$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft File: uOVJaYlT9l5x-4S20zjAisF4Glo.mft (raw, json) Hash identifier: hbX5KtHcdsORPIlV4ec4oSuSKR2O+yO5qIf5N8Xoibg= Subject key identifier: 2B:15:D6:98:2C:E7:0A:F3:9D:9E:D1:1C:26:DC:B3:CC:2C:72:94:5D Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A Certificate issuer: /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Certificate serial: 0971 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft Manifest number: 095B Signing time: Fri 28 Mar 2025 20:29:40 +0000 Manifest this update: Fri 28 Mar 2025 20:29:40 +0000 Manifest next update: Fri 04 Apr 2025 20:29:40 +0000 Files and hashes: 1: uOVJaYlT9l5x-4S20zjAisF4Glo.crl (hash: RjTZCbi3mbcY5KS13sKlW+uoUkSOKNwofwxADDX1a4k=) 2: 4B31BDC4B76911ED8A503224C4F9AE02.roa (hash: sdPPzpmeuTxfNXX+Z4y10OZ5FdPq847kLyXykC/LAkQ=) 3: 3A489388B4F511EC83B0B46AC4F9AE02.roa (hash: G/uDm13Bf6tJyVNQOP+pm5ESZ5VRhWW8Z+gH8Z0T6aw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2417 (0x971) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5C70 Validity Not Before: Mar 28 20:29:40 2025 GMT Not After : Apr 4 20:29:40 2025 GMT Subject: CN=67e706b4-c9d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:47:a1:89:1a:17:87:1f:19:37:fa:df:1c: 1a:e4:f7:fb:17:c5:a1:48:d2:c2:66:45:62:ec:4b: 80:fb:4e:6b:f9:13:53:97:4f:e7:ef:48:50:8a:2b: 12:a2:15:df:b7:ae:f6:72:fa:c3:ee:3e:64:5d:4b: c5:03:d5:2c:7a:fa:d6:8b:5a:ea:09:f4:54:fe:2d: 01:72:b3:ea:a0:0b:14:e0:39:6f:36:48:ef:18:63: d0:e9:b0:8e:9b:23:b3:67:e9:76:e0:48:43:ed:b6: 41:4d:ec:60:d3:2d:77:94:06:35:6a:b1:fc:1d:09: f9:30:ee:d5:26:6a:f3:4e:a8:49:5d:b5:0c:54:fd: 48:f6:17:b2:9c:f2:52:2a:dd:92:a6:ae:1a:1b:d0: d8:e8:15:24:a8:d9:ce:d0:3b:02:77:8e:53:20:72: 13:bc:de:46:43:c6:88:03:20:e4:9e:ef:93:80:59: a0:6f:a0:55:f7:aa:c7:ff:d5:b4:30:7c:37:40:4b: 18:a6:d8:1e:13:4b:aa:ad:f7:4e:34:0b:4d:2d:fc: 17:a7:e2:67:84:0e:51:db:a6:8f:a6:f3:17:e5:88: 19:03:35:0c:31:ba:ef:cc:e7:d0:64:20:8c:3b:30: 57:4b:09:64:d2:62:47:8e:6b:ba:db:f5:47:e9:d9: fc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:15:D6:98:2C:E7:0A:F3:9D:9E:D1:1C:26:DC:B3:CC:2C:72:94:5D X509v3 Authority Key Identifier: keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:06:db:ab:58:1d:9e:51:3c:7c:ea:38:1b:b9:6f:05:97:1f: f8:89:6d:e0:bb:85:15:6e:e1:41:9f:04:5e:f4:02:9d:f4:74: f6:13:02:e5:5e:d3:69:d7:32:01:21:e2:0f:9e:98:dd:36:7d: 99:dd:b4:4a:32:fc:42:1b:05:b9:30:c9:49:63:02:57:de:d7: 0d:6d:d3:d7:db:de:ae:44:7a:f4:66:ec:ce:0a:01:da:f4:a9: 39:c2:7c:33:ce:11:f1:7f:e4:8e:15:e5:4b:d8:34:fe:c7:cc: 1b:d6:8b:cf:52:9b:2b:47:1b:97:b0:2e:e9:f0:8e:07:2a:69: ff:cd:54:47:09:03:42:54:43:a0:6f:ef:a9:09:28:79:f9:7a: 37:3c:d9:98:2a:d2:3c:be:a8:34:c9:70:89:e1:b2:07:10:c9: 6d:6d:16:99:bc:4d:dd:f1:92:03:be:c5:6f:54:77:95:68:57: 50:33:b2:8b:25:fb:4a:7b:f9:fd:96:b1:bc:c5:36:40:4f:38: 56:5f:7d:0f:ba:10:f4:cb:31:92:86:94:ed:9f:d9:1d:5a:40: 0a:8f:c7:06:c9:73:40:4a:fa:40:a6:50:1e:e0:91:76:e9:42: 08:10:66:d7:2b:18:09:a9:f3:5f:f0:d7:18:d8:4f:f7:a2:19: 7b:92:76:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDNzAxMTAvBgNVBAUTKEI4RTU0OTY5ODk1M0Y2NUU3MUZCODRCNkQzMzhDMDhB QzE3ODFBNUEwHhcNMjUwMzI4MjAyOTQwWhcNMjUwNDA0MjAyOTQwWjAYMRYwFAYD VQQDEw02N2U3MDZiNC1jOWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMdHoYkaF4cfGTf63xwa5Pf7F8WhSNLCZkVi7EuA+05r+RNTl0/n70hQiisS ohXft672cvrD7j5kXUvFA9UsevrWi1rqCfRU/i0BcrPqoAsU4DlvNkjvGGPQ6bCO myOzZ+l24EhD7bZBTexg0y13lAY1arH8HQn5MO7VJmrzTqhJXbUMVP1I9heynPJS Kt2Spq4aG9DY6BUkqNnO0DsCd45TIHITvN5GQ8aIAyDknu+TgFmgb6BV96rH/9W0 MHw3QEsYptgeE0uqrfdONAtNLfwXp+JnhA5R26aPpvMX5YgZAzUMMbrvzOfQZCCM OzBXSwlk0mJHjmu62/VH6dn8NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsV1pgs 5wrznZ7RHCbcs8wscpRdMB8GA1UdIwQYMBaAFLjlSWmJU/ZecfuEttM4wIrBeBpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUM3MC8yM0EwQUMwNjkx MDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDlsNXgtNFMyMHpqQWlzRjRH bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPVkphWWxUOWw1eC00UzIwempBaXNGNEdsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUM3MC8yM0EwQUMwNjkxMDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDls NXgtNFMyMHpqQWlzRjRHbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2BturWB2eUTx86jgbuW8Flx/4iW3gu4UVbuFBnwRe9AKd9HT2EwLl XtNp1zIBIeIPnpjdNn2Z3bRKMvxCGwW5MMlJYwJX3tcNbdPX296uRHr0ZuzOCgHa 9Kk5wnwzzhHxf+SOFeVL2DT+x8wb1ovPUpsrRxuXsC7p8I4HKmn/zVRHCQNCVEOg b++pCSh5+Xo3PNmYKtI8vqg0yXCJ4bIHEMltbRaZvE3d8ZIDvsVvVHeVaFdQM7KL JftKe/n9lrG8xTZATzhWX30PuhD0yzGShpTtn9kdWkAKj8cGyXNASvpAplAe4JF2 6UIIEGbXKxgJqfNf8NcY2E/3ohl7knZB -----END CERTIFICATE-----Generated at Fri Apr 4 18:32:31 2025 by rpki-client