$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft File: Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft (raw, json) Hash identifier: L+KXzy5loSpmBhLIs02BVqtY2RYyLnYCvfOXTSpDFjU= Subject key identifier: B8:7A:F9:DE:AF:73:90:9B:1A:B4:A1:8E:16:2E:48:67:41:8B:DC:90 Authority key identifier: 52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94 Certificate issuer: /CN=A91AFA16/serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894 Certificate serial: 0B49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft Manifest number: 0B41 Signing time: Mon 12 May 2025 18:59:14 +0000 Manifest this update: Mon 12 May 2025 18:59:13 +0000 Manifest next update: Mon 19 May 2025 18:59:13 +0000 Files and hashes: 1: Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl (hash: bKyv6PNmUsVsM2r+q1ZAS9hVyngD2f2CgKeTzLSQa18=) 2: 11DB043CF61E11EEB39BD261C4F9AE02.roa (hash: e4wDPqjhV3r7vEA4MsvAFc5ifRump5FxJZTH+nviBcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2889 (0xb49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFA16, serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894 Validity Not Before: May 12 18:59:13 2025 GMT Not After : May 19 18:59:13 2025 GMT Subject: CN=68224501-9132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:24:e3:70:85:79:7f:39:89:69:72:19:f1:58: 8c:2d:ff:5c:dd:c3:7f:10:87:52:7c:a4:b7:88:c6: b7:25:bf:a7:6e:ae:e0:49:49:6f:bf:fe:77:91:61: 98:3a:54:f4:99:11:4a:e4:52:9d:79:5c:ee:5b:68: 14:59:f7:82:d3:09:9f:78:59:14:6a:1b:52:2f:df: 35:f8:18:68:43:34:36:32:bc:2a:9e:09:c8:f3:c2: 98:1d:e6:90:bb:e7:db:69:68:45:08:72:d2:28:4e: 4f:03:37:f3:df:ce:8e:2e:e3:91:c6:d6:c2:f1:bb: 82:69:ec:a2:fe:bf:6e:52:7b:f9:3b:c9:56:8a:2f: 2b:15:2a:a5:7f:e2:de:4d:48:72:9d:7d:a0:92:c0: 9e:08:b3:96:13:80:84:63:68:3d:3b:83:37:6c:8a: ca:f2:da:d4:da:5e:f7:5e:54:ab:1a:e0:88:65:2d: 77:f9:33:ea:49:62:ee:72:82:32:b7:83:cb:96:02: 81:5e:76:12:2c:92:23:6c:26:de:98:cc:8a:45:00: 48:b8:91:64:fc:17:2c:c9:3e:a6:d1:56:a1:92:dc: 31:88:ec:c2:b2:d5:61:6a:f6:e0:b7:09:49:08:d2: ad:56:d7:55:53:6b:99:62:67:ea:d0:cc:89:ee:59: 4d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7A:F9:DE:AF:73:90:9B:1A:B4:A1:8E:16:2E:48:67:41:8B:DC:90 X509v3 Authority Key Identifier: keyid:52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:60:c1:25:56:f8:0c:3a:72:d4:63:14:9d:f6:b0:70:3a:6f: 93:86:ca:b1:ef:bc:da:c1:31:b7:52:ab:70:fe:3b:64:23:65: e3:d9:df:d9:3d:72:ca:16:b3:c0:f5:45:b4:49:dd:22:3a:b2: b1:e0:c6:ab:b1:55:b7:0b:3a:74:1a:81:07:ea:b4:b1:05:2e: b4:98:4e:03:ca:d9:99:ef:8a:e0:ec:c6:f7:84:4c:77:13:02: 22:21:c2:ef:c0:7e:4a:b0:7f:01:92:4f:cc:3f:4c:1d:4e:ae: cf:8b:5b:1e:7e:56:57:73:43:bc:06:2d:64:6d:36:03:d3:bf: c1:f5:0e:09:1a:be:68:e0:63:b6:69:9d:f5:1e:8e:e1:57:d6: 96:f9:04:ba:c6:86:a3:6e:f0:06:ad:fc:1e:e9:fb:0c:ec:b5: f7:99:8d:a2:31:be:a8:be:e8:2f:43:c0:fe:ee:92:5b:21:c7: 5a:dd:12:1d:73:a6:96:f7:34:ff:e6:d4:a1:39:2e:6e:56:f3: 8f:11:c0:f5:d8:e4:76:ed:23:52:ba:45:f5:3a:26:8e:d7:fa: d5:0f:bf:35:9e:e6:0a:80:fb:63:b0:af:98:e7:1f:ec:5a:44: 05:c4:9b:1f:5b:55:37:a6:ce:52:39:df:ee:f7:a1:e5:cd:cf: d1:bd:8d:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZBMTYxMTAvBgNVBAUTKDUyRkQxREUyNERBRjhERDVGQzNBQTAwNzhCMDc3MzJG QzI3NDc4OTQwHhcNMjUwNTEyMTg1OTEzWhcNMjUwNTE5MTg1OTEzWjAYMRYwFAYD VQQDEw02ODIyNDUwMS05MTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1STjcIV5fzmJaXIZ8ViMLf9c3cN/EIdSfKS3iMa3Jb+nbq7gSUlvv/53kWGY OlT0mRFK5FKdeVzuW2gUWfeC0wmfeFkUahtSL981+BhoQzQ2MrwqngnI88KYHeaQ u+fbaWhFCHLSKE5PAzfz386OLuORxtbC8buCaeyi/r9uUnv5O8lWii8rFSqlf+Le TUhynX2gksCeCLOWE4CEY2g9O4M3bIrK8trU2l73XlSrGuCIZS13+TPqSWLucoIy t4PLlgKBXnYSLJIjbCbemMyKRQBIuJFk/BcsyT6m0VahktwxiOzCstVhavbgtwlJ CNKtVtdVU2uZYmfq0MyJ7llNfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLh6+d6v c5CbGrShjhYuSGdBi9yQMB8GA1UdIwQYMBaAFFL9HeJNr43V/DqgB4sHcy/CdHiU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkExNi9DNTU0MjA4MDM1 QzkxMUVBQjRBRkNCMTVDNEY5QUUwMi9VdjBkNGsydmpkWDhPcUFIaXdkekw4SjBl SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V2MGQ0azJ2amRYOE9xQUhpd2R6TDhKMGVKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkExNi9DNTU0MjA4MDM1QzkxMUVBQjRBRkNCMTVDNEY5QUUwMi9VdjBkNGsydmpk WDhPcUFIaXdkekw4SjBlSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcYMElVvgMOnLUYxSd9rBwOm+Thsqx77zawTG3Uqtw/jtkI2Xj2d/Z PXLKFrPA9UW0Sd0iOrKx4MarsVW3Czp0GoEH6rSxBS60mE4DytmZ74rg7Mb3hEx3 EwIiIcLvwH5KsH8Bkk/MP0wdTq7Pi1seflZXc0O8Bi1kbTYD07/B9Q4JGr5o4GO2 aZ31Ho7hV9aW+QS6xoajbvAGrfwe6fsM7LX3mY2iMb6ovugvQ8D+7pJbIcda3RId c6aW9zT/5tShOS5uVvOPEcD12OR27SNSukX1OiaO1/rVD781nuYKgPtjsK+Y5x/s WkQFxJsfW1U3ps5SOd/u96Hlzc/RvY3h -----END CERTIFICATE-----Generated at Tue May 13 13:38:02 2025 by rpki-client