$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft File: u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft (raw, json) Hash identifier: tHyU88olW41oA2DnTnDONhALI8iEBT/Il6bUKe1ITgw= Subject key identifier: 7B:B3:7C:A8:92:88:10:F7:B4:BF:71:84:71:7F:7E:4D:99:C4:E6:3B Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 Certificate issuer: /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft Manifest number: 0141 Signing time: Sat 31 May 2025 03:57:48 +0000 Manifest this update: Sat 31 May 2025 03:57:48 +0000 Manifest next update: Sat 07 Jun 2025 03:57:48 +0000 Files and hashes: 1: u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl (hash: yO+CKIAr6c/Q77KUpcHUU+HsCXB76VTItNRJMPBAKnw=) 2: 9F5C80A8F3EB11EFBAF62455C4F9AE02.roa (hash: j93vJ2NAnCNQy/x2PjU9v6iPhwn1QcPjRO5LSFsSwNE=) 3: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (hash: aCNtxlW0MshwMMlV+N563xkNmlCQdXbxR/lNk+drIlA=) 4: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (hash: rOkP4Vb8B8/6UrNv3XnkLOomlf0wseQaO6Jnqbw75S0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Validity Not Before: May 31 03:57:48 2025 GMT Not After : Jun 7 03:57:48 2025 GMT Subject: CN=683a7e3c-2ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:08:3d:07:66:37:fc:aa:57:d9:dc:33:c4:35: be:a9:e6:e9:67:af:66:7e:83:97:3a:ac:3e:eb:ba: e2:2f:fc:28:27:fc:81:a4:5d:f7:f3:a9:1b:ca:09: 52:ee:29:56:1d:61:be:59:9a:d9:e2:5b:ee:85:a4: 77:29:c1:d3:06:55:72:3a:99:1e:7a:d3:08:4a:dd: 22:67:39:c8:e4:70:c3:14:d9:2c:02:13:8d:e1:1d: fa:83:ac:cc:38:92:2c:f0:1e:20:d1:6a:1b:9e:08: 1b:70:66:91:1b:2a:b6:d8:1a:49:c6:0e:dc:cb:f9: 66:e3:31:1c:11:dd:3d:6c:bc:78:8b:2f:0a:fe:b2: 91:a9:99:b0:4c:1b:ac:99:1e:c2:ec:c1:c9:f2:f3: 4f:39:f2:ba:dd:bd:31:f4:f2:dd:18:72:97:6d:74: 85:65:48:01:6a:0a:e4:70:70:af:71:6a:61:e7:a0: b1:1e:f0:c2:d9:c3:3a:ed:d9:e9:9b:f2:5b:d5:7a: 42:7d:86:0a:af:e9:0e:03:e3:e7:3e:5e:05:a9:8a: 1e:2a:9a:bd:41:b7:fc:a1:0f:7e:30:2b:1a:00:d3: e2:2c:a2:db:a6:4b:5b:2a:ae:e7:fb:32:8f:b7:93: fe:20:a4:15:9a:7a:40:c8:05:99:d0:d2:75:aa:4b: 9b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B3:7C:A8:92:88:10:F7:B4:BF:71:84:71:7F:7E:4D:99:C4:E6:3B X509v3 Authority Key Identifier: keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:32:5f:b2:d4:a0:50:f3:38:b1:20:29:e4:c7:b3:15:53:eb: 7e:d1:77:cb:f8:c9:b4:00:75:27:c9:a4:48:8a:74:9d:93:fb: 5b:7b:da:c4:74:c7:7d:e0:79:d1:e8:f6:d7:b0:ad:96:4c:d5: 3b:46:48:eb:61:ef:db:ed:2f:16:49:71:f0:45:80:49:25:39: eb:98:d2:19:63:b7:63:d1:37:b2:9b:a6:85:0b:9c:fa:57:f6: 21:c2:78:98:48:aa:be:43:d0:93:02:f0:37:41:e9:42:f5:d7: 93:75:ba:c8:f4:a0:90:da:62:c9:2e:e2:20:75:29:0d:b2:a1: dc:04:b2:13:f2:8e:b6:1f:9a:90:f1:14:82:d0:d7:c8:f6:ed: 1d:1f:b6:1a:f3:d3:3a:0e:92:b1:11:3f:20:00:66:87:80:f6: 94:e4:6c:1c:5b:18:6e:81:4e:30:b4:6c:d2:0e:8b:e6:7f:c5: aa:ac:83:45:cd:9c:68:26:af:66:65:5c:4d:9a:83:90:49:50: 5e:10:9b:53:ba:f5:4c:89:5f:52:18:10:7f:4a:27:3d:13:c8: c9:31:e3:08:b7:ee:95:27:07:4e:f5:8e:de:40:0f:4a:7a:49: 56:80:58:1a:46:1a:52:af:24:1d:61:e6:91:4e:32:de:3e:05: 49:26:c0:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIyNjUxMTAvBgNVBAUTKEJCRUMyMTBFNzUyOUZEMzk3RjEzMzhGRkFDMURERDc4 M0MwRkFBMzIwHhcNMjUwNTMxMDM1NzQ4WhcNMjUwNjA3MDM1NzQ4WjAYMRYwFAYD VQQDEw02ODNhN2UzYy0yZWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ag9B2Y3/KpX2dwzxDW+qebpZ69mfoOXOqw+67riL/woJ/yBpF3386kbyglS 7ilWHWG+WZrZ4lvuhaR3KcHTBlVyOpkeetMISt0iZznI5HDDFNksAhON4R36g6zM OJIs8B4g0WobnggbcGaRGyq22BpJxg7cy/lm4zEcEd09bLx4iy8K/rKRqZmwTBus mR7C7MHJ8vNPOfK63b0x9PLdGHKXbXSFZUgBagrkcHCvcWph56CxHvDC2cM67dnp m/Jb1XpCfYYKr+kOA+PnPl4FqYoeKpq9Qbf8oQ9+MCsaANPiLKLbpktbKq7n+zKP t5P+IKQVmnpAyAWZ0NJ1qkubAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuzfKiS iBD3tL9xhHF/fk2ZxOY7MB8GA1UdIwQYMBaAFLvsIQ51Kf05fxM4/6wd3Xg8D6oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjI2NS85QTY2QUFERTUw ODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9UbF9FempfckIzZGVEd1Bx akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Utd2hEblVwX1RsX0V6al9yQjNkZUR3UHFqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjI2NS85QTY2QUFERTUwODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9U bF9FempfckIzZGVEd1BxakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2Ml+y1KBQ8zixICnkx7MVU+t+0XfL+Mm0AHUnyaRIinSdk/tbe9rE dMd94HnR6PbXsK2WTNU7RkjrYe/b7S8WSXHwRYBJJTnrmNIZY7dj0Teym6aFC5z6 V/YhwniYSKq+Q9CTAvA3QelC9deTdbrI9KCQ2mLJLuIgdSkNsqHcBLIT8o62H5qQ 8RSC0NfI9u0dH7Ya89M6DpKxET8gAGaHgPaU5GwcWxhugU4wtGzSDovmf8WqrINF zZxoJq9mZVxNmoOQSVBeEJtTuvVMiV9SGBB/Sic9E8jJMeMIt+6VJwdO9Y7eQA9K eklWgFgaRhpSryQdYeaRTjLePgVJJsB4 -----END CERTIFICATE-----Generated at Sat May 31 16:53:40 2025 by rpki-client