$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft File: uOVJaYlT9l5x-4S20zjAisF4Glo.mft (raw, json) Hash identifier: Jun0X8HywpkGZAge+yk1IEgoSpiTZ7n+kmWJB3u9to0= Subject key identifier: 4D:76:61:3A:C6:03:9E:4B:79:FD:D6:A5:6A:57:BB:AE:6B:FE:C8:DA Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A Certificate issuer: /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Certificate serial: 098A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft Manifest number: 0974 Signing time: Wed 14 May 2025 20:17:55 +0000 Manifest this update: Wed 14 May 2025 20:17:54 +0000 Manifest next update: Wed 21 May 2025 20:17:54 +0000 Files and hashes: 1: uOVJaYlT9l5x-4S20zjAisF4Glo.crl (hash: XP/LQSBea7VIB+3mulUKtF5Bfb33qKKokS2ybNjVPL8=) 2: 4B31BDC4B76911ED8A503224C4F9AE02.roa (hash: sdPPzpmeuTxfNXX+Z4y10OZ5FdPq847kLyXykC/LAkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2442 (0x98a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5C70, serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Validity Not Before: May 14 20:17:54 2025 GMT Not After : May 21 20:17:54 2025 GMT Subject: CN=6824fa73-112c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:34:88:d5:b1:cf:08:b1:7b:52:55:c4:08:bf: da:3e:8f:77:79:ff:b7:b5:ac:9b:7e:d7:a9:ef:62: bc:cf:3c:b1:36:a1:04:24:06:38:02:aa:81:6e:50: 9c:5f:71:b1:64:7d:25:0d:ce:94:a7:5f:95:85:5f: 17:c2:8f:a6:c9:ee:6c:6e:29:64:7d:38:40:c3:15: 39:58:06:1a:68:70:f8:e1:27:86:ee:2f:a9:3e:cf: 9e:e0:8b:67:d6:40:59:5f:7a:64:42:e7:50:08:0e: 5c:e5:f9:91:63:00:50:39:2a:56:52:ce:b9:bd:db: 8e:e1:6c:91:ca:a3:ff:d0:43:94:63:56:fe:15:de: a9:29:91:47:90:a7:03:c4:24:22:7c:85:d2:9d:59: 47:57:08:93:be:fe:e0:d5:e8:9b:5d:04:c2:7b:15: 54:88:fc:6d:05:ad:c2:5a:48:39:f3:4f:a8:ae:80: e6:51:89:ab:03:15:21:4c:7e:e4:76:ab:aa:1d:b0: 9e:21:58:dc:6f:74:d1:d9:74:30:72:a5:75:3f:a5: ee:f1:c8:8b:70:21:be:3e:06:4e:53:6d:c0:95:77: b5:4c:7a:b1:a5:0d:53:9b:e5:2d:2b:63:f9:81:17: 3a:5e:94:56:55:4e:89:b6:6a:9e:82:6c:6c:74:3e: ff:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:76:61:3A:C6:03:9E:4B:79:FD:D6:A5:6A:57:BB:AE:6B:FE:C8:DA X509v3 Authority Key Identifier: keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:77:c8:15:87:85:88:1e:86:b1:87:41:c5:61:4e:a8:5e:ca: 59:51:9f:ba:eb:08:c0:2f:18:bf:10:ee:cf:33:44:1d:32:45: cb:27:f2:2f:09:c2:a8:9b:83:a5:2c:db:52:e0:3a:28:b1:1e: 5c:99:60:82:e0:64:67:6f:aa:5b:cf:e3:62:c1:ca:10:13:ed: 52:06:5a:95:3d:a2:3f:00:26:c3:d0:33:0f:cd:5f:97:44:0a: 28:99:63:41:31:16:9b:a1:51:37:53:c1:91:b4:eb:53:3e:e8: 4f:5b:28:06:ac:65:fb:dc:73:04:c1:f6:87:42:75:36:af:dc: 5f:da:84:aa:06:35:f4:f6:7b:33:8a:46:ad:b3:a0:f1:2f:08: 90:13:73:64:c2:e1:50:6c:ac:07:e6:76:1c:a7:cd:98:52:32: ab:6d:22:90:24:4c:76:c4:62:47:94:7a:9b:d4:e8:09:b0:a4: ec:e3:82:67:1b:c9:e9:19:bc:4c:a2:22:c4:b3:78:d8:4a:41: 1e:9f:14:30:50:56:ee:91:3f:72:ed:9b:a5:6e:81:39:2d:67: 1f:d2:0f:9c:4c:4a:a4:3c:ac:40:22:94:fe:b6:e6:97:93:0e: f6:6c:e5:d3:8f:13:5c:00:2f:eb:38:66:7a:31:85:3e:9c:4c: 32:2a:c4:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDNzAxMTAvBgNVBAUTKEI4RTU0OTY5ODk1M0Y2NUU3MUZCODRCNkQzMzhDMDhB QzE3ODFBNUEwHhcNMjUwNTE0MjAxNzU0WhcNMjUwNTIxMjAxNzU0WjAYMRYwFAYD VQQDEw02ODI0ZmE3My0xMTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zSI1bHPCLF7UlXECL/aPo93ef+3taybftep72K8zzyxNqEEJAY4AqqBblCc X3GxZH0lDc6Up1+VhV8Xwo+mye5sbilkfThAwxU5WAYaaHD44SeG7i+pPs+e4Itn 1kBZX3pkQudQCA5c5fmRYwBQOSpWUs65vduO4WyRyqP/0EOUY1b+Fd6pKZFHkKcD xCQifIXSnVlHVwiTvv7g1eibXQTCexVUiPxtBa3CWkg580+oroDmUYmrAxUhTH7k dquqHbCeIVjcb3TR2XQwcqV1P6Xu8ciLcCG+PgZOU23AlXe1THqxpQ1Tm+UtK2P5 gRc6XpRWVU6JtmqegmxsdD7/8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE12YTrG A55Lef3WpWpXu65r/sjaMB8GA1UdIwQYMBaAFLjlSWmJU/ZecfuEttM4wIrBeBpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUM3MC8yM0EwQUMwNjkx MDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDlsNXgtNFMyMHpqQWlzRjRH bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPVkphWWxUOWw1eC00UzIwempBaXNGNEdsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUM3MC8yM0EwQUMwNjkxMDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDls NXgtNFMyMHpqQWlzRjRHbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKd8gVh4WIHoaxh0HFYU6oXspZUZ+66wjALxi/EO7PM0QdMkXLJ/Iv CcKom4OlLNtS4DoosR5cmWCC4GRnb6pbz+NiwcoQE+1SBlqVPaI/ACbD0DMPzV+X RAoomWNBMRaboVE3U8GRtOtTPuhPWygGrGX73HMEwfaHQnU2r9xf2oSqBjX09nsz ikats6DxLwiQE3NkwuFQbKwH5nYcp82YUjKrbSKQJEx2xGJHlHqb1OgJsKTs44Jn G8npGbxMoiLEs3jYSkEenxQwUFbukT9y7ZulboE5LWcf0g+cTEqkPKxAIpT+tuaX kw72bOXTjxNcAC/rOGZ6MYU+nEwyKsTn -----END CERTIFICATE-----Generated at Fri May 16 15:02:00 2025 by rpki-client