$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft File: uV2VSq65WdNCfBB2qfV98hw4v8w.mft (raw, json) Hash identifier: 7ZibAVWISd/fDGaKxiwFTikIMv5O3jmD8R/Ea2QoaGQ= Subject key identifier: BF:A6:04:E5:DA:37:61:A3:91:07:C8:43:4E:D5:03:B6:3D:81:CC:B8 Authority key identifier: B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC Certificate issuer: /CN=A91FBD28/serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC Certificate serial: 269C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft Manifest number: 267D Signing time: Fri 04 Apr 2025 15:44:43 +0000 Manifest this update: Fri 04 Apr 2025 15:44:42 +0000 Manifest next update: Fri 11 Apr 2025 15:44:42 +0000 Files and hashes: 1: uV2VSq65WdNCfBB2qfV98hw4v8w.crl (hash: O7EZ+JEvOOiVWP6kwv9WirCrVEYw7ycQyY+85Id3Mrg=) 2: 94688318A57B11EA964E0C3DC4F9AE02.roa (hash: qb9PKTbJFEWjVkrorFJajJwU9G8YZ7gNAVQpMrR1dv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9884 (0x269c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD28 Validity Not Before: Apr 4 15:44:42 2025 GMT Not After : Apr 11 15:44:42 2025 GMT Subject: CN=67effe6b-985c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:49:fc:79:b7:9b:e2:98:4b:89:a8:b6:b0:f5: e1:5e:11:44:65:6e:9a:81:b6:05:07:64:ed:c7:a1: 54:6a:3d:2b:84:f0:4b:8b:46:59:f9:aa:7a:44:98: 64:5d:a1:f9:0c:32:f2:16:16:29:65:c4:0f:0d:97: 15:71:bc:d5:cf:19:ba:45:83:57:f9:45:f7:23:1f: 1c:fe:8b:37:49:f0:98:45:e0:5e:43:0f:6e:15:6f: e0:7b:4a:be:bc:c6:06:93:39:91:c7:86:c5:a2:98: 0c:99:01:86:48:2a:ee:44:72:37:fe:97:ff:12:74: f4:02:c9:2d:2e:87:03:da:e7:c3:ee:09:d1:cf:6b: 11:99:88:7e:a8:9e:66:26:84:1c:ce:59:df:9f:78: b0:1c:04:7e:c4:a7:de:ba:fd:2b:83:ee:ee:8b:fa: 70:68:f9:48:9c:e5:58:42:c5:f5:f0:ee:a4:54:1f: 9f:9b:26:ce:23:f9:a0:16:53:12:5c:52:fd:71:a0: ef:13:1a:42:54:78:da:e7:5a:74:9f:9e:5a:54:4d: 37:cc:b4:15:0d:88:31:9c:41:8e:f4:b8:05:0b:6a: f7:a3:c9:88:6d:6b:82:f3:76:42:69:32:4e:0f:bc: 83:fb:7f:f7:79:49:a3:d9:88:93:96:15:b2:bf:8d: 06:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A6:04:E5:DA:37:61:A3:91:07:C8:43:4E:D5:03:B6:3D:81:CC:B8 X509v3 Authority Key Identifier: keyid:B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:10:dc:53:1a:e9:4d:ff:85:d9:15:34:52:63:1f:aa:ff:86: ed:6d:61:fc:a4:8d:a0:e1:fc:33:2b:ae:91:1b:27:f0:33:46: c7:18:93:33:72:7a:53:b5:d1:14:92:9a:b3:63:b1:2f:be:14: d5:fb:fa:1c:53:bb:2c:df:6b:bd:a2:4b:c3:5c:5d:96:27:ba: 8c:3b:dc:63:e7:e8:85:d2:2f:1a:bb:b5:86:56:fb:c3:3e:4a: 61:2a:11:1c:b4:1b:dc:3a:6a:be:78:3a:6e:12:cf:8c:94:0e: f9:f0:18:74:3b:bc:8e:47:87:3c:3e:c9:20:98:4e:52:ca:15: 8a:f4:1e:9f:80:e5:74:2e:f7:f3:ea:3d:73:06:7f:d3:e1:f0: 77:5e:9d:6c:de:d0:cc:fb:d1:5a:f7:50:03:04:3f:42:98:46: 61:af:73:f4:16:39:5b:79:9a:84:0f:c7:7c:34:94:0d:6c:ec: 4e:a0:25:35:01:f2:0c:99:7a:87:23:c7:66:2b:ad:47:02:32: ff:07:60:f0:04:a9:f1:a2:59:d1:03:f2:b2:7e:c0:e2:af:8f: cb:f4:80:8a:6f:a9:a6:c2:84:e6:50:2c:4f:be:ac:1b:e1:70: 60:a7:5b:b3:fc:b3:e4:e6:52:ea:fe:2d:1e:8b:76:01:02:92: eb:eb:02:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEMjgxMTAvBgNVBAUTKEI5NUQ5NTRBQUVCOTU5RDM0MjdDMTA3NkE5RjU3REYy MUMzOEJGQ0MwHhcNMjUwNDA0MTU0NDQyWhcNMjUwNDExMTU0NDQyWjAYMRYwFAYD VQQDEw02N2VmZmU2Yi05ODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEn8ebeb4phLiai2sPXhXhFEZW6agbYFB2Ttx6FUaj0rhPBLi0ZZ+ap6RJhk XaH5DDLyFhYpZcQPDZcVcbzVzxm6RYNX+UX3Ix8c/os3SfCYReBeQw9uFW/ge0q+ vMYGkzmRx4bFopgMmQGGSCruRHI3/pf/EnT0AsktLocD2ufD7gnRz2sRmYh+qJ5m JoQczlnfn3iwHAR+xKfeuv0rg+7ui/pwaPlInOVYQsX18O6kVB+fmybOI/mgFlMS XFL9caDvExpCVHja51p0n55aVE03zLQVDYgxnEGO9LgFC2r3o8mIbWuC83ZCaTJO D7yD+3/3eUmj2YiTlhWyv40GEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+mBOXa N2GjkQfIQ07VA7Y9gcy4MB8GA1UdIwQYMBaAFLldlUquuVnTQnwQdqn1ffIcOL/M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQyOC9FNkNFRDcyMkUx QjAxMUU0OEMyRERFMTZDNEY5QUUwMi91VjJWU3E2NVdkTkNmQkIycWZWOThodzR2 OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VWMlZTcTY1V2ROQ2ZCQjJxZlY5OGh3NHY4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQyOC9FNkNFRDcyMkUxQjAxMUU0OEMyRERFMTZDNEY5QUUwMi91VjJWU3E2NVdk TkNmQkIycWZWOThodzR2OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuENxTGulN/4XZFTRSYx+q/4btbWH8pI2g4fwzK66RGyfwM0bHGJMz cnpTtdEUkpqzY7EvvhTV+/ocU7ss32u9okvDXF2WJ7qMO9xj5+iF0i8au7WGVvvD PkphKhEctBvcOmq+eDpuEs+MlA758Bh0O7yOR4c8PskgmE5SyhWK9B6fgOV0Lvfz 6j1zBn/T4fB3Xp1s3tDM+9Fa91ADBD9CmEZhr3P0FjlbeZqED8d8NJQNbOxOoCU1 AfIMmXqHI8dmK61HAjL/B2DwBKnxolnRA/KyfsDir4/L9ICKb6mmwoTmUCxPvqwb 4XBgp1uz/LPk5lLq/i0ei3YBApLr6wIg -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:49 2025 by rpki-client