$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft File: UyaKJzal_1VLlAcD83T8NXkijDA.mft (raw, json) Hash identifier: QAJywhY+wvea5JxkOxizGa8zUWzlz4N8NVrftLhsALk= Subject key identifier: 67:96:7E:8A:DB:0D:27:D4:04:D0:5A:9E:86:7B:30:06:C4:B8:24:7E Authority key identifier: 53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30 Certificate issuer: /CN=A91DCBAD/serialNumber=53268A2736A5FF554B940703F374FC3579228C30 Certificate serial: 0A26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft Manifest number: 0A1E Signing time: Wed 14 May 2025 19:55:56 +0000 Manifest this update: Wed 14 May 2025 19:55:56 +0000 Manifest next update: Wed 21 May 2025 19:55:56 +0000 Files and hashes: 1: UyaKJzal_1VLlAcD83T8NXkijDA.crl (hash: 6xdHS16nNw0Idyc/wuhRl825RQGDRTWnlP0wRo5Ughk=) 2: CF072592709211EAB1D2FA0FC4F9AE02.roa (hash: ZFArAKV3zxqhsKeUT1pzygcRoAdRSBE7vBttPv/BKqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2598 (0xa26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCBAD, serialNumber=53268A2736A5FF554B940703F374FC3579228C30 Validity Not Before: May 14 19:55:56 2025 GMT Not After : May 21 19:55:56 2025 GMT Subject: CN=6824f54c-a112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c4:cf:52:14:85:47:7c:fb:32:2c:c1:d7:01: 47:c2:25:b0:55:c4:85:48:62:95:96:49:06:f7:37: 01:c0:17:b8:4f:48:0a:1e:63:db:36:c8:77:d9:0e: c6:a8:8e:b9:35:80:1d:9c:37:44:68:c5:21:b0:6f: a6:ec:bd:10:78:b3:e6:67:2d:a5:53:e5:59:3e:61: 1c:94:5f:4f:a8:48:75:2f:09:26:33:50:cf:90:f2: 6c:d6:b9:fb:bb:3d:45:c7:a4:14:29:71:d1:2f:6a: a8:e8:c5:29:cb:67:44:2a:dc:32:8d:66:60:39:48: c3:98:bd:fc:40:fa:c9:b4:46:fa:20:89:2f:05:39: 33:a1:ca:e1:ea:8d:a0:e8:3e:48:c3:84:fa:09:52: 9b:c7:21:52:cf:ce:22:27:94:5e:25:74:9f:4e:1b: 2c:d5:fb:0a:e1:a7:af:59:96:b8:0d:a9:ac:39:52: fa:6d:b9:7b:83:9e:fb:68:17:96:ba:99:b1:e8:34: 79:19:71:c4:70:58:ce:77:15:df:72:48:08:82:a7: ff:d7:0f:2e:9d:cc:34:33:6a:05:7d:6b:e1:58:0d: 38:97:84:92:15:1d:a4:b7:51:71:9e:56:a8:a7:46: 90:6d:7f:96:0d:9f:68:d0:30:d6:ad:18:f9:ee:5e: 18:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:96:7E:8A:DB:0D:27:D4:04:D0:5A:9E:86:7B:30:06:C4:B8:24:7E X509v3 Authority Key Identifier: keyid:53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:1b:f1:87:12:9f:21:dc:35:13:d8:36:47:ad:5e:aa:28:72: d8:3a:28:57:e7:ae:dc:d3:7a:6d:9a:fd:78:c9:0b:09:6d:c3: 84:11:de:01:53:69:1e:10:5f:7e:4f:45:d1:57:4f:ef:db:02: f3:c9:13:fc:d6:b3:9b:e7:11:8a:00:bd:d1:e5:9d:45:1f:7c: 6f:c9:67:45:87:3b:06:5c:2a:6f:ba:3a:ea:81:16:4c:7e:41: 00:68:2c:6a:90:12:d6:bd:07:58:2d:56:02:74:32:05:79:d4: d1:b9:74:00:e8:bf:02:24:59:04:47:94:9d:b5:8c:4c:09:64: dd:76:e2:0f:a4:85:0f:b7:2a:21:0c:ce:65:47:98:32:20:dc: 75:4b:6a:51:39:53:30:d3:63:7c:b4:9c:e6:34:e1:1c:e2:98: 24:2e:14:f7:8a:cd:5d:ef:30:ba:0e:d0:f1:62:64:0c:0d:cb: 78:9c:2c:06:8a:a3:fc:b0:59:53:ff:2d:76:6a:49:29:fe:0a: 3d:d9:b9:cc:87:5c:39:4f:7c:c9:c3:99:da:1b:21:78:d6:8e: 61:79:8c:50:6a:2a:a2:b2:2e:cc:0c:63:ad:bb:de:5e:e0:8d: 6d:37:92:80:1f:98:6c:34:11:9c:94:69:71:c9:88:ab:85:df: 99:a0:96:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENCQUQxMTAvBgNVBAUTKDUzMjY4QTI3MzZBNUZGNTU0Qjk0MDcwM0YzNzRGQzM1 NzkyMjhDMzAwHhcNMjUwNTE0MTk1NTU2WhcNMjUwNTIxMTk1NTU2WjAYMRYwFAYD VQQDEw02ODI0ZjU0Yy1hMTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8TPUhSFR3z7MizB1wFHwiWwVcSFSGKVlkkG9zcBwBe4T0gKHmPbNsh32Q7G qI65NYAdnDdEaMUhsG+m7L0QeLPmZy2lU+VZPmEclF9PqEh1LwkmM1DPkPJs1rn7 uz1Fx6QUKXHRL2qo6MUpy2dEKtwyjWZgOUjDmL38QPrJtEb6IIkvBTkzocrh6o2g 6D5Iw4T6CVKbxyFSz84iJ5ReJXSfThss1fsK4aevWZa4DamsOVL6bbl7g577aBeW upmx6DR5GXHEcFjOdxXfckgIgqf/1w8uncw0M2oFfWvhWA04l4SSFR2kt1Fxnlao p0aQbX+WDZ9o0DDWrRj57l4Y4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeWforb DSfUBNBanoZ7MAbEuCR+MB8GA1UdIwQYMBaAFFMmiic2pf9VS5QHA/N0/DV5Ioww MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0JBRC8zNjU5RTdBRTcw OTExMUVBOEE5QjRFMERDNEY5QUUwMi9VeWFLSnphbF8xVkxsQWNEODNUOE5Ya2lq REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5YUtKemFsXzFWTGxBY0Q4M1Q4TlhraWpEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0JBRC8zNjU5RTdBRTcwOTExMUVBOEE5QjRFMERDNEY5QUUwMi9VeWFLSnphbF8x VkxsQWNEODNUOE5Ya2lqREEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARG/GHEp8h3DUT2DZHrV6qKHLYOihX567c03ptmv14yQsJbcOEEd4B U2keEF9+T0XRV0/v2wLzyRP81rOb5xGKAL3R5Z1FH3xvyWdFhzsGXCpvujrqgRZM fkEAaCxqkBLWvQdYLVYCdDIFedTRuXQA6L8CJFkER5SdtYxMCWTdduIPpIUPtyoh DM5lR5gyINx1S2pROVMw02N8tJzmNOEc4pgkLhT3is1d7zC6DtDxYmQMDct4nCwG iqP8sFlT/y12akkp/go92bnMh1w5T3zJw5naGyF41o5heYxQaiqisi7MDGOtu95e 4I1tN5KAH5hsNBGclGlxyYirhd+ZoJaJ -----END CERTIFICATE-----Generated at Fri May 16 11:36:03 2025 by rpki-client