$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft File: uoXZHSSsqengMR5VLb83WXY6Yro.mft (raw, json) Hash identifier: 2A2DHdAOgnYBhJJeGHSjB+wEAfVFh8okUo+eVAtwx6I= Subject key identifier: C9:28:55:8F:71:D4:64:A2:EF:34:CB:A7:40:B9:62:67:F5:6C:E5:8B Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA Certificate issuer: /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft Manifest number: 8A Signing time: Wed 09 Apr 2025 05:21:37 +0000 Manifest this update: Wed 09 Apr 2025 05:21:36 +0000 Manifest next update: Wed 16 Apr 2025 05:21:36 +0000 Files and hashes: 1: uoXZHSSsqengMR5VLb83WXY6Yro.crl (hash: N2j9nqWtZLmahm7Hfg9dvRqmFoafpSKBK+v8zHqlgf4=) 2: C57D59A8457011EFA624C172C4F9AE02.roa (hash: ID73Pz3s55NAjs8USBhRX9L9yvmp5FUr9fdsYXFscuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B391F Validity Not Before: Apr 9 05:21:36 2025 GMT Not After : Apr 16 05:21:36 2025 GMT Subject: CN=67f603e1-b6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:33:e5:ad:94:40:9d:27:be:b5:63:86:ec:6e: fc:d2:51:2c:5b:c7:78:ae:82:ef:87:9e:6a:45:ce: 8e:0e:d0:ca:b1:fc:b7:13:ce:fa:7a:26:98:82:54: ab:20:d6:50:14:9c:bc:8a:b3:00:7d:25:ef:87:31: dd:99:2f:75:e9:f1:c9:f8:96:ec:0e:52:ad:d0:fe: d9:92:b4:6b:55:b1:aa:10:5a:c4:b0:bf:0d:cc:85: 19:bc:61:98:c9:b1:e3:92:fc:06:5a:ea:5a:35:95: 63:ad:9f:6b:f1:99:dc:f6:38:30:cd:ca:ef:ff:51: aa:54:04:30:79:d7:2d:18:f8:ee:c9:79:dd:fe:a1: ed:8e:01:6f:8a:fe:f2:29:fa:30:dc:f5:38:c4:e2: 6e:d2:8b:de:0e:75:c8:93:e6:a1:0e:68:7c:a6:af: c7:14:63:f1:1b:2e:f9:e3:66:df:e5:68:4a:50:f7: 66:e8:b0:85:13:5e:ae:83:d2:02:96:52:97:78:62: 67:d1:70:29:92:33:76:f3:89:67:36:ca:51:7c:e7: 02:ce:2a:31:28:63:1e:45:e1:37:45:e1:de:a9:0f: 5d:86:8b:f2:9c:4b:eb:da:f3:9f:18:9e:ac:43:47: 10:52:bc:73:00:b0:aa:e6:4e:8e:b3:46:c7:c8:9e: 24:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:28:55:8F:71:D4:64:A2:EF:34:CB:A7:40:B9:62:67:F5:6C:E5:8B X509v3 Authority Key Identifier: keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:61:66:b8:7e:19:93:3f:33:14:27:35:7a:79:2c:8d:2d:29: 92:fb:04:0b:f4:d3:91:5e:cb:11:a7:a2:a7:02:f2:c4:6c:b6: f6:eb:89:fe:89:7d:02:2b:5c:77:9c:0e:d1:4f:ca:52:6c:1a: 79:c2:0e:2f:f1:fb:e5:f3:aa:d4:20:45:a8:8f:ef:31:1b:01: 56:5c:d2:50:a8:a4:23:de:55:2a:17:54:7c:39:4b:f1:d2:fd: c4:70:02:b1:fb:f8:b6:4f:24:81:c6:52:6d:e3:9d:b7:e1:41: fc:8d:4f:24:d8:5b:00:44:f0:4d:ef:f0:ff:3b:5a:67:91:10: ae:91:e5:55:8f:6d:0d:11:d3:19:ab:e8:4a:ea:0d:08:34:a2: d5:d9:88:43:7a:1e:8d:d0:cb:a6:bf:f7:e0:6e:20:ad:02:54: ca:bf:c9:83:8a:d1:a0:e4:6b:20:0a:73:73:08:c0:fc:48:3c: b1:0e:b8:94:90:26:ed:71:0a:25:1e:c5:57:84:7a:b0:f4:d4: 53:4d:d6:f6:e5:97:a9:fb:df:e2:17:0a:29:55:81:78:2e:d2: 71:9c:62:67:2b:bd:01:5c:47:c1:97:e3:02:14:14:a7:86:70: 2e:65:37:66:16:0f:ef:c4:36:54:9d:e8:8a:0d:dc:c5:ac:e2: 6d:4d:58:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM5MUYxMTAvBgNVBAUTKEJBODVEOTFEMjRBQ0E5RTlFMDMxMUU1NTJEQkYzNzU5 NzYzQTYyQkEwHhcNMjUwNDA5MDUyMTM2WhcNMjUwNDE2MDUyMTM2WjAYMRYwFAYD VQQDEw02N2Y2MDNlMS1iNmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6zPlrZRAnSe+tWOG7G780lEsW8d4roLvh55qRc6ODtDKsfy3E876eiaYglSr INZQFJy8irMAfSXvhzHdmS916fHJ+JbsDlKt0P7ZkrRrVbGqEFrEsL8NzIUZvGGY ybHjkvwGWupaNZVjrZ9r8Znc9jgwzcrv/1GqVAQwedctGPjuyXnd/qHtjgFviv7y Kfow3PU4xOJu0oveDnXIk+ahDmh8pq/HFGPxGy7542bf5WhKUPdm6LCFE16ug9IC llKXeGJn0XApkjN284lnNspRfOcCzioxKGMeReE3ReHeqQ9dhovynEvr2vOfGJ6s Q0cQUrxzALCq5k6Os0bHyJ4k3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkoVY9x 1GSi7zTLp0C5Ymf1bOWLMB8GA1UdIwQYMBaAFLqF2R0krKnp4DEeVS2/N1l2OmK6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzkxRi81MDgzNUU2ODQ1 NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi91b1haSFNTc3FlbmdNUjVWTGI4M1dYWTZZ cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VvWFpIU1NzcWVuZ01SNVZMYjgzV1hZNllyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzkxRi81MDgzNUU2ODQ1NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi91b1haSFNTc3Fl bmdNUjVWTGI4M1dYWTZZcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGYWa4fhmTPzMUJzV6eSyNLSmS+wQL9NORXssRp6KnAvLEbLb264n+ iX0CK1x3nA7RT8pSbBp5wg4v8fvl86rUIEWoj+8xGwFWXNJQqKQj3lUqF1R8OUvx 0v3EcAKx+/i2TySBxlJt45234UH8jU8k2FsARPBN7/D/O1pnkRCukeVVj20NEdMZ q+hK6g0INKLV2YhDeh6N0Mumv/fgbiCtAlTKv8mDitGg5GsgCnNzCMD8SDyxDriU kCbtcQolHsVXhHqw9NRTTdb25Zep+9/iFwopVYF4LtJxnGJnK70BXEfBl+MCFBSn hnAuZTdmFg/vxDZUneiKDdzFrOJtTVhq -----END CERTIFICATE-----Generated at Thu Apr 10 22:12:31 2025 by rpki-client