$ rpki-client -vvf rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft File: aUCPaxygKBZoPM5MCOAEkyUZRLI.mft (raw, json) Hash identifier: 4tx6Us9Zt5Q1Nb5w8rIaRsAM1gxAWSgDma/19PgL1ac= Subject key identifier: D4:AC:76:04:0D:39:F1:47:59:35:5D:26:5B:88:E7:61:47:B1:2C:51 Authority key identifier: 69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2 Certificate issuer: /CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2 Certificate serial: 0A44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft Manifest number: 0A2E Signing time: Fri 30 May 2025 19:59:53 +0000 Manifest this update: Fri 30 May 2025 19:59:53 +0000 Manifest next update: Fri 06 Jun 2025 19:59:53 +0000 Files and hashes: 1: aUCPaxygKBZoPM5MCOAEkyUZRLI.crl (hash: bg+xjcMwjVQyuHOU3MI9gb0gLuF1v/vZyfXv3DIe3SQ=) 2: 834C938A12C711F09998A234C4F9AE02.roa (hash: M4mfahqMzwmq58j++0Teybq9n4Aqspe3mvfksixkbgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2628 (0xa44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91166FC, serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2 Validity Not Before: May 30 19:59:53 2025 GMT Not After : Jun 6 19:59:53 2025 GMT Subject: CN=683a0e39-8871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:79:0e:17:4b:de:b6:5a:54:de:c1:32:a6:8a: dd:fa:39:fb:98:18:7b:30:12:1f:8d:39:f9:ca:d9: 24:ce:27:c3:9b:c6:a5:60:fb:8b:07:50:c3:22:4b: 4f:29:fe:54:af:d1:de:b8:f1:46:9b:e9:ee:09:16: 75:be:d5:9a:f4:ca:b4:03:81:41:a5:55:3d:e6:8a: 66:21:42:20:2d:3c:e5:a1:3e:51:1f:73:fb:26:54: 21:d7:c8:7f:e0:8a:c1:1e:8b:c8:1f:1a:38:65:92: 99:6c:49:cd:0c:1c:f3:58:14:f5:38:11:d9:3a:4c: 97:0c:5f:a6:7e:c9:9a:93:8f:ca:e3:85:c3:4e:e4: b7:56:ba:67:7b:de:6c:ea:87:93:c0:20:b9:48:82: 22:5c:a6:6b:ae:67:3f:52:de:2d:72:eb:1c:60:11: 22:9c:81:ea:48:af:b7:1c:67:5d:8a:ad:c1:90:72: b2:4b:4f:7a:e5:12:ae:8e:09:8e:9d:c2:fa:cb:66: 46:21:13:ba:54:b8:c2:e8:52:5a:db:ad:ab:e7:79: ed:e6:8e:78:8e:21:97:35:fa:f7:96:35:85:df:7a: 41:af:1e:78:07:81:d7:08:e0:e2:20:06:86:6f:c1: c5:e2:4a:4d:00:fb:32:22:af:3b:29:e3:12:c9:bb: 83:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AC:76:04:0D:39:F1:47:59:35:5D:26:5B:88:E7:61:47:B1:2C:51 X509v3 Authority Key Identifier: keyid:69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:09:a2:c8:7e:36:ba:a8:34:59:79:68:19:89:84:95:99:bf: e5:87:07:92:e4:e7:05:5f:dc:8d:7c:fa:3e:e8:1b:3d:55:51: 74:3f:c7:99:e9:6d:88:dc:df:46:7e:fa:c7:1c:bb:fb:ef:74: 3f:52:cc:09:0d:7f:f1:93:35:e2:55:6c:63:60:78:0a:5d:57: c4:41:b4:4b:47:31:83:12:6c:4f:7a:40:5b:6b:8b:4b:90:6b: 82:90:e1:45:6e:83:6d:14:e4:88:0c:2c:e9:e2:36:4b:87:c8: 3e:70:df:e2:48:ee:a2:03:f6:0a:6c:c4:4f:dc:cb:5d:35:80: 7f:4f:fa:1d:a6:8d:45:49:b7:c8:6a:ea:18:bf:7d:60:f0:70: ca:1b:21:20:18:3f:90:a8:37:b9:31:7f:35:d7:6a:9d:bb:1c: 6e:1e:0d:40:42:3a:7d:9e:6d:91:d7:bc:4f:8a:56:ee:6a:25: fc:a3:67:c3:ea:26:51:88:5d:76:69:2f:3f:a8:c2:a7:62:56: 4c:90:60:0e:38:62:2a:0f:9c:ee:79:b1:e5:d5:f0:4d:e2:a4: 82:eb:cb:10:e2:5b:6f:21:96:d5:78:36:a8:c6:02:32:03:79: ef:4a:1d:40:a0:35:5b:24:05:77:55:29:e8:04:1e:dd:3c:5b: e1:b3:d6:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY2RkMxMTAvBgNVBAUTKDY5NDA4RjZCMUNBMDI4MTY2ODNDQ0U0QzA4RTAwNDkz MjUxOTQ0QjIwHhcNMjUwNTMwMTk1OTUzWhcNMjUwNjA2MTk1OTUzWjAYMRYwFAYD VQQDEw02ODNhMGUzOS04ODcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nkOF0vetlpU3sEypord+jn7mBh7MBIfjTn5ytkkzifDm8alYPuLB1DDIktP Kf5Ur9HeuPFGm+nuCRZ1vtWa9Mq0A4FBpVU95opmIUIgLTzloT5RH3P7JlQh18h/ 4IrBHovIHxo4ZZKZbEnNDBzzWBT1OBHZOkyXDF+mfsmak4/K44XDTuS3Vrpne95s 6oeTwCC5SIIiXKZrrmc/Ut4tcuscYBEinIHqSK+3HGddiq3BkHKyS0965RKujgmO ncL6y2ZGIRO6VLjC6FJa262r53nt5o54jiGXNfr3ljWF33pBrx54B4HXCODiIAaG b8HF4kpNAPsyIq87KeMSybuD7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSsdgQN OfFHWTVdJluI52FHsSxRMB8GA1UdIwQYMBaAFGlAj2scoCgWaDzOTAjgBJMlGUSy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZGQy9BQjFGNEVDQTcy OUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tCWm9QTTVNQ09BRWt5VVpS TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FVQ1BheHlnS0Jab1BNNU1DT0FFa3lVWlJMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjZGQy9BQjFGNEVDQTcyOUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tC Wm9QTTVNQ09BRWt5VVpSTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfCaLIfja6qDRZeWgZiYSVmb/lhweS5OcFX9yNfPo+6Bs9VVF0P8eZ 6W2I3N9GfvrHHLv773Q/UswJDX/xkzXiVWxjYHgKXVfEQbRLRzGDEmxPekBba4tL kGuCkOFFboNtFOSIDCzp4jZLh8g+cN/iSO6iA/YKbMRP3MtdNYB/T/odpo1FSbfI auoYv31g8HDKGyEgGD+QqDe5MX8112qduxxuHg1AQjp9nm2R17xPilbuaiX8o2fD 6iZRiF12aS8/qMKnYlZMkGAOOGIqD5zuebHl1fBN4qSC68sQ4ltvIZbVeDaoxgIy A3nvSh1AoDVbJAV3VSnoBB7dPFvhs9Yl -----END CERTIFICATE-----Generated at Sat May 31 17:08:53 2025 by rpki-client