$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft File: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft (raw, json) Hash identifier: 0V6XZovYVyehdECB59PzAa4zRWQRwztFVDLCv3HHgts= Subject key identifier: 2F:22:85:23:7E:CD:1B:83:19:C2:58:3C:5E:D9:32:B4:CC:DF:18:53 Authority key identifier: B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68 Certificate issuer: /CN=A91FA851/serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft Manifest number: E5 Signing time: Sat 05 Apr 2025 04:46:45 +0000 Manifest this update: Sat 05 Apr 2025 04:46:45 +0000 Manifest next update: Sat 12 Apr 2025 04:46:45 +0000 Files and hashes: 1: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl (hash: y8haIe0kGCyX5XoyOpDDsQVN11zMAfETbnRgH3KfLqk=) 2: 8FD49B16BAE411EE9198A471C4F9AE02.roa (hash: L0qfyKxG6EHzysnGwaUqdqXIinzIkFTO2ksscDrrvZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA851 Validity Not Before: Apr 5 04:46:45 2025 GMT Not After : Apr 12 04:46:45 2025 GMT Subject: CN=67f0b5b5-365c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ca:bc:f2:41:9e:14:1c:3b:04:cb:f4:c4:cb: ac:38:15:fb:f4:15:d6:93:9d:a2:c4:69:9c:2a:46: 30:de:a2:6b:71:f4:58:37:36:a8:8c:1d:0d:60:cd: 4f:f2:2b:1c:11:00:eb:83:e8:d8:01:aa:cc:e3:01: d6:77:a6:be:0e:25:11:4d:37:ce:93:40:34:1a:8f: 4d:a0:4a:8e:6e:7b:8c:81:a4:a8:6d:49:a8:80:b1: 52:13:fc:5f:e6:ce:f6:8f:c8:1b:51:47:60:b4:f1: 13:85:93:95:e7:87:7d:d4:9b:7f:91:af:e4:b0:8e: 5a:a4:56:ed:f7:30:1b:ec:72:91:5d:59:55:63:8e: 84:3b:99:47:e8:b4:c9:50:03:5e:22:a6:d2:8d:5a: 13:22:cd:1d:35:e0:db:5f:90:1f:ea:cf:c5:94:84: 57:9b:e0:87:73:16:4d:6e:6f:cd:75:91:ab:d1:b6: a8:8e:e9:af:fe:50:15:e8:b2:6e:0e:99:0a:ff:67: 08:7a:7f:dc:53:a3:dd:4a:f3:f7:b9:f9:03:64:5b: a8:44:f4:db:38:b3:75:8f:17:e3:70:28:d1:e5:2b: 1e:d1:a8:ab:1f:11:ec:93:b1:de:e5:7e:05:2a:58: 3f:60:5a:5b:7b:88:c6:a7:c5:fa:82:a4:7f:ea:5b: 8b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:22:85:23:7E:CD:1B:83:19:C2:58:3C:5E:D9:32:B4:CC:DF:18:53 X509v3 Authority Key Identifier: keyid:B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:2e:20:8d:38:1e:33:89:d6:4b:c5:5d:55:0c:12:ef:65:82: a1:e1:9e:60:f2:07:e3:b2:da:fe:fb:98:3a:14:6e:39:a7:7c: 28:6f:ce:67:c0:f6:f2:27:62:fd:fc:21:23:2a:ac:75:b6:c1: 03:5f:86:41:7b:fd:ef:38:31:d9:5c:d9:f7:b9:0f:b2:28:2c: 6b:3f:55:fe:75:bc:13:56:d0:b3:b1:17:ac:1e:9a:7a:b8:0d: 93:ae:db:7f:93:f0:66:f8:cc:1b:25:20:b7:5d:14:d7:85:7c: 67:b3:ec:b0:b1:fa:5b:63:07:82:3c:a0:ec:b0:06:21:ad:ab: 96:7e:db:4d:41:e3:3c:32:48:8f:bb:d0:7f:ab:16:33:27:10: d7:68:e7:fb:c7:d5:d6:2e:52:13:51:e2:19:5b:05:1b:ae:e4: a8:98:20:e0:5b:ab:a5:11:aa:75:b0:f2:2d:c2:e6:39:23:88: f1:10:ad:c6:1b:ee:00:0c:49:50:ac:fb:72:dc:d0:ac:b8:18: db:cb:69:ce:6a:e5:9e:36:8c:d5:14:d1:d1:07:da:89:09:d1: 56:2e:fa:b8:ff:20:94:e3:c2:d5:2f:63:5d:69:9a:61:71:5c: 37:95:21:42:28:76:2a:b9:55:f6:04:51:ed:5d:03:43:1b:93: 36:c0:aa:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4NTExMTAvBgNVBAUTKEI5MjUwRkRFM0ZBQkQ1OUZBNTYwODIzMEZFQTdBMjND NEI0Qzg5NjgwHhcNMjUwNDA1MDQ0NjQ1WhcNMjUwNDEyMDQ0NjQ1WjAYMRYwFAYD VQQDEw02N2YwYjViNS0zNjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusq88kGeFBw7BMv0xMusOBX79BXWk52ixGmcKkYw3qJrcfRYNzaojB0NYM1P 8iscEQDrg+jYAarM4wHWd6a+DiURTTfOk0A0Go9NoEqObnuMgaSobUmogLFSE/xf 5s72j8gbUUdgtPEThZOV54d91Jt/ka/ksI5apFbt9zAb7HKRXVlVY46EO5lH6LTJ UANeIqbSjVoTIs0dNeDbX5Af6s/FlIRXm+CHcxZNbm/NdZGr0baojumv/lAV6LJu DpkK/2cIen/cU6PdSvP3ufkDZFuoRPTbOLN1jxfjcCjR5Sse0airHxHsk7He5X4F Klg/YFpbe4jGp8X6gqR/6luL/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8ihSN+ zRuDGcJYPF7ZMrTM3xhTMB8GA1UdIwQYMBaAFLklD94/q9WfpWCCMP6nojxLTIlo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTg1MS85NUE2MTE5Q0I5 REYxMUVFOTRCNDI0MkFDNEY5QUUwMi91U1VQM2otcjFaLWxZSUl3X3FlaVBFdE1p V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VTVVAzai1yMVotbFlJSXdfcWVpUEV0TWlXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTg1MS85NUE2MTE5Q0I5REYxMUVFOTRCNDI0MkFDNEY5QUUwMi91U1VQM2otcjFa LWxZSUl3X3FlaVBFdE1pV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJLiCNOB4zidZLxV1VDBLvZYKh4Z5g8gfjstr++5g6FG45p3wob85n wPbyJ2L9/CEjKqx1tsEDX4ZBe/3vODHZXNn3uQ+yKCxrP1X+dbwTVtCzsResHpp6 uA2Trtt/k/Bm+MwbJSC3XRTXhXxns+ywsfpbYweCPKDssAYhrauWfttNQeM8MkiP u9B/qxYzJxDXaOf7x9XWLlITUeIZWwUbruSomCDgW6ulEap1sPItwuY5I4jxEK3G G+4ADElQrPty3NCsuBjby2nOauWeNozVFNHRB9qJCdFWLvq4/yCU48LVL2NdaZph cVw3lSFCKHYquVX2BFHtXQNDG5M2wKqf -----END CERTIFICATE-----Generated at Sun Apr 6 05:30:49 2025 by rpki-client