$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft File: uesVSGZ3c32yc5_WVGKu55BhaMI.mft (raw, json) Hash identifier: f1cMb+uGDUKyIPluInyOVtEInYP8Ki72wV0ZklT6jkU= Subject key identifier: 48:47:42:EB:6D:65:6D:48:CF:39:C2:B1:70:EF:82:DC:D8:3D:FD:06 Authority key identifier: B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2 Certificate issuer: /CN=A91DA649/serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2 Certificate serial: 0C04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft Manifest number: 0BFC Signing time: Fri 18 Apr 2025 18:48:14 +0000 Manifest this update: Fri 18 Apr 2025 18:48:14 +0000 Manifest next update: Fri 25 Apr 2025 18:48:14 +0000 Files and hashes: 1: uesVSGZ3c32yc5_WVGKu55BhaMI.crl (hash: XpIXZCCU+voTjCGecm5pCtuvsPve0gTKAip80AcCEU0=) 2: C4391160305611EABE7DF272C4F9AE02.roa (hash: 3CS63lxTVcr1lDEM5PMs5CO7XzdKCmryVXHiyIzoBgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 18:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3076 (0xc04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA649, serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2 Validity Not Before: Apr 18 18:48:14 2025 GMT Not After : Apr 25 18:48:14 2025 GMT Subject: CN=68029e6e-a59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f1:9a:df:5e:9f:8f:16:64:a8:b6:ab:df:5e: 11:8a:04:e0:7e:24:25:99:12:1e:18:3c:53:c7:b5: 54:f0:3f:08:ee:4b:da:77:79:35:e5:7e:e9:5c:0f: e7:cf:77:92:16:55:50:49:1f:5a:59:d7:4f:41:26: db:b6:cd:91:fb:0f:86:e0:ad:21:33:a1:ee:52:4b: b0:f8:3a:41:2e:4b:5e:93:51:72:0b:8a:8a:42:d0: 65:cc:ec:cf:5b:47:e0:3f:2a:93:26:db:18:8d:58: 9c:1d:e2:ac:7f:bf:b3:fa:16:08:c5:74:6c:89:9a: 38:4e:07:4a:17:bd:70:19:3a:17:c3:2f:12:f8:62: 44:4a:c9:7e:a3:a2:14:da:38:a2:56:50:12:3a:49: 9d:c6:59:7f:74:f5:2d:1e:38:21:2e:45:a3:14:21: b1:22:61:ba:4a:04:a8:69:af:b2:3e:86:22:de:67: 06:b5:0d:48:6a:4a:09:0f:33:5b:b3:00:0e:0c:c5: 0c:e6:8a:47:32:81:40:81:62:30:8e:96:e5:78:bf: 7b:3d:75:fd:38:6f:61:9f:69:f0:e3:cc:a8:4e:fd: a8:ac:5c:05:6a:50:ae:44:b5:12:10:3d:9b:0b:72: c1:a4:28:dc:cc:45:22:97:42:86:ca:29:ff:ed:b4: e6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:47:42:EB:6D:65:6D:48:CF:39:C2:B1:70:EF:82:DC:D8:3D:FD:06 X509v3 Authority Key Identifier: keyid:B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a3:d4:e7:50:03:1d:31:be:0c:b7:7b:4c:5a:05:95:b0:a4: 84:af:3c:03:19:7f:19:c6:34:bb:f8:97:c4:35:e3:f9:ba:f4: 4c:c0:c0:43:57:6d:98:11:49:b5:23:e5:71:2d:23:29:23:85: db:4d:90:d9:a0:47:5d:4d:53:8e:d8:59:ac:79:b4:69:33:7b: 80:86:80:41:b9:f5:43:72:12:61:2a:c4:51:a7:57:53:d1:fd: 36:33:45:80:ef:68:eb:a7:a7:c9:8e:62:94:f9:42:80:8d:ea: 3d:3f:73:c9:4d:f8:f6:2c:29:41:8d:ae:15:5d:89:20:8e:fa: 5f:59:54:45:c6:6e:a6:b8:16:be:c7:d7:dd:2b:bf:ae:6d:e2: 26:2e:6f:d6:72:0a:3c:ac:e9:3d:72:16:1b:45:b6:50:bc:e0: 38:40:68:85:3d:21:fa:cd:45:37:fd:69:8d:50:42:3c:10:e5: 65:8b:77:35:3f:ea:51:a0:24:11:fc:61:3e:68:08:37:ac:c0: 37:dd:65:14:ae:2b:66:ad:bf:90:af:d4:b8:80:57:e4:a9:a4: e0:3c:46:57:33:6b:3d:23:cd:4c:49:c6:e4:fb:8a:a7:01:6f: 7b:e2:4a:8f:2f:49:9c:98:49:51:e7:bb:76:22:a5:f8:7c:18: 45:ac:ce:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE2NDkxMTAvBgNVBAUTKEI5RUIxNTQ4NjY3NzczN0RCMjczOUZENjU0NjJBRUU3 OTA2MTY4QzIwHhcNMjUwNDE4MTg0ODE0WhcNMjUwNDI1MTg0ODE0WjAYMRYwFAYD VQQDEw02ODAyOWU2ZS1hNTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fGa316fjxZkqLar314RigTgfiQlmRIeGDxTx7VU8D8I7kvad3k15X7pXA/n z3eSFlVQSR9aWddPQSbbts2R+w+G4K0hM6HuUkuw+DpBLktek1FyC4qKQtBlzOzP W0fgPyqTJtsYjVicHeKsf7+z+hYIxXRsiZo4TgdKF71wGToXwy8S+GJESsl+o6IU 2jiiVlASOkmdxll/dPUtHjghLkWjFCGxImG6SgSoaa+yPoYi3mcGtQ1IakoJDzNb swAODMUM5opHMoFAgWIwjpbleL97PXX9OG9hn2nw48yoTv2orFwFalCuRLUSED2b C3LBpCjczEUil0KGyin/7bTmMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhHQutt ZW1IzznCsXDvgtzYPf0GMB8GA1UdIwQYMBaAFLnrFUhmd3N9snOf1lRirueQYWjC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTY0OS81RDk3Nzc0QzBG NTExMUVBOEM0QTVDMEFDNEY5QUUwMi91ZXNWU0daM2MzMnljNV9XVkdLdTU1Qmhh TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vlc1ZTR1ozYzMyeWM1X1dWR0t1NTVCaGFNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTY0OS81RDk3Nzc0QzBGNTExMUVBOEM0QTVDMEFDNEY5QUUwMi91ZXNWU0daM2Mz MnljNV9XVkdLdTU1QmhhTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMo9TnUAMdMb4Mt3tMWgWVsKSErzwDGX8ZxjS7+JfENeP5uvRMwMBD V22YEUm1I+VxLSMpI4XbTZDZoEddTVOO2FmsebRpM3uAhoBBufVDchJhKsRRp1dT 0f02M0WA72jrp6fJjmKU+UKAjeo9P3PJTfj2LClBja4VXYkgjvpfWVRFxm6muBa+ x9fdK7+ubeImLm/Wcgo8rOk9chYbRbZQvOA4QGiFPSH6zUU3/WmNUEI8EOVli3c1 P+pRoCQR/GE+aAg3rMA33WUUritmrb+Qr9S4gFfkqaTgPEZXM2s9I81MScbk+4qn AW974kqPL0mcmElR57t2IqX4fBhFrM5P -----END CERTIFICATE-----Generated at Sat Apr 19 00:59:22 2025 by rpki-client