$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft File: UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft (raw, json) Hash identifier: zVcZj9MtXieQZuLc6DdrgAyrn2FBSl8d+8efI34i0Kg= Subject key identifier: 44:C9:A5:03:D8:AE:43:D6:77:B6:13:4C:BE:D8:45:6F:A2:36:65:AE Authority key identifier: 51:E0:94:C0:57:BE:DA:70:A4:C2:B2:00:91:92:8D:E7:26:4B:46:C5 Certificate issuer: /CN=A91BA8F5/serialNumber=51E094C057BEDA70A4C2B20091928DE7264B46C5 Certificate serial: 0381 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UeCUwFe-2nCkwrIAkZKN5yZLRsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft Manifest number: 037D Signing time: Sun 11 May 2025 00:27:19 +0000 Manifest this update: Sun 11 May 2025 00:27:19 +0000 Manifest next update: Sun 18 May 2025 00:27:19 +0000 Files and hashes: 1: UeCUwFe-2nCkwrIAkZKN5yZLRsU.crl (hash: EHb0zaxmOO4oIdbF04k2W0fyig9VvLnHVbBh9eCMwu8=) 2: 713001A0A35811EC88C42869C4F9AE02.roa (hash: DNm/cKBnOwMLtVf8PNiul90A2LNN5D/9x28AaUpSyDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.crl rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UeCUwFe-2nCkwrIAkZKN5yZLRsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 897 (0x381) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA8F5, serialNumber=51E094C057BEDA70A4C2B20091928DE7264B46C5 Validity Not Before: May 11 00:27:19 2025 GMT Not After : May 18 00:27:19 2025 GMT Subject: CN=681feee7-61d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e7:9a:f0:ae:50:69:d4:df:d4:99:58:44:e5: 1d:e4:c1:9c:df:31:b9:eb:27:ba:90:09:4d:b5:14: 4d:56:5d:57:e5:88:05:1d:67:d6:96:1f:db:2e:56: 36:c7:78:41:13:d3:8a:56:ea:62:9e:5d:e2:ba:f1: 6f:4f:9a:1c:bc:f8:40:5d:7c:44:45:d2:9f:b7:68: 8c:6b:c8:11:80:17:5b:53:2f:03:5e:05:65:b2:78: 80:4d:56:69:29:8e:dd:9e:a8:cd:a1:15:69:1f:fe: e5:1d:70:d8:f3:2f:53:64:0d:b9:fb:60:23:89:b0: f1:0b:84:c4:00:97:c6:96:84:b6:8a:64:5f:53:88: 13:99:bd:81:8d:c2:50:fb:b8:56:e8:07:a2:db:1d: 43:2b:3e:c1:a6:c9:da:f3:69:39:11:6d:1e:35:65: 1c:d1:12:6c:3b:89:c7:f8:74:0e:c4:1e:0e:7c:a3: 47:99:aa:bb:e5:82:3b:6d:1c:97:5e:dd:96:83:53: 6b:84:86:ad:99:bd:e6:a0:35:fc:a0:5c:f7:d4:d1: 7b:65:a7:87:dc:6f:cb:e2:c7:00:c2:9e:8b:5a:51: ac:38:f5:71:69:bd:f1:75:82:a3:dd:89:8b:68:e7: cd:bc:74:80:c7:0b:6d:db:be:0e:cf:e0:01:0e:e5: f8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C9:A5:03:D8:AE:43:D6:77:B6:13:4C:BE:D8:45:6F:A2:36:65:AE X509v3 Authority Key Identifier: keyid:51:E0:94:C0:57:BE:DA:70:A4:C2:B2:00:91:92:8D:E7:26:4B:46:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UeCUwFe-2nCkwrIAkZKN5yZLRsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:86:3d:83:6e:1a:db:5f:5f:df:9e:15:0b:08:c6:0b:04:f8: e9:32:15:e3:40:de:81:28:88:ba:03:85:22:de:67:bd:77:81: 90:44:f8:03:5d:36:74:c9:88:59:7e:69:94:95:4d:d9:fe:1f: 89:37:20:63:70:cd:a6:1e:61:3a:3f:70:a1:fe:59:41:7a:82: 38:24:4c:de:dc:d1:22:04:f6:be:5b:1a:41:9f:0a:f2:9a:53: f3:01:eb:c3:9d:7e:32:d1:c9:fa:74:d6:5e:d4:8e:ba:3b:01: 6d:93:cd:cf:fb:b3:a8:73:81:25:c9:ce:a0:01:04:ea:73:d1: 4a:9b:70:10:97:94:7a:42:7b:17:9d:b4:1c:79:77:ae:e1:e6: 4e:27:f2:a3:15:8f:da:9d:81:63:de:e8:d7:ee:2c:2f:80:4f: 3b:96:15:8e:c5:8f:b6:b9:11:ee:66:46:e3:b9:29:02:1c:f3: 05:2f:75:68:a4:e0:a8:1f:2b:b8:e5:b4:ce:a8:7d:8d:66:4d: fa:a9:6b:61:de:58:62:81:82:bb:cf:ce:90:83:6d:0d:30:3e: 4d:a1:0b:97:08:05:2f:8d:18:24:4e:2c:70:25:f9:b6:4e:b0: cd:3b:4a:fe:08:ef:35:00:f9:67:6d:f3:bc:45:ed:db:e7:c5: 58:4d:3a:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE4RjUxMTAvBgNVBAUTKDUxRTA5NEMwNTdCRURBNzBBNEMyQjIwMDkxOTI4REU3 MjY0QjQ2QzUwHhcNMjUwNTExMDAyNzE5WhcNMjUwNTE4MDAyNzE5WjAYMRYwFAYD VQQDEw02ODFmZWVlNy02MWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eea8K5QadTf1JlYROUd5MGc3zG56ye6kAlNtRRNVl1X5YgFHWfWlh/bLlY2 x3hBE9OKVupinl3iuvFvT5ocvPhAXXxERdKft2iMa8gRgBdbUy8DXgVlsniATVZp KY7dnqjNoRVpH/7lHXDY8y9TZA25+2AjibDxC4TEAJfGloS2imRfU4gTmb2BjcJQ +7hW6Aei2x1DKz7Bpsna82k5EW0eNWUc0RJsO4nH+HQOxB4OfKNHmaq75YI7bRyX Xt2Wg1NrhIatmb3moDX8oFz31NF7ZaeH3G/L4scAwp6LWlGsOPVxab3xdYKj3YmL aOfNvHSAxwtt274Oz+ABDuX4JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETJpQPY rkPWd7YTTL7YRW+iNmWuMB8GA1UdIwQYMBaAFFHglMBXvtpwpMKyAJGSjecmS0bF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQThGNS85NUFBMUVFQ0Ez NTUxMUVDODYxRkUxNjZDNEY5QUUwMi9VZUNVd0ZlLTJuQ2t3cklBa1pLTjV5WkxS c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VlQ1V3RmUtMm5Da3dySUFrWktONXlaTFJzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QThGNS85NUFBMUVFQ0EzNTUxMUVDODYxRkUxNjZDNEY5QUUwMi9VZUNVd0ZlLTJu Q2t3cklBa1pLTjV5WkxSc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCThj2DbhrbX1/fnhULCMYLBPjpMhXjQN6BKIi6A4Ui3me9d4GQRPgD XTZ0yYhZfmmUlU3Z/h+JNyBjcM2mHmE6P3Ch/llBeoI4JEze3NEiBPa+WxpBnwry mlPzAevDnX4y0cn6dNZe1I66OwFtk83P+7Ooc4Elyc6gAQTqc9FKm3AQl5R6QnsX nbQceXeu4eZOJ/KjFY/anYFj3ujX7iwvgE87lhWOxY+2uRHuZkbjuSkCHPMFL3Vo pOCoHyu45bTOqH2NZk36qWth3lhigYK7z86Qg20NMD5NoQuXCAUvjRgkTixwJfm2 TrDNO0r+CO81APlnbfO8Re3b58VYTToV -----END CERTIFICATE-----Generated at Sun May 11 22:23:47 2025 by rpki-client