$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json) Hash identifier: 8LbysdbMfzPQyC44/ndnC6QyLwNRhnzF2OMf73TnpaI= Subject key identifier: CC:63:95:18:D5:F1:14:CA:8A:37:49:32:4B:76:8D:19:03:5E:A3:98 Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Certificate serial: 05D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft Manifest number: 05C0 Signing time: Wed 02 Apr 2025 23:08:44 +0000 Manifest this update: Wed 02 Apr 2025 23:08:43 +0000 Manifest next update: Wed 09 Apr 2025 23:08:43 +0000 Files and hashes: 1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: zDDejuijbFup5FjT8E2tVQHESeHebAxosua7+th9j3I=) 2: F44E1EECCD8411EF88CD1464C4F9AE02.roa (hash: Uj/tJ2o/egSIWJbBUqkfA8auaTm16HYRNl+nWPDfAoI=) 3: F4C73FCACD8411EF88CD1464C4F9AE02.roa (hash: PxDO4VTqkJE0qh5LgB+HtLTymtGod5Csv1yR3jaUe74=) 4: 2DA0EDF6D08211EE80549C7AC4F9AE02.roa (hash: 73co3C0iTnetW8JGAPxK20O1CS3CEBA8PjgSk19an5E=) 5: F559B7E2CD8411EF88CD1464C4F9AE02.roa (hash: jc65tVH8VKeTvFl9hbBbitAygl32MCK4pl0R8W9pDPs=) 6: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: AWVqUvaQKvhhdFl5DbWgiaCZR2uWcOJNrG+aDzp0leA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1495 (0x5d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7761 Validity Not Before: Apr 2 23:08:43 2025 GMT Not After : Apr 9 23:08:43 2025 GMT Subject: CN=67edc37b-f2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8c:58:a3:90:ba:1f:83:8e:57:05:10:c1:ca: 6b:bc:68:1d:43:fa:29:66:27:1f:56:65:17:3e:91: b3:c4:54:00:d2:c6:4c:cc:00:93:12:76:7f:06:2a: 3a:6d:2f:ab:14:39:d4:26:25:8f:54:a5:9a:88:2e: d3:82:33:92:75:38:73:34:ca:4d:d1:d1:ad:29:93: 3e:11:7d:51:8f:e1:1e:64:ae:0f:a9:98:8f:28:38: 54:38:ae:c2:03:eb:9b:ed:49:7d:c4:9e:da:21:bb: ee:1d:ed:9a:29:4a:49:d6:a7:fd:7e:77:4e:1d:ae: be:86:a8:b2:a8:fd:6c:84:98:e0:8d:a2:82:b1:fb: 2f:87:05:e5:ed:3e:cf:6b:9e:cc:89:1d:e7:07:e8: df:2f:2b:36:df:38:6a:f1:56:c0:ab:8a:7e:c9:dd: 80:58:d2:b1:8e:7a:d7:86:07:c7:97:bf:40:be:c6: 14:7a:25:32:9b:e9:58:80:ec:f1:f6:47:77:b0:e5: 18:0f:3f:e9:1f:0d:7a:7a:9b:d7:44:a1:13:cc:01: f1:f2:a9:db:52:62:2f:73:ac:b8:da:20:ee:b4:f5: 71:56:c4:a1:1f:92:dd:ac:cf:e4:86:2c:d3:1a:92: 2c:9d:2c:ec:11:bb:20:e9:0d:eb:a7:de:94:41:fe: 48:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:63:95:18:D5:F1:14:CA:8A:37:49:32:4B:76:8D:19:03:5E:A3:98 X509v3 Authority Key Identifier: keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:04:7c:32:e5:d6:e1:ed:cc:b6:f3:85:9c:6f:88:56:81:0a: 7e:95:d9:8c:a0:e7:0a:19:fe:23:72:3c:90:ee:c3:8c:38:d4: 35:8a:d9:a3:2f:6a:d7:cd:fa:f5:ac:dc:a7:5d:52:22:3c:f1: 4a:65:18:3f:f5:3c:44:dd:c2:da:d4:7f:56:fd:9d:b3:c2:fa: d2:5f:13:ad:b1:64:ec:32:f1:b6:80:aa:5c:9d:27:43:0a:e2: f6:84:61:da:5b:5a:40:de:d0:f9:a4:4a:14:53:b1:32:bc:80: 4d:bf:45:39:0f:53:8d:b0:ba:a1:a8:c2:86:58:34:5a:67:ce: 16:b4:d5:e3:96:a5:7a:48:dc:02:17:60:8a:25:27:27:22:ae: 8b:e0:f7:27:ea:57:47:41:eb:97:f7:6c:23:94:67:15:e0:1a: 87:fd:2d:7f:6b:e6:81:00:69:fa:3e:66:fd:77:d3:01:16:c2: da:d5:97:2c:bf:b0:65:da:3c:75:c7:e4:66:88:5f:7e:69:e1: 54:10:e2:b0:29:20:82:79:59:b9:c6:e7:35:86:cf:f4:4f:33: 9d:3d:f2:dc:17:ac:bf:f1:fa:8d:b7:87:07:3e:bb:c2:23:0b: 84:0a:0b:91:f4:da:71:bf:6d:4a:25:20:07:7c:f9:0f:31:16: e8:cf:11:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc3NjExMTAvBgNVBAUTKDUxRDVDQzJENUU0MjhGQzk1NTE0OUY1NzYyMTE5MDRG MDVCQUYyMTEwHhcNMjUwNDAyMjMwODQzWhcNMjUwNDA5MjMwODQzWjAYMRYwFAYD VQQDEw02N2VkYzM3Yi1mMmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24xYo5C6H4OOVwUQwcprvGgdQ/opZicfVmUXPpGzxFQA0sZMzACTEnZ/Bio6 bS+rFDnUJiWPVKWaiC7TgjOSdThzNMpN0dGtKZM+EX1Rj+EeZK4PqZiPKDhUOK7C A+ub7Ul9xJ7aIbvuHe2aKUpJ1qf9fndOHa6+hqiyqP1shJjgjaKCsfsvhwXl7T7P a57MiR3nB+jfLys23zhq8VbAq4p+yd2AWNKxjnrXhgfHl79AvsYUeiUym+lYgOzx 9kd3sOUYDz/pHw16epvXRKETzAHx8qnbUmIvc6y42iDutPVxVsShH5LdrM/khizT GpIsnSzsEbsg6Q3rp96UQf5IzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxjlRjV 8RTKijdJMkt2jRkDXqOYMB8GA1UdIwQYMBaAFFHVzC1eQo/JVRSfV2IRkE8FuvIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzc2MS8wRTRCOTE2OEJE MzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4bFZGSjlYWWhHUVR3VzY4 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkWE1MVjVDajhsVkZKOVhZaEdRVHdXNjhoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzc2MS8wRTRCOTE2OEJEMzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4 bFZGSjlYWWhHUVR3VzY4aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTBHwy5dbh7cy284Wcb4hWgQp+ldmMoOcKGf4jcjyQ7sOMONQ1itmj L2rXzfr1rNynXVIiPPFKZRg/9TxE3cLa1H9W/Z2zwvrSXxOtsWTsMvG2gKpcnSdD CuL2hGHaW1pA3tD5pEoUU7EyvIBNv0U5D1ONsLqhqMKGWDRaZ84WtNXjlqV6SNwC F2CKJScnIq6L4Pcn6ldHQeuX92wjlGcV4BqH/S1/a+aBAGn6Pmb9d9MBFsLa1Zcs v7Bl2jx1x+RmiF9+aeFUEOKwKSCCeVm5xuc1hs/0TzOdPfLcF6y/8fqNt4cHPrvC IwuECguR9Npxv21KJSAHfPkPMRbozxHR -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:10 2025 by rpki-client