$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft File: uOpx0E7INugYCHPJ6dQM0uNVNwE.mft (raw, json) Hash identifier: Gc89/2fwq3G4e5Z1+DGiwFdv4LpaNsoGO5pUc938plo= Subject key identifier: 8C:6D:0F:13:50:98:50:3E:16:EB:7A:15:92:BD:37:C8:EB:B4:3B:48 Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 Certificate issuer: /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft Manifest number: 01C8 Signing time: Thu 03 Apr 2025 02:18:59 +0000 Manifest this update: Thu 03 Apr 2025 02:18:58 +0000 Manifest next update: Thu 10 Apr 2025 02:18:58 +0000 Files and hashes: 1: uOpx0E7INugYCHPJ6dQM0uNVNwE.crl (hash: oQXD2aodnx4yeVImgi4TEhsmJW5FN0RAQEduYPEewfk=) 2: CC74271E8A8711ED98572D26C4F9AE02.roa (hash: rGioCcK4Zr+knzNA5J2qJp6M9oaPBmCCilGkVDkio+Y=) 3: C9E35E848A8711ED98572D26C4F9AE02.roa (hash: eHox8CScwy17I91npttE3xAPIO9P1S6yAPyglPvKM8k=) 4: 4865D4707C3111EFBD9FF572C4F9AE02.roa (hash: nGayQSIhHNj55hF0Vf/Lo4S3bo5wcu1gOdllnD1y6Pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCF10 Validity Not Before: Apr 3 02:18:58 2025 GMT Not After : Apr 10 02:18:58 2025 GMT Subject: CN=67edf012-0d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:87:7b:ef:76:f5:9a:11:d6:03:e5:5d:0f:2c: 06:1b:fc:38:38:dc:51:37:f2:75:ee:b9:56:f9:4c: 84:89:f6:bc:57:7e:c9:26:45:a9:36:b2:14:26:ad: a4:45:b5:45:8c:0f:2e:72:9d:a8:ed:ad:95:f2:85: 83:34:82:98:f8:84:05:31:07:e7:b9:e2:63:6a:81: 71:87:4d:6a:70:87:de:7e:c1:d3:a7:2d:fb:07:10: 06:11:f5:fa:f5:ef:f7:f3:78:24:7e:b3:21:3e:40: c3:10:5a:72:5f:44:90:63:3c:64:b2:48:03:c7:89: 4c:4d:39:4d:4a:2e:24:fb:c8:ad:8d:15:9f:fd:e5: ac:23:b7:25:06:56:d9:69:92:db:34:e4:c3:7b:d2: 1c:1e:48:55:2d:19:33:9c:5a:41:32:80:a3:df:da: fb:d1:bf:06:db:d7:02:92:49:f6:e6:49:fc:1d:3e: d1:df:2b:55:fd:73:05:c1:fa:fa:8c:7f:71:49:33: d2:93:c9:70:22:51:99:ef:e7:18:59:6b:0e:05:f5: 00:f4:a9:24:51:fa:f5:7c:ef:83:50:59:ff:df:a0: dc:39:eb:f0:13:f3:a5:31:4c:c9:6e:f1:67:0d:3d: e6:d8:ee:bd:a0:6b:fc:eb:17:9e:d7:8a:75:35:33: a3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:6D:0F:13:50:98:50:3E:16:EB:7A:15:92:BD:37:C8:EB:B4:3B:48 X509v3 Authority Key Identifier: keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:17:ac:a7:1b:38:f0:16:ae:76:8b:79:e6:71:17:ae:ee:5c: 42:7f:3b:11:e5:00:f2:97:6b:ea:04:11:4c:b6:2a:e8:1b:f4: 76:0d:49:a1:55:c2:d7:8c:48:54:8d:19:f3:89:c1:c1:fb:f2: 61:df:ba:f5:ab:2e:60:37:73:cc:21:78:39:bf:df:3c:e7:28: e5:7a:65:98:32:6e:14:5a:3e:1c:f0:32:32:65:fb:84:24:45: 13:8a:a5:a4:e0:5c:63:c2:fa:02:a1:0a:81:82:c9:6d:7e:97: d7:45:cf:8e:32:2a:78:1d:56:bb:60:37:02:f5:cf:36:89:59: c1:6e:f9:14:0d:d9:ab:1a:6d:dc:77:18:65:2e:b4:83:24:75: a0:9d:e4:cd:18:6f:36:9f:99:dc:e2:4e:77:c7:73:7a:73:4f: 99:aa:87:98:a4:02:1d:46:74:98:ab:1c:25:15:f4:b9:c0:ae: 25:17:f6:83:d2:0a:14:2b:b6:3c:95:0a:7d:3f:95:bc:1d:d7: 3d:bb:a5:25:ca:5b:b8:69:7e:f3:0f:5b:e0:e5:0f:a5:44:23: 28:e5:a7:6c:17:82:15:d3:e2:e6:7c:43:89:b3:59:12:2d:7f: 4f:5d:8d:4c:a7:83:ba:58:b0:2d:30:c3:97:20:e7:f0:13:c6: c8:60:92:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NGMTAxMTAvBgNVBAUTKEI4RUE3MUQwNEVDODM2RTgxODA4NzNDOUU5RDQwQ0Qy RTM1NTM3MDEwHhcNMjUwNDAzMDIxODU4WhcNMjUwNDEwMDIxODU4WjAYMRYwFAYD VQQDEw02N2VkZjAxMi0wZDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYd773b1mhHWA+VdDywGG/w4ONxRN/J17rlW+UyEifa8V37JJkWpNrIUJq2k RbVFjA8ucp2o7a2V8oWDNIKY+IQFMQfnueJjaoFxh01qcIfefsHTpy37BxAGEfX6 9e/383gkfrMhPkDDEFpyX0SQYzxkskgDx4lMTTlNSi4k+8itjRWf/eWsI7clBlbZ aZLbNOTDe9IcHkhVLRkznFpBMoCj39r70b8G29cCkkn25kn8HT7R3ytV/XMFwfr6 jH9xSTPSk8lwIlGZ7+cYWWsOBfUA9KkkUfr1fO+DUFn/36DcOevwE/OlMUzJbvFn DT3m2O69oGv86xee14p1NTOjlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxtDxNQ mFA+Fut6FZK9N8jrtDtIMB8GA1UdIwQYMBaAFLjqcdBOyDboGAhzyenUDNLjVTcB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0YxMC9FQzY3MzMzRTYw OTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51Z1lDSFBKNmRRTTB1TlZO d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPcHgwRTdJTnVnWUNIUEo2ZFFNMHVOVk53RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0YxMC9FQzY3MzMzRTYwOTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51 Z1lDSFBKNmRRTTB1TlZOd0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoF6ynGzjwFq52i3nmcReu7lxCfzsR5QDyl2vqBBFMtiroG/R2DUmh VcLXjEhUjRnzicHB+/Jh37r1qy5gN3PMIXg5v9885yjlemWYMm4UWj4c8DIyZfuE JEUTiqWk4FxjwvoCoQqBgsltfpfXRc+OMip4HVa7YDcC9c82iVnBbvkUDdmrGm3c dxhlLrSDJHWgneTNGG82n5nc4k53x3N6c0+ZqoeYpAIdRnSYqxwlFfS5wK4lF/aD 0goUK7Y8lQp9P5W8Hdc9u6Ulylu4aX7zD1vg5Q+lRCMo5adsF4IV0+LmfEOJs1kS LX9PXY1Mp4O6WLAtMMOXIOfwE8bIYJK1 -----END CERTIFICATE-----Generated at Fri Apr 4 21:54:08 2025 by rpki-client