$ rpki-client -vvf rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft File: uttpn6AqlXLm70n0-Rof4Kc8LI0.mft (raw, json) Hash identifier: EV7CsMk1h8RQHq63EiEpw+ZR5fX2XARHVh7rMJ4aau8= Subject key identifier: 2B:8F:A9:A4:61:D6:6B:DF:B4:8A:D0:50:A3:A5:CA:20:F0:AC:F2:15 Authority key identifier: BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D Certificate issuer: /CN=A91E27B9/serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D Certificate serial: 07F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft Manifest number: 07E2 Signing time: Sun 20 Apr 2025 20:46:22 +0000 Manifest this update: Sun 20 Apr 2025 20:46:21 +0000 Manifest next update: Sun 27 Apr 2025 20:46:21 +0000 Files and hashes: 1: uttpn6AqlXLm70n0-Rof4Kc8LI0.crl (hash: r3jEytdQvrOIXIQw4HjdwtxSeOvMNRxPgaAqwhI+kLA=) 2: C8BD376C3ADF11EC85EB255FC4F9AE02.roa (hash: wZOUAFh3yH4xpJik8Ps1Fk72+HENAnV8sf4x6n94egk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2039 (0x7f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E27B9, serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D Validity Not Before: Apr 20 20:46:21 2025 GMT Not After : Apr 27 20:46:21 2025 GMT Subject: CN=68055d1d-3f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e9:f6:2d:1c:ff:ab:6b:09:56:0e:c3:71:07: fd:25:bc:c2:97:e6:11:33:f3:91:25:70:6d:77:6a: d8:40:d7:2d:78:e2:b2:96:b5:9b:01:12:48:a4:8e: b4:34:53:1d:fc:49:c4:d0:c9:73:a4:ae:b7:9a:ba: 12:68:a5:41:39:e0:02:8c:50:7d:3a:44:43:ab:9a: a0:8a:b8:66:a4:91:2f:77:0f:2f:1a:64:17:5b:c3: ca:a9:74:89:40:4b:82:48:c3:6c:ab:c1:30:30:84: c1:0e:6a:19:c9:d4:13:52:32:80:49:f8:9b:7c:d7: ec:c3:f6:ad:e7:61:c8:63:b4:a7:e5:c7:38:12:6b: bc:6e:1d:91:33:a8:94:bf:95:57:82:1d:74:ae:9b: 43:ec:38:7d:96:a5:71:81:f3:33:b1:eb:01:82:a9: 79:1c:5c:9c:81:86:15:90:61:73:8c:e0:02:c3:18: 91:06:53:ec:e4:5b:ab:0d:4d:51:2f:2f:65:50:43: 8b:9e:03:cc:30:0c:f6:89:01:eb:3b:e2:f4:be:7b: 73:3a:1e:85:54:1b:a7:fd:b6:b8:e4:3d:43:0e:89: bb:55:f6:41:a3:23:52:90:1f:21:8d:5c:a4:52:e0: 4f:01:10:fc:91:01:15:c0:00:3c:48:26:8e:5c:3a: 12:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8F:A9:A4:61:D6:6B:DF:B4:8A:D0:50:A3:A5:CA:20:F0:AC:F2:15 X509v3 Authority Key Identifier: keyid:BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fc:a7:16:4b:01:0f:02:22:ae:ff:ce:12:78:68:aa:73:b9: 0c:13:59:e3:66:6b:19:52:22:25:cd:5b:f0:27:b5:fd:0d:83: 6d:e8:44:1c:8d:11:10:26:28:07:07:31:c6:0d:63:73:f0:a3: 13:8a:46:4d:84:f5:6d:4c:81:f6:9c:7f:3c:4d:4f:78:d7:c8: d6:e8:38:54:4d:5d:3d:b1:01:fa:01:ae:1e:fe:79:c9:8a:ff: 0d:98:1f:0f:6a:f5:9b:11:80:6c:98:59:a4:d7:87:19:aa:03: 06:05:6c:43:4c:b1:e5:0c:39:c3:ae:2a:cf:c5:a8:68:01:3d: bc:36:67:4e:70:4d:18:f0:b3:6f:b5:92:ef:dc:2f:63:8e:82: 7c:f4:ba:74:0f:56:b7:96:05:ae:39:4c:bb:5a:b5:e2:db:54: 2e:f8:f6:92:22:fd:5a:81:41:28:ef:c2:f0:f7:55:59:f6:76: 65:48:1e:44:2c:64:e5:1c:a9:4f:45:78:6d:83:57:f9:ce:da: 15:8b:1f:44:61:c9:45:88:e3:e5:25:b2:15:4e:68:85:c0:bc: 77:e5:09:65:8f:4d:47:62:90:2b:de:c4:f0:80:49:01:a6:c1: a6:a3:59:72:71:51:c7:22:c0:69:f4:28:50:16:2a:01:8c:d6: 60:4d:ed:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3QjkxMTAvBgNVBAUTKEJBREI2OTlGQTAyQTk1NzJFNkVGNDlGNEY5MUExRkUw QTczQzJDOEQwHhcNMjUwNDIwMjA0NjIxWhcNMjUwNDI3MjA0NjIxWjAYMRYwFAYD VQQDEw02ODA1NWQxZC0zZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+n2LRz/q2sJVg7DcQf9JbzCl+YRM/ORJXBtd2rYQNcteOKylrWbARJIpI60 NFMd/EnE0MlzpK63mroSaKVBOeACjFB9OkRDq5qgirhmpJEvdw8vGmQXW8PKqXSJ QEuCSMNsq8EwMITBDmoZydQTUjKASfibfNfsw/at52HIY7Sn5cc4Emu8bh2RM6iU v5VXgh10rptD7Dh9lqVxgfMzsesBgql5HFycgYYVkGFzjOACwxiRBlPs5FurDU1R Ly9lUEOLngPMMAz2iQHrO+L0vntzOh6FVBun/ba45D1DDom7VfZBoyNSkB8hjVyk UuBPARD8kQEVwAA8SCaOXDoS6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuPqaRh 1mvftIrQUKOlyiDwrPIVMB8GA1UdIwQYMBaAFLrbaZ+gKpVy5u9J9PkaH+CnPCyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjdCOS84NEJBNzQ4MkYw Q0UxMUVBODkxQjJDNzZDNEY5QUUwMi91dHRwbjZBcWxYTG03MG4wLVJvZjRLYzhM STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V0dHBuNkFxbFhMbTcwbjAtUm9mNEtjOExJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjdCOS84NEJBNzQ4MkYwQ0UxMUVBODkxQjJDNzZDNEY5QUUwMi91dHRwbjZBcWxY TG03MG4wLVJvZjRLYzhMSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa/KcWSwEPAiKu/84SeGiqc7kME1njZmsZUiIlzVvwJ7X9DYNt6EQc jREQJigHBzHGDWNz8KMTikZNhPVtTIH2nH88TU9418jW6DhUTV09sQH6Aa4e/nnJ iv8NmB8PavWbEYBsmFmk14cZqgMGBWxDTLHlDDnDrirPxahoAT28NmdOcE0Y8LNv tZLv3C9jjoJ89Lp0D1a3lgWuOUy7WrXi21Qu+PaSIv1agUEo78Lw91VZ9nZlSB5E LGTlHKlPRXhtg1f5ztoVix9EYclFiOPlJbIVTmiFwLx35Qllj01HYpAr3sTwgEkB psGmo1lycVHHIsBp9ChQFioBjNZgTe0x -----END CERTIFICATE-----Generated at Tue Apr 22 01:54:14 2025 by rpki-client