$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft File: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json) Hash identifier: c9dqN0DRVeKgSEV8WC3ql2YFCXmvhsOV3tyIg+dbx1s= Subject key identifier: 94:AD:76:12:78:2D:0F:D4:5E:B8:68:33:CA:E2:FD:6F:0B:6F:B4:58 Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B Certificate issuer: /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B Certificate serial: 0358 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft Manifest number: 0349 Signing time: Tue 13 May 2025 00:50:50 +0000 Manifest this update: Tue 13 May 2025 00:50:50 +0000 Manifest next update: Tue 20 May 2025 00:50:50 +0000 Files and hashes: 1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: fK0XmwvAEfpEbAhe6qXheHQSPZuOgGmTeLLgYRT9vRI=) 2: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: F6jPBh9YlNU7RVZYywXLeNlWgnFuc8x8f5OICDCdyXk=) 3: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: 2CbWH78pD8qfhUqfDIT0bY8YAkS+SCmh9qliGFNOvyU=) 4: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: vsntEPAhq1q52SAuxi87DOT8T6ZFM5p3hlzlxYIzgx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 856 (0x358) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B Validity Not Before: May 13 00:50:50 2025 GMT Not After : May 20 00:50:50 2025 GMT Subject: CN=6822976a-8dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d4:3e:a8:3b:a8:d3:ec:ec:f0:2c:20:cc:dd: 9d:af:94:68:d8:01:f3:75:25:b0:58:89:bf:93:7f: 61:bf:23:79:3a:4a:7f:be:28:e2:e4:ed:1a:32:91: 5a:e0:5a:82:17:9d:e5:79:d1:67:9f:48:f6:68:1a: 33:4d:01:24:1d:6d:a8:a3:a1:dc:4b:03:22:6b:f8: 3e:1e:d0:62:c2:5a:78:df:09:4b:a5:8c:93:6b:80: fb:62:de:68:ce:4b:1c:bb:21:80:04:77:aa:43:b4: f1:91:3b:d9:10:6d:be:31:0b:4a:a0:80:c6:82:33: e5:13:a2:aa:81:f7:a3:e7:ed:ab:8f:54:f6:5e:1b: 92:e5:a7:bf:5c:d0:7f:d0:de:a7:9a:9c:00:1a:b0: 26:12:5a:9d:d7:dd:ce:0a:7d:bc:10:18:c5:6e:e3: 8a:a7:55:24:2d:a7:c3:05:a9:e6:d2:fd:2b:71:95: c1:c3:24:12:e8:cd:30:8c:0f:ef:e3:07:9a:a1:9a: a6:38:9f:4d:c2:52:d4:d8:39:1c:70:51:7a:4f:43: 72:98:e5:6f:40:a9:51:b5:47:a2:e5:51:5c:bc:b6: 95:22:e4:b8:d7:20:fb:35:41:c2:e1:42:ca:33:73: 56:ba:34:d8:84:28:88:30:6c:41:9b:4d:4e:59:4b: 1f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AD:76:12:78:2D:0F:D4:5E:B8:68:33:CA:E2:FD:6F:0B:6F:B4:58 X509v3 Authority Key Identifier: keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:c1:63:27:af:80:d3:8f:80:c9:5f:18:78:f9:57:bc:9d:e7: 57:f6:19:f7:4e:d4:50:16:0f:8e:3c:46:68:8d:2b:82:8e:92: f7:d1:cf:fa:eb:a1:b0:15:d2:96:2c:ed:0a:1c:3e:8c:9f:20: 06:84:5c:57:cf:3c:da:7a:72:f1:71:f3:df:4a:a4:18:ec:60: 79:a3:e3:69:33:63:b8:81:ea:0e:88:76:b9:8a:9e:51:3b:6d: bb:e4:a7:2f:d8:60:1b:d5:97:44:0e:96:f2:22:09:05:d0:1f: 2d:fd:80:90:72:18:38:c8:17:38:5d:72:af:45:2e:f0:34:1f: 3b:35:d5:3e:1b:16:c1:a0:72:a4:8c:09:cb:41:b8:88:40:22: dc:62:45:c4:1f:f5:54:03:40:1c:90:1e:a3:11:04:54:50:e7: 14:d1:f5:0f:65:d6:d6:cf:38:3e:0d:90:17:b1:de:c0:40:66: af:4d:0c:5f:a1:87:db:db:d3:63:6c:99:ac:f6:1d:c1:c4:ee: 53:b7:1c:d5:a5:fc:c1:e9:08:0b:38:15:a2:48:23:ec:92:f9: 59:ec:9c:58:d3:a5:c9:ad:a7:9d:87:6a:16:ac:d0:18:57:b0: 50:53:e3:76:b1:0f:8c:1a:17:32:a5:ae:39:db:3a:13:e1:2a: 4c:fd:ba:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREQzcxMTAvBgNVBAUTKEI4ODkxMTE3ODA2OEQ1NzVERkRERjg0OTQwQ0FCRUFG NDUxQzhDMkIwHhcNMjUwNTEzMDA1MDUwWhcNMjUwNTIwMDA1MDUwWjAYMRYwFAYD VQQDEw02ODIyOTc2YS04ZGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9Q+qDuo0+zs8CwgzN2dr5Ro2AHzdSWwWIm/k39hvyN5Okp/viji5O0aMpFa 4FqCF53ledFnn0j2aBozTQEkHW2oo6HcSwMia/g+HtBiwlp43wlLpYyTa4D7Yt5o zkscuyGABHeqQ7TxkTvZEG2+MQtKoIDGgjPlE6Kqgfej5+2rj1T2XhuS5ae/XNB/ 0N6nmpwAGrAmElqd193OCn28EBjFbuOKp1UkLafDBanm0v0rcZXBwyQS6M0wjA/v 4weaoZqmOJ9NwlLU2DkccFF6T0NymOVvQKlRtUei5VFcvLaVIuS41yD7NUHC4ULK M3NWujTYhCiIMGxBm01OWUsfJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJStdhJ4 LQ/UXrhoM8ri/W8Lb7RYMB8GA1UdIwQYMBaAFLiJEReAaNV13934SUDKvq9FHIwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNERDNy9GM0YxMDIwRUJC MTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFYWGYzZmhKUU1xLXIwVWNq Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VJa1JGNEJvMVhYZjNmaEpRTXEtcjBVY2pDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NERDNy9GM0YxMDIwRUJCMTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFY WGYzZmhKUU1xLXIwVWNqQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATwWMnr4DTj4DJXxh4+Ve8nedX9hn3TtRQFg+OPEZojSuCjpL30c/6 66GwFdKWLO0KHD6MnyAGhFxXzzzaenLxcfPfSqQY7GB5o+NpM2O4geoOiHa5ip5R O2275Kcv2GAb1ZdEDpbyIgkF0B8t/YCQchg4yBc4XXKvRS7wNB87NdU+GxbBoHKk jAnLQbiIQCLcYkXEH/VUA0AckB6jEQRUUOcU0fUPZdbWzzg+DZAXsd7AQGavTQxf oYfb29NjbJms9h3BxO5TtxzVpfzB6QgLOBWiSCPskvlZ7JxY06XJraedh2oWrNAY V7BQU+N2sQ+MGhcypa452zoT4SpM/bq+ -----END CERTIFICATE-----Generated at Wed May 14 22:50:22 2025 by rpki-client