$ rpki-client -vvf rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft File: uK3V-E0RutdH--lY1GutO6kTGQM.mft (raw, json) Hash identifier: VWJ9+FsktypIx7BSIzG2yubNPHQ1WuNohPuJfJquOyk= Subject key identifier: 1E:B9:CF:69:3B:08:EF:FE:5F:17:C1:81:1E:D6:BF:B5:96:35:D7:D9 Authority key identifier: B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03 Certificate issuer: /CN=A91F86D2/serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903 Certificate serial: 0386 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft Manifest number: 037B Signing time: Thu 15 May 2025 00:56:48 +0000 Manifest this update: Thu 15 May 2025 00:56:47 +0000 Manifest next update: Thu 22 May 2025 00:56:47 +0000 Files and hashes: 1: uK3V-E0RutdH--lY1GutO6kTGQM.crl (hash: vRUA9IBVJwOdJKp57I0ZPSJsALNdHGeuM7nArSSOWWA=) 2: 1A377B907A7811EF9D5ED47CC4F9AE02.roa (hash: 2FKrneZIYdwek2LQDep+qpyFwMcW7v1PTDAdjyafS0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 902 (0x386) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F86D2, serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903 Validity Not Before: May 15 00:56:47 2025 GMT Not After : May 22 00:56:47 2025 GMT Subject: CN=68253bcf-09dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a8:d1:bb:6e:57:f9:7f:94:32:e0:9c:c7:a1: 14:8e:93:d5:64:57:de:85:62:9d:6e:7f:bc:ed:a1: 71:43:56:44:0d:4b:6e:63:41:3c:12:78:b4:b0:d1: bb:17:9c:f8:97:3c:75:25:78:0c:01:cd:57:a9:e8: bf:1a:39:94:68:10:04:26:1d:e2:86:40:2c:f7:ed: 67:ac:f9:9d:81:0c:13:75:41:b2:5e:88:f8:3d:56: c3:ef:38:75:3b:ce:f8:8f:0b:f4:5e:73:e6:b6:5e: 96:aa:25:eb:0a:8c:b5:4a:8a:a1:b5:01:25:6d:4a: 27:9c:e7:71:4a:36:08:12:43:8c:a7:d5:9b:1d:b7: 19:26:7f:a2:86:45:49:3b:c0:71:d0:7a:b5:c2:38: e9:f8:2c:01:a2:4f:83:b6:23:b0:6a:9f:26:6b:1b: db:f7:ac:d1:82:61:31:c2:e4:23:e2:72:8c:1e:22: ac:28:f0:99:55:a1:b7:11:29:8a:dd:d9:89:77:e8: 37:9c:d3:6f:13:0f:7b:2b:e4:79:b4:92:b4:36:86: ab:f1:20:de:db:44:9a:d3:65:3c:cc:f7:f1:3a:16: 94:69:9f:39:d1:a5:b7:2a:db:d0:fe:11:e8:38:17: dc:eb:43:33:55:04:25:0a:e5:65:46:5f:e3:02:f1: 77:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B9:CF:69:3B:08:EF:FE:5F:17:C1:81:1E:D6:BF:B5:96:35:D7:D9 X509v3 Authority Key Identifier: keyid:B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:d8:27:11:d0:56:b9:81:5b:ae:2f:25:20:7e:d9:46:ee:b9: 88:8f:36:7d:5e:66:03:b8:7b:3e:07:f1:d8:f2:55:eb:af:93: b1:6f:28:6e:f9:32:d0:b3:44:86:4b:c9:70:fc:66:df:c5:28: 2e:31:c0:fd:79:0a:bd:a0:ae:79:6f:8f:5a:5c:fb:08:60:1e: fe:f8:42:a8:bd:8f:75:a9:94:07:40:fe:7b:68:92:3b:74:48: 91:76:67:9b:43:ee:d8:77:31:03:09:a2:87:f4:f8:7d:d8:f3: 21:14:6a:d0:a1:01:0a:cb:6e:5e:ee:82:4d:9c:e2:34:b8:cb: 97:c7:16:96:b2:87:4b:f1:2d:42:c2:83:12:20:0d:a9:b8:1f: 9d:c8:7c:fe:3c:5a:10:1a:2c:f2:cd:c8:19:a9:c0:a1:f8:de: 42:94:1c:cb:a4:a5:de:7b:c4:a6:51:a8:d6:f5:25:22:83:c3: 59:e6:e4:c0:c9:23:91:c5:ad:d6:cb:95:66:f5:6a:40:af:54: 2f:34:c6:11:dd:43:a4:58:81:cb:a8:c0:55:fd:cf:05:c6:98: 00:35:f1:5e:6e:c7:59:37:ce:6e:c8:7a:d2:32:b1:fe:65:c7: 95:8a:98:87:22:b8:5a:6c:a2:99:22:42:da:5a:f1:19:cf:64: 99:c9:fd:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg2RDIxMTAvBgNVBAUTKEI4QURENUY4NEQxMUJBRDc0N0ZCRTk1OEQ0NkJBRDNC QTkxMzE5MDMwHhcNMjUwNTE1MDA1NjQ3WhcNMjUwNTIyMDA1NjQ3WjAYMRYwFAYD VQQDEw02ODI1M2JjZi0wOWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKjRu25X+X+UMuCcx6EUjpPVZFfehWKdbn+87aFxQ1ZEDUtuY0E8Eni0sNG7 F5z4lzx1JXgMAc1Xqei/GjmUaBAEJh3ihkAs9+1nrPmdgQwTdUGyXoj4PVbD7zh1 O874jwv0XnPmtl6WqiXrCoy1SoqhtQElbUonnOdxSjYIEkOMp9WbHbcZJn+ihkVJ O8Bx0Hq1wjjp+CwBok+DtiOwap8maxvb96zRgmExwuQj4nKMHiKsKPCZVaG3ESmK 3dmJd+g3nNNvEw97K+R5tJK0Noar8SDe20Sa02U8zPfxOhaUaZ850aW3KtvQ/hHo OBfc60MzVQQlCuVlRl/jAvF3MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB65z2k7 CO/+XxfBgR7Wv7WWNdfZMB8GA1UdIwQYMBaAFLit1fhNEbrXR/vpWNRrrTupExkD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODZEMi8zOUREQ0NEQ0E5 NzUxMUVDQkE1QkRDMzNDNEY5QUUwMi91SzNWLUUwUnV0ZEgtLWxZMUd1dE82a1RH UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VLM1YtRTBSdXRkSC0tbFkxR3V0TzZrVEdRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODZEMi8zOUREQ0NEQ0E5NzUxMUVDQkE1QkRDMzNDNEY5QUUwMi91SzNWLUUwUnV0 ZEgtLWxZMUd1dE82a1RHUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY2CcR0Fa5gVuuLyUgftlG7rmIjzZ9XmYDuHs+B/HY8lXrr5Oxbyhu +TLQs0SGS8lw/GbfxSguMcD9eQq9oK55b49aXPsIYB7++EKovY91qZQHQP57aJI7 dEiRdmebQ+7YdzEDCaKH9Ph92PMhFGrQoQEKy25e7oJNnOI0uMuXxxaWsodL8S1C woMSIA2puB+dyHz+PFoQGizyzcgZqcCh+N5ClBzLpKXee8SmUajW9SUig8NZ5uTA ySORxa3Wy5Vm9WpAr1QvNMYR3UOkWIHLqMBV/c8FxpgANfFebsdZN85uyHrSMrH+ ZceVipiHIrhabKKZIkLaWvEZz2SZyf1S -----END CERTIFICATE-----Generated at Fri May 16 12:50:39 2025 by rpki-client