$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft File: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft (raw, json) Hash identifier: a6OC/udUN1e9+tPWxwd8UVyvjNUvLkH1j2klvw3H8ek= Subject key identifier: C2:B1:EB:B0:B4:F3:17:48:C1:13:08:52:34:10:86:84:5B:74:9C:BA Authority key identifier: 53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82 Certificate issuer: /CN=A91F3AF8/serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682 Certificate serial: 07AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft Manifest number: 07A3 Signing time: Mon 12 May 2025 21:03:44 +0000 Manifest this update: Mon 12 May 2025 21:03:43 +0000 Manifest next update: Mon 19 May 2025 21:03:43 +0000 Files and hashes: 1: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl (hash: 1FRso/pRQLF3pCyIeUOvhuHLmqfmC11D2oAUXfCPyoM=) 2: 3791632A030011EB909C3244C4F9AE02.roa (hash: dB3zmsBTd89CRpUWBbCoSsuPQSrK3XC84t7uk9x1cA8=) 3: CC08667A7A6011EB9BC9937BC4F9AE02.roa (hash: Z/3rZQtnqfOwNEnHVO1+ydXZ5JjAuPVHRMvibrG3oIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1967 (0x7af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3AF8, serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682 Validity Not Before: May 12 21:03:43 2025 GMT Not After : May 19 21:03:43 2025 GMT Subject: CN=6822622f-d8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4a:87:aa:a3:72:4b:cb:9d:ce:3c:f3:77:d2: 2a:44:e0:8f:0a:0e:e9:81:35:f7:f1:40:88:5c:52: 54:91:04:35:78:43:a6:09:02:1f:5d:6a:dc:87:b4: 39:12:e7:96:b5:95:eb:d6:94:0c:9f:1d:04:7b:f7: 3b:f3:b7:1a:85:1c:cb:2e:9f:a7:58:34:ee:34:d3: b0:b4:75:7e:22:37:ee:89:aa:14:82:a2:0f:f4:2d: a1:ca:ee:b8:ca:31:c2:cc:49:7e:ab:7e:8d:a0:41: 0b:3b:65:84:1a:c8:b9:c0:62:26:87:d6:a4:36:0e: 71:b1:d2:39:45:19:f7:66:4d:92:0c:3d:8d:f0:4c: 61:dc:01:77:5e:3d:8f:1f:e2:ee:3c:75:2c:cb:6a: 21:2d:e9:33:92:1c:d5:86:1a:74:09:3d:19:e2:1c: af:6b:27:be:1d:60:8b:84:e0:af:63:96:9a:3f:47: fb:47:ab:16:c1:41:3e:ad:6d:af:ce:bb:b1:0c:0b: 38:76:f6:6d:98:d1:0d:70:74:77:6b:4e:59:0f:66: 46:a4:4c:79:f1:02:7e:ec:54:19:14:83:b9:ab:37: 63:06:88:ad:02:57:23:93:81:b4:3a:1d:99:43:d1: c4:e0:17:41:69:84:81:78:de:6b:ff:92:25:72:0a: 5b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B1:EB:B0:B4:F3:17:48:C1:13:08:52:34:10:86:84:5B:74:9C:BA X509v3 Authority Key Identifier: keyid:53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:37:6b:f1:69:2f:82:e2:86:4c:62:56:13:df:b3:4e:d4:4e: 15:84:27:f9:50:e5:da:e3:89:94:91:31:4e:bb:dc:3f:f3:6b: 4b:e5:b2:fc:21:1b:43:5d:e0:b1:3f:6c:eb:95:e1:6f:4e:6e: fa:e7:2e:37:ce:08:93:62:67:9e:9c:02:5a:bf:ec:6a:c1:ca: 81:42:13:86:27:73:cc:a8:d0:00:3b:06:8a:81:f3:c5:15:75: d0:c5:ca:a7:b8:c0:c8:c8:05:d3:03:5c:aa:8f:b1:e0:96:59: d0:cc:db:b2:59:f9:d6:ca:3c:0e:8e:c5:80:6b:25:76:f6:30: 01:31:8f:5b:85:d9:32:13:18:b9:4b:fb:31:7a:20:ea:62:2b: 32:2c:06:d1:a1:86:65:11:64:55:c5:65:d8:78:ec:70:86:ce: 1d:5f:ef:f2:90:4b:fe:6d:ba:a2:fa:2a:59:b3:c4:f2:6e:89: ed:f2:35:19:9e:db:94:5f:0f:7c:38:8a:d6:50:23:e0:16:80: 1c:ac:14:4c:b6:62:53:6c:9d:20:48:de:e5:2a:bb:43:eb:d1: 5b:58:99:af:b7:35:05:95:47:fd:9c:36:bc:c8:93:2a:58:29: 5c:f2:f9:32:f5:61:29:22:16:7d:ed:62:15:5c:ef:19:51:33: 20:02:ae:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNBRjgxMTAvBgNVBAUTKDUzMEQyOUFEQzBGQjFDRjI4MzdEMzlCQjg2MzQzNDg2 QzFDNzE2ODIwHhcNMjUwNTEyMjEwMzQzWhcNMjUwNTE5MjEwMzQzWjAYMRYwFAYD VQQDEw02ODIyNjIyZi1kOGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0qHqqNyS8udzjzzd9IqROCPCg7pgTX38UCIXFJUkQQ1eEOmCQIfXWrch7Q5 EueWtZXr1pQMnx0Ee/c787cahRzLLp+nWDTuNNOwtHV+IjfuiaoUgqIP9C2hyu64 yjHCzEl+q36NoEELO2WEGsi5wGImh9akNg5xsdI5RRn3Zk2SDD2N8Exh3AF3Xj2P H+LuPHUsy2ohLekzkhzVhhp0CT0Z4hyvaye+HWCLhOCvY5aaP0f7R6sWwUE+rW2v zruxDAs4dvZtmNENcHR3a05ZD2ZGpEx58QJ+7FQZFIO5qzdjBoitAlcjk4G0Oh2Z Q9HE4BdBaYSBeN5r/5Ilcgpb/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKx67C0 8xdIwRMIUjQQhoRbdJy6MB8GA1UdIwQYMBaAFFMNKa3A+xzyg305u4Y0NIbBxxaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0FGOC80ODI5N0ZFRTAy RkUxMUVCQjcwNjY0M0VDNEY5QUUwMi9VdzBwcmNEN0hQS0RmVG03aGpRMGhzSEhG b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V3MHByY0Q3SFBLRGZUbTdoalEwaHNISEZvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0FGOC80ODI5N0ZFRTAyRkUxMUVCQjcwNjY0M0VDNEY5QUUwMi9VdzBwcmNEN0hQ S0RmVG03aGpRMGhzSEhGb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiN2vxaS+C4oZMYlYT37NO1E4VhCf5UOXa44mUkTFOu9w/82tL5bL8 IRtDXeCxP2zrleFvTm765y43zgiTYmeenAJav+xqwcqBQhOGJ3PMqNAAOwaKgfPF FXXQxcqnuMDIyAXTA1yqj7HgllnQzNuyWfnWyjwOjsWAayV29jABMY9bhdkyExi5 S/sxeiDqYisyLAbRoYZlEWRVxWXYeOxwhs4dX+/ykEv+bbqi+ipZs8Tybont8jUZ ntuUXw98OIrWUCPgFoAcrBRMtmJTbJ0gSN7lKrtD69FbWJmvtzUFlUf9nDa8yJMq WClc8vky9WEpIhZ97WIVXO8ZUTMgAq5C -----END CERTIFICATE-----Generated at Tue May 13 04:43:20 2025 by rpki-client