$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft File: uXgEM1AwWT1tlle8RdvRFLEpHSg.mft (raw, json) Hash identifier: wM0oh4VJiiu1d3E2kTp37sdiI7RoJ6WMywZLtqdQ7EU= Subject key identifier: 54:FC:8D:33:18:25:09:0B:EF:C1:CB:48:3A:81:A9:14:BF:BD:7F:EF Authority key identifier: B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28 Certificate issuer: /CN=A91E9310/serialNumber=B97804335030593D6D9657BC45DBD114B1291D28 Certificate serial: 044B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft Manifest number: 0447 Signing time: Sat 10 May 2025 23:49:22 +0000 Manifest this update: Sat 10 May 2025 23:49:22 +0000 Manifest next update: Sat 17 May 2025 23:49:22 +0000 Files and hashes: 1: uXgEM1AwWT1tlle8RdvRFLEpHSg.crl (hash: 3sjAaUO4asQcSv8wyi35OnhuPh0DDfhnWWLXdGBta2Y=) 2: E8E2B0AE546511EC8B4A436BC4F9AE02.roa (hash: cL6ZzRiCZvUCUHOXKwXrsJvsEPdauZgSSVWIQ69Rr+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1099 (0x44b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9310, serialNumber=B97804335030593D6D9657BC45DBD114B1291D28 Validity Not Before: May 10 23:49:22 2025 GMT Not After : May 17 23:49:22 2025 GMT Subject: CN=681fe602-17f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:07:dc:ae:6b:43:0f:6a:6e:91:98:19:73:6b: a2:98:ca:6f:30:01:35:c7:98:a8:42:dc:16:4f:c0: a0:ea:89:78:52:13:aa:f7:fb:8e:c4:57:99:c0:7d: b8:9d:67:f3:12:c5:16:fd:e2:cd:1f:a2:69:98:12: 7f:b7:45:d5:ef:15:c8:d0:3b:a5:df:ee:6b:48:44: c4:2a:c7:39:18:c2:5e:67:13:89:d4:60:5c:23:63: ec:2d:14:0c:97:69:e0:af:5c:86:54:d9:90:97:b3: b8:2f:d5:bc:27:e3:c6:dc:56:b7:f9:74:10:71:ee: a0:d9:63:b9:41:ff:4e:00:8d:2b:b5:f2:cb:8f:e2: 16:a5:f2:eb:9c:5c:2a:ba:8a:15:c5:50:b3:02:e4: ee:02:39:01:07:fc:b8:f1:b2:27:96:6c:5b:17:c7: d8:6c:5b:82:c5:92:f2:4c:e3:a8:13:e9:5d:a6:6c: 3b:9d:80:95:3d:f5:50:e3:57:84:fd:46:72:82:a1: ac:75:8f:51:f1:3f:8f:9f:d3:32:3b:96:42:77:3b: 94:68:08:87:75:ae:56:4a:72:3f:77:2d:77:f5:36: 07:82:35:62:5d:2b:e5:a5:71:4b:31:8a:1c:4a:ba: 59:f1:e0:7c:e6:1f:d5:1a:7e:6e:c9:42:ea:7d:cf: 97:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FC:8D:33:18:25:09:0B:EF:C1:CB:48:3A:81:A9:14:BF:BD:7F:EF X509v3 Authority Key Identifier: keyid:B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:1f:3e:b8:91:18:3e:1d:c4:f3:ee:36:eb:09:bd:af:99:5b: df:6d:8e:3c:f7:51:bd:4a:8f:bb:2c:bd:cb:9b:25:96:87:67: e4:f0:72:db:0b:75:b7:89:40:2d:df:d9:e6:4b:92:4e:89:96: b0:61:cf:4b:ed:d4:c1:17:41:74:0e:7c:2b:f0:fa:59:87:f1: 35:b0:86:52:13:81:e5:9a:8e:51:a6:de:a4:ab:cb:12:6c:33: 2b:37:0d:ba:74:8e:59:c7:37:cf:ad:0d:a8:00:68:13:83:2a: 9e:d6:ec:70:9c:b6:aa:79:13:7f:4d:5b:da:c9:7f:cf:92:96: c7:65:d6:87:ab:3c:ba:ba:eb:5e:2e:7c:4f:13:a1:e5:92:d3: f5:fb:d3:96:a6:21:93:1b:ab:79:31:8c:6e:4c:5c:f3:c6:53: ae:57:d8:e2:8a:80:e3:c1:90:7f:99:07:4b:4d:2d:1f:d3:ab: 2f:33:7c:a1:50:f2:13:d4:bf:f3:e1:0f:ca:66:dc:4d:0c:09: 61:91:63:90:6b:32:ae:a9:98:39:dd:95:7d:89:7f:d7:a4:58: 33:00:88:46:c2:f7:52:10:4d:7d:81:2c:18:51:f6:dc:df:86: 26:25:d1:7c:66:71:78:c4:f6:c1:39:91:7f:f5:09:99:a2:bd: a0:da:ce:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkzMTAxMTAvBgNVBAUTKEI5NzgwNDMzNTAzMDU5M0Q2RDk2NTdCQzQ1REJEMTE0 QjEyOTFEMjgwHhcNMjUwNTEwMjM0OTIyWhcNMjUwNTE3MjM0OTIyWjAYMRYwFAYD VQQDEw02ODFmZTYwMi0xN2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgfcrmtDD2pukZgZc2uimMpvMAE1x5ioQtwWT8Cg6ol4UhOq9/uOxFeZwH24 nWfzEsUW/eLNH6JpmBJ/t0XV7xXI0Dul3+5rSETEKsc5GMJeZxOJ1GBcI2PsLRQM l2ngr1yGVNmQl7O4L9W8J+PG3Fa3+XQQce6g2WO5Qf9OAI0rtfLLj+IWpfLrnFwq uooVxVCzAuTuAjkBB/y48bInlmxbF8fYbFuCxZLyTOOoE+ldpmw7nYCVPfVQ41eE /UZygqGsdY9R8T+Pn9MyO5ZCdzuUaAiHda5WSnI/dy139TYHgjViXSvlpXFLMYoc SrpZ8eB85h/VGn5uyULqfc+XHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFT8jTMY JQkL78HLSDqBqRS/vX/vMB8GA1UdIwQYMBaAFLl4BDNQMFk9bZZXvEXb0RSxKR0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTMxMC9EMUIxRDM0NDU0 NjMxMUVDQThGQTQ5NkFDNEY5QUUwMi91WGdFTTFBd1dUMXRsbGU4UmR2UkZMRXBI U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYZ0VNMUF3V1QxdGxsZThSZHZSRkxFcEhTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTMxMC9EMUIxRDM0NDU0NjMxMUVDQThGQTQ5NkFDNEY5QUUwMi91WGdFTTFBd1dU MXRsbGU4UmR2UkZMRXBIU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKHz64kRg+HcTz7jbrCb2vmVvfbY4891G9So+7LL3LmyWWh2fk8HLb C3W3iUAt39nmS5JOiZawYc9L7dTBF0F0Dnwr8PpZh/E1sIZSE4Hlmo5Rpt6kq8sS bDMrNw26dI5ZxzfPrQ2oAGgTgyqe1uxwnLaqeRN/TVvayX/PkpbHZdaHqzy6uute LnxPE6HlktP1+9OWpiGTG6t5MYxuTFzzxlOuV9jiioDjwZB/mQdLTS0f06svM3yh UPIT1L/z4Q/KZtxNDAlhkWOQazKuqZg53ZV9iX/XpFgzAIhGwvdSEE19gSwYUfbc 34YmJdF8ZnF4xPbBOZF/9QmZor2g2s62 -----END CERTIFICATE-----Generated at Sun May 11 22:55:31 2025 by rpki-client