$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft File: u4g-aByWIiVDBg6XnT6Chuq2iok.mft (raw, json) Hash identifier: ZR6WWZmU9O0V06Hx3tSccJJ//j2b7RfHEeI0E0LhDxE= Subject key identifier: A3:C6:E1:1D:32:5E:65:5F:6B:F9:2B:0D:01:4F:38:23:C3:83:8B:99 Authority key identifier: BB:88:3E:68:1C:96:22:25:43:06:0E:97:9D:3E:82:86:EA:B6:8A:89 Certificate issuer: /CN=A91A4413/serialNumber=BB883E681C96222543060E979D3E8286EAB68A89 Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4g-aByWIiVDBg6XnT6Chuq2iok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft Manifest number: 0220 Signing time: Sat 29 Mar 2025 02:12:08 +0000 Manifest this update: Sat 29 Mar 2025 02:12:07 +0000 Manifest next update: Sat 05 Apr 2025 02:12:07 +0000 Files and hashes: 1: u4g-aByWIiVDBg6XnT6Chuq2iok.crl (hash: 4+hvdsv8ho9iH/YaRWA0lXUd6X8Lzg3RgqUfiSSTxy4=) 2: 3D3C7DC8236A11ED8018D62BC4F9AE02.roa (hash: ulvwJEE9TrSCR3alPiPFyCbLR3kKPVNTCzyUzxRhzpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.crl rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4g-aByWIiVDBg6XnT6Chuq2iok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4413 Validity Not Before: Mar 29 02:12:07 2025 GMT Not After : Apr 5 02:12:07 2025 GMT Subject: CN=67e756f8-982e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:31:3e:5c:87:3d:a8:fe:1d:9c:56:5b:bf:f7: 63:c7:60:66:e3:66:2a:3d:86:73:91:7c:d0:5e:65: b7:08:b6:02:7d:5b:47:1d:e5:13:2d:ca:24:b8:e6: e7:38:23:11:42:3b:22:22:30:c2:28:1e:be:7b:e6: 48:2c:e6:33:f9:3d:5b:ed:f2:bd:77:79:00:13:b1: ed:6b:0c:7f:52:14:fd:db:bd:db:30:d7:5a:d9:86: 3f:2a:31:ab:b6:8d:30:48:fa:e6:a2:6e:67:4b:d4: ce:80:64:d2:24:17:b1:11:07:0f:de:57:f4:64:af: e2:c4:55:91:9d:b4:ec:fe:bb:d0:a4:e7:83:a7:d3: 3c:99:cf:a4:8c:b5:9d:11:27:04:a9:85:a8:7f:f9: b4:32:72:d5:c5:c7:91:33:d7:48:ca:68:ad:4d:76: 9f:68:7a:dd:63:8e:7b:8f:00:1c:e4:d3:69:f5:ca: e7:ed:a3:a7:5c:57:31:28:87:57:93:ad:9f:62:81: 6d:c8:bb:64:0b:76:e0:e0:d0:27:fb:fa:70:69:75: 03:bc:22:46:0e:bd:b3:43:79:70:03:94:16:40:30: 79:b6:62:cb:48:70:8b:4a:d8:a2:33:da:56:62:c5: 1f:4b:9a:11:f3:5e:b6:0a:a2:1b:b8:ac:d0:bd:dd: f5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C6:E1:1D:32:5E:65:5F:6B:F9:2B:0D:01:4F:38:23:C3:83:8B:99 X509v3 Authority Key Identifier: keyid:BB:88:3E:68:1C:96:22:25:43:06:0E:97:9D:3E:82:86:EA:B6:8A:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4g-aByWIiVDBg6XnT6Chuq2iok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:89:a9:64:03:02:af:e9:a2:ab:f0:30:6d:27:9c:f3:26:d7: aa:06:6d:7b:d2:e0:12:76:5b:e3:a6:b6:ab:b3:7c:09:b4:f4: d6:cd:bc:03:a4:fa:dc:13:da:71:99:d1:c6:f4:d1:ed:1e:c9: da:e8:e5:0d:c5:aa:c3:f9:70:8e:c3:f4:00:ed:b5:84:f1:08: df:5e:64:8a:df:1f:b0:84:b9:29:b8:1a:cd:63:ab:2b:bf:9a: d6:07:c0:d4:05:5d:3f:bd:68:91:14:60:3c:a0:0a:4b:c6:8a: 30:e7:57:80:cd:6a:9f:c5:70:48:17:fb:21:cb:95:12:71:4e: 16:78:67:9f:ac:31:01:6f:3c:36:6c:67:b8:c3:08:2e:8d:b2: 11:a8:22:f3:3e:c3:9d:56:01:09:6f:73:2d:ac:c7:c0:b9:2e: 6e:4c:88:76:be:1c:c5:00:58:f3:55:cc:5c:12:e4:1c:c9:f2: 45:d2:83:7f:63:40:f9:d5:a4:46:63:46:75:bc:04:82:9d:d4: 23:f7:f9:60:cc:26:5a:54:92:70:c7:50:a0:28:ab:ad:da:16: 8c:39:df:bb:c3:e3:35:4f:ce:ef:dc:b0:c7:8d:98:89:19:2c: 32:88:8a:da:01:02:6e:7b:70:be:5a:2c:a0:0e:59:15:24:71: 20:36:4e:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MTMxMTAvBgNVBAUTKEJCODgzRTY4MUM5NjIyMjU0MzA2MEU5NzlEM0U4Mjg2 RUFCNjhBODkwHhcNMjUwMzI5MDIxMjA3WhcNMjUwNDA1MDIxMjA3WjAYMRYwFAYD VQQDEw02N2U3NTZmOC05ODJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5DE+XIc9qP4dnFZbv/djx2Bm42YqPYZzkXzQXmW3CLYCfVtHHeUTLcokuObn OCMRQjsiIjDCKB6+e+ZILOYz+T1b7fK9d3kAE7Htawx/UhT9273bMNda2YY/KjGr to0wSPrmom5nS9TOgGTSJBexEQcP3lf0ZK/ixFWRnbTs/rvQpOeDp9M8mc+kjLWd EScEqYWof/m0MnLVxceRM9dIymitTXafaHrdY457jwAc5NNp9crn7aOnXFcxKIdX k62fYoFtyLtkC3bg4NAn+/pwaXUDvCJGDr2zQ3lwA5QWQDB5tmLLSHCLStiiM9pW YsUfS5oR8162CqIbuKzQvd31vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPG4R0y XmVfa/krDQFPOCPDg4uZMB8GA1UdIwQYMBaAFLuIPmgcliIlQwYOl50+gobqtoqJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQxMy8yMDAwMkMxMjIz NjcxMUVEOTdDMkVGMjdDNEY5QUUwMi91NGctYUJ5V0lpVkRCZzZYblQ2Q2h1cTJp b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U0Zy1hQnlXSWlWREJnNlhuVDZDaHVxMmlvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQxMy8yMDAwMkMxMjIzNjcxMUVEOTdDMkVGMjdDNEY5QUUwMi91NGctYUJ5V0lp VkRCZzZYblQ2Q2h1cTJpb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArialkAwKv6aKr8DBtJ5zzJteqBm170uASdlvjprars3wJtPTWzbwD pPrcE9pxmdHG9NHtHsna6OUNxarD+XCOw/QA7bWE8QjfXmSK3x+whLkpuBrNY6sr v5rWB8DUBV0/vWiRFGA8oApLxoow51eAzWqfxXBIF/shy5UScU4WeGefrDEBbzw2 bGe4wwgujbIRqCLzPsOdVgEJb3MtrMfAuS5uTIh2vhzFAFjzVcxcEuQcyfJF0oN/ Y0D51aRGY0Z1vASCndQj9/lgzCZaVJJwx1CgKKut2haMOd+7w+M1T87v3LDHjZiJ GSwyiIraAQJue3C+WiygDlkVJHEgNk4U -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:50 2025 by rpki-client