$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft File: uG8rXtaXoSH08p1YIDcs8UBVEgs.mft (raw, json) Hash identifier: 7SYzMzRiZTrvR5aPtiI0NVOTLIJOMFZqjANzf2E6TwQ= Subject key identifier: F3:1C:FE:14:34:2E:90:5D:F5:3B:0F:B4:3E:BA:E5:EA:C9:2C:C7:24 Authority key identifier: B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B Certificate issuer: /CN=A91AF0C6/serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft Manifest number: 0134 Signing time: Sat 05 Apr 2025 03:51:58 +0000 Manifest this update: Sat 05 Apr 2025 03:51:58 +0000 Manifest next update: Sat 12 Apr 2025 03:51:58 +0000 Files and hashes: 1: uG8rXtaXoSH08p1YIDcs8UBVEgs.crl (hash: KYbm/y6EJl/umz7n5QRg6GKhbLBIPijzVdL6fztJCMM=) 2: A915A3543FEC11EE99AC0F43C4F9AE02.roa (hash: go8uCjvo0RCrR73Y9GSlxE8uDTmJOu4MaZ77GeOcrFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0C6 Validity Not Before: Apr 5 03:51:58 2025 GMT Not After : Apr 12 03:51:58 2025 GMT Subject: CN=67f0a8de-8424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3d:7c:5f:e5:a8:1b:bc:80:ff:e4:94:36:6e: 14:bf:c6:3d:6b:df:9e:bd:fa:c2:05:de:12:60:18: 54:d0:56:5b:94:28:72:3c:3f:e6:a8:c3:71:26:bb: 3e:3b:84:7c:86:b8:b0:62:f8:de:a9:5f:cd:7f:44: e2:3d:07:18:b4:e2:6e:e7:05:33:b5:15:3b:15:36: 67:29:e9:f6:ad:4b:fe:a7:21:32:43:74:03:a2:2e: 07:8a:03:46:ee:8c:51:ab:e2:d2:d3:e3:ba:03:a7: a5:b4:23:bd:38:4a:3d:bd:a7:e7:6f:7c:c6:e9:5f: b2:f5:69:43:80:7b:66:a7:51:c4:e5:d6:4e:7b:24: 20:bb:97:4c:aa:70:07:c1:27:f8:89:ba:a6:bd:bf: 8b:80:95:da:7b:06:6c:79:e1:a7:21:e4:19:d2:ab: 62:df:c6:91:1d:25:86:84:f0:2b:bc:e2:9d:a0:1f: 13:74:f1:ce:34:96:f2:52:70:d4:ad:78:a9:ba:59: ae:6a:3d:61:07:10:e2:16:3d:ce:fd:91:41:54:9e: 0c:dd:8f:b1:40:c5:0b:2f:3a:cd:ca:b5:3d:98:b5: 92:a6:69:e7:54:d1:f8:92:77:60:49:56:a1:71:ee: b8:d5:df:5c:13:8c:93:98:c8:a1:a7:18:6a:bc:9c: 4f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1C:FE:14:34:2E:90:5D:F5:3B:0F:B4:3E:BA:E5:EA:C9:2C:C7:24 X509v3 Authority Key Identifier: keyid:B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:e8:4f:32:aa:9a:75:62:30:56:73:b0:e2:1a:66:45:bd:78: 8d:28:07:bf:5a:26:3b:96:6c:af:96:a0:4a:27:66:9e:97:49: 05:71:83:09:b8:07:4b:31:c7:0a:73:ad:a1:f8:db:af:bb:32: bb:f7:b5:87:12:33:c5:ca:8c:35:61:58:75:95:a0:86:b6:13: 51:87:7f:32:b8:a3:6d:48:0c:35:17:21:e4:8e:b7:85:24:76: 68:ed:9e:bb:b5:c6:d6:c2:fd:d1:4c:9f:cf:b8:56:51:d6:1a: 77:e9:fd:8a:29:24:1f:3e:9f:d6:53:dc:5f:fa:69:23:fd:49: 17:f1:25:81:be:82:64:2a:bc:20:c7:be:13:d1:5d:d8:a0:33: 84:4a:02:6a:dd:a3:97:20:b6:e3:7c:dd:c1:ed:a5:c9:5f:cb: 1e:8a:da:8b:4b:31:82:bb:2b:54:7a:2e:cd:4f:aa:14:66:2d: d3:81:36:fe:d8:ed:4e:d6:95:28:27:ae:2b:fb:5f:17:d4:01: 5c:df:b7:99:ac:05:c4:7e:43:b4:4c:9c:d4:f8:4b:3a:b4:b5: 99:8b:dc:e0:db:3e:e2:59:3a:61:8f:30:6b:c4:80:2e:e6:0b: bd:90:24:80:ac:89:ac:ef:b6:64:74:d0:9a:05:df:fa:57:b5: c3:13:35:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQzYxMTAvBgNVBAUTKEI4NkYyQjVFRDY5N0ExMjFGNEYyOUQ1ODIwMzcyQ0Yx NDA1NTEyMEIwHhcNMjUwNDA1MDM1MTU4WhcNMjUwNDEyMDM1MTU4WjAYMRYwFAYD VQQDEw02N2YwYThkZS04NDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2z18X+WoG7yA/+SUNm4Uv8Y9a9+evfrCBd4SYBhU0FZblChyPD/mqMNxJrs+ O4R8hriwYvjeqV/Nf0TiPQcYtOJu5wUztRU7FTZnKen2rUv+pyEyQ3QDoi4HigNG 7oxRq+LS0+O6A6eltCO9OEo9vafnb3zG6V+y9WlDgHtmp1HE5dZOeyQgu5dMqnAH wSf4ibqmvb+LgJXaewZseeGnIeQZ0qti38aRHSWGhPArvOKdoB8TdPHONJbyUnDU rXipulmuaj1hBxDiFj3O/ZFBVJ4M3Y+xQMULLzrNyrU9mLWSpmnnVNH4kndgSVah ce641d9cE4yTmMihpxhqvJxPOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMc/hQ0 LpBd9TsPtD665erJLMckMB8GA1UdIwQYMBaAFLhvK17Wl6Eh9PKdWCA3LPFAVRIL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBDNi8zRkNFQkQyMjNG RUMxMUVFQURGNUQzMzhDNEY5QUUwMi91RzhyWHRhWG9TSDA4cDFZSURjczhVQlZF Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VHOHJYdGFYb1NIMDhwMVlJRGNzOFVCVkVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBDNi8zRkNFQkQyMjNGRUMxMUVFQURGNUQzMzhDNEY5QUUwMi91RzhyWHRhWG9T SDA4cDFZSURjczhVQlZFZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA16E8yqpp1YjBWc7DiGmZFvXiNKAe/WiY7lmyvlqBKJ2ael0kFcYMJ uAdLMccKc62h+NuvuzK797WHEjPFyow1YVh1laCGthNRh38yuKNtSAw1FyHkjreF JHZo7Z67tcbWwv3RTJ/PuFZR1hp36f2KKSQfPp/WU9xf+mkj/UkX8SWBvoJkKrwg x74T0V3YoDOESgJq3aOXILbjfN3B7aXJX8seitqLSzGCuytUei7NT6oUZi3TgTb+ 2O1O1pUoJ64r+18X1AFc37eZrAXEfkO0TJzU+Es6tLWZi9zg2z7iWTphjzBrxIAu 5gu9kCSArIms77ZkdNCaBd/6V7XDEzWM -----END CERTIFICATE-----Generated at Sat Apr 5 16:23:28 2025 by rpki-client