$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft File: uSVP8yozKY2dXGFc_aRTFeFcfLU.mft (raw, json) Hash identifier: TJUwVK5u+rf1pIZniO4CHzTcrxjnpDUNTqmWYAU2Brk= Subject key identifier: 42:42:31:70:E0:BC:36:2C:D5:28:51:14:E1:B0:22:AE:E1:03:AD:59 Authority key identifier: B9:25:4F:F3:2A:33:29:8D:9D:5C:61:5C:FD:A4:53:15:E1:5C:7C:B5 Certificate issuer: /CN=A91F3043/serialNumber=B9254FF32A33298D9D5C615CFDA45315E15C7CB5 Certificate serial: 0640 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft Manifest number: 0637 Signing time: Sat 10 May 2025 22:18:12 +0000 Manifest this update: Sat 10 May 2025 22:18:11 +0000 Manifest next update: Sat 17 May 2025 22:18:11 +0000 Files and hashes: 1: uSVP8yozKY2dXGFc_aRTFeFcfLU.crl (hash: sfVwj5ZX41vJ+sKKVc+N3nH4TKo47ZSmiLHpLHi5B78=) 2: BDFE68F491FD11EB84408D16C4F9AE02.roa (hash: NiOCVi1ZAoRhfdZ2LF+ut8x9beDsO9AQBCdgx3wc2ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.crl rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1600 (0x640) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3043, serialNumber=B9254FF32A33298D9D5C615CFDA45315E15C7CB5 Validity Not Before: May 10 22:18:11 2025 GMT Not After : May 17 22:18:11 2025 GMT Subject: CN=681fd0a4-7008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:a9:67:84:0e:75:26:e9:16:08:b0:73:8e: 99:d3:87:61:2f:6c:b4:12:9a:49:e3:b2:ed:86:90: 3b:d8:d8:47:af:5b:8d:89:14:2b:74:73:ab:da:ed: 81:86:cc:c8:e9:86:81:0a:5c:77:81:d3:e6:75:fa: 4a:36:f7:0a:90:e5:4b:a4:b5:e0:db:09:99:1b:1e: 40:7b:d9:a6:e4:2e:fd:03:ed:f2:82:05:ae:2b:f6: 0d:1e:f9:f7:e6:c1:ab:51:f7:37:a9:27:70:4f:e9: 06:9c:f4:1e:29:1e:ab:55:fa:4a:d5:33:ab:76:3a: 24:cf:0e:2c:5a:9f:b2:4c:cd:bd:cb:c9:1a:56:fc: 2d:a2:87:03:0c:33:4c:a8:a9:b7:f6:5f:6b:38:68: 9d:16:5d:70:f4:a6:1d:51:51:a5:c0:45:48:0f:1f: e9:a4:6d:35:d6:4c:62:2f:2f:63:d7:eb:bf:73:f8: 7f:3e:0b:14:c1:90:66:12:f8:13:6e:ed:85:cf:94: 33:c6:9c:d2:db:be:0f:c4:d0:24:8b:09:8d:e5:12: 57:bd:c0:b8:d8:1f:64:64:62:62:34:ea:76:6e:c9: 23:04:42:d8:04:3e:1f:f6:2a:80:02:06:41:b5:1e: 11:3a:05:1e:ce:47:30:1b:f2:82:f1:62:3c:6c:dd: b9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:42:31:70:E0:BC:36:2C:D5:28:51:14:E1:B0:22:AE:E1:03:AD:59 X509v3 Authority Key Identifier: keyid:B9:25:4F:F3:2A:33:29:8D:9D:5C:61:5C:FD:A4:53:15:E1:5C:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:a0:e3:a5:02:6f:aa:78:95:9b:11:62:28:07:8b:aa:88:2f: 51:38:7f:8e:d4:26:a8:2e:42:7a:ef:a9:89:2c:a6:c0:4d:01: 74:99:31:db:c8:6f:88:a5:b4:91:fb:99:8a:c4:7e:3b:82:9d: 68:59:45:7d:44:16:39:a2:a3:f0:b1:5b:3f:2b:d8:8e:e7:56: a7:0b:cc:30:c1:25:a3:1e:8d:02:52:d5:11:73:62:2f:21:47: 7d:b8:ca:8b:b9:ef:91:4b:fc:09:36:1d:2b:bc:1e:70:d8:c3: 86:b7:3d:83:77:7a:85:05:29:fd:06:39:3b:e9:c4:ed:cb:65: 99:96:ad:74:70:a8:a9:c5:97:39:4d:a1:81:6f:85:0d:92:32: ca:1b:5b:03:4d:ee:9f:32:e5:5f:65:f5:ab:6d:6e:4e:24:28: 3a:ef:70:bd:32:2f:96:54:ae:8f:85:38:93:89:e7:12:fe:35: 66:cb:e2:ea:c9:9f:5f:05:2f:e0:81:14:2d:e2:fa:f6:c7:46: b2:9f:10:49:6a:e1:77:7a:0d:94:e8:de:ca:7d:3a:97:fe:50: d7:42:39:bf:97:f5:74:82:4a:ea:1d:b0:7c:2d:08:e1:3d:fd: 30:49:2d:74:ac:9b:50:50:04:30:e4:b3:59:3f:67:28:aa:65: eb:90:0d:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwNDMxMTAvBgNVBAUTKEI5MjU0RkYzMkEzMzI5OEQ5RDVDNjE1Q0ZEQTQ1MzE1 RTE1QzdDQjUwHhcNMjUwNTEwMjIxODExWhcNMjUwNTE3MjIxODExWjAYMRYwFAYD VQQDEw02ODFmZDBhNC03MDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxGpZ4QOdSbpFgiwc46Z04dhL2y0EppJ47LthpA72NhHr1uNiRQrdHOr2u2B hszI6YaBClx3gdPmdfpKNvcKkOVLpLXg2wmZGx5Ae9mm5C79A+3yggWuK/YNHvn3 5sGrUfc3qSdwT+kGnPQeKR6rVfpK1TOrdjokzw4sWp+yTM29y8kaVvwtoocDDDNM qKm39l9rOGidFl1w9KYdUVGlwEVIDx/ppG011kxiLy9j1+u/c/h/PgsUwZBmEvgT bu2Fz5QzxpzS274PxNAkiwmN5RJXvcC42B9kZGJiNOp2bskjBELYBD4f9iqAAgZB tR4ROgUezkcwG/KC8WI8bN25MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJCMXDg vDYs1ShRFOGwIq7hA61ZMB8GA1UdIwQYMBaAFLklT/MqMymNnVxhXP2kUxXhXHy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzA0My8zOTZDNUQ0MDkx RkMxMUVCQTk5OERCMTRDNEY5QUUwMi91U1ZQOHlvektZMmRYR0ZjX2FSVEZlRmNm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VTVlA4eW96S1kyZFhHRmNfYVJURmVGY2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzA0My8zOTZDNUQ0MDkxRkMxMUVCQTk5OERCMTRDNEY5QUUwMi91U1ZQOHlvektZ MmRYR0ZjX2FSVEZlRmNmTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRoOOlAm+qeJWbEWIoB4uqiC9ROH+O1CaoLkJ676mJLKbATQF0mTHb yG+IpbSR+5mKxH47gp1oWUV9RBY5oqPwsVs/K9iO51anC8wwwSWjHo0CUtURc2Iv IUd9uMqLue+RS/wJNh0rvB5w2MOGtz2Dd3qFBSn9Bjk76cTty2WZlq10cKipxZc5 TaGBb4UNkjLKG1sDTe6fMuVfZfWrbW5OJCg673C9Mi+WVK6PhTiTiecS/jVmy+Lq yZ9fBS/ggRQt4vr2x0aynxBJauF3eg2U6N7KfTqX/lDXQjm/l/V0gkrqHbB8LQjh Pf0wSS10rJtQUAQw5LNZP2coqmXrkA1P -----END CERTIFICATE-----Generated at Sun May 11 15:03:27 2025 by rpki-client