$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft File: uV2VSq65WdNCfBB2qfV98hw4v8w.mft (raw, json) Hash identifier: OSbBvv9B+ciJAvKzBrGbcl6Yd1bScI1pxLgqG7aMyAw= Subject key identifier: 71:76:C1:71:40:B7:D3:F6:82:A0:17:BD:1A:49:96:9C:F4:F3:EA:49 Authority key identifier: B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC Certificate issuer: /CN=A91FBD28/serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC Certificate serial: 26B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft Manifest number: 2692 Signing time: Fri 16 May 2025 15:54:36 +0000 Manifest this update: Fri 16 May 2025 15:54:36 +0000 Manifest next update: Fri 23 May 2025 15:54:36 +0000 Files and hashes: 1: uV2VSq65WdNCfBB2qfV98hw4v8w.crl (hash: b96KgsuDWIPJlwnE7pDYRCjES+AjGBk9Th+SAWGgGgc=) 2: 94688318A57B11EA964E0C3DC4F9AE02.roa (hash: qb9PKTbJFEWjVkrorFJajJwU9G8YZ7gNAVQpMrR1dv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 15:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9905 (0x26b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD28, serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC Validity Not Before: May 16 15:54:36 2025 GMT Not After : May 23 15:54:36 2025 GMT Subject: CN=68275fbc-7980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:66:94:69:23:a0:81:bb:ce:fb:0b:fa:0d:e6: d8:2d:2e:2b:6b:d8:43:67:f1:0c:df:e1:22:b0:98: 42:b6:7b:06:70:5a:ae:e4:cc:0f:22:90:ad:aa:a2: 95:f8:80:cb:de:11:d7:1a:29:f2:c1:16:fe:45:29: 07:60:3c:fc:f7:d8:dc:30:d2:b8:18:59:a9:2d:20: 33:5e:57:26:d1:ce:2f:6e:4c:4c:f8:88:45:cd:7e: 2a:2b:fc:af:93:13:84:1b:00:12:4a:ab:35:c4:2d: 23:4b:20:92:fa:2a:53:06:8d:c3:54:42:85:9a:af: f0:04:2b:da:04:35:c9:2d:99:85:fe:f3:92:48:37: c3:33:54:17:26:20:8a:2c:21:e6:f3:62:18:48:52: cb:1b:c3:a5:71:af:79:83:fe:cf:fb:6d:b8:16:7b: a2:f8:13:89:d3:09:5a:9c:2c:47:30:cf:d8:c0:2b: 6d:c6:23:7e:da:9e:17:32:af:cf:76:7f:fe:0b:ba: c2:56:eb:e7:be:e3:e9:04:1c:a2:5c:3d:a0:64:8b: 04:43:16:3e:4a:05:60:bd:23:a0:87:ae:a3:8a:7f: 02:8a:f5:35:62:be:90:8e:95:5f:ae:94:ce:cb:ad: bd:ee:de:e6:2b:9f:25:f3:a2:18:48:e1:49:fe:8d: 2b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:76:C1:71:40:B7:D3:F6:82:A0:17:BD:1A:49:96:9C:F4:F3:EA:49 X509v3 Authority Key Identifier: keyid:B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:ec:92:f2:8a:e2:c8:73:d9:9b:23:19:3e:0c:25:2e:68:a3: 20:90:2c:e1:99:57:b3:42:f5:3f:5d:3d:ec:7c:09:1d:a8:f2: 64:39:da:bb:d8:9c:79:1b:f2:4b:22:9d:f4:52:78:8a:af:11: fc:27:25:e1:fb:32:b0:83:fd:43:94:c5:d6:29:48:08:12:64: 6c:6a:e4:ed:79:9d:e9:fc:85:7c:3d:93:ae:23:1b:66:64:d4: 87:20:52:b6:29:68:7c:62:da:db:d7:ac:64:16:08:e2:68:99: a2:8c:f8:6d:59:c1:9b:12:2c:c4:a6:21:4f:0a:0f:ed:02:12: df:93:4a:3d:01:aa:8a:e1:c0:fc:cc:9d:de:90:ae:81:dd:96: ae:c0:38:29:c5:7f:c5:fc:82:43:95:ea:b5:bb:e1:2d:11:9a: de:92:34:a4:99:8a:b2:2d:35:88:00:68:bd:55:4a:cf:b2:46: 3e:d0:f4:cc:f3:bd:4c:ce:eb:a1:88:12:7c:11:cf:b3:4e:9f: 98:65:ff:97:af:02:7d:78:a6:aa:52:e3:11:c7:f3:d0:c6:42: c6:03:0e:32:2c:74:c4:bf:65:6f:21:9f:0f:48:62:93:3d:c3: 45:a3:3a:74:23:7d:b7:07:a4:2d:39:59:02:fd:9e:77:bd:6b: 31:cc:26:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEMjgxMTAvBgNVBAUTKEI5NUQ5NTRBQUVCOTU5RDM0MjdDMTA3NkE5RjU3REYy MUMzOEJGQ0MwHhcNMjUwNTE2MTU1NDM2WhcNMjUwNTIzMTU1NDM2WjAYMRYwFAYD VQQDEw02ODI3NWZiYy03OTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+WaUaSOggbvO+wv6DebYLS4ra9hDZ/EM3+EisJhCtnsGcFqu5MwPIpCtqqKV +IDL3hHXGinywRb+RSkHYDz899jcMNK4GFmpLSAzXlcm0c4vbkxM+IhFzX4qK/yv kxOEGwASSqs1xC0jSyCS+ipTBo3DVEKFmq/wBCvaBDXJLZmF/vOSSDfDM1QXJiCK LCHm82IYSFLLG8Olca95g/7P+224Fnui+BOJ0wlanCxHMM/YwCttxiN+2p4XMq/P dn/+C7rCVuvnvuPpBByiXD2gZIsEQxY+SgVgvSOgh66jin8CivU1Yr6QjpVfrpTO y6297t7mK58l86IYSOFJ/o0r2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHF2wXFA t9P2gqAXvRpJlpz08+pJMB8GA1UdIwQYMBaAFLldlUquuVnTQnwQdqn1ffIcOL/M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQyOC9FNkNFRDcyMkUx QjAxMUU0OEMyRERFMTZDNEY5QUUwMi91VjJWU3E2NVdkTkNmQkIycWZWOThodzR2 OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VWMlZTcTY1V2ROQ2ZCQjJxZlY5OGh3NHY4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQyOC9FNkNFRDcyMkUxQjAxMUU0OEMyRERFMTZDNEY5QUUwMi91VjJWU3E2NVdk TkNmQkIycWZWOThodzR2OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl7JLyiuLIc9mbIxk+DCUuaKMgkCzhmVezQvU/XT3sfAkdqPJkOdq7 2Jx5G/JLIp30UniKrxH8JyXh+zKwg/1DlMXWKUgIEmRsauTteZ3p/IV8PZOuIxtm ZNSHIFK2KWh8Ytrb16xkFgjiaJmijPhtWcGbEizEpiFPCg/tAhLfk0o9AaqK4cD8 zJ3ekK6B3ZauwDgpxX/F/IJDleq1u+EtEZrekjSkmYqyLTWIAGi9VUrPskY+0PTM 871MzuuhiBJ8Ec+zTp+YZf+XrwJ9eKaqUuMRx/PQxkLGAw4yLHTEv2VvIZ8PSGKT PcNFozp0I323B6QtOVkC/Z53vWsxzCbj -----END CERTIFICATE-----Generated at Sat May 17 08:01:47 2025 by rpki-client