$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft File: uoXZHSSsqengMR5VLb83WXY6Yro.mft (raw, json) Hash identifier: ATD6GOQHWSWry/ROraiB0zw1YPf4pxjjjajcNkIvdzg= Subject key identifier: 90:CD:5D:28:78:00:45:F4:33:FD:13:4E:F3:C7:86:58:C7:51:92:EF Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA Certificate issuer: /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft Manifest number: 9B Signing time: Tue 13 May 2025 05:29:05 +0000 Manifest this update: Tue 13 May 2025 05:29:04 +0000 Manifest next update: Tue 20 May 2025 05:29:04 +0000 Files and hashes: 1: uoXZHSSsqengMR5VLb83WXY6Yro.crl (hash: IIwDW8eEorA7EDyGQuD0f2ErH3M25Ls2EQPc+CcAEX8=) 2: C57D59A8457011EFA624C172C4F9AE02.roa (hash: ID73Pz3s55NAjs8USBhRX9L9yvmp5FUr9fdsYXFscuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B391F, serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA Validity Not Before: May 13 05:29:04 2025 GMT Not After : May 20 05:29:04 2025 GMT Subject: CN=6822d8a0-2325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ea:c5:c5:ee:50:72:91:e0:37:ad:b9:cb:27: 6e:6f:10:f1:b9:ab:17:e4:9d:17:13:42:f1:7c:e7: a3:d2:59:95:b6:ea:09:6a:6c:10:3f:7d:7b:61:81: ad:aa:04:c3:9d:0d:3f:10:68:89:70:de:a0:73:cc: 78:19:15:1e:f4:68:28:36:a1:0b:df:5a:c8:f2:1d: 65:d5:15:0c:6b:26:62:22:6a:31:34:c0:28:41:b8: 48:fe:f9:af:48:c3:c4:b4:1f:84:5e:bc:e0:58:1f: 4a:99:ac:5a:90:40:d3:5c:b3:30:7f:96:fc:a2:ea: c3:04:18:a3:c9:4b:0b:63:a0:25:4a:c0:75:67:df: a2:d5:55:92:60:73:79:82:14:52:e1:a4:86:6f:02: 74:3c:80:3a:12:a7:e9:9a:17:67:23:19:d2:3e:08: 2d:d0:6d:93:22:e5:44:4b:8a:75:57:67:f1:1c:ea: d4:1b:41:9a:77:3a:c3:f5:6c:99:41:44:2d:66:40: a1:d3:b7:7b:07:04:fb:2b:2b:9c:88:2e:a9:62:6b: fb:12:7d:bb:09:1c:4d:4a:8c:d4:c3:19:94:8d:a4: 7d:2e:30:25:02:c3:6f:f1:6e:a1:78:3d:c6:aa:81: 35:d1:b5:a2:40:b5:ab:79:b6:61:0b:c9:14:e3:8f: 2e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CD:5D:28:78:00:45:F4:33:FD:13:4E:F3:C7:86:58:C7:51:92:EF X509v3 Authority Key Identifier: keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:f3:19:c7:65:3f:02:ec:c6:32:3f:dd:09:35:fb:6c:7b:fa: f1:9a:d1:3f:11:e9:d3:42:3b:31:49:32:dc:0b:fc:8f:15:c0: 8b:a8:d4:d0:3b:23:d1:f6:67:77:3a:a4:91:78:42:9c:33:c5: 92:8d:dd:c4:6f:8b:cc:33:35:17:43:4c:c9:d5:42:8f:7d:30: 38:63:ed:34:66:8a:cb:50:19:c7:34:e6:3a:e0:e1:2b:63:43: 68:69:f8:09:43:a7:4d:79:fa:5e:c9:59:a2:d4:08:c4:89:78: 74:56:5e:2d:90:4e:5c:ee:3b:40:27:52:5c:0b:2e:91:c9:21: 26:56:02:17:6c:67:6e:b1:4f:0e:20:ca:06:54:45:b3:1f:82: b1:ba:b6:7c:d1:1b:25:eb:66:42:60:a1:02:60:9f:44:e0:f5: 9a:7b:6e:3e:8c:04:2b:6a:7a:17:f0:eb:cf:df:0a:d6:5d:88: 48:a7:b8:73:52:7c:55:0d:90:01:95:cd:eb:2f:cc:c7:b4:eb: 01:5d:f0:74:4a:55:3d:44:7f:11:cb:04:c8:91:22:19:a2:3f: db:d1:95:33:69:40:53:ad:56:ab:5a:00:59:59:31:64:69:21: 77:c2:28:34:3e:41:ed:ee:ed:12:55:3f:37:05:8d:84:7a:1b: 0e:d9:50:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM5MUYxMTAvBgNVBAUTKEJBODVEOTFEMjRBQ0E5RTlFMDMxMUU1NTJEQkYzNzU5 NzYzQTYyQkEwHhcNMjUwNTEzMDUyOTA0WhcNMjUwNTIwMDUyOTA0WjAYMRYwFAYD VQQDEw02ODIyZDhhMC0yMzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOrFxe5QcpHgN625yydubxDxuasX5J0XE0LxfOej0lmVtuoJamwQP317YYGt qgTDnQ0/EGiJcN6gc8x4GRUe9GgoNqEL31rI8h1l1RUMayZiImoxNMAoQbhI/vmv SMPEtB+EXrzgWB9KmaxakEDTXLMwf5b8ourDBBijyUsLY6AlSsB1Z9+i1VWSYHN5 ghRS4aSGbwJ0PIA6EqfpmhdnIxnSPggt0G2TIuVES4p1V2fxHOrUG0GadzrD9WyZ QUQtZkCh07d7BwT7KyuciC6pYmv7En27CRxNSozUwxmUjaR9LjAlAsNv8W6heD3G qoE10bWiQLWrebZhC8kU448uNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDNXSh4 AEX0M/0TTvPHhljHUZLvMB8GA1UdIwQYMBaAFLqF2R0krKnp4DEeVS2/N1l2OmK6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzkxRi81MDgzNUU2ODQ1 NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi91b1haSFNTc3FlbmdNUjVWTGI4M1dYWTZZ cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VvWFpIU1NzcWVuZ01SNVZMYjgzV1hZNllyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzkxRi81MDgzNUU2ODQ1NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi91b1haSFNTc3Fl bmdNUjVWTGI4M1dYWTZZcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA8xnHZT8C7MYyP90JNftse/rxmtE/EenTQjsxSTLcC/yPFcCLqNTQ OyPR9md3OqSReEKcM8WSjd3Eb4vMMzUXQ0zJ1UKPfTA4Y+00ZorLUBnHNOY64OEr Y0NoafgJQ6dNefpeyVmi1AjEiXh0Vl4tkE5c7jtAJ1JcCy6RySEmVgIXbGdusU8O IMoGVEWzH4KxurZ80Rsl62ZCYKECYJ9E4PWae24+jAQranoX8OvP3wrWXYhIp7hz UnxVDZABlc3rL8zHtOsBXfB0SlU9RH8RywTIkSIZoj/b0ZUzaUBTrVarWgBZWTFk aSF3wig0PkHt7u0SVT83BY2EehsO2VAc -----END CERTIFICATE-----Generated at Tue May 13 08:25:46 2025 by rpki-client