$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft File: uesVSGZ3c32yc5_WVGKu55BhaMI.mft (raw, json) Hash identifier: f88zqZwYpGiT3cymlfT7B12BLUAs0vgacO/t2P8MF08= Subject key identifier: 57:CC:24:35:93:19:AC:BC:AE:DC:F6:DF:E9:CF:FC:68:94:E0:63:5C Authority key identifier: B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2 Certificate issuer: /CN=A91DA649/serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2 Certificate serial: 0C0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft Manifest number: 0C07 Signing time: Sat 10 May 2025 18:29:42 +0000 Manifest this update: Sat 10 May 2025 18:29:41 +0000 Manifest next update: Sat 17 May 2025 18:29:41 +0000 Files and hashes: 1: uesVSGZ3c32yc5_WVGKu55BhaMI.crl (hash: 3RESvc6KGe7fyAkRaIw9gpGiKjOYwnCvPxkCLp6qpLw=) 2: C4391160305611EABE7DF272C4F9AE02.roa (hash: 3CS63lxTVcr1lDEM5PMs5CO7XzdKCmryVXHiyIzoBgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3087 (0xc0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA649, serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2 Validity Not Before: May 10 18:29:41 2025 GMT Not After : May 17 18:29:41 2025 GMT Subject: CN=681f9b16-32f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:06:1a:98:fc:47:a8:76:af:41:6c:2b:00:cc: 0e:ce:ca:c4:79:97:28:14:5e:73:9f:4c:b0:91:85: 6f:3c:64:51:00:db:ea:51:86:61:41:89:96:b0:88: cb:28:4f:41:5d:ca:1f:36:09:29:f1:9b:65:06:c4: af:23:18:21:6b:7b:19:75:59:9a:b0:bc:57:99:44: 24:6e:32:ce:50:c8:3b:6f:3c:02:4e:f6:fe:3d:7e: c7:ca:6b:5a:5e:3c:19:f2:a7:8e:59:5b:97:f7:b4: 97:f6:64:ca:e2:20:83:30:3f:00:ef:53:23:cd:43: 02:ed:cf:9c:ec:0d:11:ff:fb:93:75:18:b4:d6:be: 21:e2:54:91:a7:bd:42:1e:aa:86:32:da:00:62:a2: 9c:53:96:8b:b5:b7:c9:0d:77:db:62:3d:71:04:1e: c7:15:82:39:b1:02:27:70:2e:94:20:12:50:d0:0a: f4:be:71:09:b7:90:66:15:19:c7:05:f4:8e:96:97: 65:44:a1:36:45:e9:76:5b:9c:31:51:61:10:5d:63: d0:40:2d:c4:20:6d:2c:52:a3:9d:81:2d:8c:f4:26: 84:3b:83:6a:3f:18:d8:ba:f9:a5:b4:27:84:a5:69: e9:7f:64:d0:2b:a4:df:0c:66:05:f8:5c:3a:7c:7b: 28:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CC:24:35:93:19:AC:BC:AE:DC:F6:DF:E9:CF:FC:68:94:E0:63:5C X509v3 Authority Key Identifier: keyid:B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:e5:2d:3a:fe:84:f1:39:b2:35:9f:c0:df:08:1f:5b:d9:12: 39:87:43:62:80:ec:2c:3d:35:11:cb:92:71:64:f5:b1:b8:66: 8c:51:37:69:00:b5:2e:0c:a8:62:e0:e6:31:76:12:f3:27:d5: dd:5d:d7:c1:dd:a9:a1:a6:b2:7e:1d:4c:39:dc:46:1b:41:fe: d8:4f:96:d2:44:2f:4e:f4:a5:2c:38:b7:09:1f:c3:a3:4b:30: 59:2a:ed:08:d2:f5:0e:e5:bb:8f:5d:af:63:5d:35:c7:a5:69: c6:0f:c7:dc:f1:d3:ed:f5:bc:ed:4f:65:e7:93:7f:08:c4:e8: 8b:e4:5b:58:c6:c9:5a:9e:dd:71:58:ce:3c:5c:c2:6d:c9:b8: 71:79:78:a6:b2:06:88:65:c9:1c:78:b7:31:b6:97:2e:b1:ea: 3a:a5:09:e9:8f:90:b8:b5:b4:9f:47:72:33:da:5a:36:0a:c1: cd:58:6d:10:a7:9b:f8:2d:e8:33:e3:51:b1:3b:12:f0:88:22: 3c:fb:7f:b7:84:4e:fb:6f:5b:95:18:29:14:fc:d0:5a:2f:df: cc:6c:a6:b3:92:b4:c4:1d:1a:03:c1:e4:07:18:a6:a9:f5:57: 87:39:39:c3:1e:11:47:06:7b:e4:f2:20:3d:33:ec:89:44:77: 7f:78:dd:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE2NDkxMTAvBgNVBAUTKEI5RUIxNTQ4NjY3NzczN0RCMjczOUZENjU0NjJBRUU3 OTA2MTY4QzIwHhcNMjUwNTEwMTgyOTQxWhcNMjUwNTE3MTgyOTQxWjAYMRYwFAYD VQQDEw02ODFmOWIxNi0zMmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gYamPxHqHavQWwrAMwOzsrEeZcoFF5zn0ywkYVvPGRRANvqUYZhQYmWsIjL KE9BXcofNgkp8ZtlBsSvIxgha3sZdVmasLxXmUQkbjLOUMg7bzwCTvb+PX7Hymta XjwZ8qeOWVuX97SX9mTK4iCDMD8A71MjzUMC7c+c7A0R//uTdRi01r4h4lSRp71C HqqGMtoAYqKcU5aLtbfJDXfbYj1xBB7HFYI5sQIncC6UIBJQ0Ar0vnEJt5BmFRnH BfSOlpdlRKE2Rel2W5wxUWEQXWPQQC3EIG0sUqOdgS2M9CaEO4NqPxjYuvmltCeE pWnpf2TQK6TfDGYF+Fw6fHsoFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfMJDWT Gay8rtz23+nP/GiU4GNcMB8GA1UdIwQYMBaAFLnrFUhmd3N9snOf1lRirueQYWjC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTY0OS81RDk3Nzc0QzBG NTExMUVBOEM0QTVDMEFDNEY5QUUwMi91ZXNWU0daM2MzMnljNV9XVkdLdTU1Qmhh TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vlc1ZTR1ozYzMyeWM1X1dWR0t1NTVCaGFNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTY0OS81RDk3Nzc0QzBGNTExMUVBOEM0QTVDMEFDNEY5QUUwMi91ZXNWU0daM2Mz MnljNV9XVkdLdTU1QmhhTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW5S06/oTxObI1n8DfCB9b2RI5h0NigOwsPTURy5JxZPWxuGaMUTdp ALUuDKhi4OYxdhLzJ9XdXdfB3amhprJ+HUw53EYbQf7YT5bSRC9O9KUsOLcJH8Oj SzBZKu0I0vUO5buPXa9jXTXHpWnGD8fc8dPt9bztT2Xnk38IxOiL5FtYxslant1x WM48XMJtybhxeXimsgaIZckceLcxtpcuseo6pQnpj5C4tbSfR3Iz2lo2CsHNWG0Q p5v4Legz41GxOxLwiCI8+3+3hE77b1uVGCkU/NBaL9/MbKazkrTEHRoDweQHGKap 9VeHOTnDHhFHBnvk8iA9M+yJRHd/eN32 -----END CERTIFICATE-----Generated at Mon May 12 19:42:16 2025 by rpki-client