$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft File: UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft (raw, json) Hash identifier: 1TWXYf0WmbDeM2DfkomnGg14w8efIwtZjTXOzedKdc8= Subject key identifier: 1F:17:2F:69:45:74:42:9E:5F:7C:A0:E6:8B:2A:00:01:EA:5C:5D:9D Authority key identifier: 51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB Certificate issuer: /CN=A91EBA1C/serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB Certificate serial: 2261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft Manifest number: 2222 Signing time: Mon 12 May 2025 15:51:14 +0000 Manifest this update: Mon 12 May 2025 15:51:14 +0000 Manifest next update: Mon 19 May 2025 15:51:14 +0000 Files and hashes: 1: UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl (hash: ssOe5eM0e0ioiSBJTybG0V3z5WEOgUDee6Y3JCCZ0KE=) 2: 6E12CFE0D6D511EEB73F802EC4F9AE02.roa (hash: fu2Y/ef9m4hYpradbNhhquwt+T6O3zblslaEMelPVBA=) 3: 8D93B9E0D8E911EE85D9881FC4F9AE02.roa (hash: AmGEU/vI25utL7crZoKrtfl5OSwvLwWyEhptdWMwqps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:51:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8801 (0x2261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA1C, serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB Validity Not Before: May 12 15:51:14 2025 GMT Not After : May 19 15:51:14 2025 GMT Subject: CN=682218f2-0a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5a:7e:fc:fd:d8:ae:45:5b:9c:de:1f:2f:62: 7c:c4:d7:43:12:2f:85:74:7e:70:96:dd:1e:f4:b1: c0:ed:84:22:19:0b:93:4c:86:2a:5b:99:9d:3a:27: c7:76:7e:6e:ed:2f:7f:7d:8b:6d:8a:4f:ff:5c:2d: c4:3a:d5:e3:44:84:82:86:1a:d1:02:58:13:ad:33: a5:35:b8:7d:36:df:39:4b:09:e3:1e:9a:aa:c5:f1: 62:5b:92:4f:9c:67:ed:8b:e4:ae:c8:6a:ba:48:ec: b0:e6:78:f3:3e:4c:cf:59:f8:a0:f9:05:00:f2:d0: d8:76:e7:4a:71:88:0c:27:cb:95:01:70:a1:20:50: 82:0b:71:30:dd:3c:20:b0:e8:99:59:1a:ea:5d:ff: f7:8e:e4:cb:97:03:0b:2d:b5:1a:b1:0f:a6:5c:df: 9b:a1:04:53:89:73:1d:b4:3c:d5:11:d1:ee:78:21: 02:84:30:c5:c4:7d:65:bd:a3:e3:1b:06:2a:00:ef: f4:c0:b6:bd:9c:75:0e:ed:d9:52:80:fb:71:8e:18: 81:64:f6:79:31:57:e7:65:64:60:f5:84:99:08:78: 76:1a:21:5a:f5:59:a7:f6:0e:fb:6d:7a:d4:79:56: e6:a9:36:70:f6:2c:4f:03:30:73:d9:b9:9a:f0:93: d6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:17:2F:69:45:74:42:9E:5F:7C:A0:E6:8B:2A:00:01:EA:5C:5D:9D X509v3 Authority Key Identifier: keyid:51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:4f:88:88:cd:6f:18:3c:4d:c2:c0:7a:31:47:0a:4b:a2:d3: d1:ce:58:04:02:06:48:4c:aa:44:e6:30:b7:10:1f:64:de:82: a8:9a:f2:8d:03:1a:76:76:5c:05:10:f4:57:d0:4d:a9:d2:61: c2:01:1c:15:c5:e0:0d:56:53:f8:0b:76:e7:ff:47:a2:0c:09: a3:81:d5:c7:9b:ea:85:26:fa:5b:0d:d4:e9:c0:c1:c6:9d:25: f3:a8:8c:82:1c:a0:b5:77:1c:54:b3:e6:75:64:e1:f3:cb:cd: 1e:25:40:75:f7:64:2c:ce:e0:ec:f2:4d:f1:ad:6f:03:7c:86: cd:3a:12:bf:d9:5f:85:fc:ac:fd:b8:99:b6:71:03:08:fa:d7: 63:b3:f1:06:f4:c4:38:a5:c9:0d:d7:06:2f:57:91:01:8c:f9: b2:fc:ac:fb:a3:05:0f:04:74:74:29:90:d7:fb:3b:b9:9b:2b: 1d:0c:35:71:34:53:c6:bb:5e:bc:cb:24:d8:fe:1b:47:40:9b: e8:cd:c5:15:e9:43:4d:ba:d2:2c:7a:46:52:51:f1:d2:af:38: 37:10:26:bf:a8:11:6c:9f:4f:0b:b3:ea:0e:23:54:41:d9:52: 65:d7:c3:31:cc:c3:ec:ea:93:85:50:d3:ff:74:55:f9:50:38: c3:97:e0:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICImEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBMUMxMTAvBgNVBAUTKDUxQzI2MTFCNDYxREQ1MTE4MzVBNTE0MUY4QUVFNTAy RDNBMzlBRUIwHhcNMjUwNTEyMTU1MTE0WhcNMjUwNTE5MTU1MTE0WjAYMRYwFAYD VQQDEw02ODIyMThmMi0wYTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Fp+/P3YrkVbnN4fL2J8xNdDEi+FdH5wlt0e9LHA7YQiGQuTTIYqW5mdOifH dn5u7S9/fYttik//XC3EOtXjRISChhrRAlgTrTOlNbh9Nt85SwnjHpqqxfFiW5JP nGfti+SuyGq6SOyw5njzPkzPWfig+QUA8tDYdudKcYgMJ8uVAXChIFCCC3Ew3Twg sOiZWRrqXf/3juTLlwMLLbUasQ+mXN+boQRTiXMdtDzVEdHueCEChDDFxH1lvaPj GwYqAO/0wLa9nHUO7dlSgPtxjhiBZPZ5MVfnZWRg9YSZCHh2GiFa9Vmn9g77bXrU eVbmqTZw9ixPAzBz2bma8JPWwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8XL2lF dEKeX3yg5osqAAHqXF2dMB8GA1UdIwQYMBaAFFHCYRtGHdURg1pRQfiu5QLTo5rr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkExQy82M0IyMTRBMkM4 MTUxMUU1ODFEMjA4ODRDNEY5QUUwMi9VY0poRzBZZDFSR0RXbEZCLUs3bEF0T2pt dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VjSmhHMFlkMVJHRFdsRkItSzdsQXRPam11cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkExQy82M0IyMTRBMkM4MTUxMUU1ODFEMjA4ODRDNEY5QUUwMi9VY0poRzBZZDFS R0RXbEZCLUs3bEF0T2ptdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBT4iIzW8YPE3CwHoxRwpLotPRzlgEAgZITKpE5jC3EB9k3oKomvKN Axp2dlwFEPRX0E2p0mHCARwVxeANVlP4C3bn/0eiDAmjgdXHm+qFJvpbDdTpwMHG nSXzqIyCHKC1dxxUs+Z1ZOHzy80eJUB192QszuDs8k3xrW8DfIbNOhK/2V+F/Kz9 uJm2cQMI+tdjs/EG9MQ4pckN1wYvV5EBjPmy/Kz7owUPBHR0KZDX+zu5mysdDDVx NFPGu168yyTY/htHQJvozcUV6UNNutIsekZSUfHSrzg3ECa/qBFsn08Ls+oOI1RB 2VJl18MxzMPs6pOFUNP/dFX5UDjDl+D2 -----END CERTIFICATE-----Generated at Wed May 14 08:28:40 2025 by rpki-client