:9c:b7:29:36:53:3c:81: cc:5d:54:9d:7f:ce:f4:37:9c:a3:33:fe:61:41:42: 87:84:46:ee:b2:b5:35:ed:fd:b6:f6:ac:c0:7d:d9: a4:95:8a:6a:5c:7b:4e:db:3c:cb:3d:77:85:6d:86: eb:a3:1e:e8:32:c8:7d:65:4a:23:44:00:5c:f0:08: 21:11:95:24:2d:89:5c:f9:53:33:2e:72:6a:da:fe: 20:51:f5:56:b3:70:1c:c4:66:17:69:03:5f:4e:9b: b6:8c:66:6f:3c:63:7a:26:89:bc:c5:81:3f:41:0d: f8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DE:B6:76:FD:FD:53:DB:C9:76:AA:5E:AC:EA:77:E3:31:56:A0:E5 X509v3 Authority Key Identifier: keyid:FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:1f:1a:79:47:26:b3:70:64:51:ab:d5:c6:61:19:59:23:85: f8:cc:8c:81:c4:7d:06:c4:ef:43:f5:de:d2:79:28:e9:04:fb: 29:d6:50:dc:a7:a5:25:fc:40:b8:9d:fe:83:7d:90:f7:23:01: 78:cd:5f:a6:a9:3b:09:32:1a:73:84:8c:b5:75:a8:8c:09:51: db:e7:48:d0:11:71:6d:a7:2c:56:97:84:f9:88:50:87:9a:24: 57:ee:39:9a:0f:46:07:69:c6:53:ce:b7:7a:a4:79:19:97:a1: e6:b3:f6:2f:de:b4:cd:ff:a7:e5:dd:78:42:90:13:56:16:83: 7a:a6:be:c5:08:49:c9:24:ac:bc:fd:0e:16:31:87:54:4b:92: 5c:64:83:21:7e:0a:47:fc:2d:ce:1a:41:e8:30:95:d4:97:a4: 6c:54:fa:d3:72:f2:5d:7e:9a:59:e0:35:19:71:99:26:62:ac: eb:78:54:a1:77:8e:f2:7f:b4:08:8c:02:e5:7a:0d:67:2f:44: a3:f1:38:51:6e:35:a0:53:ec:9b:13:89:c8:93:f5:ee:64:42: 86:38:ea:f2:eb:a3:2b:3d:b8:fd:12:0a:95:91:66:95:86:37: bd:98:b3:52:f9:4f:ec:4e:9f:8a:34:66:4e:e7:ed:32:f3:6a: aa:52:ec:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM0REUxMTAvBgNVBAUTKEZENDlDMDY0RkNBM0U5MkRFQ0MxOEE4RjUwNDk0QjIx RkMwMUYyNTYwHhcNMjUwNTExMDIzMjU0WhcNMjUwNTE4MDIzMjU0WjAYMRYwFAYD VQQDEw02ODIwMGM1Ni0yZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGF9cvO5R1HF3jOM93WHFGgLjuGozJnZJK9w5FMwrWqANNgSBsxUVz9eRQY8 n+qlslVLVubiPj+qnNRUB13sL1mp/55pKGeDlg6Bef0Dxw40eA4q+XUOHXiXoExp NEK7PjYsGHmiCQGF1FWVw1dcXCQWaQA0eUH3m0D/EAwYcaNpDmlrkeayrCg2neNu Opy3KTZTPIHMXVSdf870N5yjM/5hQUKHhEbusrU17f229qzAfdmklYpqXHtO2zzL PXeFbYbrox7oMsh9ZUojRABc8AghEZUkLYlc+VMzLnJq2v4gUfVWs3AcxGYXaQNf Tpu2jGZvPGN6Jom8xYE/QQ34jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/etnb9 /VPbyXaqXqzqd+MxVqDlMB8GA1UdIwQYMBaAFP1JwGT8o+kt7MGKj1BJSyH8AfJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzRERS9BOTQxRDVFMkQ4 RTQxMUVEOTJFQTM2MjBDNEY5QUUwMi9fVW5BWlB5ajZTM3N3WXFQVUVsTElmd0I4 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VbkFaUHlqNlMzc3dZcVBVRWxMSWZ3QjhsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzRERS9BOTQxRDVFMkQ4RTQxMUVEOTJFQTM2MjBDNEY5QUUwMi9fVW5BWlB5ajZT M3N3WXFQVUVsTElmd0I4bFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClHxp5RyazcGRRq9XGYRlZI4X4zIyBxH0GxO9D9d7SeSjpBPsp1lDc p6Ul/EC4nf6DfZD3IwF4zV+mqTsJMhpzhIy1daiMCVHb50jQEXFtpyxWl4T5iFCH miRX7jmaD0YHacZTzrd6pHkZl6Hms/Yv3rTN/6fl3XhCkBNWFoN6pr7FCEnJJKy8 /Q4WMYdUS5JcZIMhfgpH/C3OGkHoMJXUl6RsVPrTcvJdfppZ4DUZcZkmYqzreFSh d47yf7QIjALleg1nL0Sj8ThRbjWgU+ybE4nIk/XuZEKGOOry66MrPbj9EgqVkWaV hje9mLNS+U/sTp+KNGZO5+0y82qqUuyu -----END CERTIFICATE-----Generated at Mon May 12 19:00:14 2025 by rpki-client