$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft File: uXgEM1AwWT1tlle8RdvRFLEpHSg.mft (raw, json) Hash identifier: pPKfxFDUG21yDEhoVgVTqbxiM1OUjH45Qc02L8HVdso= Subject key identifier: E2:21:C7:0F:F0:6A:26:33:90:9B:C4:2E:96:CE:07:BD:29:0A:9F:29 Authority key identifier: B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28 Certificate issuer: /CN=A91E9310/serialNumber=B97804335030593D6D9657BC45DBD114B1291D28 Certificate serial: 0439 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft Manifest number: 0435 Signing time: Sat 05 Apr 2025 00:24:08 +0000 Manifest this update: Sat 05 Apr 2025 00:24:07 +0000 Manifest next update: Sat 12 Apr 2025 00:24:07 +0000 Files and hashes: 1: uXgEM1AwWT1tlle8RdvRFLEpHSg.crl (hash: OZ9gYF8HhPn8lsTfVVKXjn1dzlGXSOob8FBM2z8qoc8=) 2: E8E2B0AE546511EC8B4A436BC4F9AE02.roa (hash: cL6ZzRiCZvUCUHOXKwXrsJvsEPdauZgSSVWIQ69Rr+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1081 (0x439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9310 Validity Not Before: Apr 5 00:24:07 2025 GMT Not After : Apr 12 00:24:07 2025 GMT Subject: CN=67f07827-38be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0d:8f:93:88:ef:d1:36:34:f6:d5:b7:24:b9: fd:d1:31:37:d3:4d:14:65:b3:c7:58:d7:22:a4:d6: 47:eb:e9:10:50:f0:39:fe:f9:50:bc:29:65:79:33: 1b:d4:97:3d:5c:b4:2f:d9:ce:0a:a4:af:d7:bd:e0: 40:67:6c:5e:b4:bd:45:a8:98:20:89:d2:f1:21:f5: 97:9f:36:4d:8c:2f:df:2e:f5:5a:52:48:59:6a:15: b4:06:43:be:f9:30:6c:81:77:46:bf:5f:5f:61:9a: df:12:20:d7:17:cd:ef:c1:f2:89:f0:bb:00:80:46: c8:33:3f:a1:0d:02:54:ac:87:4b:68:f3:ea:34:62: cd:54:e7:1d:09:10:c7:a1:55:3b:00:ce:dc:60:2f: 67:d2:c5:2b:cd:e5:84:8f:3c:8a:92:64:c7:72:66: 52:ed:92:05:d1:1c:85:a4:77:b5:20:00:b8:cf:3e: 1c:1d:92:7c:39:df:80:54:e9:13:ba:7d:26:76:9d: 73:bf:fb:fb:55:e6:66:68:a0:80:22:10:cc:9b:96: f8:56:e9:cd:8e:ae:d7:ad:f0:0a:58:de:c2:b2:7a: 81:92:25:e6:eb:2f:0a:20:28:36:80:c1:47:1f:7c: 90:19:dd:30:ba:60:14:27:05:5e:1a:08:3f:56:70: 31:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:21:C7:0F:F0:6A:26:33:90:9B:C4:2E:96:CE:07:BD:29:0A:9F:29 X509v3 Authority Key Identifier: keyid:B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:b4:52:76:ee:95:cd:44:0e:40:ff:92:cb:b7:de:be:92:a6: 74:ed:fb:9d:bb:5e:c6:10:67:d4:89:38:0b:8a:36:30:9d:ea: e5:b2:f8:9c:8d:9a:ba:39:aa:6e:88:f6:51:69:27:e6:7d:0d: 97:95:4f:8c:a8:a6:e2:b5:98:4c:a7:6c:2c:5d:fd:5d:07:30: 4f:2c:d2:bc:88:87:7e:4a:51:cb:69:61:be:7f:b9:7d:60:f9: 25:f1:a1:d0:03:a6:37:fe:a7:9f:11:b1:27:15:1f:69:f5:d1: de:3d:01:d4:67:03:e4:72:b1:51:99:35:82:0a:29:b0:9b:9a: 7e:bf:b6:d7:a7:68:7b:93:ec:8a:8b:fc:e1:f8:e7:6e:60:54: d5:b7:f4:d1:6a:4b:7c:db:d1:8b:7a:51:13:da:ad:53:ba:8f: 10:ce:d0:bb:5e:2d:cd:d2:f5:62:00:11:32:4b:df:d1:29:9d: 0b:95:b6:38:70:ff:37:e2:b3:60:12:1d:cc:ca:60:7e:c9:ef: 35:a4:1c:a7:ad:f0:cf:ae:10:bc:89:73:0b:1f:a5:54:56:30: 46:27:69:87:62:96:23:17:62:bb:b4:a7:4b:5a:b6:96:a9:6a: 38:b7:99:4d:97:54:67:04:14:dc:fc:b0:d4:e2:1b:b8:21:3d: 20:46:a8:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkzMTAxMTAvBgNVBAUTKEI5NzgwNDMzNTAzMDU5M0Q2RDk2NTdCQzQ1REJEMTE0 QjEyOTFEMjgwHhcNMjUwNDA1MDAyNDA3WhcNMjUwNDEyMDAyNDA3WjAYMRYwFAYD VQQDEw02N2YwNzgyNy0zOGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQ2Pk4jv0TY09tW3JLn90TE3000UZbPHWNcipNZH6+kQUPA5/vlQvClleTMb 1Jc9XLQv2c4KpK/XveBAZ2xetL1FqJggidLxIfWXnzZNjC/fLvVaUkhZahW0BkO+ +TBsgXdGv19fYZrfEiDXF83vwfKJ8LsAgEbIMz+hDQJUrIdLaPPqNGLNVOcdCRDH oVU7AM7cYC9n0sUrzeWEjzyKkmTHcmZS7ZIF0RyFpHe1IAC4zz4cHZJ8Od+AVOkT un0mdp1zv/v7VeZmaKCAIhDMm5b4VunNjq7XrfAKWN7CsnqBkiXm6y8KICg2gMFH H3yQGd0wumAUJwVeGgg/VnAxvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIhxw/w aiYzkJvELpbOB70pCp8pMB8GA1UdIwQYMBaAFLl4BDNQMFk9bZZXvEXb0RSxKR0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTMxMC9EMUIxRDM0NDU0 NjMxMUVDQThGQTQ5NkFDNEY5QUUwMi91WGdFTTFBd1dUMXRsbGU4UmR2UkZMRXBI U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYZ0VNMUF3V1QxdGxsZThSZHZSRkxFcEhTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTMxMC9EMUIxRDM0NDU0NjMxMUVDQThGQTQ5NkFDNEY5QUUwMi91WGdFTTFBd1dU MXRsbGU4UmR2UkZMRXBIU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAitFJ27pXNRA5A/5LLt96+kqZ07fudu17GEGfUiTgLijYwnerlsvic jZq6OapuiPZRaSfmfQ2XlU+MqKbitZhMp2wsXf1dBzBPLNK8iId+SlHLaWG+f7l9 YPkl8aHQA6Y3/qefEbEnFR9p9dHePQHUZwPkcrFRmTWCCimwm5p+v7bXp2h7k+yK i/zh+OduYFTVt/TRakt829GLelET2q1Tuo8QztC7Xi3N0vViABEyS9/RKZ0LlbY4 cP834rNgEh3MymB+ye81pBynrfDPrhC8iXMLH6VUVjBGJ2mHYpYjF2K7tKdLWraW qWo4t5lNl1RnBBTc/LDU4hu4IT0gRqgt -----END CERTIFICATE-----Generated at Sun Apr 6 10:11:12 2025 by rpki-client