$ rpki-client -vvf rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft File: uEHIC-gYxhquhBeUDKPmnMFB348.mft (raw, json) Hash identifier: nKGqXvK7okdSNgzHSkcoLo4XnN0crjhWWkJd9qLRVmg= Subject key identifier: C3:27:3D:7E:78:5E:23:CC:3D:F8:54:9C:3A:DC:AD:4C:80:B2:65:B4 Authority key identifier: B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F Certificate issuer: /CN=A91859A3/serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F Certificate serial: 0F8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft Manifest number: 0F7C Signing time: Fri 30 May 2025 17:44:07 +0000 Manifest this update: Fri 30 May 2025 17:44:06 +0000 Manifest next update: Fri 06 Jun 2025 17:44:06 +0000 Files and hashes: 1: uEHIC-gYxhquhBeUDKPmnMFB348.crl (hash: HPqlzP/nitdNED77TJPcjZmWJaR4z+g+0kmyV3LLbT8=) 2: FB45F610638211E9A58B4C45C4F9AE02.roa (hash: IofhJ7EiHeyM1r1MV+JctpkNg1pbQMhCCkdpR4fk3JY=) 3: 65EADA381A8011ECAD1E4B30C4F9AE02.roa (hash: WDBmQN8GrovE0YfJl6NcfDbYlw4MdWA6w33AFuBSc4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3978 (0xf8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91859A3, serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F Validity Not Before: May 30 17:44:06 2025 GMT Not After : Jun 6 17:44:06 2025 GMT Subject: CN=6839ee66-629b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a5:0e:ef:ca:07:c8:b2:cf:f7:dc:ca:ab:c9: 6a:ae:0e:c8:c1:c1:de:40:8e:76:8a:7e:8b:ed:4b: 6c:9f:53:1f:57:3a:06:35:f7:dd:d4:44:8e:f7:1a: 27:18:e0:c5:ce:cc:16:76:c3:3d:02:a9:ac:7c:58: 52:79:fc:30:8c:ce:ab:56:31:71:73:e1:5e:b5:3b: e4:bc:e2:93:ac:2a:de:24:25:90:2e:5b:15:a3:5e: 9e:03:b0:6d:79:2b:22:92:87:2a:02:0d:63:14:3b: de:1e:05:d5:6f:4a:b7:d0:d8:e3:89:46:b4:86:4c: 43:ee:fd:f9:f7:3d:e6:8d:95:80:ed:b5:17:1b:23: fc:8f:0f:81:49:a5:1b:81:15:5e:88:14:8b:8f:a0: 10:19:6d:81:d2:49:1d:4d:6d:07:64:75:d6:85:59: 1e:0c:33:38:10:98:11:a2:71:7e:55:f6:9e:8f:e9: 6c:db:b5:eb:fc:a5:4e:1b:75:eb:48:19:b4:b3:94: b5:da:46:8c:46:84:7d:44:a3:5a:75:95:0f:3f:a5: 0a:e9:ad:e4:06:76:bd:a6:3c:85:50:fa:1e:69:bb: e0:b7:7b:10:08:2c:5a:72:0c:51:f1:04:69:1c:20: fa:31:a6:19:9d:31:e0:7d:27:4f:da:5b:91:6b:d4: c8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:27:3D:7E:78:5E:23:CC:3D:F8:54:9C:3A:DC:AD:4C:80:B2:65:B4 X509v3 Authority Key Identifier: keyid:B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:fe:1b:06:8e:6a:53:b3:23:b4:fb:9d:6a:46:6e:13:18:f7: 6d:40:47:a8:f2:23:56:1c:e2:aa:2c:5e:2b:ca:d3:2d:9f:06: 0b:9e:99:f1:55:d7:01:74:08:b8:42:0c:18:37:f5:03:05:71: 11:8e:12:46:49:46:75:3c:9f:8e:f3:63:bb:c6:e9:fb:b0:a8: 1e:22:9f:e9:89:cb:61:dc:3b:47:2c:4c:6a:fa:6e:ad:5c:60: 18:4a:d4:05:59:c8:28:d8:10:fe:50:c2:3e:e7:67:e1:c1:d8: 51:b8:33:6e:4f:46:cb:30:00:26:e0:e6:40:64:79:13:f7:dc: 27:aa:d8:4c:33:54:cc:52:d6:b9:b7:de:8c:5c:48:52:fe:f9: c7:b1:5a:a5:ee:d7:2b:21:74:0b:16:34:83:dd:b7:1d:60:e9: 49:5a:f6:5b:34:d6:66:25:73:e1:ef:e4:d1:fb:2d:7c:fb:98: f5:d2:28:de:76:0c:c3:b9:4f:e9:87:7c:56:24:a6:bc:b2:4d: fa:df:3f:7d:e7:65:5c:a2:01:6b:e9:b0:50:3e:e1:fe:9f:21: 38:5a:b7:5a:d7:fc:59:41:92:38:6e:b4:e0:80:d5:9e:ea:17: 89:23:6a:f8:80:f1:36:1c:d1:d0:6e:10:54:5a:fc:60:1f:b0: b9:43:3b:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU5QTMxMTAvBgNVBAUTKEI4NDFDODBCRTgxOEM2MUFBRTg0MTc5NDBDQTNFNjlD QzE0MURGOEYwHhcNMjUwNTMwMTc0NDA2WhcNMjUwNjA2MTc0NDA2WjAYMRYwFAYD VQQDEw02ODM5ZWU2Ni02MjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKUO78oHyLLP99zKq8lqrg7IwcHeQI52in6L7Utsn1MfVzoGNffd1ESO9xon GODFzswWdsM9AqmsfFhSefwwjM6rVjFxc+FetTvkvOKTrCreJCWQLlsVo16eA7Bt eSsikocqAg1jFDveHgXVb0q30NjjiUa0hkxD7v359z3mjZWA7bUXGyP8jw+BSaUb gRVeiBSLj6AQGW2B0kkdTW0HZHXWhVkeDDM4EJgRonF+Vfaej+ls27Xr/KVOG3Xr SBm0s5S12kaMRoR9RKNadZUPP6UK6a3kBna9pjyFUPoeabvgt3sQCCxacgxR8QRp HCD6MaYZnTHgfSdP2luRa9TIBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMnPX54 XiPMPfhUnDrcrUyAsmW0MB8GA1UdIwQYMBaAFLhByAvoGMYaroQXlAyj5pzBQd+P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTlBMy83NjQzNUZFRTYz ODExMUU5OUE1MUE2NDJDNEY5QUUwMi91RUhJQy1nWXhocXVoQmVVREtQbW5NRkIz NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VFSElDLWdZeGhxdWhCZVVES1Btbk1GQjM0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTlBMy83NjQzNUZFRTYzODExMUU5OUE1MUE2NDJDNEY5QUUwMi91RUhJQy1nWXho cXVoQmVVREtQbW5NRkIzNDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX/hsGjmpTsyO0+51qRm4TGPdtQEeo8iNWHOKqLF4rytMtnwYLnpnx VdcBdAi4QgwYN/UDBXERjhJGSUZ1PJ+O82O7xun7sKgeIp/picth3DtHLExq+m6t XGAYStQFWcgo2BD+UMI+52fhwdhRuDNuT0bLMAAm4OZAZHkT99wnqthMM1TMUta5 t96MXEhS/vnHsVql7tcrIXQLFjSD3bcdYOlJWvZbNNZmJXPh7+TR+y18+5j10ije dgzDuU/ph3xWJKa8sk363z9952VcogFr6bBQPuH+nyE4Wrda1/xZQZI4brTggNWe 6heJI2r4gPE2HNHQbhBUWvxgH7C5Qzu+ -----END CERTIFICATE-----Generated at Sat May 31 17:45:05 2025 by rpki-client