$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft File: u4g-aByWIiVDBg6XnT6Chuq2iok.mft (raw, json) Hash identifier: LNxP44GjgKJ+qgKKl6oe3x3AzIs0FDGh4Qt9udg/tJ4= Subject key identifier: 1B:E9:15:4B:42:09:06:B6:4C:4D:E5:8A:EB:C8:F7:75:4B:3A:AF:3D Authority key identifier: BB:88:3E:68:1C:96:22:25:43:06:0E:97:9D:3E:82:86:EA:B6:8A:89 Certificate issuer: /CN=A91A4413/serialNumber=BB883E681C96222543060E979D3E8286EAB68A89 Certificate serial: 023B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4g-aByWIiVDBg6XnT6Chuq2iok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft Manifest number: 0237 Signing time: Tue 13 May 2025 01:41:09 +0000 Manifest this update: Tue 13 May 2025 01:41:09 +0000 Manifest next update: Tue 20 May 2025 01:41:09 +0000 Files and hashes: 1: u4g-aByWIiVDBg6XnT6Chuq2iok.crl (hash: UZW/7mCjRtB491B9Q6uP4ZJJqqjuqX7g8pI4DwNJFdg=) 2: 3D3C7DC8236A11ED8018D62BC4F9AE02.roa (hash: ulvwJEE9TrSCR3alPiPFyCbLR3kKPVNTCzyUzxRhzpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.crl rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4g-aByWIiVDBg6XnT6Chuq2iok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 571 (0x23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4413, serialNumber=BB883E681C96222543060E979D3E8286EAB68A89 Validity Not Before: May 13 01:41:09 2025 GMT Not After : May 20 01:41:09 2025 GMT Subject: CN=6822a335-ba90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2e:92:8a:95:07:17:54:49:9b:08:b3:f6:7b: f3:8d:0c:63:4b:7f:ab:94:94:82:6c:23:24:58:29: 15:2b:39:76:ca:97:b5:9f:d0:c9:16:3c:6d:ff:82: d5:dc:b1:11:39:2e:20:32:5f:77:5a:6e:b6:21:2c: c9:7a:81:34:dc:50:4d:28:bd:c1:3a:40:58:ef:4e: b0:fb:e1:0d:aa:4f:b1:43:cc:27:07:c9:d5:1f:6e: f9:66:fb:4d:69:3b:f5:02:d1:c5:d0:a2:12:0c:96: d2:05:6c:88:6f:5a:5a:11:8e:dc:fe:15:11:92:2a: 1b:f4:e1:3a:f1:e6:95:0c:1b:00:85:49:79:bb:a5: 69:91:bd:d7:94:09:98:e4:ef:30:51:85:60:85:43: 2a:b3:c6:db:5b:28:8b:ab:a8:8c:67:13:88:22:ae: 88:65:fb:ff:d8:a3:f7:c1:5c:05:01:e4:43:ec:df: e6:95:bd:7d:a5:33:50:68:6b:ca:43:a0:b5:dc:0b: 4f:97:e7:f3:4b:ec:30:c8:f3:c3:81:31:63:88:57: e0:1d:71:e1:3b:94:20:2d:1d:ab:57:93:89:ab:c5: fe:6e:41:e5:2b:a1:28:13:c5:49:ec:cc:65:cf:96: ca:df:dd:c0:e9:fd:2f:8f:70:cf:02:69:02:cf:5e: ae:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E9:15:4B:42:09:06:B6:4C:4D:E5:8A:EB:C8:F7:75:4B:3A:AF:3D X509v3 Authority Key Identifier: keyid:BB:88:3E:68:1C:96:22:25:43:06:0E:97:9D:3E:82:86:EA:B6:8A:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4g-aByWIiVDBg6XnT6Chuq2iok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:08:9d:a0:f8:a2:5c:b9:a9:56:e2:8c:94:cd:69:32:0c:7d: 02:80:ac:ca:40:bd:ed:ee:e3:f3:25:64:d9:0e:db:a8:9a:80: 39:51:38:6f:ad:4b:67:99:25:e6:f3:5c:c8:57:5a:0b:b1:ea: 52:c7:36:fd:78:b3:27:fb:4b:7b:23:29:5e:a1:07:84:a5:52: c6:06:3e:cf:61:64:6b:91:4d:cd:7a:e4:07:5c:af:9f:bf:61: 23:94:60:a5:b5:36:85:f1:8b:11:78:55:cf:06:4a:90:73:1e: 38:af:79:07:c2:d2:1b:db:f1:e2:40:19:28:0d:bb:a5:92:25: af:2b:dc:bb:73:d1:2c:35:1c:da:92:55:65:98:ed:6b:2f:e4: 27:b4:08:e2:98:8e:7a:72:d4:b6:e6:f0:f1:eb:f8:f2:3f:35: e6:a1:9e:7b:b7:20:5a:3d:5d:76:ed:9d:22:cf:49:a7:4d:21: f2:a7:5e:55:41:07:b1:e6:d6:4d:61:0c:45:42:70:48:69:fd: 26:44:74:68:1d:16:63:e6:a6:f1:5e:2b:f4:57:13:79:a0:f1: ef:0f:8c:d8:b5:8c:8d:51:b7:12:f4:a0:d5:e9:43:4e:9c:14: b0:26:14:c1:27:56:dc:20:81:e4:78:65:e0:71:f0:ad:99:72: 41:46:2f:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MTMxMTAvBgNVBAUTKEJCODgzRTY4MUM5NjIyMjU0MzA2MEU5NzlEM0U4Mjg2 RUFCNjhBODkwHhcNMjUwNTEzMDE0MTA5WhcNMjUwNTIwMDE0MTA5WjAYMRYwFAYD VQQDEw02ODIyYTMzNS1iYTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2y6SipUHF1RJmwiz9nvzjQxjS3+rlJSCbCMkWCkVKzl2ype1n9DJFjxt/4LV 3LEROS4gMl93Wm62ISzJeoE03FBNKL3BOkBY706w++ENqk+xQ8wnB8nVH275ZvtN aTv1AtHF0KISDJbSBWyIb1paEY7c/hURkiob9OE68eaVDBsAhUl5u6Vpkb3XlAmY 5O8wUYVghUMqs8bbWyiLq6iMZxOIIq6IZfv/2KP3wVwFAeRD7N/mlb19pTNQaGvK Q6C13AtPl+fzS+wwyPPDgTFjiFfgHXHhO5QgLR2rV5OJq8X+bkHlK6EoE8VJ7Mxl z5bK393A6f0vj3DPAmkCz16uiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvpFUtC CQa2TE3liuvI93VLOq89MB8GA1UdIwQYMBaAFLuIPmgcliIlQwYOl50+gobqtoqJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQxMy8yMDAwMkMxMjIz NjcxMUVEOTdDMkVGMjdDNEY5QUUwMi91NGctYUJ5V0lpVkRCZzZYblQ2Q2h1cTJp b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U0Zy1hQnlXSWlWREJnNlhuVDZDaHVxMmlvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQxMy8yMDAwMkMxMjIzNjcxMUVEOTdDMkVGMjdDNEY5QUUwMi91NGctYUJ5V0lp VkRCZzZYblQ2Q2h1cTJpb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDCJ2g+KJcualW4oyUzWkyDH0CgKzKQL3t7uPzJWTZDtuomoA5UThv rUtnmSXm81zIV1oLsepSxzb9eLMn+0t7IyleoQeEpVLGBj7PYWRrkU3NeuQHXK+f v2EjlGCltTaF8YsReFXPBkqQcx44r3kHwtIb2/HiQBkoDbulkiWvK9y7c9EsNRza klVlmO1rL+QntAjimI56ctS25vDx6/jyPzXmoZ57tyBaPV127Z0iz0mnTSHyp15V QQex5tZNYQxFQnBIaf0mRHRoHRZj5qbxXiv0VxN5oPHvD4zYtYyNUbcS9KDV6UNO nBSwJhTBJ1bcIIHkeGXgcfCtmXJBRi/h -----END CERTIFICATE-----Generated at Thu May 15 00:08:10 2025 by rpki-client