$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft File: UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft (raw, json) Hash identifier: 2r0SkHXWHjQIL/tbF/nXhoI2DzfYO+iGsYdcY/egLf8= Subject key identifier: 22:2C:33:33:A3:D7:08:D7:8E:5C:83:A7:3D:3E:D8:0E:01:DD:F3:20 Authority key identifier: 52:F3:E7:FB:5E:D8:53:37:F7:E1:9E:10:73:3D:49:0C:2B:1C:0B:64 Certificate issuer: /CN=A91A3277/serialNumber=52F3E7FB5ED85337F7E19E10733D490C2B1C0B64 Certificate serial: 032C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UvPn-17YUzf34Z4Qcz1JDCscC2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft Manifest number: 0327 Signing time: Sat 17 May 2025 01:23:22 +0000 Manifest this update: Sat 17 May 2025 01:23:22 +0000 Manifest next update: Sat 24 May 2025 01:23:22 +0000 Files and hashes: 1: UvPn-17YUzf34Z4Qcz1JDCscC2Q.crl (hash: j/txoNMaP6+z2IvUDkpxxdvjtwcGvTCd+FmMXOB/LFY=) 2: F52D264EC6C211EC87251528C4F9AE02.roa (hash: o082/qE7KnRTR5fE6jGL87EK8Un5n2KKqzOv1p2PmKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.crl rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UvPn-17YUzf34Z4Qcz1JDCscC2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 01:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 812 (0x32c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3277, serialNumber=52F3E7FB5ED85337F7E19E10733D490C2B1C0B64 Validity Not Before: May 17 01:23:22 2025 GMT Not After : May 24 01:23:22 2025 GMT Subject: CN=6827e50a-0eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a6:ad:23:86:3d:4f:7c:bd:0b:99:0b:41:a9: 2d:5e:30:7b:d1:c6:75:86:88:ca:ad:d0:e7:20:b2: 56:67:71:65:d7:86:c2:eb:a9:16:0a:63:03:f4:2a: 01:cd:9b:7f:a2:d5:af:a6:38:4e:94:3b:1d:c7:32: 51:10:76:6d:af:79:ec:cf:86:81:f4:b2:ef:04:57: 77:a3:1b:84:be:c1:3c:f9:d1:dc:7e:77:12:cb:e7: e0:7b:fa:f1:b6:2e:75:2d:f6:bb:e1:6d:aa:25:b7: 62:c3:6c:6b:81:b5:6c:48:b1:f4:2b:cc:d2:ed:19: b0:ec:2a:25:01:5d:f3:52:37:c1:53:d2:8e:95:14: 7a:58:c8:20:32:7b:c3:e5:e5:db:af:d4:70:78:3e: bd:51:76:e4:18:70:f9:dd:56:40:c5:09:63:77:90: 0f:a3:fd:cf:64:e3:95:c3:2f:89:ee:ef:a4:74:4e: 8a:7c:ec:e2:4f:c5:36:ea:55:9c:e6:0a:61:3a:a8: 16:8f:1e:44:37:41:5e:98:9e:65:f3:ad:48:58:11: e8:72:4b:e0:32:bc:5f:06:4b:6e:0e:6c:bb:34:b4: 39:8f:c0:a2:a4:b1:a7:26:88:7e:1b:8e:cf:37:6f: 53:b2:3a:43:5c:28:dd:62:15:ec:7e:e7:93:37:a2: a3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2C:33:33:A3:D7:08:D7:8E:5C:83:A7:3D:3E:D8:0E:01:DD:F3:20 X509v3 Authority Key Identifier: keyid:52:F3:E7:FB:5E:D8:53:37:F7:E1:9E:10:73:3D:49:0C:2B:1C:0B:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UvPn-17YUzf34Z4Qcz1JDCscC2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:19:a3:3b:49:2b:89:65:be:88:d6:71:16:46:4e:f2:42:15: e3:d9:4b:76:8e:07:0a:32:f1:63:66:d2:34:ca:73:4b:9a:96: a0:63:ec:f6:8e:b5:db:f9:4e:d1:39:f6:64:ee:e0:82:a6:d6: 11:f4:d8:f2:f4:a9:7f:b3:d2:09:c3:28:3b:cb:b2:48:cd:d9: bd:60:64:7b:0b:5f:7c:a8:5c:54:e2:77:d2:ff:e0:b1:ec:07: f1:c2:5c:7e:20:7d:57:da:e6:d9:e3:81:55:03:23:c0:e1:cf: dc:2f:bb:5c:68:db:a1:a5:fe:9f:f4:f0:22:43:b9:bf:fe:6b: b1:29:12:64:5c:2a:9f:e1:26:84:94:4d:c2:10:8f:b9:35:f2: e6:f0:27:dd:c9:3f:34:26:b2:61:65:a0:8a:6a:e6:3c:1d:2c: 51:9b:49:82:49:11:36:d6:05:c6:db:52:16:39:d7:91:0c:91: c9:c7:24:ff:bb:14:80:69:59:e1:ad:f2:e3:0b:19:7e:b1:69: c9:7b:11:73:5d:5f:d1:be:5c:30:b9:fe:c2:18:94:26:f9:a4: 0a:e1:5c:ee:cd:c1:78:86:a6:7d:72:6c:24:60:fb:6d:94:a6: dc:c6:00:3f:5a:01:7a:72:09:a9:bf:51:38:f2:d5:c5:be:64: ac:02:31:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMyNzcxMTAvBgNVBAUTKDUyRjNFN0ZCNUVEODUzMzdGN0UxOUUxMDczM0Q0OTBD MkIxQzBCNjQwHhcNMjUwNTE3MDEyMzIyWhcNMjUwNTI0MDEyMzIyWjAYMRYwFAYD VQQDEw02ODI3ZTUwYS0wZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmKatI4Y9T3y9C5kLQaktXjB70cZ1hojKrdDnILJWZ3Fl14bC66kWCmMD9CoB zZt/otWvpjhOlDsdxzJREHZtr3nsz4aB9LLvBFd3oxuEvsE8+dHcfncSy+fge/rx ti51Lfa74W2qJbdiw2xrgbVsSLH0K8zS7Rmw7ColAV3zUjfBU9KOlRR6WMggMnvD 5eXbr9RweD69UXbkGHD53VZAxQljd5APo/3PZOOVwy+J7u+kdE6KfOziT8U26lWc 5gphOqgWjx5EN0FemJ5l861IWBHockvgMrxfBktuDmy7NLQ5j8CipLGnJoh+G47P N29TsjpDXCjdYhXsfueTN6Kj7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIsMzOj 1wjXjlyDpz0+2A4B3fMgMB8GA1UdIwQYMBaAFFLz5/te2FM39+GeEHM9SQwrHAtk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzI3Ny9DMUIwMjI5NkM2 QzAxMUVDQTg1NEQ2MjdDNEY5QUUwMi9VdlBuLTE3WVV6ZjM0WjRRY3oxSkRDc2ND MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V2UG4tMTdZVXpmMzRaNFFjejFKRENzY0MyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzI3Ny9DMUIwMjI5NkM2QzAxMUVDQTg1NEQ2MjdDNEY5QUUwMi9VdlBuLTE3WVV6 ZjM0WjRRY3oxSkRDc2NDMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcGaM7SSuJZb6I1nEWRk7yQhXj2Ut2jgcKMvFjZtI0ynNLmpagY+z2 jrXb+U7ROfZk7uCCptYR9Njy9Kl/s9IJwyg7y7JIzdm9YGR7C198qFxU4nfS/+Cx 7Afxwlx+IH1X2ubZ44FVAyPA4c/cL7tcaNuhpf6f9PAiQ7m//muxKRJkXCqf4SaE lE3CEI+5NfLm8CfdyT80JrJhZaCKauY8HSxRm0mCSRE21gXG21IWOdeRDJHJxyT/ uxSAaVnhrfLjCxl+sWnJexFzXV/Rvlwwuf7CGJQm+aQK4VzuzcF4hqZ9cmwkYPtt lKbcxgA/WgF6cgmpv1E48tXFvmSsAjG1 -----END CERTIFICATE-----Generated at Sat May 17 09:08:11 2025 by rpki-client