$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft File: U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json) Hash identifier: fpQzqeUOPWPVXRt9ME5xQLQ5uBOdxEUD3Na8yUhvZoM= Subject key identifier: 22:0F:22:A0:F2:11:26:D1:0D:19:EE:4E:B5:1A:53:38:4A:55:AD:04 Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF Certificate issuer: /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Certificate serial: 0D35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft Manifest number: 0CDF Signing time: Mon 12 May 2025 18:02:40 +0000 Manifest this update: Mon 12 May 2025 18:02:40 +0000 Manifest next update: Mon 19 May 2025 18:02:40 +0000 Files and hashes: 1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: R7xYS8b2aEbxx5DJxcJj150+KeMdVYiu+QQu82EKet0=) 2: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: uFc9CX8gCqYE3ybkkqYy7RyIDr1v8VpIQJv28YrAC7o=) 3: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: yXlaLhbx5YRuGCOCxZS+UVUBHLhciPfPZJOpJ77jS10=) 4: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: 6pM1TQdNb79+DA6IOYbwXDIQvGxFIYUOEy7bg1GioZ4=) 5: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: KHH4guWZz2QPTGfSHIABOFeNEzmNYAkAEdSlj0Q8gIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3381 (0xd35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Validity Not Before: May 12 18:02:40 2025 GMT Not After : May 19 18:02:40 2025 GMT Subject: CN=682237c0-56c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8e:98:19:c7:b2:40:ef:05:f8:e8:31:03:00: 72:e2:d0:a6:09:3e:05:8a:2f:0e:d7:c9:79:ee:2e: 99:5e:0d:f8:cf:2e:4a:07:92:5b:3d:d9:25:26:16: 24:c0:dd:92:d5:ae:6c:cc:24:bc:ba:52:c8:8f:18: 96:ae:2b:fe:65:fe:e3:19:f7:fc:6c:05:34:73:43: 6b:f6:ae:7f:67:d2:40:06:b7:f3:6d:6a:25:b1:14: 72:d3:9d:2a:2a:ad:5c:32:83:8e:1c:a9:61:5e:d4: 66:91:ab:8a:e9:11:dd:b5:67:07:6f:33:ea:ab:46: cb:16:49:6f:f1:22:32:bb:3c:1d:33:2a:b6:07:d3: 76:36:77:dd:73:7f:92:df:9b:c2:52:45:f2:f7:53: 8b:b3:1a:a6:59:82:d6:c2:7a:57:c2:60:f3:eb:3b: 78:15:e8:4f:d8:2b:b5:3d:16:23:01:18:dc:fe:49: 16:95:c7:fd:66:dd:95:58:08:bb:c6:e2:ec:11:99: 11:a3:cb:a7:17:7f:68:52:07:80:6e:7f:bf:e3:cb: 16:38:5d:31:e2:bd:f5:cb:04:90:9e:ff:16:e9:01: 99:6d:d6:46:d7:68:05:19:86:c0:6d:d6:03:1d:e3: cd:88:70:a1:2c:8d:1b:fa:a5:6d:0a:0a:c9:96:75: 9f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0F:22:A0:F2:11:26:D1:0D:19:EE:4E:B5:1A:53:38:4A:55:AD:04 X509v3 Authority Key Identifier: keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:14:f0:92:03:15:ba:f0:76:30:29:5b:b3:b8:21:0a:d3:d8: 9f:b5:69:b7:1a:be:14:74:4d:3b:b8:2f:52:b8:8f:2b:63:99: 85:c0:36:e5:4f:8f:67:93:06:d3:5f:4d:c1:60:b4:83:81:36: 6f:77:4f:49:4b:9f:f5:17:1e:d8:d2:77:1d:25:33:bf:14:62: c6:7e:45:d0:ed:e9:83:04:59:81:b1:36:46:70:96:ba:d0:21: 92:11:90:ad:f2:49:d5:57:a2:10:d7:0c:48:1b:2b:d2:d4:1f: 05:29:27:14:b4:a5:c5:f9:05:9c:4c:4f:eb:c7:15:f5:22:e3: 5a:7c:83:4b:b8:b7:f5:e7:c7:3d:95:fb:38:b2:17:51:42:4d: 51:fa:2f:f3:7f:e8:25:c3:a1:53:c4:d7:be:9f:0d:f9:b6:20: 8c:fe:79:09:5b:e6:1c:bb:af:40:60:56:b7:fb:6c:be:ae:55: d7:b8:a9:2c:98:e4:d0:ae:bf:78:50:1e:a3:6b:d1:0e:fc:76: 0d:4f:a3:2d:86:b9:97:49:9e:6d:8b:91:b7:b7:12:a9:5a:7e: db:6b:c1:e8:df:1d:8d:26:10:57:28:6d:58:fb:98:60:a2:f1: aa:5d:a3:63:19:8d:8f:00:83:46:b5:65:b4:07:a8:5a:f8:f5: d0:f0:6f:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4NUMxMTAvBgNVBAUTKDUzNzRDNkU3NUYxODYwNTI0NTVBMkQ4REE1MjkyRkVG MDA5Q0M5QUYwHhcNMjUwNTEyMTgwMjQwWhcNMjUwNTE5MTgwMjQwWjAYMRYwFAYD VQQDEw02ODIyMzdjMC01NmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmo6YGceyQO8F+OgxAwBy4tCmCT4Fii8O18l57i6ZXg34zy5KB5JbPdklJhYk wN2S1a5szCS8ulLIjxiWriv+Zf7jGff8bAU0c0Nr9q5/Z9JABrfzbWolsRRy050q Kq1cMoOOHKlhXtRmkauK6RHdtWcHbzPqq0bLFklv8SIyuzwdMyq2B9N2Nnfdc3+S 35vCUkXy91OLsxqmWYLWwnpXwmDz6zt4FehP2Cu1PRYjARjc/kkWlcf9Zt2VWAi7 xuLsEZkRo8unF39oUgeAbn+/48sWOF0x4r31ywSQnv8W6QGZbdZG12gFGYbAbdYD HePNiHChLI0b+qVtCgrJlnWfmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIPIqDy ESbRDRnuTrUaUzhKVa0EMB8GA1UdIwQYMBaAFFN0xudfGGBSRVotjaUpL+8AnMmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODg1Qy81QzE5Rjg0MkYy NjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlGSkZXaTJOcFNrdjd3Q2N5 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UzVEc1MThZWUZKRldpMk5wU2t2N3dDY3lhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODg1Qy81QzE5Rjg0MkYyNjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlG SkZXaTJOcFNrdjd3Q2N5YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5FPCSAxW68HYwKVuzuCEK09iftWm3Gr4UdE07uC9SuI8rY5mFwDbl T49nkwbTX03BYLSDgTZvd09JS5/1Fx7Y0ncdJTO/FGLGfkXQ7emDBFmBsTZGcJa6 0CGSEZCt8knVV6IQ1wxIGyvS1B8FKScUtKXF+QWcTE/rxxX1IuNafINLuLf158c9 lfs4shdRQk1R+i/zf+glw6FTxNe+nw35tiCM/nkJW+Ycu69AYFa3+2y+rlXXuKks mOTQrr94UB6ja9EO/HYNT6MthrmXSZ5ti5G3txKpWn7ba8Ho3x2NJhBXKG1Y+5hg ovGqXaNjGY2PAINGtWW0B6ha+PXQ8G80 -----END CERTIFICATE-----Generated at Tue May 13 01:45:56 2025 by rpki-client