$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft File: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft (raw, json) Hash identifier: aOTmtSNYNVIzCTt4CmJvoH1y2eNa/JdGP4+YaIu0QBU= Subject key identifier: 24:64:65:05:97:EF:7E:81:37:89:E9:3C:E9:79:88:5B:15:B0:FD:6E Authority key identifier: B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68 Certificate issuer: /CN=A91FA851/serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft Manifest number: F6 Signing time: Fri 09 May 2025 04:18:52 +0000 Manifest this update: Fri 09 May 2025 04:18:52 +0000 Manifest next update: Fri 16 May 2025 04:18:52 +0000 Files and hashes: 1: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl (hash: DHGYa3nfhR5blZqDkZlptEsUZRuSqn7E4lBR7Ybrvzo=) 2: 8FD49B16BAE411EE9198A471C4F9AE02.roa (hash: L0qfyKxG6EHzysnGwaUqdqXIinzIkFTO2ksscDrrvZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 04:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA851, serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968 Validity Not Before: May 9 04:18:52 2025 GMT Not After : May 16 04:18:52 2025 GMT Subject: CN=681d822c-5d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:75:e2:25:e5:4d:0b:5c:fc:54:3b:fe:c6:a9: 68:74:7e:85:50:4a:34:10:ef:fa:d6:9f:16:de:16: 8f:72:55:e0:cd:ba:3c:b1:56:52:3c:ae:12:a0:db: ff:7f:cf:e1:37:1c:15:3d:4c:90:aa:d5:b5:85:0c: 87:55:d0:3c:82:07:50:d6:80:8b:c6:d3:5b:4c:ea: 6d:51:30:06:5e:6c:27:b3:ab:a3:83:dc:a7:9c:e3: 4c:84:6c:a5:45:72:02:85:c6:20:14:83:56:e7:02: 79:b8:1c:13:84:b9:52:5f:15:14:5a:9e:a1:15:e5: c6:8e:38:02:e4:1c:31:1d:87:9f:af:de:3d:5c:98: 3b:d1:98:d1:c6:f4:6d:f7:38:e9:5c:18:26:8a:0d: 0e:ad:90:e3:5d:79:3a:75:56:b0:da:16:5c:92:5e: 6e:43:9b:3b:1b:b9:8d:ea:4d:9e:49:e8:6a:71:3c: ad:4a:20:cb:7b:53:38:36:1e:87:d6:cb:c7:87:22: 76:0e:23:7b:a3:a6:94:cd:9a:3a:30:af:de:2b:9a: 5d:f3:5b:b3:91:91:8e:06:85:fd:9f:3c:87:a4:9b: 58:fb:3d:9a:ba:55:48:31:d7:62:00:23:a4:9c:cd: 3e:93:fb:8e:b9:f4:cb:b8:99:27:ec:c9:a2:bf:2c: 51:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:64:65:05:97:EF:7E:81:37:89:E9:3C:E9:79:88:5B:15:B0:FD:6E X509v3 Authority Key Identifier: keyid:B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:a6:34:5e:c4:bd:a2:f5:77:d4:d9:2f:bb:89:f6:0e:ed:41: 1c:d8:1c:fe:c4:dc:02:b4:3c:a9:bc:01:6a:a7:06:a3:4a:05: b6:13:2e:dc:7e:60:07:0c:3e:0a:bc:57:58:b3:e4:e0:80:ea: e6:12:22:cb:fe:98:04:7f:ec:c5:2d:d4:94:69:06:46:f8:bf: 73:0b:e7:50:75:e3:a3:e5:bf:3a:94:fe:a0:eb:56:49:6a:01: ca:55:18:9e:93:de:22:cc:79:f6:2d:d2:f0:e5:7f:27:09:9a: 74:4f:d7:2f:2a:eb:0f:13:77:bf:62:b5:19:ce:05:ee:70:79: eb:b8:71:1c:c9:b4:2f:c1:59:c0:03:07:fd:f8:9d:c8:26:2c: a2:46:3e:a0:dc:5f:e0:61:b4:d2:c6:b4:fa:1e:ac:c9:4e:20: a2:9d:0e:39:09:00:27:02:47:36:1c:92:ac:86:19:00:42:0c: 81:b0:c8:14:71:65:1a:54:a1:b5:4c:45:03:36:ac:b4:25:ee: 86:49:72:d7:2c:ba:9e:e4:84:b4:a6:69:4d:2d:d2:02:8d:b0: 4c:c2:a5:3d:b0:74:15:75:2c:04:36:13:73:f9:bb:cd:34:58: 06:aa:88:e9:e3:a8:63:01:bd:25:da:f4:5e:bd:e3:95:77:ed: ec:fa:1e:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4NTExMTAvBgNVBAUTKEI5MjUwRkRFM0ZBQkQ1OUZBNTYwODIzMEZFQTdBMjND NEI0Qzg5NjgwHhcNMjUwNTA5MDQxODUyWhcNMjUwNTE2MDQxODUyWjAYMRYwFAYD VQQDEw02ODFkODIyYy01ZDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznXiJeVNC1z8VDv+xqlodH6FUEo0EO/61p8W3haPclXgzbo8sVZSPK4SoNv/ f8/hNxwVPUyQqtW1hQyHVdA8ggdQ1oCLxtNbTOptUTAGXmwns6ujg9ynnONMhGyl RXIChcYgFINW5wJ5uBwThLlSXxUUWp6hFeXGjjgC5BwxHYefr949XJg70ZjRxvRt 9zjpXBgmig0OrZDjXXk6dVaw2hZckl5uQ5s7G7mN6k2eSehqcTytSiDLe1M4Nh6H 1svHhyJ2DiN7o6aUzZo6MK/eK5pd81uzkZGOBoX9nzyHpJtY+z2aulVIMddiACOk nM0+k/uOufTLuJkn7MmivyxRGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRkZQWX 736BN4npPOl5iFsVsP1uMB8GA1UdIwQYMBaAFLklD94/q9WfpWCCMP6nojxLTIlo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTg1MS85NUE2MTE5Q0I5 REYxMUVFOTRCNDI0MkFDNEY5QUUwMi91U1VQM2otcjFaLWxZSUl3X3FlaVBFdE1p V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VTVVAzai1yMVotbFlJSXdfcWVpUEV0TWlXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTg1MS85NUE2MTE5Q0I5REYxMUVFOTRCNDI0MkFDNEY5QUUwMi91U1VQM2otcjFa LWxZSUl3X3FlaVBFdE1pV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSpjRexL2i9XfU2S+7ifYO7UEc2Bz+xNwCtDypvAFqpwajSgW2Ey7c fmAHDD4KvFdYs+TggOrmEiLL/pgEf+zFLdSUaQZG+L9zC+dQdeOj5b86lP6g61ZJ agHKVRiek94izHn2LdLw5X8nCZp0T9cvKusPE3e/YrUZzgXucHnruHEcybQvwVnA Awf9+J3IJiyiRj6g3F/gYbTSxrT6HqzJTiCinQ45CQAnAkc2HJKshhkAQgyBsMgU cWUaVKG1TEUDNqy0Je6GSXLXLLqe5IS0pmlNLdICjbBMwqU9sHQVdSwENhNz+bvN NFgGqojp46hjAb0l2vReveOVd+3s+h5G -----END CERTIFICATE-----Generated at Sun May 11 00:44:01 2025 by rpki-client