$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft File: UdUxrvegh8GOMB4OaixjcbJkw-g.mft (raw, json) Hash identifier: KDlCqxcdYe86RlbdAid0MBbveerWuGFH+8A5v+AtePc= Subject key identifier: CE:FA:93:B2:9F:22:98:6A:79:44:77:57:2B:E1:0A:31:6F:8B:A4:D8 Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft Manifest number: 0193 Signing time: Thu 03 Apr 2025 03:01:16 +0000 Manifest this update: Thu 03 Apr 2025 03:01:16 +0000 Manifest next update: Thu 10 Apr 2025 03:01:16 +0000 Files and hashes: 1: UdUxrvegh8GOMB4OaixjcbJkw-g.crl (hash: 4F7fK8XSnv0EZ19jxmcTCvTA3ah6PDXFshcJwtE+9do=) 2: 891E633CB7F111EFA500D67CC4F9AE02.roa (hash: y1UQ1O1XftpyphxFOlftvNUIc8YKCDV+diHhEIBCjyQ=) 3: 7D215B2CC3C111EE8F83CE1AC4F9AE02.roa (hash: sUdZMd0Q+ciHznerisP4nkpWQvRZbfYqoJyi+8cz9Yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAFF Validity Not Before: Apr 3 03:01:16 2025 GMT Not After : Apr 10 03:01:16 2025 GMT Subject: CN=67edf9fc-89f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e3:76:4a:d6:52:41:8d:6c:15:09:d5:c4:92: d3:5e:a3:71:46:97:13:a3:8e:40:3a:3c:96:f2:93: dc:6a:97:fe:ad:a5:fa:37:27:d8:9c:ee:78:78:5b: 2f:70:a2:d5:25:52:3e:96:46:8d:41:5f:d6:2e:a2: 9b:fb:92:20:1d:8f:62:6d:1a:43:86:2e:71:e0:f6: 0d:06:bf:1f:4d:ac:98:72:f4:75:d3:49:b6:17:e5: 33:e1:ff:b1:4f:e1:da:e9:b1:79:62:57:3d:52:c8: 6e:be:82:30:11:5d:69:e3:03:05:99:98:64:a6:73: ee:6b:21:49:61:ba:df:27:8d:b8:63:14:22:fd:2e: 68:f6:83:dc:5d:63:c7:28:58:f1:ef:09:48:f2:fa: 66:3c:2e:2a:43:14:d2:97:5f:94:79:00:b3:fa:d4: 99:7c:a6:29:b2:33:24:b3:af:11:05:2f:a6:69:49: b9:a5:75:16:d6:9f:8a:48:11:7b:50:df:50:e3:a5: f5:78:43:b5:5b:b0:46:1a:30:6d:7b:39:f4:12:24: 1f:87:10:92:72:e1:8c:05:d3:a9:94:95:6d:c8:0e: bc:22:30:55:11:f1:b2:98:9b:ab:67:bf:90:44:72: 21:43:4a:da:b0:ee:0d:75:5b:34:e3:23:69:25:a6: cf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FA:93:B2:9F:22:98:6A:79:44:77:57:2B:E1:0A:31:6F:8B:A4:D8 X509v3 Authority Key Identifier: keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:71:cf:8e:a4:c1:bf:fc:90:8c:2c:19:26:0c:e4:43:b7:5b: 8d:8a:c7:02:5e:0b:41:e3:0d:08:8a:c9:b7:44:79:bc:df:1b: 15:15:ea:87:82:6d:84:f7:15:d3:b8:06:af:13:0b:9e:ed:4a: d9:a4:26:b4:6c:d5:f4:fb:69:01:1b:ab:38:ec:85:25:22:b6: 92:52:1f:67:d4:7d:3f:b3:c9:44:05:64:a3:8b:c0:a8:7d:50: b8:c1:4c:63:e3:0c:4a:38:23:f5:d5:b3:03:73:5b:92:40:e8: 1a:c6:45:5f:b0:bb:c0:63:34:6e:30:45:01:c9:6e:e2:68:a9: 7b:af:53:56:a5:93:28:cd:a9:f1:50:4c:20:78:77:24:b4:5b: e1:a8:43:07:09:2f:5c:17:13:f1:05:0d:df:2b:2a:30:e9:3e: 41:45:6d:a1:d9:70:ac:49:b9:ba:59:12:97:6b:2c:67:17:16: 2c:71:8d:79:5e:de:a6:ed:d9:bd:78:61:4b:e7:dd:2c:83:b7: cf:c8:1c:4f:db:45:7f:9b:ea:59:5e:78:d4:ee:ad:97:07:d6: 2b:b7:de:fc:76:11:80:f2:19:fb:bb:7e:0a:b6:f6:24:c6:50: 5d:2d:93:63:6e:54:02:3b:4c:8f:7e:4c:d4:48:09:f2:75:d9: 68:c8:a3:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZBRkYxMTAvBgNVBAUTKDUxRDUzMUFFRjdBMDg3QzE4RTMwMUUwRTZBMkM2Mzcx QjI2NEMzRTgwHhcNMjUwNDAzMDMwMTE2WhcNMjUwNDEwMDMwMTE2WjAYMRYwFAYD VQQDEw02N2VkZjlmYy04OWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3uN2StZSQY1sFQnVxJLTXqNxRpcTo45AOjyW8pPcapf+raX6NyfYnO54eFsv cKLVJVI+lkaNQV/WLqKb+5IgHY9ibRpDhi5x4PYNBr8fTayYcvR100m2F+Uz4f+x T+Ha6bF5Ylc9UshuvoIwEV1p4wMFmZhkpnPuayFJYbrfJ424YxQi/S5o9oPcXWPH KFjx7wlI8vpmPC4qQxTSl1+UeQCz+tSZfKYpsjMks68RBS+maUm5pXUW1p+KSBF7 UN9Q46X1eEO1W7BGGjBtezn0EiQfhxCScuGMBdOplJVtyA68IjBVEfGymJurZ7+Q RHIhQ0rasO4NdVs04yNpJabPDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM76k7Kf IphqeUR3VyvhCjFvi6TYMB8GA1UdIwQYMBaAFFHVMa73oIfBjjAeDmosY3GyZMPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkFGRi9EMDYxMUYwNEND NDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4R09NQjRPYWl4amNiSmt3 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkVXhydmVnaDhHT01CNE9haXhqY2JKa3ctZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkFGRi9EMDYxMUYwNENDNDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4 R09NQjRPYWl4amNiSmt3LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEcc+OpMG//JCMLBkmDORDt1uNiscCXgtB4w0Iism3RHm83xsVFeqH gm2E9xXTuAavEwue7UrZpCa0bNX0+2kBG6s47IUlIraSUh9n1H0/s8lEBWSji8Co fVC4wUxj4wxKOCP11bMDc1uSQOgaxkVfsLvAYzRuMEUByW7iaKl7r1NWpZMozanx UEwgeHcktFvhqEMHCS9cFxPxBQ3fKyow6T5BRW2h2XCsSbm6WRKXayxnFxYscY15 Xt6m7dm9eGFL590sg7fPyBxP20V/m+pZXnjU7q2XB9Yrt978dhGA8hn7u34KtvYk xlBdLZNjblQCO0yPfkzUSAnyddloyKNK -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:46 2025 by rpki-client