$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft File: up0rragmh4TwCuhYcC744p5ytLw.mft (raw, json) Hash identifier: m9JsljMMpqSqn8KIHKCqLLfKh5kgp9Z+0QaQkFMYA8E= Subject key identifier: 69:4B:A1:2E:39:DA:C1:0A:42:BA:CD:49:9C:48:54:BE:9E:83:CB:DF Authority key identifier: BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC Certificate issuer: /CN=A91A9EE2/serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC Certificate serial: 34A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft Manifest number: 3490 Signing time: Mon 12 May 2025 14:29:24 +0000 Manifest this update: Mon 12 May 2025 14:29:24 +0000 Manifest next update: Mon 19 May 2025 14:29:24 +0000 Files and hashes: 1: up0rragmh4TwCuhYcC744p5ytLw.crl (hash: mExDTIxQLkd4NCj5EzrcUXwR0CU7fkRjHi6wrHChfu0=) 2: 58D5764A683311ECB9C17757C4F9AE02.roa (hash: 9sEgtc+Sp4Uok1SqtxGHbFLBelwmukEEkeYE5w5yi/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13474 (0x34a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9EE2, serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC Validity Not Before: May 12 14:29:24 2025 GMT Not After : May 19 14:29:24 2025 GMT Subject: CN=682205c4-1d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d7:9f:b1:52:25:20:57:d8:ea:20:88:83:58: 2a:d1:8e:95:e0:f9:1d:78:8d:0a:0a:bf:ae:3e:eb: bb:44:bf:67:d8:f3:4d:bc:1a:8b:52:90:85:a0:a8: 2d:1b:de:39:e8:ea:a9:a2:97:1a:00:e6:91:55:b1: e1:92:8c:dc:59:03:56:38:0c:c5:7d:d2:8d:83:05: 23:94:be:9b:82:81:cf:d9:6e:dc:cf:c5:f0:80:53: 3a:6a:87:62:db:19:ac:70:05:50:79:b5:50:a4:b5: 91:28:33:b2:d1:3d:c6:51:b9:71:14:aa:43:5b:3e: 6c:7b:f5:a2:0a:44:2b:76:fd:cc:f9:3f:46:8b:ea: 29:f7:bc:13:61:9d:2b:2b:97:33:4c:f6:5b:90:18: ae:ef:c5:1f:a8:0e:e1:84:a1:f3:27:45:6a:6f:d4: 88:f6:e6:59:35:72:56:e9:34:27:0b:8f:ca:22:93: d0:4a:f9:e1:fa:55:f3:d1:30:ec:ae:b9:bf:d4:39: a2:62:80:8b:57:44:af:5a:fb:95:58:d1:2b:c7:9d: 11:cb:97:9b:6b:32:a8:d3:1b:73:f4:a4:18:88:42: fb:76:4d:dd:c7:49:7c:ef:bf:7c:43:b5:d7:16:00: e9:c3:73:cc:7c:d1:69:68:f0:2e:a1:4e:97:f9:1e: 2e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4B:A1:2E:39:DA:C1:0A:42:BA:CD:49:9C:48:54:BE:9E:83:CB:DF X509v3 Authority Key Identifier: keyid:BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:c0:b9:1a:63:c4:a7:a5:fe:a4:be:a0:03:2f:96:22:61:25: b3:cc:d9:4e:df:fd:d5:e8:44:18:9a:aa:9d:69:ff:3f:c0:b9: e8:6a:05:d6:43:0f:59:45:34:8c:3c:c7:fe:8c:52:7d:9d:6a: ec:68:b5:16:a7:58:b6:cd:38:a1:7f:81:1a:b5:68:e3:a4:03: 98:86:f2:5e:e2:e2:f5:75:fe:d0:1d:4e:e1:66:23:47:e6:c5: 49:a1:93:47:c0:ae:b5:77:9f:e4:7d:5b:1b:11:a0:f5:14:11: cb:d1:b8:e1:a2:76:10:f2:8c:dc:5b:50:e1:5d:b9:70:b3:35: 5b:cd:70:b0:43:2b:ff:21:4c:ab:eb:df:cd:8d:47:56:1d:2d: 16:93:8a:82:49:47:61:09:c6:17:52:10:f9:09:ec:b0:c6:20: 69:2c:0f:0c:71:f0:d2:10:b4:ed:26:f8:df:c0:42:12:0b:a6: ad:4b:e1:79:d0:19:f5:11:25:12:df:bc:f5:16:f0:6f:a6:05: 70:47:12:66:52:cd:92:f6:03:3e:d3:a8:49:64:4d:a8:a5:68: cb:49:63:cf:eb:1d:0c:d3:66:68:99:c0:0f:48:6e:9e:b5:90: 75:9a:6c:dc:14:5b:06:8d:1c:ee:f6:b1:ee:cd:7e:65:4e:4c: db:1a:dd:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFRTIxMTAvBgNVBAUTKEJBOUQyQkFEQTgyNjg3ODRGMDBBRTg1ODcwMkVGOEUy OUU3MkI0QkMwHhcNMjUwNTEyMTQyOTI0WhcNMjUwNTE5MTQyOTI0WjAYMRYwFAYD VQQDEw02ODIyMDVjNC0xZDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9efsVIlIFfY6iCIg1gq0Y6V4PkdeI0KCr+uPuu7RL9n2PNNvBqLUpCFoKgt G9456OqpopcaAOaRVbHhkozcWQNWOAzFfdKNgwUjlL6bgoHP2W7cz8XwgFM6aodi 2xmscAVQebVQpLWRKDOy0T3GUblxFKpDWz5se/WiCkQrdv3M+T9Gi+op97wTYZ0r K5czTPZbkBiu78UfqA7hhKHzJ0Vqb9SI9uZZNXJW6TQnC4/KIpPQSvnh+lXz0TDs rrm/1DmiYoCLV0SvWvuVWNErx50Ry5ebazKo0xtz9KQYiEL7dk3dx0l87798Q7XX FgDpw3PMfNFpaPAuoU6X+R4uzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlLoS45 2sEKQrrNSZxIVL6eg8vfMB8GA1UdIwQYMBaAFLqdK62oJoeE8AroWHAu+OKecrS8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUVFMi82NDMyNEREODFE ODgxMUUyQkRFRjE0RTEwOEIwMkNEMi91cDBycmFnbWg0VHdDdWhZY0M3NDRwNXl0 THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VwMHJyYWdtaDRUd0N1aFljQzc0NHA1eXRMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUVFMi82NDMyNEREODFEODgxMUUyQkRFRjE0RTEwOEIwMkNEMi91cDBycmFnbWg0 VHdDdWhZY0M3NDRwNXl0THcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwwLkaY8Snpf6kvqADL5YiYSWzzNlO3/3V6EQYmqqdaf8/wLnoagXW Qw9ZRTSMPMf+jFJ9nWrsaLUWp1i2zTihf4EatWjjpAOYhvJe4uL1df7QHU7hZiNH 5sVJoZNHwK61d5/kfVsbEaD1FBHL0bjhonYQ8ozcW1DhXblwszVbzXCwQyv/IUyr 69/NjUdWHS0Wk4qCSUdhCcYXUhD5CeywxiBpLA8McfDSELTtJvjfwEISC6atS+F5 0Bn1ESUS37z1FvBvpgVwRxJmUs2S9gM+06hJZE2opWjLSWPP6x0M02ZomcAPSG6e tZB1mmzcFFsGjRzu9rHuzX5lTkzbGt06 -----END CERTIFICATE-----Generated at Tue May 13 05:54:24 2025 by rpki-client