$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft File: uLRz022lJgglzQu_YvbsGQ00Ahg.mft (raw, json) Hash identifier: KsLi8EBgKRZ93ftDSYehHVjKxTJJ/3S1oyfKp/siB5g= Subject key identifier: DE:19:A0:1F:B1:C3:F8:88:B4:88:2D:0E:22:79:87:D7:79:88:95:46 Authority key identifier: B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18 Certificate issuer: /CN=A91C5D81/serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218 Certificate serial: 348B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft Manifest number: 3485 Signing time: Sat 10 May 2025 14:18:16 +0000 Manifest this update: Sat 10 May 2025 14:18:16 +0000 Manifest next update: Sat 17 May 2025 14:18:16 +0000 Files and hashes: 1: uLRz022lJgglzQu_YvbsGQ00Ahg.crl (hash: 0DOvPPWn+vU4+D7SxlsXF9hgZVbbPL11YBnvgiNuPPM=) 2: 75C18F96305811EB94E3192FC4F9AE02.roa (hash: oI8UmPtI+e/lNHKPjl/mA09y7Gr50NMbgC5wn6SXx2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13451 (0x348b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D81, serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218 Validity Not Before: May 10 14:18:16 2025 GMT Not After : May 17 14:18:16 2025 GMT Subject: CN=681f6028-50d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2a:7e:ee:c3:0b:56:85:dc:b0:13:99:f0:11: 73:5c:ae:b0:52:00:c2:97:df:19:56:64:00:37:34: 69:6c:63:b7:35:c6:d5:eb:cf:00:1b:45:14:30:f9: 61:77:55:29:eb:8c:de:17:eb:32:2c:73:5c:6f:2c: 04:1f:9a:7a:42:d4:23:a9:74:2d:2d:e1:f9:b7:31: 21:be:d6:29:d4:f2:65:38:cb:75:31:c5:a3:a1:a7: 53:19:07:2f:a9:fd:f2:07:12:66:49:f1:98:0c:8e: 48:01:9d:f6:4c:1e:db:61:0f:3d:7a:fc:27:7a:35: dc:25:3e:c8:8e:c4:98:12:af:d7:78:6a:e0:0f:af: ae:1f:55:32:dd:e0:66:a6:36:89:9b:37:cf:8d:dc: 3f:52:85:52:98:6d:96:42:f2:1b:a9:42:8d:4a:7c: e9:3b:af:b9:bc:23:18:ce:fa:e0:46:39:46:d9:b7: e8:e7:03:3a:b5:ab:67:be:7b:4c:31:41:99:59:ad: 0f:3a:d6:a5:0c:df:02:2a:22:af:3e:6d:e3:83:de: fc:d8:f5:48:ed:96:6f:0a:b0:ae:0a:c2:f4:24:0b: e8:93:b9:27:4b:f2:b6:4c:33:d5:50:d7:d5:f3:9a: c9:23:52:d3:d9:68:6f:91:c0:39:d4:9b:55:12:00: 15:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:19:A0:1F:B1:C3:F8:88:B4:88:2D:0E:22:79:87:D7:79:88:95:46 X509v3 Authority Key Identifier: keyid:B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:02:bc:84:83:ce:9a:65:19:fe:49:82:ef:4a:c6:f8:59:9a: ac:bb:df:9e:bf:3a:d3:9d:ac:79:d8:b4:ab:58:51:60:63:01: ea:31:dc:20:25:05:c9:7b:b9:8b:08:3e:5b:ab:3e:6f:8c:d2: 6b:ee:0d:8b:2f:99:a2:2f:a9:7a:06:93:5a:88:58:e1:a3:32: bb:79:29:64:cb:ae:ba:de:f0:03:2b:0b:8c:2f:2f:8d:c6:ca: f7:10:70:f0:8c:b6:b1:0a:c9:9b:bc:bd:5f:c7:d5:db:0c:e4: 2b:db:1f:0f:b7:6f:24:e0:f0:09:b6:ea:72:f8:50:86:dd:c4: 70:8c:1e:7a:c7:a1:f7:f3:04:0e:a8:56:b4:b5:98:c8:65:e6: 1d:35:f6:df:11:d2:dc:b5:d5:78:43:66:81:42:2f:25:51:18: 2b:8a:fb:ec:af:97:3e:5d:d2:f4:85:52:74:3b:f2:c3:17:87: 1c:46:fe:c2:4a:2b:13:50:69:54:21:a5:d2:51:17:f1:1c:40: 9e:85:5a:ad:d3:64:62:dd:4a:1e:74:01:0a:81:91:0e:c4:96: d4:20:12:1c:a2:23:40:ac:7d:c4:7b:0e:60:75:12:ef:36:2c: 85:ce:be:61:15:97:bb:9f:d0:91:74:01:48:9a:17:25:96:4d: c8:f7:ea:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVEODExMTAvBgNVBAUTKEI4QjQ3M0QzNkRBNTI2MDgyNUNEMEJCRjYyRjZFQzE5 MEQzNDAyMTgwHhcNMjUwNTEwMTQxODE2WhcNMjUwNTE3MTQxODE2WjAYMRYwFAYD VQQDEw02ODFmNjAyOC01MGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSp+7sMLVoXcsBOZ8BFzXK6wUgDCl98ZVmQANzRpbGO3NcbV688AG0UUMPlh d1Up64zeF+syLHNcbywEH5p6QtQjqXQtLeH5tzEhvtYp1PJlOMt1McWjoadTGQcv qf3yBxJmSfGYDI5IAZ32TB7bYQ89evwnejXcJT7IjsSYEq/XeGrgD6+uH1Uy3eBm pjaJmzfPjdw/UoVSmG2WQvIbqUKNSnzpO6+5vCMYzvrgRjlG2bfo5wM6tatnvntM MUGZWa0POtalDN8CKiKvPm3jg9782PVI7ZZvCrCuCsL0JAvok7knS/K2TDPVUNfV 85rJI1LT2WhvkcA51JtVEgAV8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4ZoB+x w/iItIgtDiJ5h9d5iJVGMB8GA1UdIwQYMBaAFLi0c9NtpSYIJc0Lv2L27BkNNAIY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQ4MS80NzA1OUREODFE NkUxMUUyOUI3NkFBQUYwOEIwMkNEMi91TFJ6MDIybEpnZ2x6UXVfWXZic0dRMDBB aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VMUnowMjJsSmdnbHpRdV9ZdmJzR1EwMEFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQ4MS80NzA1OUREODFENkUxMUUyOUI3NkFBQUYwOEIwMkNEMi91TFJ6MDIybEpn Z2x6UXVfWXZic0dRMDBBaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkAryEg86aZRn+SYLvSsb4WZqsu9+evzrTnax52LSrWFFgYwHqMdwg JQXJe7mLCD5bqz5vjNJr7g2LL5miL6l6BpNaiFjhozK7eSlky6663vADKwuMLy+N xsr3EHDwjLaxCsmbvL1fx9XbDOQr2x8Pt28k4PAJtupy+FCG3cRwjB56x6H38wQO qFa0tZjIZeYdNfbfEdLctdV4Q2aBQi8lURgrivvsr5c+XdL0hVJ0O/LDF4ccRv7C SisTUGlUIaXSURfxHECehVqt02Ri3UoedAEKgZEOxJbUIBIcoiNArH3Eew5gdRLv NiyFzr5hFZe7n9CRdAFImhcllk3I9+o8 -----END CERTIFICATE-----Generated at Sun May 11 22:27:06 2025 by rpki-client