$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft File: Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft (raw, json) Hash identifier: KQE15jUOtDZ/2hi6wpBKLkvSsMFCNyR619PImuXrXxQ= Subject key identifier: C6:4F:8F:AF:69:E9:11:B2:6F:80:37:35:8D:78:68:A6:24:5D:83:E8 Authority key identifier: 51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB Certificate issuer: /CN=A91E9509/serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft Manifest number: 01CE Signing time: Sat 19 Apr 2025 02:12:33 +0000 Manifest this update: Sat 19 Apr 2025 02:12:32 +0000 Manifest next update: Sat 26 Apr 2025 02:12:32 +0000 Files and hashes: 1: Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl (hash: Vumsc7Pt6lu/1ZNecoeHr2/9LPaskGi1r+EQPGfM7SM=) 2: F23AE0AE632D11ED8C102087C4F9AE02.roa (hash: ALMLm78gllLBfFwEbfYMxy6G6W9jUB1EmmnPpTHelsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 02:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9509, serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB Validity Not Before: Apr 19 02:12:32 2025 GMT Not After : Apr 26 02:12:32 2025 GMT Subject: CN=68030690-d40e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:85:43:c7:be:d4:76:cf:d4:b9:dd:d3:c5:77: 3e:47:ae:fc:a7:eb:51:da:95:ae:2a:f7:3a:0a:16: 47:f6:2e:da:7f:68:30:e4:2c:02:9b:b2:6b:b2:6d: 1b:c6:69:9f:ad:d7:63:ac:66:73:e7:08:f2:8f:c2: f4:0c:ee:45:94:b4:4b:5d:78:b2:07:51:a9:f2:9a: 5c:e5:3b:98:aa:14:44:31:3c:58:e1:a5:97:5b:01: cb:13:d9:1e:b1:7b:06:52:8d:15:68:23:8f:16:89: 3a:cc:bf:41:81:a3:9e:e7:a2:9a:c1:9b:6c:87:22: 19:28:73:30:1a:fa:1a:83:82:e6:60:69:90:e5:b6: 14:f0:33:af:e3:2a:90:92:d7:7d:86:ca:68:49:38: 24:ef:96:b2:ab:e2:d2:60:eb:f9:fb:b5:48:7f:9d: 94:4d:6d:0c:b7:6c:c7:16:d3:3e:60:de:c0:fe:09: 51:28:c6:b6:83:c4:0f:8c:79:97:71:d9:fb:6e:fa: da:83:85:0e:58:ac:b3:eb:48:5c:89:20:42:e4:a1: 76:3d:04:31:c1:fb:47:bb:80:a4:06:12:c7:fe:2f: 96:b9:03:83:1b:39:59:81:aa:a0:65:12:62:3f:8a: 83:ff:18:b3:bf:36:9f:27:00:be:39:b2:e3:e3:7a: 5f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4F:8F:AF:69:E9:11:B2:6F:80:37:35:8D:78:68:A6:24:5D:83:E8 X509v3 Authority Key Identifier: keyid:51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2d:c9:98:fe:cb:69:ac:19:77:f4:8e:e6:5d:29:31:a7:4b: da:da:48:ff:9c:fd:80:10:6a:af:ce:dc:ad:41:50:64:a8:a1: 37:4f:31:d7:bd:cb:80:67:ba:4b:72:07:be:22:62:8e:f3:2f: eb:92:0f:19:3d:9d:f4:c3:81:f7:cc:4f:80:7d:3d:54:83:e8: bf:b3:f6:0a:db:7d:0f:15:36:ef:71:a7:9d:94:48:d6:08:54: 87:fa:88:77:a6:42:d2:21:95:5e:74:2c:fa:a8:2c:77:ce:12: ea:91:cb:c4:90:a2:fa:b3:71:0a:cd:d2:68:08:aa:d6:90:1a: e7:32:68:e3:e5:e2:0d:6e:f2:0a:a9:30:7e:d2:ea:48:41:a7: d7:19:8a:fb:0b:e2:a5:00:63:ab:de:1c:6b:d2:10:66:51:f4: d2:24:58:6a:bd:a6:e1:49:5b:c0:9d:4e:aa:8e:da:b6:05:dd: 26:6d:ac:36:2e:84:c5:12:d7:93:58:0c:1b:51:72:bb:30:10: 7e:77:62:85:1c:98:5e:68:fb:3b:07:21:06:a4:3b:92:56:b6: 1c:46:b9:8b:1f:a9:fb:90:78:ee:eb:00:92:1c:aa:c4:d0:12: d5:28:42:a6:f7:89:ee:b4:41:54:01:0c:79:48:30:26:26:e0: f2:fa:7e:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1MDkxMTAvBgNVBAUTKDUxQkVBMzYwOTQyOUQ5MUIxQzRFNDAyMkRBNjhCRDY0 M0MzM0MzRkIwHhcNMjUwNDE5MDIxMjMyWhcNMjUwNDI2MDIxMjMyWjAYMRYwFAYD VQQDEw02ODAzMDY5MC1kNDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoVDx77Uds/Uud3TxXc+R678p+tR2pWuKvc6ChZH9i7af2gw5CwCm7Jrsm0b xmmfrddjrGZz5wjyj8L0DO5FlLRLXXiyB1Gp8ppc5TuYqhREMTxY4aWXWwHLE9ke sXsGUo0VaCOPFok6zL9BgaOe56KawZtshyIZKHMwGvoag4LmYGmQ5bYU8DOv4yqQ ktd9hspoSTgk75ayq+LSYOv5+7VIf52UTW0Mt2zHFtM+YN7A/glRKMa2g8QPjHmX cdn7bvrag4UOWKyz60hciSBC5KF2PQQxwftHu4CkBhLH/i+WuQODGzlZgaqgZRJi P4qD/xizvzafJwC+ObLj43pflwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZPj69p 6RGyb4A3NY14aKYkXYPoMB8GA1UdIwQYMBaAFFG+o2CUKdkbHE5AItpovWQ8M8P7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTUwOS8yNzRFRDE1RTYw MUExMUVEQjc0MTZCNkNDNEY5QUUwMi9VYjZqWUpRcDJSc2NUa0FpMm1pOVpEd3p3 X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ViNmpZSlFwMlJzY1RrQWkybWk5WkR3endfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTUwOS8yNzRFRDE1RTYwMUExMUVEQjc0MTZCNkNDNEY5QUUwMi9VYjZqWUpRcDJS c2NUa0FpMm1pOVpEd3p3X3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANLcmY/stprBl39I7mXSkxp0va2kj/nP2AEGqvztytQVBkqKE3TzHX vcuAZ7pLcge+ImKO8y/rkg8ZPZ30w4H3zE+AfT1Ug+i/s/YK230PFTbvcaedlEjW CFSH+oh3pkLSIZVedCz6qCx3zhLqkcvEkKL6s3EKzdJoCKrWkBrnMmjj5eINbvIK qTB+0upIQafXGYr7C+KlAGOr3hxr0hBmUfTSJFhqvabhSVvAnU6qjtq2Bd0mbaw2 LoTFEteTWAwbUXK7MBB+d2KFHJheaPs7ByEGpDuSVrYcRrmLH6n7kHju6wCSHKrE 0BLVKEKm94nutEFUAQx5SDAmJuDy+n6W -----END CERTIFICATE-----Generated at Sun Apr 20 22:00:23 2025 by rpki-client