$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft File: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft (raw, json) Hash identifier: ZE8H3/n7GgevPlQSzibBcMyXT7pf3nznuvC4dfRO9VM= Subject key identifier: 71:C7:8C:76:9B:47:DA:A8:77:A7:D1:C1:26:F9:B2:0E:63:08:58:EE Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF Certificate issuer: /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Certificate serial: 1888 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft Manifest number: 1882 Signing time: Mon 12 May 2025 15:47:00 +0000 Manifest this update: Mon 12 May 2025 15:47:00 +0000 Manifest next update: Mon 19 May 2025 15:47:00 +0000 Files and hashes: 1: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl (hash: o9h0jzDcdo1hXzIbX3Ej5Cwz4PTWRO3iQrT0/JwCypE=) 2: AE21A9C6818911EA81577016C4F9AE02.roa (hash: 7SxWILLdTrzJpYEt8Y/6XTCMP3sdZqZUyA4GDfqu88g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6280 (0x1888) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Validity Not Before: May 12 15:47:00 2025 GMT Not After : May 19 15:47:00 2025 GMT Subject: CN=682217f4-208a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:73:3d:4b:85:41:37:d4:39:36:96:1d:59:26: bb:ae:0e:39:15:19:d0:65:3f:5d:ff:00:6a:c9:d8: 9b:86:6f:b5:8d:97:61:99:b7:5b:2d:77:f7:4b:44: b5:55:14:72:62:44:88:8d:a6:9e:a4:09:c8:17:59: d3:ff:43:9e:ad:d8:ff:af:be:87:59:72:19:d4:d4: 59:fb:fd:e2:ba:da:f0:5e:a1:08:00:ef:6f:f4:77: 4e:70:64:e4:48:6a:6b:c3:23:4c:f0:49:8c:22:50: 66:eb:6b:f6:c8:73:5a:51:d4:54:7b:c3:3d:77:32: b3:bf:85:64:9f:e8:fd:66:fd:b7:4a:19:b0:29:bf: 3a:cf:f0:6c:3b:46:88:44:bd:ce:e0:61:e2:bf:b8: 88:c6:72:55:98:07:12:b5:f5:05:7b:d4:81:af:e8: ed:7c:05:5f:5f:5e:0c:79:ea:e8:87:02:db:9a:b7: fc:eb:12:de:e5:58:16:02:a1:14:c4:bc:1a:19:52: af:2c:0b:2d:4e:1e:37:a6:72:11:9d:32:b9:91:ae: 07:7d:5d:30:da:6d:24:d9:80:a0:4b:00:a2:47:58: 7d:d5:72:c6:5d:82:ff:d8:11:10:98:04:e2:29:f5: d9:2c:87:b0:31:d9:cf:5a:06:ab:68:fc:76:9f:7a: 94:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C7:8C:76:9B:47:DA:A8:77:A7:D1:C1:26:F9:B2:0E:63:08:58:EE X509v3 Authority Key Identifier: keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:fe:e2:bf:5a:a3:8c:8a:eb:57:54:de:11:59:46:de:86:78: 28:21:b2:85:79:ba:3e:f9:83:73:82:a1:26:88:7f:58:26:6b: d9:72:cc:53:d0:2c:42:bd:94:d9:f5:bb:e3:aa:16:36:c8:62: 8b:f2:0b:cd:64:24:b5:94:69:1e:69:4a:94:ab:bf:ec:80:0b: 47:24:51:a6:4d:ac:2c:36:1b:73:59:6e:77:96:e7:74:f0:d9: f3:8d:3b:4d:c6:b0:55:ea:8b:1b:5a:26:60:b9:32:27:73:43: 8c:da:9e:ac:8c:cd:65:1e:34:e3:4b:51:6a:e6:71:d3:4e:34: 51:0b:4f:b5:53:cc:57:08:bf:2d:03:cb:ea:87:6e:79:2a:f6: 2b:94:bd:1c:86:68:79:5b:4f:3b:bb:fa:e3:ad:12:47:78:d7: 55:7c:e6:7f:66:da:ee:1c:d6:2f:65:fc:3b:62:ad:dc:ff:21: 72:d9:ea:bf:10:25:7d:db:61:f1:db:e8:d9:58:69:21:7c:6d: ec:03:ed:9c:d7:35:d2:8b:36:98:d9:2a:89:a2:f2:c3:d0:d0: 56:7e:17:79:ff:9b:93:31:e6:07:99:53:42:42:52:d1:98:b8: 31:d0:68:92:6e:67:fc:b5:e9:a0:1e:e7:29:70:d7:15:00:18: d6:a3:18:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKEQxNDc5RUY2MDM0MUUzOUVDQTE3MkU0Mzc2NDQzQTQ3 MTk3NUNCRUYwHhcNMjUwNTEyMTU0NzAwWhcNMjUwNTE5MTU0NzAwWjAYMRYwFAYD VQQDEw02ODIyMTdmNC0yMDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXM9S4VBN9Q5NpYdWSa7rg45FRnQZT9d/wBqydibhm+1jZdhmbdbLXf3S0S1 VRRyYkSIjaaepAnIF1nT/0Oerdj/r76HWXIZ1NRZ+/3iutrwXqEIAO9v9HdOcGTk SGprwyNM8EmMIlBm62v2yHNaUdRUe8M9dzKzv4Vkn+j9Zv23ShmwKb86z/BsO0aI RL3O4GHiv7iIxnJVmAcStfUFe9SBr+jtfAVfX14MeerohwLbmrf86xLe5VgWAqEU xLwaGVKvLAstTh43pnIRnTK5ka4HfV0w2m0k2YCgSwCiR1h91XLGXYL/2BEQmATi KfXZLIewMdnPWgaraPx2n3qU5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHHjHab R9qod6fRwSb5sg5jCFjuMB8GA1UdIwQYMBaAFNFHnvYDQeOeyhcuQ3ZEOkcZdcvv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS80ODJCQTE3MjlE MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1N0tGeTVEZGtRNlJ4bDF5 LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBVZWU5Z05CNDU3S0Z5NURka1E2UnhsMXktOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS80ODJCQTE3MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1 N0tGeTVEZGtRNlJ4bDF5LTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp/uK/WqOMiutXVN4RWUbehngoIbKFebo++YNzgqEmiH9YJmvZcsxT 0CxCvZTZ9bvjqhY2yGKL8gvNZCS1lGkeaUqUq7/sgAtHJFGmTawsNhtzWW53lud0 8NnzjTtNxrBV6osbWiZguTInc0OM2p6sjM1lHjTjS1Fq5nHTTjRRC0+1U8xXCL8t A8vqh255KvYrlL0chmh5W087u/rjrRJHeNdVfOZ/ZtruHNYvZfw7Yq3c/yFy2eq/ ECV922Hx2+jZWGkhfG3sA+2c1zXSizaY2SqJovLD0NBWfhd5/5uTMeYHmVNCQlLR mLgx0GiSbmf8temgHucpcNcVABjWoxhY -----END CERTIFICATE-----Generated at Wed May 14 14:47:49 2025 by rpki-client