$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft File: uG8rXtaXoSH08p1YIDcs8UBVEgs.mft (raw, json) Hash identifier: kZLTV2SIj88Iqyaw9BeHK9O75WsLgxdP028Vwhk+D4g= Subject key identifier: D8:20:0F:37:12:E4:4E:B7:00:F5:E1:00:A1:CF:7D:D6:12:23:E0:DC Authority key identifier: B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B Certificate issuer: /CN=A91AF0C6/serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft Manifest number: 0146 Signing time: Sun 11 May 2025 03:10:33 +0000 Manifest this update: Sun 11 May 2025 03:10:33 +0000 Manifest next update: Sun 18 May 2025 03:10:32 +0000 Files and hashes: 1: uG8rXtaXoSH08p1YIDcs8UBVEgs.crl (hash: ECPK8hfy+a2crUmISx+fDD+krNUZZXfsQAPMYsyxxUU=) 2: A915A3543FEC11EE99AC0F43C4F9AE02.roa (hash: go8uCjvo0RCrR73Y9GSlxE8uDTmJOu4MaZ77GeOcrFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0C6, serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B Validity Not Before: May 11 03:10:33 2025 GMT Not After : May 18 03:10:32 2025 GMT Subject: CN=68201529-dc0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7e:0b:1a:c9:43:fd:6d:93:9d:7c:08:41:01: 50:0e:ec:7f:b1:76:85:d8:e9:52:0d:4d:99:c6:51: 81:65:b2:a1:24:87:7c:12:b4:52:70:13:4a:41:01: b2:00:e3:01:bc:71:5d:64:27:1e:33:dd:cb:fa:ed: 1f:c3:52:f2:74:83:7e:c0:d7:64:a0:4f:e0:f1:2e: cf:74:d9:ae:17:a6:25:91:0e:b8:d0:e0:75:70:11: 5e:58:0c:61:6b:f8:0e:76:ce:db:4d:b1:3a:24:6e: 3b:a6:ac:ea:5a:69:db:ea:32:15:db:a5:4c:93:fa: 14:d6:4a:79:01:b1:94:fa:ec:7e:04:6d:04:ea:0b: d1:75:a1:a7:17:de:d5:30:21:51:1d:cd:a4:97:c0: 09:c9:66:8e:09:b1:76:75:8e:d7:9e:c2:04:9b:c0: 23:db:17:c8:fb:8f:f9:6f:dc:86:ae:ca:81:67:e9: b4:45:1e:b6:f5:1e:84:36:ce:53:c4:ff:e0:99:62: f3:76:13:a3:a8:b2:69:89:57:f2:f2:b5:36:64:4c: c5:62:aa:df:89:b3:eb:e5:21:59:fd:e2:18:f2:68: d4:2a:0c:47:47:ec:8b:07:4b:89:db:e6:cc:37:73: 7a:54:d7:2b:dd:c7:26:95:e5:4f:32:2a:12:e1:f8: 9d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:20:0F:37:12:E4:4E:B7:00:F5:E1:00:A1:CF:7D:D6:12:23:E0:DC X509v3 Authority Key Identifier: keyid:B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:dd:ed:33:56:d6:58:e4:eb:54:c5:b1:a1:57:44:4d:b7:8f: 48:72:f1:fc:26:c2:64:f0:f7:f8:dd:00:7d:cc:5c:63:08:10: 05:fd:a3:c4:cd:42:ba:8a:ce:90:a4:70:d2:cf:15:62:30:17: 0a:73:3f:50:82:f0:31:7c:b9:01:a5:68:03:11:e2:13:81:e0: e4:33:02:be:f9:3e:d1:22:a9:b3:66:ba:1e:56:58:b0:87:4d: 9a:dc:7a:d6:a2:b2:17:78:f2:5b:bd:c1:7e:4b:a7:ad:73:5f: d4:7b:91:39:dd:d2:4b:f0:5f:1b:69:7a:e4:cb:68:32:e1:5a: e7:ca:a5:c3:77:06:db:bf:ff:71:6d:67:87:7f:64:2f:15:29: f4:e6:c1:1c:aa:a9:a0:e4:47:41:d3:93:93:25:5d:49:a2:c0: bb:71:2b:4c:0c:e1:bc:8b:77:c3:2f:3e:c0:aa:cd:a8:de:38: da:81:d8:1c:28:ef:e0:3a:51:ea:b3:75:d9:3f:79:78:04:57: 68:da:dd:c5:13:b0:34:36:b8:ee:50:65:f0:bf:18:5a:2b:96: a1:4e:14:ab:4b:f6:a5:50:7d:0e:77:2b:a2:e7:49:e2:a0:94: 80:4a:83:4f:cb:e2:76:fa:29:f6:df:70:05:14:62:8e:c4:3f: e1:44:2e:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQzYxMTAvBgNVBAUTKEI4NkYyQjVFRDY5N0ExMjFGNEYyOUQ1ODIwMzcyQ0Yx NDA1NTEyMEIwHhcNMjUwNTExMDMxMDMzWhcNMjUwNTE4MDMxMDMyWjAYMRYwFAYD VQQDEw02ODIwMTUyOS1kYzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz34LGslD/W2TnXwIQQFQDux/sXaF2OlSDU2ZxlGBZbKhJId8ErRScBNKQQGy AOMBvHFdZCceM93L+u0fw1LydIN+wNdkoE/g8S7PdNmuF6YlkQ640OB1cBFeWAxh a/gOds7bTbE6JG47pqzqWmnb6jIV26VMk/oU1kp5AbGU+ux+BG0E6gvRdaGnF97V MCFRHc2kl8AJyWaOCbF2dY7XnsIEm8Aj2xfI+4/5b9yGrsqBZ+m0RR629R6ENs5T xP/gmWLzdhOjqLJpiVfy8rU2ZEzFYqrfibPr5SFZ/eIY8mjUKgxHR+yLB0uJ2+bM N3N6VNcr3ccmleVPMioS4fidBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNggDzcS 5E63APXhAKHPfdYSI+DcMB8GA1UdIwQYMBaAFLhvK17Wl6Eh9PKdWCA3LPFAVRIL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBDNi8zRkNFQkQyMjNG RUMxMUVFQURGNUQzMzhDNEY5QUUwMi91RzhyWHRhWG9TSDA4cDFZSURjczhVQlZF Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VHOHJYdGFYb1NIMDhwMVlJRGNzOFVCVkVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBDNi8zRkNFQkQyMjNGRUMxMUVFQURGNUQzMzhDNEY5QUUwMi91RzhyWHRhWG9T SDA4cDFZSURjczhVQlZFZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd3e0zVtZY5OtUxbGhV0RNt49IcvH8JsJk8Pf43QB9zFxjCBAF/aPE zUK6is6QpHDSzxViMBcKcz9QgvAxfLkBpWgDEeITgeDkMwK++T7RIqmzZroeVliw h02a3HrWorIXePJbvcF+S6etc1/Ue5E53dJL8F8baXrky2gy4VrnyqXDdwbbv/9x bWeHf2QvFSn05sEcqqmg5EdB05OTJV1JosC7cStMDOG8i3fDLz7Aqs2o3jjagdgc KO/gOlHqs3XZP3l4BFdo2t3FE7A0NrjuUGXwvxhaK5ahThSrS/alUH0Odyui50ni oJSASoNPy+J2+in233AFFGKOxD/hRC5C -----END CERTIFICATE-----Generated at Mon May 12 15:52:01 2025 by rpki-client