$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft File: UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft (raw, json) Hash identifier: kj9Hg11znxdTb+5zznbL47wjtl0FdpB7BRJK+jeWX8g= Subject key identifier: FA:AE:F7:D3:67:8F:7F:F7:EB:0B:89:D0:D3:11:2E:B2:65:91:FB:C3 Authority key identifier: 50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C Certificate issuer: /CN=A91A1630/serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft Manifest number: B8 Signing time: Sat 03 May 2025 05:16:47 +0000 Manifest this update: Sat 03 May 2025 05:16:47 +0000 Manifest next update: Sat 10 May 2025 05:16:47 +0000 Files and hashes: 1: UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl (hash: mlaPjp8RWMDtfgp5FMdGQ1ce97kwdO26jyp/JjpIdlQ=) 2: 18141426114211EFA0FF3956C4F9AE02.roa (hash: wOKkXFecaGXCjByRcpDkGbc7Cdo2VuRpcxeBnTZ+uS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1630, serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C Validity Not Before: May 3 05:16:47 2025 GMT Not After : May 10 05:16:47 2025 GMT Subject: CN=6815a6bf-c7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:90:e4:e0:98:ce:b2:5b:b3:bd:f6:2b:91:81: f1:ff:a0:56:bd:d5:35:39:18:ba:c5:ed:fb:f2:c8: 55:3d:18:f0:46:bd:b4:2d:77:ef:e0:cc:79:28:58: 45:9e:79:ad:19:95:fe:cf:b9:d2:02:f2:53:3a:29: 35:5f:33:f6:81:d9:51:66:f6:b1:f8:44:43:04:d6: 96:fc:7e:02:80:d7:68:22:c5:ed:45:ad:85:42:b8: ce:a8:54:ca:8c:05:a3:fa:69:dd:1d:a7:cf:5e:d7: da:b4:f2:18:fd:46:aa:b2:1b:a5:bf:64:33:8f:cc: 76:e4:b9:09:a7:bc:a5:52:6a:20:75:29:60:1c:49: 0a:94:96:a7:2c:fa:fb:b1:7d:2a:4d:01:95:c7:f2: 88:09:be:f8:71:d5:31:35:73:09:8b:ef:b2:e1:79: f7:c8:a3:f4:aa:21:bf:ac:a1:98:86:e0:26:5e:51: 46:a8:54:5c:7f:71:dc:dc:95:09:b2:3a:6b:f3:0a: a1:eb:57:c3:21:42:4e:17:ea:c3:2a:99:5a:63:45: 2d:9b:02:79:36:50:c9:f7:da:a6:0b:59:c8:c4:75: 71:2a:73:38:8d:57:95:c1:68:0d:0c:89:21:bd:05: 65:27:7c:d1:a5:83:f3:a0:88:cb:1b:1a:d3:89:37: 15:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AE:F7:D3:67:8F:7F:F7:EB:0B:89:D0:D3:11:2E:B2:65:91:FB:C3 X509v3 Authority Key Identifier: keyid:50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:7a:bc:ea:90:66:2e:a2:6e:8f:4b:09:f3:9d:34:34:59:fa: b2:73:b3:1f:73:a1:8e:1b:25:d5:a6:16:d7:b4:61:6b:02:e3: 9a:8b:76:dc:e6:e7:7d:52:4d:23:83:16:3f:91:11:29:16:4e: a1:5b:b8:1a:60:54:f1:a5:8d:59:47:cb:a5:4d:65:86:57:e9: 1c:3d:85:52:0a:39:c8:d3:3d:b7:57:8a:21:b9:68:6c:1f:2a: 74:38:ce:77:21:0a:37:6f:97:01:bd:92:ce:d0:f4:50:ca:bb: 79:1e:28:64:04:eb:35:f1:9e:13:46:5c:99:72:04:9d:04:2c: a7:80:ec:2a:cd:d4:cf:bc:ea:10:bc:c1:01:87:73:06:fe:2c: eb:ca:40:71:4e:83:0d:e1:f6:d0:7e:95:d2:7a:6c:6a:c3:c5: 35:7d:7e:7a:2a:5e:69:02:fe:53:c9:db:7c:99:54:dc:40:49: 4f:36:f4:d8:3d:59:6b:e0:4b:02:e1:c3:9a:f6:52:3c:76:e6: c3:dd:db:b8:23:13:91:a7:f0:e9:da:b7:77:bc:98:94:ec:a4: 89:65:4e:b3:96:9a:3c:6b:0c:53:34:66:96:50:ec:29:9d:e1: c3:bf:10:aa:75:a1:e6:5b:e0:da:cd:5b:b2:a3:47:80:7a:d9: 75:d4:61:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE2MzAxMTAvBgNVBAUTKDUwRThGMDRCOTAwOEZFQTFFNUMzMUY2NEU3NjNEQURF RDI1M0E2MEMwHhcNMjUwNTAzMDUxNjQ3WhcNMjUwNTEwMDUxNjQ3WjAYMRYwFAYD VQQDEw02ODE1YTZiZi1jN2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJDk4JjOsluzvfYrkYHx/6BWvdU1ORi6xe378shVPRjwRr20LXfv4Mx5KFhF nnmtGZX+z7nSAvJTOik1XzP2gdlRZvax+ERDBNaW/H4CgNdoIsXtRa2FQrjOqFTK jAWj+mndHafPXtfatPIY/Uaqshulv2Qzj8x25LkJp7ylUmogdSlgHEkKlJanLPr7 sX0qTQGVx/KICb74cdUxNXMJi++y4Xn3yKP0qiG/rKGYhuAmXlFGqFRcf3Hc3JUJ sjpr8wqh61fDIUJOF+rDKplaY0UtmwJ5NlDJ99qmC1nIxHVxKnM4jVeVwWgNDIkh vQVlJ3zRpYPzoIjLGxrTiTcVZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqu99Nn j3/36wuJ0NMRLrJlkfvDMB8GA1UdIwQYMBaAFFDo8EuQCP6h5cMfZOdj2t7SU6YM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTYzMC8xNTI3NEYwRTEx NDExMUVGOEYxNzg3MEZDNEY5QUUwMi9VT2p3UzVBSV9xSGx3eDlrNTJQYTN0SlRw Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPandTNUFJX3FIbHd4OWs1MlBhM3RKVHBndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTYzMC8xNTI3NEYwRTExNDExMUVGOEYxNzg3MEZDNEY5QUUwMi9VT2p3UzVBSV9x SGx3eDlrNTJQYTN0SlRwZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCperzqkGYuom6PSwnznTQ0Wfqyc7Mfc6GOGyXVphbXtGFrAuOai3bc 5ud9Uk0jgxY/kREpFk6hW7gaYFTxpY1ZR8ulTWWGV+kcPYVSCjnI0z23V4ohuWhs Hyp0OM53IQo3b5cBvZLO0PRQyrt5HihkBOs18Z4TRlyZcgSdBCyngOwqzdTPvOoQ vMEBh3MG/izrykBxToMN4fbQfpXSemxqw8U1fX56Kl5pAv5Tydt8mVTcQElPNvTY PVlr4EsC4cOa9lI8dubD3du4IxORp/Dp2rd3vJiU7KSJZU6zlpo8awxTNGaWUOwp neHDvxCqdaHmW+DazVuyo0eAetl11GGg -----END CERTIFICATE-----Generated at Mon May 5 03:16:29 2025 by rpki-client