$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft File: u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft (raw, json) Hash identifier: UikKXaRJZ6UklUCCc8AQAx3CmV/J1ISqlhbdOLW5EYE= Subject key identifier: D0:09:B3:E1:35:1F:18:3F:21:87:93:38:95:F7:66:B4:6E:B3:45:B6 Authority key identifier: BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0 Certificate issuer: /CN=A91CEE85/serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft Manifest number: 87 Signing time: Sat 29 Mar 2025 05:55:33 +0000 Manifest this update: Sat 29 Mar 2025 05:55:32 +0000 Manifest next update: Sat 05 Apr 2025 05:55:32 +0000 Files and hashes: 1: u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl (hash: psHDItKZxD+kOg3T2UnXaetbpKN7favhLq9MDYj+d6g=) 2: 4D189DD4728311EFA9CECE43C4F9AE02.roa (hash: Ge+55CQegGWCZISlkeWVyEDQbw8xhE1lFYLjXYnwl5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE85 Validity Not Before: Mar 29 05:55:32 2025 GMT Not After : Apr 5 05:55:32 2025 GMT Subject: CN=67e78b54-200d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1f:86:5f:74:c0:8e:d9:c9:4c:01:6e:aa:9c: 68:19:fb:31:4b:59:a0:cf:6d:1e:f3:6c:22:7d:5f: c5:e9:13:ff:a1:97:08:3a:d9:16:c0:c8:3b:45:64: 95:5e:87:58:f3:0a:2c:39:cb:d3:9f:5f:ef:7b:9a: 98:d8:39:46:6e:7f:d2:1f:0b:d2:53:68:0e:69:6d: de:96:e8:60:d5:4e:81:a9:35:56:c9:9f:37:31:82: 33:39:da:ac:25:72:cb:22:c5:05:5d:45:a6:d9:b9: 3c:90:f3:bf:fc:40:e8:97:cf:04:07:ef:43:ae:b8: a5:8e:fd:84:e8:b9:b1:11:6d:ad:09:dc:2a:c5:7d: 46:2e:f9:29:f7:f6:5f:6b:fd:e6:98:5d:7b:e5:0c: 79:55:84:e5:bd:e0:0b:7d:36:79:e0:39:4e:7a:87: 84:8d:2c:aa:9d:69:7a:cd:ca:63:2f:17:58:bd:3e: 0c:6c:7b:65:7b:72:a1:5a:69:5c:c2:20:82:f7:59: a8:ae:9a:ef:c3:33:b1:88:3e:97:c3:c9:4e:16:7c: 58:5a:30:d0:f8:06:3f:b4:bd:94:ef:d8:a7:b1:74: 7c:9d:e9:ec:09:22:b2:66:1c:ec:e3:ca:3b:3e:24: 7f:c7:8e:d0:fa:f8:c2:5e:98:24:8e:d4:91:3d:ac: d9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:09:B3:E1:35:1F:18:3F:21:87:93:38:95:F7:66:B4:6E:B3:45:B6 X509v3 Authority Key Identifier: keyid:BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:64:18:0f:3d:dd:ae:03:7a:41:1c:ac:1b:36:93:05:1d:4f: 72:1f:0c:7b:14:8f:a9:45:9e:6b:b5:e7:2a:ed:37:24:57:28: ad:0c:8f:7b:2c:ca:b7:d5:3c:8a:ea:3b:7c:e5:7a:d7:bb:5b: 3b:2e:1c:39:5a:ab:b2:9a:bc:62:0f:31:be:b8:5e:af:ed:a8: 9c:80:12:2b:97:21:d3:70:78:31:93:c8:a7:b0:90:f0:81:d5: 6b:62:24:52:26:ea:90:3a:3c:1b:06:04:44:a2:b0:5b:c0:5b: 7b:49:c3:46:58:4a:28:9b:79:6f:76:54:d0:b3:1f:b6:a0:31: d0:ed:45:46:70:b2:64:ac:34:71:ef:6c:1b:ca:53:14:22:96: e8:5d:11:56:2e:bd:86:bf:58:7b:e5:12:63:02:bb:60:e6:b4: 79:d7:f4:d2:93:4e:56:de:0d:a5:39:f5:83:f3:92:68:bd:05: 92:a4:04:b2:fa:3a:46:3b:a8:67:50:4a:3f:6e:49:c6:05:76: 30:88:72:74:11:9f:a3:90:6f:45:9e:9f:00:3a:5e:20:3f:52: bf:83:71:e9:9b:18:88:9f:59:07:72:6d:db:d3:4b:f0:ba:ba: 3b:8b:78:3d:4a:98:4d:90:f7:20:6e:86:23:4b:9f:63:e3:a9: 07:ef:9d:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VFODUxMTAvBgNVBAUTKEJCRTgwM0ZCNzU3RTBDNDdEMzIwNDU0NTIxODdCNzRB RTI3MTExRjAwHhcNMjUwMzI5MDU1NTMyWhcNMjUwNDA1MDU1NTMyWjAYMRYwFAYD VQQDEw02N2U3OGI1NC0yMDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtB+GX3TAjtnJTAFuqpxoGfsxS1mgz20e82wifV/F6RP/oZcIOtkWwMg7RWSV XodY8wosOcvTn1/ve5qY2DlGbn/SHwvSU2gOaW3eluhg1U6BqTVWyZ83MYIzOdqs JXLLIsUFXUWm2bk8kPO//EDol88EB+9Drriljv2E6LmxEW2tCdwqxX1GLvkp9/Zf a/3mmF175Qx5VYTlveALfTZ54DlOeoeEjSyqnWl6zcpjLxdYvT4MbHtle3KhWmlc wiCC91morprvwzOxiD6Xw8lOFnxYWjDQ+AY/tL2U79insXR8nensCSKyZhzs48o7 PiR/x47Q+vjCXpgkjtSRPazZ4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAJs+E1 Hxg/IYeTOJX3ZrRus0W2MB8GA1UdIwQYMBaAFLvoA/t1fgxH0yBFRSGHt0ricRHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU4NS8wNUE3Q0U2ODQ1 QUUxMUVGQjQzNUVCNkZDNEY5QUUwMi91LWdELTNWLURFZlRJRVZGSVllM1N1SnhF ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtZ0QtM1YtREVmVElFVkZJWWUzU3VKeEVmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUU4NS8wNUE3Q0U2ODQ1QUUxMUVGQjQzNUVCNkZDNEY5QUUwMi91LWdELTNWLURF ZlRJRVZGSVllM1N1SnhFZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcZBgPPd2uA3pBHKwbNpMFHU9yHwx7FI+pRZ5rtecq7TckVyitDI97 LMq31TyK6jt85XrXu1s7Lhw5WquymrxiDzG+uF6v7aicgBIrlyHTcHgxk8insJDw gdVrYiRSJuqQOjwbBgREorBbwFt7ScNGWEoom3lvdlTQsx+2oDHQ7UVGcLJkrDRx 72wbylMUIpboXRFWLr2Gv1h75RJjArtg5rR51/TSk05W3g2lOfWD85JovQWSpASy +jpGO6hnUEo/bknGBXYwiHJ0EZ+jkG9Fnp8AOl4gP1K/g3HpmxiIn1kHcm3b00vw uro7i3g9SphNkPcgboYjS59j46kH750f -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:56 2025 by rpki-client