$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft File: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft (raw, json) Hash identifier: QakQazje5raxeh6RPyYmEzpTSWOVG7iA15FbpPt3FIE= Subject key identifier: AC:38:D8:25:2B:37:64:B1:1D:35:CD:7B:A7:0F:22:1C:70:F4:2D:A6 Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 Certificate issuer: /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft Manifest number: D4 Signing time: Sun 11 May 2025 04:28:15 +0000 Manifest this update: Sun 11 May 2025 04:28:14 +0000 Manifest next update: Sun 18 May 2025 04:28:14 +0000 Files and hashes: 1: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl (hash: NFmqnGozjLxIqbj0uh5DD3Tu3c3O/vpcYO/mFvrWKi4=) 2: 99244E94FE0211EEB1F40344C4F9AE02.roa (hash: ryfpBDCWcmiRZYqeao/rsVyXOOOGDWQajzrZGBcgq+0=) 3: 03BA6992ED7711EE9998FC11C4F9AE02.roa (hash: NecAjd+CZeOPqXXjjBIs9rEIjFJr1slo8jl+q1zHuq8=) 4: 38556AC6ED7711EEA7B2AF12C4F9AE02.roa (hash: x08O0LKYaX3hn9bkCscla0qFn3NKZcPh8LO75bK0AIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE959, serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Validity Not Before: May 11 04:28:14 2025 GMT Not After : May 18 04:28:14 2025 GMT Subject: CN=6820275f-b835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1c:c5:cd:ad:4f:5c:0f:d1:55:68:d1:9e:46: 6c:6f:1c:30:62:e4:78:46:d0:41:99:e5:4c:b8:39: a7:fb:1f:95:80:6b:e3:dc:88:78:ec:63:c1:9a:02: c1:da:89:96:67:59:f0:ea:98:3e:03:30:91:f3:1e: c8:f6:60:eb:cd:f7:96:9b:8f:40:0a:df:e7:04:e5: 2f:32:93:50:b8:6c:0e:2f:2b:cb:b3:d3:4a:cb:6f: 79:04:2c:b5:9a:a6:ac:19:ac:02:71:a0:6b:8b:f9: 1b:49:c4:9d:1f:b4:c0:62:71:6d:65:15:f8:71:79: 0f:78:3c:51:0b:59:a6:63:27:58:01:08:da:bd:3d: c7:51:13:d2:17:f8:62:c3:72:a4:c1:64:b6:85:96: 09:e7:2d:27:a2:63:c9:14:37:74:98:ab:50:cf:e7: 52:e6:29:35:64:2b:a5:66:bc:e4:a1:89:91:fd:fe: 42:3d:34:0d:f1:9a:10:1e:46:90:36:a5:71:23:87: 83:b9:14:d4:1f:c2:a9:8c:d8:16:9b:d4:df:d8:cb: f2:2d:3b:5c:29:2a:88:f1:92:05:0f:8a:2f:ed:7b: 32:04:86:e4:4b:ed:f1:9f:e6:6e:46:27:33:15:84: 30:b6:c5:dc:86:a3:9c:50:18:ad:aa:28:47:4a:93: fd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:38:D8:25:2B:37:64:B1:1D:35:CD:7B:A7:0F:22:1C:70:F4:2D:A6 X509v3 Authority Key Identifier: keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:96:16:d9:b5:2b:61:79:4e:f2:68:a1:eb:10:94:d5:97:2c: 08:f2:80:b2:b0:e2:58:91:c3:5d:78:91:3a:3a:43:f3:36:00: ac:5b:cd:e9:1c:ed:de:94:f2:b7:a9:4d:19:78:14:f3:62:44: 8c:04:d0:4f:18:be:57:8f:20:38:80:ad:ec:dd:e4:54:77:70: 68:6d:45:9c:f1:ee:74:2a:d1:03:ec:97:d5:e4:2c:49:59:13: 10:f3:ba:6b:2f:be:1c:c7:75:74:2a:0d:99:fe:3e:72:3e:3c: fd:1b:95:8a:72:24:e4:02:27:58:c2:92:3a:6f:6c:73:95:3d: 40:cf:be:70:81:a4:df:c5:49:b4:7d:37:98:78:62:f9:59:2e: 0a:c8:8b:4f:38:2d:db:a4:2c:bc:3f:8a:a3:06:4a:9e:16:de: e7:ac:55:f6:21:05:01:e7:2e:6c:91:e9:57:53:e4:16:e4:1f: 52:87:12:d4:1f:ca:3c:03:cf:92:8d:e3:f0:c4:54:8d:50:88: de:6c:90:24:22:19:9c:ca:15:dd:ab:77:69:81:e8:7e:f6:b0: 4d:06:00:61:86:20:68:20:93:1a:59:4d:a5:5d:f4:e6:03:9c: ca:4c:d7:2f:10:79:52:cf:89:f4:7e:71:52:46:7c:da:89:98: 68:ff:a3:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NTkxMTAvBgNVBAUTKEQ2RUMyMkE3M0E1OUQyQUE5NTU5OTc0NzAyNzlDNjYy RDExMDg4RjIwHhcNMjUwNTExMDQyODE0WhcNMjUwNTE4MDQyODE0WjAYMRYwFAYD VQQDEw02ODIwMjc1Zi1iODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBzFza1PXA/RVWjRnkZsbxwwYuR4RtBBmeVMuDmn+x+VgGvj3Ih47GPBmgLB 2omWZ1nw6pg+AzCR8x7I9mDrzfeWm49ACt/nBOUvMpNQuGwOLyvLs9NKy295BCy1 mqasGawCcaBri/kbScSdH7TAYnFtZRX4cXkPeDxRC1mmYydYAQjavT3HURPSF/hi w3KkwWS2hZYJ5y0nomPJFDd0mKtQz+dS5ik1ZCulZrzkoYmR/f5CPTQN8ZoQHkaQ NqVxI4eDuRTUH8KpjNgWm9Tf2MvyLTtcKSqI8ZIFD4ov7XsyBIbkS+3xn+ZuRicz FYQwtsXchqOcUBitqihHSpP9MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKw42CUr N2SxHTXNe6cPIhxw9C2mMB8GA1UdIwQYMBaAFNbsIqc6WdKqlVmXRwJ5xmLREIjy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk1OS9BQTRDNzdFQ0VE NzYxMUVFQUQ4NzFBMTFDNEY5QUUwMi8xdXdpcHpwWjBxcVZXWmRIQW5uR1l0RVFp UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF1d2lwenBaMHFxVldaZEhBbm5HWXRFUWlQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTk1OS9BQTRDNzdFQ0VENzYxMUVFQUQ4NzFBMTFDNEY5QUUwMi8xdXdpcHpwWjBx cVZXWmRIQW5uR1l0RVFpUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtlhbZtStheU7yaKHrEJTVlywI8oCysOJYkcNdeJE6OkPzNgCsW83p HO3elPK3qU0ZeBTzYkSMBNBPGL5XjyA4gK3s3eRUd3BobUWc8e50KtED7JfV5CxJ WRMQ87prL74cx3V0Kg2Z/j5yPjz9G5WKciTkAidYwpI6b2xzlT1Az75wgaTfxUm0 fTeYeGL5WS4KyItPOC3bpCy8P4qjBkqeFt7nrFX2IQUB5y5skelXU+QW5B9ShxLU H8o8A8+SjePwxFSNUIjebJAkIhmcyhXdq3dpgeh+9rBNBgBhhiBoIJMaWU2lXfTm A5zKTNcvEHlSz4n0fnFSRnzaiZho/6Py -----END CERTIFICATE-----Generated at Mon May 12 16:12:09 2025 by rpki-client