$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft File: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json) Hash identifier: xenyt/77J+Re146VbyUDHZM0wk2bmzVTeXtjzvEOMks= Subject key identifier: 1D:3F:6B:E8:57:81:73:AE:01:E9:2C:86:87:34:AF:61:82:76:54:98 Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B Certificate issuer: /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B Certificate serial: 0341 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft Manifest number: 0332 Signing time: Sat 29 Mar 2025 01:21:45 +0000 Manifest this update: Sat 29 Mar 2025 01:21:44 +0000 Manifest next update: Sat 05 Apr 2025 01:21:44 +0000 Files and hashes: 1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: yhVLx4AHWHdks/5pIcYVksqztVYzl3RWY118Ce9hdzg=) 2: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: F6jPBh9YlNU7RVZYywXLeNlWgnFuc8x8f5OICDCdyXk=) 3: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: 2CbWH78pD8qfhUqfDIT0bY8YAkS+SCmh9qliGFNOvyU=) 4: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: vsntEPAhq1q52SAuxi87DOT8T6ZFM5p3hlzlxYIzgx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 833 (0x341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4DC7 Validity Not Before: Mar 29 01:21:44 2025 GMT Not After : Apr 5 01:21:44 2025 GMT Subject: CN=67e74b28-c1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9b:ce:b3:76:c8:54:a7:15:c0:dc:cf:f2:34: 46:57:75:cf:17:b7:4b:30:46:f5:32:0c:79:ba:57: a5:28:f3:26:7a:a6:33:c3:e8:04:d3:f7:25:fa:ad: 26:bc:3c:94:2c:f0:54:ab:aa:4a:f8:cb:d3:a5:b5: da:21:c5:ac:22:0b:c8:76:a5:e6:67:47:a1:f6:0f: fa:80:2f:a8:fc:8e:44:a9:66:33:74:a9:76:7e:32: f3:6a:31:4f:54:66:1d:3a:be:28:a8:35:d1:86:b4: 7a:56:30:6c:e0:b0:35:0b:1a:9a:e3:9d:ae:99:1a: 70:80:6a:e9:07:75:04:9e:52:83:24:98:91:11:21: 4f:05:69:8b:fc:cd:ad:24:3a:94:53:1e:ff:10:94: 21:e9:71:4a:c7:22:25:e3:31:59:12:ab:b1:aa:6d: 40:c0:c4:b6:44:f9:aa:14:23:76:fc:7f:ce:b4:10: 11:c3:44:1f:5c:ad:ac:f4:bb:25:f9:e4:b9:27:83: 21:27:fe:f9:29:14:90:43:b4:1d:9b:6b:b6:5f:0d: be:0a:b6:8f:6b:3a:7a:71:0a:e0:e1:67:6a:0e:30: 99:bb:9c:7b:50:f8:74:af:4c:21:2e:0b:15:bc:27: 58:e0:37:48:d3:8e:4f:eb:74:07:38:1c:52:bb:74: af:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3F:6B:E8:57:81:73:AE:01:E9:2C:86:87:34:AF:61:82:76:54:98 X509v3 Authority Key Identifier: keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e7:1d:28:13:fc:a3:d5:1f:41:b8:62:06:c4:d6:00:ab:b7: 13:bc:99:09:66:d0:c9:2d:f9:bc:46:a7:c3:19:19:b5:26:3c: f2:e3:7f:58:b6:79:5e:5b:3c:45:ac:1b:ea:35:c5:68:55:07: 58:0e:4f:89:1a:33:e6:2e:26:b2:4a:d7:c5:fd:8e:12:ae:2c: 20:20:7c:4e:aa:58:d2:08:6e:36:8c:f2:73:02:e0:24:03:a4: 8c:03:10:16:a7:f6:69:af:0a:85:c8:16:df:6d:a0:e5:05:85: 1f:34:f8:a5:fd:e9:a5:8a:6f:87:00:71:ee:bd:de:63:01:8b: 6a:3d:0d:13:66:b7:e7:1a:b6:f9:8f:92:ad:6a:82:e2:aa:2b: da:3d:18:69:49:4a:55:3c:ab:0b:92:8e:af:15:f4:ad:56:48: 45:42:50:b4:75:3c:9b:36:0d:50:dd:67:f9:79:60:ed:39:f5: 39:21:fe:87:86:33:d4:d6:27:a1:5b:7c:d0:66:19:80:78:ac: e7:40:fb:a5:45:b2:a2:04:e1:cb:b4:03:5e:09:53:b6:8b:ae: ec:0b:a8:69:7e:f1:5a:f3:6d:00:b7:a3:9c:61:8d:d4:21:1c: 4e:ec:d9:f0:c8:cc:af:18:b1:bb:13:28:f7:ed:60:7a:9b:5e: fa:a6:f0:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREQzcxMTAvBgNVBAUTKEI4ODkxMTE3ODA2OEQ1NzVERkRERjg0OTQwQ0FCRUFG NDUxQzhDMkIwHhcNMjUwMzI5MDEyMTQ0WhcNMjUwNDA1MDEyMTQ0WjAYMRYwFAYD VQQDEw02N2U3NGIyOC1jMWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZvOs3bIVKcVwNzP8jRGV3XPF7dLMEb1Mgx5ulelKPMmeqYzw+gE0/cl+q0m vDyULPBUq6pK+MvTpbXaIcWsIgvIdqXmZ0eh9g/6gC+o/I5EqWYzdKl2fjLzajFP VGYdOr4oqDXRhrR6VjBs4LA1Cxqa452umRpwgGrpB3UEnlKDJJiRESFPBWmL/M2t JDqUUx7/EJQh6XFKxyIl4zFZEquxqm1AwMS2RPmqFCN2/H/OtBARw0QfXK2s9Lsl +eS5J4MhJ/75KRSQQ7Qdm2u2Xw2+CraPazp6cQrg4WdqDjCZu5x7UPh0r0whLgsV vCdY4DdI045P63QHOBxSu3SvUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0/a+hX gXOuAekshoc0r2GCdlSYMB8GA1UdIwQYMBaAFLiJEReAaNV13934SUDKvq9FHIwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNERDNy9GM0YxMDIwRUJC MTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFYWGYzZmhKUU1xLXIwVWNq Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VJa1JGNEJvMVhYZjNmaEpRTXEtcjBVY2pDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NERDNy9GM0YxMDIwRUJCMTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFY WGYzZmhKUU1xLXIwVWNqQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM5x0oE/yj1R9BuGIGxNYAq7cTvJkJZtDJLfm8RqfDGRm1Jjzy439Y tnleWzxFrBvqNcVoVQdYDk+JGjPmLiayStfF/Y4SriwgIHxOqljSCG42jPJzAuAk A6SMAxAWp/ZprwqFyBbfbaDlBYUfNPil/emlim+HAHHuvd5jAYtqPQ0TZrfnGrb5 j5KtaoLiqivaPRhpSUpVPKsLko6vFfStVkhFQlC0dTybNg1Q3Wf5eWDtOfU5If6H hjPU1iehW3zQZhmAeKznQPulRbKiBOHLtANeCVO2i67sC6hpfvFa820At6OcYY3U IRxO7NnwyMyvGLG7Eyj37WB6m176pvDY -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:36 2025 by rpki-client