$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft File: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft (raw, json) Hash identifier: Yh0UWgIvMzTxFAkgIZXeorsmyHeyT5/bv5Bqu/tv7E8= Subject key identifier: 34:9E:16:D8:31:C9:69:1A:DB:99:8A:08:03:48:03:97:2C:6F:E4:34 Authority key identifier: 52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24 Certificate issuer: /CN=A91774FB/serialNumber=5296BC801402C73909F591E19095F22465414324 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft Manifest number: 86 Signing time: Thu 13 Mar 2025 04:37:10 +0000 Manifest this update: Thu 13 Mar 2025 04:37:09 +0000 Manifest next update: Thu 20 Mar 2025 04:37:09 +0000 Files and hashes: 1: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl (hash: FPWlh54eB+6E66ZjQDUERoUIteJ/lKae40bGrEXqcO0=) 2: 24142938343C11EFA0165876C4F9AE02.roa (hash: IdxIHC09tqUl/qL5Re/ky1cTF3HFezxRLbNar6MjEZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 04:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91774FB Validity Not Before: Mar 13 04:37:09 2025 GMT Not After : Mar 20 04:37:09 2025 GMT Subject: CN=67d260f6-cc0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d2:68:53:c8:69:73:c3:5b:2b:e4:3f:40:a7: 80:18:71:c3:8f:ec:48:25:3f:94:e9:fa:43:28:b7: 85:0b:34:a3:02:e1:a1:c1:44:12:69:94:8b:51:83: 2e:24:e7:1d:96:40:b1:56:3f:5f:21:f4:6b:a0:07: a5:03:06:82:d9:8a:9b:9a:e5:33:b1:a1:dc:2a:9e: 3c:6c:d7:b6:5f:fa:e4:54:72:a0:7f:4e:75:41:80: 1f:76:7e:af:de:af:ed:36:e6:01:6f:55:86:b5:4a: 95:22:72:bb:8a:10:c4:ed:39:50:09:f8:27:87:4a: 50:e3:d1:f5:33:c7:0e:9c:23:e3:4f:88:b1:3b:90: b0:44:e1:5c:95:3e:44:b7:e2:7f:45:03:b8:7c:b7: 6a:07:e4:00:eb:57:6a:14:9e:6d:e0:ea:60:94:d9: ce:a4:36:de:49:b3:4e:c7:f0:70:67:eb:fe:0c:87: 33:10:8b:66:4b:65:43:af:35:3b:b5:1d:65:ad:95: 7d:ec:1b:67:ba:dc:99:b2:fc:f0:25:85:c7:49:56: 04:ff:c8:2d:9e:40:95:21:e7:ee:53:10:f0:0d:75: 2d:8c:a7:72:d1:47:7f:52:8e:62:52:fc:9b:da:1c: a5:b0:8c:3f:78:fc:69:15:b3:aa:3c:c3:79:e1:60: 56:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9E:16:D8:31:C9:69:1A:DB:99:8A:08:03:48:03:97:2C:6F:E4:34 X509v3 Authority Key Identifier: keyid:52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:c1:b4:d5:47:40:2a:7f:f8:97:86:a6:e4:0e:82:fc:48:d1: fb:26:52:9c:df:55:bd:39:91:37:c7:8a:b4:06:00:4b:bf:8f: f4:c3:73:68:44:33:c8:ad:36:28:8d:11:9e:1e:53:c2:e4:61: 70:6e:14:a9:f3:82:55:da:b4:14:a6:c1:e8:8f:35:a4:d1:28: 29:fc:84:27:59:38:e7:cc:44:cd:38:da:a8:c2:6a:25:19:94: 17:fe:85:51:6a:8c:6f:26:9c:3b:49:0b:cf:5b:42:8e:35:00: e7:32:85:2f:13:e8:fe:a9:98:e5:ca:35:6d:20:c5:f9:89:55: 2c:b5:c2:8a:ac:5c:cc:80:c8:86:ef:45:2b:fb:82:24:17:7e: 75:5a:32:7d:de:eb:46:39:c8:a1:51:8f:4a:ee:3b:72:32:aa: e2:74:47:17:26:cb:a6:bc:98:34:b7:a6:71:a9:41:bc:3c:20: 22:57:b3:5e:53:82:c2:13:ec:e8:63:80:15:63:1c:6e:24:06: bc:91:4e:38:32:6e:24:cc:20:66:25:0f:a7:f4:32:c6:fb:b3: 8a:1c:e5:49:48:4e:2a:51:91:84:22:95:5f:74:ee:fc:60:fb: c3:bf:fc:21:b3:16:1a:54:a9:bc:45:af:78:d8:2f:54:1f:0b: ca:73:45:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0RkIxMTAvBgNVBAUTKDUyOTZCQzgwMTQwMkM3MzkwOUY1OTFFMTkwOTVGMjI0 NjU0MTQzMjQwHhcNMjUwMzEzMDQzNzA5WhcNMjUwMzIwMDQzNzA5WjAYMRYwFAYD VQQDEw02N2QyNjBmNi1jYzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNJoU8hpc8NbK+Q/QKeAGHHDj+xIJT+U6fpDKLeFCzSjAuGhwUQSaZSLUYMu JOcdlkCxVj9fIfRroAelAwaC2YqbmuUzsaHcKp48bNe2X/rkVHKgf051QYAfdn6v 3q/tNuYBb1WGtUqVInK7ihDE7TlQCfgnh0pQ49H1M8cOnCPjT4ixO5CwROFclT5E t+J/RQO4fLdqB+QA61dqFJ5t4OpglNnOpDbeSbNOx/BwZ+v+DIczEItmS2VDrzU7 tR1lrZV97BtnutyZsvzwJYXHSVYE/8gtnkCVIefuUxDwDXUtjKdy0Ud/Uo5iUvyb 2hylsIw/ePxpFbOqPMN54WBWmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSeFtgx yWka25mKCANIA5csb+Q0MB8GA1UdIwQYMBaAFFKWvIAUAsc5CfWR4ZCV8iRlQUMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzRGQi83ODk3RjgxNjM0 MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9VcGE4Z0JRQ3h6a0o5Wkhoa0pYeUpHVkJR eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VwYThnQlFDeHprSjlaSGhrSlh5SkdWQlF5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzRGQi83ODk3RjgxNjM0MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9VcGE4Z0JRQ3h6 a0o5Wkhoa0pYeUpHVkJReVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYwbTVR0Aqf/iXhqbkDoL8SNH7JlKc31W9OZE3x4q0BgBLv4/0w3No RDPIrTYojRGeHlPC5GFwbhSp84JV2rQUpsHojzWk0Sgp/IQnWTjnzETNONqowmol GZQX/oVRaoxvJpw7SQvPW0KONQDnMoUvE+j+qZjlyjVtIMX5iVUstcKKrFzMgMiG 70Ur+4IkF351WjJ93utGOcihUY9K7jtyMqridEcXJsumvJg0t6ZxqUG8PCAiV7Ne U4LCE+zoY4AVYxxuJAa8kU44Mm4kzCBmJQ+n9DLG+7OKHOVJSE4qUZGEIpVfdO78 YPvDv/whsxYaVKm8Ra942C9UHwvKc0U7 -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:47 2025 by rpki-client