$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft File: rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft (raw, json) Hash identifier: eyOiR2Yoqqz8bzCCAgnUXVJrcWDRmQkztvjo5xIJgZ8= Subject key identifier: CF:F2:7E:DF:59:7B:4C:84:A1:F6:25:39:1A:4A:79:3B:7E:F0:EC:A0 Authority key identifier: AD:41:FB:82:7F:93:10:4B:89:FA:6F:A7:85:F2:11:50:BE:6F:97:9A Certificate issuer: /CN=A91B5BD4/serialNumber=AD41FB827F93104B89FA6FA785F21150BE6F979A Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft Manifest number: 01CA Signing time: Sat 03 May 2025 02:26:15 +0000 Manifest this update: Sat 03 May 2025 02:26:14 +0000 Manifest next update: Sat 10 May 2025 02:26:14 +0000 Files and hashes: 1: rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl (hash: XWiMLOke/XqcT1ROUchqRVMqBWJTcmWK6hvE1DFwE9g=) 2: C248DFA26DBB11EDB3635D28C4F9AE02.roa (hash: gQzK7hVZPrZ6aKsXhdiMNjPzCoQYQhoW/DlG0FlsTCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 02:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5BD4, serialNumber=AD41FB827F93104B89FA6FA785F21150BE6F979A Validity Not Before: May 3 02:26:14 2025 GMT Not After : May 10 02:26:14 2025 GMT Subject: CN=68157ec6-d197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:75:1b:7f:b0:e3:58:d3:12:27:2b:83:76:19: 2b:a6:5d:3d:9c:dc:47:d2:14:9a:8d:c9:8c:25:88: 18:a8:77:8c:15:bb:c4:ad:83:16:1f:61:ab:5f:bc: 91:97:f7:2e:3e:47:ff:e4:8e:57:ed:57:cf:c1:5e: 08:07:43:44:66:e2:f7:8b:56:d7:b5:09:e2:ed:a4: f0:b4:a2:92:f3:4a:a2:0a:75:43:73:5f:ce:f1:7a: dd:82:dd:72:c6:e9:5e:61:44:cb:3e:ae:c5:03:44: d9:f5:fc:0f:bf:2a:5d:b8:b8:8a:e9:90:dd:fe:1a: cf:c5:34:90:28:d9:e1:20:90:b6:5d:5e:fd:d6:e6: 07:fa:59:b4:0a:f4:fd:97:f8:db:89:65:63:75:d9: 46:23:9e:f1:59:73:3f:78:46:44:09:24:1f:7a:4b: 3a:06:2d:7c:85:c5:9f:3a:12:59:61:c9:f3:63:68: 07:13:b8:39:b9:74:53:2b:8b:07:62:9f:2c:39:17: d6:88:df:f2:19:9c:c5:a0:c7:2d:9a:d8:44:e5:d2: db:b5:23:99:06:b4:d4:63:82:8f:21:37:c6:0f:52: 85:92:0e:7a:98:be:a0:47:8c:bf:d5:b2:60:a8:42: cd:9d:06:7d:29:c6:f3:b0:73:5f:e6:4a:02:aa:5b: 5a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F2:7E:DF:59:7B:4C:84:A1:F6:25:39:1A:4A:79:3B:7E:F0:EC:A0 X509v3 Authority Key Identifier: keyid:AD:41:FB:82:7F:93:10:4B:89:FA:6F:A7:85:F2:11:50:BE:6F:97:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:bd:36:69:df:47:37:f3:ef:68:ac:98:99:a7:73:60:0e:1e: 4d:dd:22:15:bd:4d:f1:9c:e9:1d:a8:9e:82:66:b9:ce:06:9f: 21:6d:bb:0c:8f:79:17:69:fa:1a:b1:c7:f9:95:fa:80:0a:b7: 9f:3b:43:4a:80:56:7d:9e:b3:86:25:62:16:32:fe:33:0e:09: ee:50:1d:b5:85:51:b6:33:57:3d:a4:32:0c:29:2c:4b:5e:9c: 35:cf:a6:76:74:d4:1b:60:0d:38:89:01:65:b1:56:91:bd:f2: 95:b1:a8:57:ff:db:37:3e:e2:48:85:d9:19:66:b6:e0:0b:bb: 7e:6a:a7:0e:76:73:e3:70:2a:0c:d3:18:ea:1c:c2:ae:79:57: 6f:be:b5:82:9f:26:5a:37:01:0a:8b:92:88:64:28:96:16:5f: 83:5f:31:d3:f9:0e:ca:f7:46:68:d7:55:18:90:cc:6e:a0:ac: 4e:c2:b4:60:d9:07:63:90:92:a9:a0:0c:ef:93:ac:55:e7:91: 1b:ee:6e:96:44:35:89:1a:65:c0:f8:b8:94:c9:9e:8b:96:9d: 7b:32:e3:41:ea:f2:e4:76:2b:28:43:a2:09:c6:f6:0b:ed:95: 79:93:95:04:92:0c:e9:d5:6c:36:b3:7f:f2:5d:a5:32:17:65: 0a:90:ff:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVCRDQxMTAvBgNVBAUTKEFENDFGQjgyN0Y5MzEwNEI4OUZBNkZBNzg1RjIxMTUw QkU2Rjk3OUEwHhcNMjUwNTAzMDIyNjE0WhcNMjUwNTEwMDIyNjE0WjAYMRYwFAYD VQQDEw02ODE1N2VjNi1kMTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnUbf7DjWNMSJyuDdhkrpl09nNxH0hSajcmMJYgYqHeMFbvErYMWH2GrX7yR l/cuPkf/5I5X7VfPwV4IB0NEZuL3i1bXtQni7aTwtKKS80qiCnVDc1/O8Xrdgt1y xuleYUTLPq7FA0TZ9fwPvypduLiK6ZDd/hrPxTSQKNnhIJC2XV791uYH+lm0CvT9 l/jbiWVjddlGI57xWXM/eEZECSQfeks6Bi18hcWfOhJZYcnzY2gHE7g5uXRTK4sH Yp8sORfWiN/yGZzFoMctmthE5dLbtSOZBrTUY4KPITfGD1KFkg56mL6gR4y/1bJg qELNnQZ9KcbzsHNf5koCqltanwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/yft9Z e0yEofYlORpKeTt+8OygMB8GA1UdIwQYMBaAFK1B+4J/kxBLifpvp4XyEVC+b5ea MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUJENC8wOEFENkQyMjZE QjgxMUVEODgzM0ZBMERDNEY5QUUwMi9yVUg3Z24tVEVFdUotbS1uaGZJUlVMNXZs NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JVSDdnbi1URUV1Si1tLW5oZklSVUw1dmw1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUJENC8wOEFENkQyMjZEQjgxMUVEODgzM0ZBMERDNEY5QUUwMi9yVUg3Z24tVEVF dUotbS1uaGZJUlVMNXZsNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbvTZp30c38+9orJiZp3NgDh5N3SIVvU3xnOkdqJ6CZrnOBp8hbbsM j3kXafoascf5lfqACrefO0NKgFZ9nrOGJWIWMv4zDgnuUB21hVG2M1c9pDIMKSxL Xpw1z6Z2dNQbYA04iQFlsVaRvfKVsahX/9s3PuJIhdkZZrbgC7t+aqcOdnPjcCoM 0xjqHMKueVdvvrWCnyZaNwEKi5KIZCiWFl+DXzHT+Q7K90Zo11UYkMxuoKxOwrRg 2QdjkJKpoAzvk6xV55Eb7m6WRDWJGmXA+LiUyZ6Llp17MuNB6vLkdisoQ6IJxvYL 7ZV5k5UEkgzp1Ww2s3/yXaUyF2UKkP/d -----END CERTIFICATE-----Generated at Mon May 5 02:17:09 2025 by rpki-client