$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft File: UCfzGS691UlQo5w9EwlKcfHTMmY.mft (raw, json) Hash identifier: 8ZSZn1MjThXKuOmdZmIUMEiXH0achL9EWnKxcb3Xndc= Subject key identifier: AE:CE:E1:A4:BE:09:23:C0:94:3E:A2:19:94:0E:E4:C7:57:1A:83:B4 Authority key identifier: 50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 Certificate issuer: /CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Certificate serial: 0B07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft Manifest number: 0AE8 Signing time: Fri 30 May 2025 19:37:38 +0000 Manifest this update: Fri 30 May 2025 19:37:37 +0000 Manifest next update: Fri 06 Jun 2025 19:37:37 +0000 Files and hashes: 1: UCfzGS691UlQo5w9EwlKcfHTMmY.crl (hash: t8AKboY47RT6nME3/00PhMcrrNLwX/G9cOOfaU4lfvw=) 2: F3F7D2B0CE9711ECA2477C19C4F9AE02.roa (hash: YSanlXPMFGlUc59onSU43QiRooXV0uHeNRhQl6sQvzs=) 3: CDD62642854E11EBA2CFDC87C4F9AE02.roa (hash: EMIkCzah8q7OcQkgGcb8CJSovHyJ1MV1+D6g6V84DdU=) 4: CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa (hash: neskcJ2ryIraX5yGhHnDKoHimVr5nfZfeUgF/8p7xpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2823 (0xb07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3078, serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Validity Not Before: May 30 19:37:37 2025 GMT Not After : Jun 6 19:37:37 2025 GMT Subject: CN=683a0902-b903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d7:e3:8c:d7:92:e5:b7:9e:f3:a7:e3:57:55: de:e0:c6:92:18:08:e9:dd:c1:da:fd:85:ff:1d:d4: 39:de:30:0a:bc:65:c8:51:5c:1a:93:09:48:46:75: 48:6d:80:95:fb:d4:f8:d3:18:ea:69:22:ff:af:b9: 26:84:47:e2:f7:d7:dd:2c:bf:2d:2b:c1:4c:3c:be: 63:59:19:9e:d2:8a:52:bb:9d:bf:e8:c2:83:59:35: 7d:d1:6e:b9:b0:17:fb:b5:85:57:b9:e4:6d:95:e0: 36:e6:c8:5d:dc:0f:66:45:0c:ca:5d:a8:65:ad:44: 3c:17:02:fa:e7:0e:4f:e4:d4:0a:b5:f8:64:37:af: be:f3:07:f8:f7:c0:0f:7d:b2:44:7d:7b:c6:0e:f8: de:c2:a5:b1:0f:93:a6:33:46:61:01:b3:fb:1a:9c: 34:9c:fe:d3:98:b0:a9:1c:4d:08:95:bc:06:97:14: d4:3e:8d:1b:6a:7e:99:53:0c:48:bf:7b:34:5f:a3: 5f:2f:4e:5e:ad:33:c8:c3:ff:c7:93:e8:e1:cd:20: 58:c7:45:34:7b:5f:50:10:47:67:d0:5f:5c:51:7e: 8d:bb:cc:ef:2d:84:f2:b3:0f:cc:e5:33:9f:44:b2: b8:02:c3:ac:08:17:32:c7:4f:c6:64:cd:29:73:5c: cc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CE:E1:A4:BE:09:23:C0:94:3E:A2:19:94:0E:E4:C7:57:1A:83:B4 X509v3 Authority Key Identifier: keyid:50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:b9:71:3a:f3:45:b5:a1:db:09:b3:6d:43:e9:5f:57:51:d1: c1:3e:ee:7e:53:e7:14:4f:e5:4f:fd:c8:60:07:6f:bf:0c:f5: 30:b0:d9:36:54:b7:bb:1a:7d:a9:6e:ab:24:0f:ab:0a:e2:a6: 2b:5c:33:da:bc:f2:b5:ed:10:89:5c:c1:7a:ad:71:37:07:f2: 71:a5:9d:41:95:60:e6:d5:99:dd:f1:bb:e5:cb:a9:30:3c:0d: 02:1d:87:fb:78:2e:d4:e4:1c:92:67:83:56:1c:b6:18:21:9a: c2:35:79:22:88:3f:12:db:ce:47:a1:09:2e:43:b5:af:7f:fa: 72:47:30:33:38:45:0a:bb:2c:0c:40:19:61:02:47:ef:ab:9f: 38:72:1c:f8:b3:9a:f4:a6:92:cc:af:a0:44:c6:48:b4:69:67: 09:24:3b:2b:ed:bf:f6:20:4e:5a:a2:01:d2:3f:61:c5:35:e9: 8f:7c:69:9f:cb:f5:2c:c2:c6:50:11:2b:98:48:e5:ad:79:ec: 0c:1e:d2:33:a7:c4:34:2d:b6:8a:01:59:c7:43:8f:92:d2:03: 4a:d3:d6:95:c2:47:ef:59:42:09:b7:80:9b:95:d5:45:65:b5: c1:f6:9f:a7:db:0b:a5:21:4b:46:ac:00:e9:af:8e:8b:81:27: e3:98:75:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwNzgxMTAvBgNVBAUTKDUwMjdGMzE5MkVCREQ1NDk1MEEzOUMzRDEzMDk0QTcx RjFEMzMyNjYwHhcNMjUwNTMwMTkzNzM3WhcNMjUwNjA2MTkzNzM3WjAYMRYwFAYD VQQDEw02ODNhMDkwMi1iOTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9fjjNeS5bee86fjV1Xe4MaSGAjp3cHa/YX/HdQ53jAKvGXIUVwakwlIRnVI bYCV+9T40xjqaSL/r7kmhEfi99fdLL8tK8FMPL5jWRme0opSu52/6MKDWTV90W65 sBf7tYVXueRtleA25shd3A9mRQzKXahlrUQ8FwL65w5P5NQKtfhkN6++8wf498AP fbJEfXvGDvjewqWxD5OmM0ZhAbP7Gpw0nP7TmLCpHE0IlbwGlxTUPo0ban6ZUwxI v3s0X6NfL05erTPIw//Hk+jhzSBYx0U0e19QEEdn0F9cUX6Nu8zvLYTysw/M5TOf RLK4AsOsCBcyx0/GZM0pc1zMewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7O4aS+ CSPAlD6iGZQO5MdXGoO0MB8GA1UdIwQYMBaAFFAn8xkuvdVJUKOcPRMJSnHx0zJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA3OC84NjMwQjFDODRD OEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFVbFFvNXc5RXdsS2NmSFRN bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VDZnpHUzY5MVVsUW81dzlFd2xLY2ZIVE1tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA3OC84NjMwQjFDODRDOEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFV bFFvNXc5RXdsS2NmSFRNbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYuXE680W1odsJs21D6V9XUdHBPu5+U+cUT+VP/chgB2+/DPUwsNk2 VLe7Gn2pbqskD6sK4qYrXDPavPK17RCJXMF6rXE3B/JxpZ1BlWDm1Znd8bvly6kw PA0CHYf7eC7U5BySZ4NWHLYYIZrCNXkiiD8S285HoQkuQ7Wvf/pyRzAzOEUKuywM QBlhAkfvq584chz4s5r0ppLMr6BExki0aWcJJDsr7b/2IE5aogHSP2HFNemPfGmf y/UswsZQESuYSOWteewMHtIzp8Q0LbaKAVnHQ4+S0gNK09aVwkfvWUIJt4CbldVF ZbXB9p+n2wulIUtGrADpr46LgSfjmHUm -----END CERTIFICATE-----Generated at Sat May 31 17:06:30 2025 by rpki-client