$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft File: U4JkLr15mg-ChtBlSCntdoQw-eQ.mft (raw, json) Hash identifier: yH3cqgQ+5gbfznjjwe/F65H+HZ8I42QKa/Zbik4CTDk= Subject key identifier: 40:47:95:EF:F7:CA:BE:BB:B8:76:36:0C:C9:45:D8:E5:8E:5D:A5:A5 Authority key identifier: 53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 Certificate issuer: /CN=A91E6856/serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Certificate serial: 0E4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft Manifest number: 0E47 Signing time: Fri 16 May 2025 18:00:29 +0000 Manifest this update: Fri 16 May 2025 18:00:29 +0000 Manifest next update: Fri 23 May 2025 18:00:29 +0000 Files and hashes: 1: U4JkLr15mg-ChtBlSCntdoQw-eQ.crl (hash: wYjbu2171m+55H5ELYFktxiftaeXV2U7Gt/TXS8GeVA=) 2: 350711FA881211EE9710F928C4F9AE02.roa (hash: /AJd6poS8Ng5rehLy7t+jOBIXVOshJArXBaFYmXY69Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 18:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3660 (0xe4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Validity Not Before: May 16 18:00:29 2025 GMT Not After : May 23 18:00:29 2025 GMT Subject: CN=68277d3d-0fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9a:a4:15:6f:06:fc:a9:ec:0d:70:36:eb:56: 45:25:de:0a:c7:21:0d:d1:c2:7e:f0:53:8c:1c:21: 4b:1d:5f:c1:43:50:e3:71:0d:b6:77:9f:e6:b6:1c: 07:16:f2:29:24:ef:6f:1a:fa:d9:7c:d9:7b:79:8e: f3:f3:59:9e:8f:96:76:f4:e5:d2:c2:82:24:9e:08: ff:2f:92:9e:5b:97:3f:78:c2:7a:ba:04:1e:5b:8b: 08:b8:09:e6:1e:1c:d7:11:d7:04:81:c2:78:2a:50: 9d:3d:73:05:1f:15:ee:87:51:82:c2:d7:4b:60:72: 66:94:b1:ee:5f:b6:c9:9e:71:8e:08:ed:58:cf:19: f3:b6:e2:e3:8c:1f:3a:b5:b3:4a:1a:0f:6c:f9:6b: da:a1:52:d3:96:9e:55:91:c4:ac:3d:cc:37:47:80: d6:15:89:c5:e8:5c:73:a4:13:d7:b7:7c:6b:87:06: bd:76:c3:98:6f:3f:69:9e:d9:e9:c0:f9:a5:98:c9: 4d:dd:13:de:15:60:c1:67:33:08:6a:8a:d7:ae:38: 78:a7:94:3f:7a:58:c8:f9:6a:47:87:6f:0a:a0:52: 7e:cb:ee:01:96:a2:94:a8:56:7a:71:66:64:67:f1: fe:20:11:5b:24:c5:ba:9f:a1:ba:c6:13:8a:05:fe: e9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:47:95:EF:F7:CA:BE:BB:B8:76:36:0C:C9:45:D8:E5:8E:5D:A5:A5 X509v3 Authority Key Identifier: keyid:53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:1c:e5:9d:49:fb:74:c1:22:f8:92:2e:90:49:0b:4c:96:fa: a8:49:bb:84:aa:0c:ef:bd:2d:19:63:74:8a:39:4b:93:14:74: 67:12:74:dd:1d:6c:2d:f9:3c:d3:6a:55:46:17:c5:4a:9b:12: 40:1d:a4:89:99:47:8e:7f:1b:c8:49:ed:af:36:c3:ae:68:fc: a1:ce:a1:20:b7:35:6f:3c:e3:4c:d6:88:1e:20:39:aa:f8:7c: 25:41:bc:4d:af:8a:b9:e2:00:55:91:33:c5:aa:c7:fa:77:0d: aa:aa:7c:42:a1:6e:22:7f:82:3c:57:e6:e1:72:67:de:4a:5e: 3c:fd:3d:27:6b:fd:81:8b:93:94:04:8d:0f:4e:45:ca:cd:de: 33:e2:28:41:93:a0:b3:44:1e:24:a6:94:35:f0:93:36:70:f8: 83:68:41:89:fa:d5:74:08:f9:e9:c6:a4:81:af:8c:80:15:e9: a6:50:cd:0c:c8:fd:4a:70:84:e8:3b:94:5d:d2:d4:c3:d2:54: b5:cb:df:3e:54:0f:4f:49:3d:5f:63:fc:09:01:7e:4e:1f:1d: c1:15:d7:a1:82:9e:36:f3:4c:4d:7a:74:92:ab:ec:aa:cf:42: 9f:f1:af:87:b0:9f:9f:f9:40:48:9c:46:b7:28:77:92:d8:11: de:5e:07:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDUzODI2NDJFQkQ3OTlBMEY4Mjg2RDA2NTQ4MjlFRDc2 ODQzMEY5RTQwHhcNMjUwNTE2MTgwMDI5WhcNMjUwNTIzMTgwMDI5WjAYMRYwFAYD VQQDEw02ODI3N2QzZC0wZmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZqkFW8G/KnsDXA261ZFJd4KxyEN0cJ+8FOMHCFLHV/BQ1DjcQ22d5/mthwH FvIpJO9vGvrZfNl7eY7z81mej5Z29OXSwoIkngj/L5KeW5c/eMJ6ugQeW4sIuAnm HhzXEdcEgcJ4KlCdPXMFHxXuh1GCwtdLYHJmlLHuX7bJnnGOCO1YzxnztuLjjB86 tbNKGg9s+WvaoVLTlp5VkcSsPcw3R4DWFYnF6FxzpBPXt3xrhwa9dsOYbz9pntnp wPmlmMlN3RPeFWDBZzMIaorXrjh4p5Q/eljI+WpHh28KoFJ+y+4BlqKUqFZ6cWZk Z/H+IBFbJMW6n6G6xhOKBf7pQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBHle/3 yr67uHY2DMlF2OWOXaWlMB8GA1UdIwQYMBaAFFOCZC69eZoPgobQZUgp7XaEMPnk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yQ0Q0NUZCQTlF MjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1nLUNodEJsU0NudGRvUXct ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0SmtMcjE1bWctQ2h0QmxTQ250ZG9Rdy1lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg1Ni8yQ0Q0NUZCQTlFMjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1n LUNodEJsU0NudGRvUXctZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUHOWdSft0wSL4ki6QSQtMlvqoSbuEqgzvvS0ZY3SKOUuTFHRnEnTd HWwt+TzTalVGF8VKmxJAHaSJmUeOfxvISe2vNsOuaPyhzqEgtzVvPONM1ogeIDmq +HwlQbxNr4q54gBVkTPFqsf6dw2qqnxCoW4if4I8V+bhcmfeSl48/T0na/2Bi5OU BI0PTkXKzd4z4ihBk6CzRB4kppQ18JM2cPiDaEGJ+tV0CPnpxqSBr4yAFemmUM0M yP1KcIToO5Rd0tTD0lS1y98+VA9PST1fY/wJAX5OHx3BFdehgp4280xNenSSq+yq z0Kf8a+HsJ+f+UBInEa3KHeS2BHeXgfL -----END CERTIFICATE-----Generated at Sat May 17 11:35:34 2025 by rpki-client