$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft File: UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft (raw, json) Hash identifier: 2MBjro28seKHpYrsgMrxQWFBCjYI5sCKXbVKg+dgH40= Subject key identifier: 35:8E:E9:F2:48:52:F8:C3:E0:82:27:4D:D2:0A:91:51:3D:E9:DF:3A Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C Certificate issuer: /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C Certificate serial: 0471 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft Manifest number: 0448 Signing time: Sat 10 May 2025 23:54:05 +0000 Manifest this update: Sat 10 May 2025 23:54:04 +0000 Manifest next update: Sat 17 May 2025 23:54:04 +0000 Files and hashes: 1: UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl (hash: RQIh38ThkKpykwPjXDJPzrLorOzl8HmI7aGcsh6nHQc=) 2: DEBDCECAC2CF11EFA805380FC4F9AE02.roa (hash: eaNFZvdgLDMBAG06T+DPbwJUZEPPcKT9xtvEgKy6kbA=) 3: 0294E1EADB0D11EE88489759C4F9AE02.roa (hash: hDxnlutqT9/pJfzJ08YZAIv8bDDIJuJIHzivB3I12dU=) 4: 01CF36F2DB0D11EE88489759C4F9AE02.roa (hash: waCwgO5G1eWxvmW8D4proRstxdhAb+1liP0DXd6paFo=) 5: 0104D0BADB0D11EE88489759C4F9AE02.roa (hash: LPhjXW7HkqepU7G8SEAF/BpJh0/ofgBAEpXIt/PkqcQ=) 6: 71A1BB74759711EFA89BA96BC4F9AE02.roa (hash: 6cUJTPCAVeXzehLIW6gFSNQlXybCjLDilQnNjh4uWfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1137 (0x471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE06, serialNumber=5073951E5C1582693A87072EE548C65485B05A2C Validity Not Before: May 10 23:54:04 2025 GMT Not After : May 17 23:54:04 2025 GMT Subject: CN=681fe71d-cd8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:46:6d:91:eb:bb:fc:95:6b:f8:64:d7:e4:f4: 02:51:98:dc:19:0c:b9:76:b5:44:4d:d6:ca:d2:41: ad:68:8c:e6:9f:25:ce:b5:95:f6:86:03:1d:3d:aa: 49:5e:29:1d:b0:05:1a:dd:83:0d:8e:4f:5d:08:5c: 17:99:d0:ad:83:a6:30:de:3c:f9:71:5b:7b:b6:fb: 82:e3:f1:f4:4e:b3:2b:2e:43:40:12:3a:50:49:dd: c9:00:3d:1d:87:f9:9c:f9:95:5a:1e:d2:97:e7:2e: c9:24:52:59:03:ab:23:ce:d7:6a:5d:ba:48:a2:df: 22:97:f1:98:68:de:ff:27:6a:e5:76:db:ef:11:92: 01:de:1e:01:fc:08:c7:86:b1:73:0e:61:66:3a:5c: 00:62:d9:c9:e8:93:76:54:11:67:d2:fd:c5:ea:f6: 19:c7:63:8c:8e:ca:3f:78:b5:d0:30:70:a8:58:d9: 93:23:65:d2:cd:18:53:09:b4:b8:3e:c1:ac:30:c2: 74:3f:f1:58:17:94:fc:ab:43:52:cc:78:ac:c7:b5: b1:d5:da:86:c8:9a:63:f9:55:6f:3e:f0:a5:e0:50: ed:76:6f:b9:d7:93:39:08:f4:7d:1e:f0:bd:3d:1d: a4:da:b4:75:00:ea:4f:a3:c0:f8:cd:d6:e6:8f:93: a8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8E:E9:F2:48:52:F8:C3:E0:82:27:4D:D2:0A:91:51:3D:E9:DF:3A X509v3 Authority Key Identifier: keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:9f:cd:a4:1d:27:c1:57:b6:9b:59:4b:88:6e:1a:aa:90:5c: a4:da:a8:70:c2:02:f4:17:29:a5:33:8e:b7:93:95:e1:ce:e6: ca:94:e4:e0:c5:b1:b0:2b:28:26:35:3f:3a:1a:10:ba:78:9a: 2c:94:b3:24:ba:99:f6:51:5c:c9:b1:44:aa:1b:bf:12:71:6c: 5d:2d:f1:d3:77:79:7e:dc:02:29:b4:ae:64:1c:d8:0d:47:2c: 4e:0a:20:53:7b:0d:94:c7:a6:b9:a7:df:c1:97:1a:57:2b:d5: b3:62:e0:72:dc:af:d3:cb:a4:d1:fd:f8:8e:2a:ef:5a:12:7e: 1a:4f:10:41:b8:30:df:0c:99:a2:bf:90:d9:32:88:7e:df:b2: 5d:07:4b:0d:64:74:8d:6a:f1:d4:9b:1e:97:6b:22:dd:d2:47: 84:be:5d:09:a3:a4:02:23:ba:7b:c6:aa:cc:b1:58:fc:1e:0c: 25:ee:2f:0f:e4:99:c2:37:71:b5:3d:04:24:43:31:12:4f:ae: 5f:0e:b9:82:c9:74:09:0b:5b:69:b4:2a:6d:6f:fa:51:75:de: 73:01:c3:d8:9d:83:6b:5e:c4:e6:c3:bb:aa:0e:b3:f1:0b:9d: 46:e9:ab:a5:2b:c8:2a:95:88:3c:e3:ff:e7:5a:b2:cf:96:0c: 35:ab:d6:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMDYxMTAvBgNVBAUTKDUwNzM5NTFFNUMxNTgyNjkzQTg3MDcyRUU1NDhDNjU0 ODVCMDVBMkMwHhcNMjUwNTEwMjM1NDA0WhcNMjUwNTE3MjM1NDA0WjAYMRYwFAYD VQQDEw02ODFmZTcxZC1jZDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnkZtkeu7/JVr+GTX5PQCUZjcGQy5drVETdbK0kGtaIzmnyXOtZX2hgMdPapJ XikdsAUa3YMNjk9dCFwXmdCtg6Yw3jz5cVt7tvuC4/H0TrMrLkNAEjpQSd3JAD0d h/mc+ZVaHtKX5y7JJFJZA6sjztdqXbpIot8il/GYaN7/J2rldtvvEZIB3h4B/AjH hrFzDmFmOlwAYtnJ6JN2VBFn0v3F6vYZx2OMjso/eLXQMHCoWNmTI2XSzRhTCbS4 PsGsMMJ0P/FYF5T8q0NSzHisx7Wx1dqGyJpj+VVvPvCl4FDtdm+515M5CPR9HvC9 PR2k2rR1AOpPo8D4zdbmj5OoFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWO6fJI UvjD4IInTdIKkVE96d86MB8GA1UdIwQYMBaAFFBzlR5cFYJpOocHLuVIxlSFsFos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUwNi8wNTU5RUVBRTVD QkUxMUVDQjI3M0RDN0NDNEY5QUUwMi9VSE9WSGx3VmdtazZod2N1NVVqR1ZJV3dX aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIT1ZIbHdWZ21rNmh3Y3U1VWpHVklXd1dpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUUwNi8wNTU5RUVBRTVDQkUxMUVDQjI3M0RDN0NDNEY5QUUwMi9VSE9WSGx3Vmdt azZod2N1NVVqR1ZJV3dXaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrn82kHSfBV7abWUuIbhqqkFyk2qhwwgL0FymlM463k5XhzubKlOTg xbGwKygmNT86GhC6eJoslLMkupn2UVzJsUSqG78ScWxdLfHTd3l+3AIptK5kHNgN RyxOCiBTew2Ux6a5p9/BlxpXK9WzYuBy3K/Ty6TR/fiOKu9aEn4aTxBBuDDfDJmi v5DZMoh+37JdB0sNZHSNavHUmx6XayLd0keEvl0Jo6QCI7p7xqrMsVj8Hgwl7i8P 5JnCN3G1PQQkQzEST65fDrmCyXQJC1tptCptb/pRdd5zAcPYnYNrXsTmw7uqDrPx C51G6aulK8gqlYg84//nWrLPlgw1q9aL -----END CERTIFICATE-----Generated at Mon May 12 18:54:03 2025 by rpki-client