$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft File: xUK94Lg0fDed4d4dgkOpLLlMh00.mft (raw, json) Hash identifier: w33xBNy3Sng5nPzuIJKbtvtBuMM2z+HaPuQQFzFkfas= Subject key identifier: B3:5F:FD:76:7E:62:BF:0B:E9:9F:0A:D3:49:BD:0E:1D:4E:0E:07:31 Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D Certificate issuer: /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft Manifest number: F5 Signing time: Mon 05 May 2025 04:07:50 +0000 Manifest this update: Mon 05 May 2025 04:07:50 +0000 Manifest next update: Mon 12 May 2025 04:07:50 +0000 Files and hashes: 1: xUK94Lg0fDed4d4dgkOpLLlMh00.crl (hash: mWI/sYvd0oUza3My5pmoGdQQoKzbukO2QM4E2RGAljs=) 2: FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (hash: +xX3fyh3F9druR4nFxovnFPsJhxpAOsF0rFF0c+Rr5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 04:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB297, serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D Validity Not Before: May 5 04:07:50 2025 GMT Not After : May 12 04:07:50 2025 GMT Subject: CN=68183996-45e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:76:95:5c:57:56:ae:db:86:c7:62:3c:3e:22: 2b:05:35:f0:74:69:e8:53:0b:08:d8:de:1a:89:c8: 8a:39:4d:50:35:b4:1a:df:82:5e:20:09:45:eb:61: ae:8d:c5:21:0c:75:f8:d9:67:fe:69:e9:ec:30:b8: 3c:e7:c9:a6:ea:44:a9:0b:97:25:1c:67:c9:92:01: 4b:ce:49:2d:93:e4:77:65:ee:d1:41:4a:a8:3a:a1: a2:be:96:6f:20:29:16:04:c0:a0:67:50:0e:f5:24: 4c:0a:b1:3f:46:55:81:13:86:88:96:1a:01:53:b6: 48:61:bb:48:d4:95:8a:a9:a3:7a:a6:2c:2b:b1:78: 71:39:49:6c:64:f5:05:1c:f6:15:2d:fc:0a:50:00: 0a:1c:2a:39:c4:84:94:42:86:55:15:36:a5:a3:ab: 0f:1c:77:78:01:01:cb:af:bf:cb:36:fd:4e:15:26: 85:e4:a9:91:82:0d:fd:06:8c:ec:aa:0c:62:c0:bd: 41:d9:d2:ca:44:08:9f:a6:3b:ae:81:0f:d0:97:de: d9:8b:f9:cc:70:a8:40:e1:65:ca:eb:aa:be:6b:73: a9:ce:a4:d0:b9:eb:6a:cc:e6:64:f5:18:12:34:76: 64:44:98:2b:03:96:26:ce:40:ff:3e:47:b5:33:a1: 6c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5F:FD:76:7E:62:BF:0B:E9:9F:0A:D3:49:BD:0E:1D:4E:0E:07:31 X509v3 Authority Key Identifier: keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:f8:b9:ff:4d:c3:b0:b6:5c:e6:c1:0d:57:67:fb:9c:91:e7: e3:9d:2c:ba:de:71:1e:a9:ae:5c:89:0d:4b:52:60:b1:34:7b: 0e:68:b2:ef:aa:af:14:e3:1a:93:f2:e1:d9:00:54:c4:e4:ee: 84:a2:16:b3:b2:84:86:ec:bd:a5:15:d5:17:ed:19:d5:60:48: a7:90:aa:ef:ff:a1:a0:6a:d1:35:f6:8f:47:a4:9c:f5:fa:73: 05:82:aa:0b:9c:3e:fe:97:3d:0b:76:64:5b:3d:3b:bc:27:aa: 06:72:1e:11:c9:a5:4b:a3:a6:84:05:fd:33:bb:0e:de:7f:0f: 4c:16:4d:4b:6a:f5:2a:b9:d9:3d:81:33:20:0b:16:c4:8f:04: 8b:04:ba:9a:95:7a:de:60:18:fc:5b:50:b0:88:7b:a6:1c:a3: 67:8c:1a:8d:b4:fa:7c:b5:63:36:b7:82:85:97:38:86:b0:3b: fb:18:06:97:13:4c:5b:c4:30:0f:d1:ce:78:fb:ab:85:b2:0f: 08:eb:6f:a4:f9:92:98:38:6f:1c:24:d1:7b:0f:4a:fc:a5:2e: 80:6c:a6:d6:ed:aa:2c:47:7b:7d:ab:2a:e9:6c:af:c5:8b:cf: cd:1f:67:31:b2:c0:0c:ab:90:48:cd:2f:ff:56:f4:fa:a9:f7: 0a:12:89:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIyOTcxMTAvBgNVBAUTKEM1NDJCREUwQjgzNDdDMzc5REUxREUxRDgyNDNBOTJD Qjk0Qzg3NEQwHhcNMjUwNTA1MDQwNzUwWhcNMjUwNTEyMDQwNzUwWjAYMRYwFAYD VQQDEw02ODE4Mzk5Ni00NWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HaVXFdWrtuGx2I8PiIrBTXwdGnoUwsI2N4aiciKOU1QNbQa34JeIAlF62Gu jcUhDHX42Wf+aensMLg858mm6kSpC5clHGfJkgFLzkktk+R3Ze7RQUqoOqGivpZv ICkWBMCgZ1AO9SRMCrE/RlWBE4aIlhoBU7ZIYbtI1JWKqaN6piwrsXhxOUlsZPUF HPYVLfwKUAAKHCo5xISUQoZVFTalo6sPHHd4AQHLr7/LNv1OFSaF5KmRgg39Bozs qgxiwL1B2dLKRAifpjuugQ/Ql97Zi/nMcKhA4WXK66q+a3OpzqTQuetqzOZk9RgS NHZkRJgrA5YmzkD/Pke1M6FskQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNf/XZ+ Yr8L6Z8K00m9Dh1ODgcxMB8GA1UdIwQYMBaAFMVCveC4NHw3neHeHYJDqSy5TIdN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjI5Ny85QTg5MEU2RUI1 RTExMUVFQTBBNjE3NkRDNEY5QUUwMi94VUs5NExnMGZEZWQ0ZDRkZ2tPcExMbE1o MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVSzk0TGcwZkRlZDRkNGRna09wTExsTWgwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjI5Ny85QTg5MEU2RUI1RTExMUVFQTBBNjE3NkRDNEY5QUUwMi94VUs5NExnMGZE ZWQ0ZDRkZ2tPcExMbE1oMDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2+Ln/TcOwtlzmwQ1XZ/uckefjnSy63nEeqa5ciQ1LUmCxNHsOaLLv qq8U4xqT8uHZAFTE5O6EohazsoSG7L2lFdUX7RnVYEinkKrv/6GgatE19o9HpJz1 +nMFgqoLnD7+lz0LdmRbPTu8J6oGch4RyaVLo6aEBf0zuw7efw9MFk1LavUqudk9 gTMgCxbEjwSLBLqalXreYBj8W1CwiHumHKNnjBqNtPp8tWM2t4KFlziGsDv7GAaX E0xbxDAP0c54+6uFsg8I62+k+ZKYOG8cJNF7D0r8pS6AbKbW7aosR3t9qyrpbK/F i8/NH2cxssAMq5BIzS//VvT6qfcKEolM -----END CERTIFICATE-----Generated at Tue May 6 01:29:21 2025 by rpki-client