$ rpki-client -vvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft File: 0uwHkLxOvTQHyVB05rVrQAA4Eto.mft (raw, json) Hash identifier: VoYCOgF54G7wSRntf/YnXwreZrXVMlnlJVo4bJNZUDc= Subject key identifier: 74:FE:1B:5B:C9:0E:FA:BC:C5:73:B7:57:24:96:59:D3:76:B6:B1:6F Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA Certificate issuer: /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Certificate serial: 0AC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft Manifest number: 0ABF Signing time: Wed 14 May 2025 19:35:48 +0000 Manifest this update: Wed 14 May 2025 19:35:47 +0000 Manifest next update: Wed 21 May 2025 19:35:47 +0000 Files and hashes: 1: 0uwHkLxOvTQHyVB05rVrQAA4Eto.crl (hash: mX2ofpikfJ16Q39SNVK6dHTznNJtAFax1l/g/spJM6Y=) 2: 5E2A4C584ED911EAA7F1A521C4F9AE02.roa (hash: QAE/MC+xtHDwjDC4We28f6uqNECigc7G6Vc7+DGOZ34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2759 (0xac7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D87CF, serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Validity Not Before: May 14 19:35:47 2025 GMT Not After : May 21 19:35:47 2025 GMT Subject: CN=6824f093-9ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4b:fc:7c:90:2a:3a:19:91:13:2e:fe:9a:2f: e6:fd:bb:0e:09:ff:7a:c2:ea:e3:af:ac:9c:33:b0: 21:be:c7:9f:66:50:46:f5:5b:b4:b9:af:32:a8:10: 2f:8a:7a:80:77:9a:df:c9:7c:9f:be:df:56:71:57: e2:be:06:65:30:22:94:2c:68:96:08:5f:37:4a:f9: 83:df:fd:24:b9:c3:e7:48:c9:0b:07:6b:f1:41:3f: 5a:e3:94:a3:06:29:ac:10:a4:17:f9:c4:01:66:4a: 0d:45:64:39:69:4d:e3:7f:d2:f4:2a:8b:99:95:27: 72:31:c6:c6:32:5a:db:2d:a3:32:78:09:af:1a:dc: 65:40:f7:17:cc:36:0b:8c:f9:64:6b:ce:f0:33:6c: fc:80:e9:aa:2e:53:30:d1:cf:7a:9e:3b:b6:ef:c0: fa:e2:38:0e:46:93:ec:6b:39:28:15:01:2f:10:9f: 6a:d8:fa:4b:78:18:18:64:22:94:64:f8:94:6f:6c: 63:bc:aa:52:1a:6f:32:f3:36:50:11:a1:ba:cf:5f: a5:e9:ee:45:6a:09:0d:2c:ca:3f:a8:fc:a1:7e:e9: bd:e1:03:db:58:31:f9:c9:89:86:5e:de:ad:02:ae: 31:06:78:6e:84:bf:f8:e5:f0:6e:97:f6:92:02:e0: 58:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FE:1B:5B:C9:0E:FA:BC:C5:73:B7:57:24:96:59:D3:76:B6:B1:6F X509v3 Authority Key Identifier: keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:96:0e:ac:ec:89:b1:d9:6c:fc:bd:0c:9a:c9:4f:77:ee:ef: 9f:f1:05:d6:bd:1e:69:2c:52:41:07:63:7b:b1:47:9c:d8:fd: 6c:c1:88:5a:33:e3:db:96:74:28:99:90:8a:c0:fd:ce:b1:8d: 0d:4a:68:40:70:15:73:26:57:63:f5:3c:25:20:a0:53:1a:65: 94:95:63:68:31:63:a1:dc:c5:e5:05:8b:fc:00:9e:fe:d7:c8: 2f:53:88:0d:65:04:9f:6e:07:f6:8a:3d:0b:cd:19:37:07:d0: 9f:58:00:60:34:14:0d:17:b1:97:1d:e6:fa:d2:ab:90:5f:a5: 3c:19:99:3c:b3:ad:ce:32:26:e4:4a:c7:9d:59:9b:f4:9e:22: fe:3b:04:e2:e1:2a:1a:af:94:45:45:5d:2b:30:bc:d7:43:62: b2:0b:97:00:3d:b1:d5:5d:b5:09:7d:72:39:ff:79:11:4e:b4: ea:86:e7:b6:61:e2:28:fd:09:7c:1d:e1:7a:08:e4:1e:06:5f: 55:66:81:e7:85:cc:42:b0:8a:72:31:19:78:6e:b2:42:21:4b: 9f:0f:4e:1e:50:85:32:09:b9:e8:9b:ab:6b:1d:45:2e:a3:44: af:6f:82:ee:b2:bd:a5:3d:be:5b:96:37:d8:ab:29:43:06:a1: 91:25:7f:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3Q0YxMTAvBgNVBAUTKEQyRUMwNzkwQkM0RUJEMzQwN0M5NTA3NEU2QjU2QjQw MDAzODEyREEwHhcNMjUwNTE0MTkzNTQ3WhcNMjUwNTIxMTkzNTQ3WjAYMRYwFAYD VQQDEw02ODI0ZjA5My05ZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUv8fJAqOhmREy7+mi/m/bsOCf96wurjr6ycM7AhvsefZlBG9Vu0ua8yqBAv inqAd5rfyXyfvt9WcVfivgZlMCKULGiWCF83SvmD3/0kucPnSMkLB2vxQT9a45Sj BimsEKQX+cQBZkoNRWQ5aU3jf9L0KouZlSdyMcbGMlrbLaMyeAmvGtxlQPcXzDYL jPlka87wM2z8gOmqLlMw0c96nju278D64jgORpPsazkoFQEvEJ9q2PpLeBgYZCKU ZPiUb2xjvKpSGm8y8zZQEaG6z1+l6e5FagkNLMo/qPyhfum94QPbWDH5yYmGXt6t Aq4xBnhuhL/45fBul/aSAuBYHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHT+G1vJ Dvq8xXO3VySWWdN2trFvMB8GA1UdIwQYMBaAFNLsB5C8Tr00B8lQdOa1a0AAOBLa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODdDRi9FNjg1QjEyQTRF RDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZUUUh5VkIwNXJWclFBQTRF dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB1d0hrTHhPdlRRSHlWQjA1clZyUUFBNEV0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODdDRi9FNjg1QjEyQTRFRDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZU UUh5VkIwNXJWclFBQTRFdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3lg6s7Imx2Wz8vQyayU937u+f8QXWvR5pLFJBB2N7sUec2P1swYha M+PblnQomZCKwP3OsY0NSmhAcBVzJldj9TwlIKBTGmWUlWNoMWOh3MXlBYv8AJ7+ 18gvU4gNZQSfbgf2ij0LzRk3B9CfWABgNBQNF7GXHeb60quQX6U8GZk8s63OMibk SsedWZv0niL+OwTi4Soar5RFRV0rMLzXQ2KyC5cAPbHVXbUJfXI5/3kRTrTqhue2 YeIo/Ql8HeF6COQeBl9VZoHnhcxCsIpyMRl4brJCIUufD04eUIUyCbnom6trHUUu o0Svb4Lusr2lPb5bljfYqylDBqGRJX/u -----END CERTIFICATE-----Generated at Thu May 15 21:54:23 2025 by rpki-client