$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft File: uo1v5dgowFOZs-GqZY_AWIYf3OA.mft (raw, json) Hash identifier: zjbvabRYxWlnbfhpZPWBv4PxSl2+xN+XH0hJYCXme7E= Subject key identifier: 14:59:23:45:7D:50:B1:EA:40:09:F2:E8:A2:C1:F2:7D:C0:D6:B4:21 Authority key identifier: BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0 Certificate issuer: /CN=A91AAF02/serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0 Certificate serial: 0F23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft Manifest number: 0F18 Signing time: Sun 04 May 2025 17:33:41 +0000 Manifest this update: Sun 04 May 2025 17:33:40 +0000 Manifest next update: Sun 11 May 2025 17:33:40 +0000 Files and hashes: 1: uo1v5dgowFOZs-GqZY_AWIYf3OA.crl (hash: f/kVkNoldXD4aG7Kw6R86qNOJxLZP1aoZVrGsKs+014=) 2: 7EA856A6C3F511EEB2610F2FC4F9AE02.roa (hash: tn6ujwfx2fxOjVcWSqeXpg3bHl3JICdgt6OHucuWivU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 17:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3875 (0xf23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02, serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0 Validity Not Before: May 4 17:33:40 2025 GMT Not After : May 11 17:33:40 2025 GMT Subject: CN=6817a4f5-73c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:05:1d:68:d3:1b:1b:d1:b7:e0:63:ed:31:ae: f8:3f:30:1d:6b:02:de:9f:d4:e2:58:a0:cb:92:2a: 0a:4b:fd:3b:87:a8:f8:98:9a:7a:95:91:66:5d:8c: 93:96:8d:f9:fd:a9:21:94:67:c7:17:91:6b:f6:2a: da:2b:90:90:e6:ea:36:b8:72:2a:47:d0:87:3e:dd: 18:fe:fe:86:74:6d:88:c2:65:da:b4:62:9e:89:c3: a0:3f:1b:d0:39:af:98:bd:6a:8f:a0:e5:c2:0d:38: 5d:0a:eb:db:88:ec:f3:cb:b0:d5:23:4b:7e:b9:db: 8e:43:39:b4:e4:bd:75:0d:4a:b9:0e:33:02:cf:1b: 66:9f:29:a5:fa:c5:60:22:97:c2:01:59:fa:c0:80: 15:0e:81:2c:fe:ac:12:3d:ff:0a:ba:12:13:9f:9f: 28:75:3b:d4:2c:6f:f9:ba:ac:c1:35:76:46:1b:b4: a7:84:9c:aa:5e:fc:20:d2:0b:6a:af:66:d9:c0:09: d1:76:ab:d8:7d:92:8b:5d:df:6d:46:ec:28:ae:91: 47:42:a4:77:44:5b:9d:fb:f3:94:33:90:65:a7:b0: c7:1f:ed:e7:3f:ce:6f:1e:94:48:18:20:b1:e5:0f: d2:6a:2d:05:41:9f:d9:ef:92:31:94:2e:ad:c8:af: 93:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:59:23:45:7D:50:B1:EA:40:09:F2:E8:A2:C1:F2:7D:C0:D6:B4:21 X509v3 Authority Key Identifier: keyid:BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:08:1d:26:86:0f:97:9f:58:88:bb:97:2f:06:1d:ed:d7:d0: d0:44:11:fa:ce:43:96:64:16:dc:93:ba:f1:71:2e:ff:75:85: 99:ae:f0:4e:88:52:c0:8e:3c:b2:ea:5f:66:52:cd:f7:6b:b2: 3d:8e:4f:7b:08:4a:6e:e7:0e:70:89:8f:05:a7:ee:de:b1:ce: a4:76:0a:bf:5f:e9:6f:1d:c3:51:38:1f:79:82:23:75:94:fe: f7:25:1e:b7:22:ba:55:27:3d:8b:9c:08:30:ae:1c:15:ec:8d: 73:54:ce:f3:4f:1f:36:18:ea:af:60:c5:81:e4:c3:98:fb:5b: 44:e7:11:e0:38:16:17:dd:aa:04:e3:1e:0a:bd:85:83:4e:71: 1f:6c:3f:14:a7:dd:42:5b:40:bd:25:32:5a:ff:9b:ec:cb:a9: 31:35:b1:64:e7:21:a9:c4:b5:6d:ce:4f:d7:83:a9:a8:b0:84: ef:55:8e:0f:fc:3b:69:da:81:51:10:3e:d6:a4:47:0b:ff:bb: 62:05:0f:19:50:bf:2a:b0:a9:64:91:f3:79:38:eb:a1:44:13: 7d:ef:e0:67:c4:36:52:94:8b:cb:52:06:69:8f:f2:92:ca:8b: cd:e7:eb:5d:c1:70:bf:e7:19:6d:0b:cc:38:96:9b:56:ce:8f: ac:e1:d3:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKEJBOEQ2RkU1RDgyOEMwNTM5OUIzRTFBQTY1OEZDMDU4 ODYxRkRDRTAwHhcNMjUwNTA0MTczMzQwWhcNMjUwNTExMTczMzQwWjAYMRYwFAYD VQQDEw02ODE3YTRmNS03M2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQUdaNMbG9G34GPtMa74PzAdawLen9TiWKDLkioKS/07h6j4mJp6lZFmXYyT lo35/akhlGfHF5Fr9iraK5CQ5uo2uHIqR9CHPt0Y/v6GdG2IwmXatGKeicOgPxvQ Oa+YvWqPoOXCDThdCuvbiOzzy7DVI0t+uduOQzm05L11DUq5DjMCzxtmnyml+sVg IpfCAVn6wIAVDoEs/qwSPf8KuhITn58odTvULG/5uqzBNXZGG7SnhJyqXvwg0gtq r2bZwAnRdqvYfZKLXd9tRuworpFHQqR3RFud+/OUM5Blp7DHH+3nP85vHpRIGCCx 5Q/Sai0FQZ/Z75IxlC6tyK+TvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRZI0V9 ULHqQAny6KLB8n3A1rQhMB8GA1UdIwQYMBaAFLqNb+XYKMBTmbPhqmWPwFiGH9zg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi9FQUNENDg3Njc2 NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dGT1pzLUdxWllfQVdJWWYz T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VvMXY1ZGdvd0ZPWnMtR3FaWV9BV0lZZjNPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUYwMi9FQUNENDg3Njc2NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dG T1pzLUdxWllfQVdJWWYzT0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnCB0mhg+Xn1iIu5cvBh3t19DQRBH6zkOWZBbck7rxcS7/dYWZrvBO iFLAjjyy6l9mUs33a7I9jk97CEpu5w5wiY8Fp+7esc6kdgq/X+lvHcNROB95giN1 lP73JR63IrpVJz2LnAgwrhwV7I1zVM7zTx82GOqvYMWB5MOY+1tE5xHgOBYX3aoE 4x4KvYWDTnEfbD8Up91CW0C9JTJa/5vsy6kxNbFk5yGpxLVtzk/Xg6mosITvVY4P /Dtp2oFRED7WpEcL/7tiBQ8ZUL8qsKlkkfN5OOuhRBN97+BnxDZSlIvLUgZpj/KS yovN5+tdwXC/5xltC8w4lptWzo+s4dNY -----END CERTIFICATE-----Generated at Mon May 5 12:57:10 2025 by rpki-client