$ rpki-client -vvf rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft File: UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft (raw, json) Hash identifier: xd5Clsr3pqZxgEUJot4tWhmDND2sLNyb0IAkwCQSox4= Subject key identifier: 5E:F2:28:97:0C:3B:FE:36:2B:66:17:59:06:70:EA:57:BD:58:09:C6 Authority key identifier: 52:B2:19:95:42:9C:44:F8:A7:F4:EC:99:E5:30:40:87:0D:6D:38:5B Certificate issuer: /CN=A91A459D/serialNumber=52B21995429C44F8A7F4EC99E53040870D6D385B Certificate serial: 09D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft Manifest number: 09D2 Signing time: Fri 30 May 2025 20:07:38 +0000 Manifest this update: Fri 30 May 2025 20:07:38 +0000 Manifest next update: Fri 06 Jun 2025 20:07:38 +0000 Files and hashes: 1: UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl (hash: HlS7gPIfLxaM0N/7L0H6U16WUBk81pRDnV6TFpD/jXw=) 2: 21028CF67EF811EAAD47CD30C4F9AE02.roa (hash: +gB8ZHO5MMKVGP2yT3GNNhFPo53EwfTpImIrJ+ySljI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2521 (0x9d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A459D, serialNumber=52B21995429C44F8A7F4EC99E53040870D6D385B Validity Not Before: May 30 20:07:38 2025 GMT Not After : Jun 6 20:07:38 2025 GMT Subject: CN=683a100a-2688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:63:86:ab:f6:9c:25:37:fe:0f:72:d2:09:0d: 77:53:90:4f:2d:49:16:1f:eb:64:b8:77:3e:d0:33: 1d:4d:45:f3:df:4a:39:aa:6a:40:68:b4:72:05:62: 57:5e:28:f9:31:f6:ef:e3:c3:a7:a0:25:c8:b9:f4: c9:9c:ca:df:73:f4:5b:43:4d:17:b5:84:e8:ad:15: 46:7f:89:6d:b3:a6:8e:dc:bc:0e:cb:a8:85:fc:f2: 58:e5:f6:3d:90:6b:3d:ed:bf:7d:99:15:c0:8d:f1: d7:e1:27:80:84:6c:bc:70:3b:b7:28:dc:0f:d0:50: 33:03:c2:39:81:96:1d:95:09:c3:13:64:d3:3c:01: dd:95:3b:59:ff:0f:01:25:84:ae:0c:42:ce:ca:d5: e1:56:3b:0b:d1:e9:c8:78:5e:f3:ea:3c:3e:cd:33: 5e:07:5a:44:f9:f6:23:81:4d:fe:34:9f:bd:f2:3f: 13:4d:6d:64:ef:02:3a:21:f8:e7:05:ef:18:79:d2: b4:1d:48:99:a2:fc:16:b0:bd:84:16:73:dd:5e:af: 53:b2:b7:88:ad:9a:79:9e:85:37:f5:b4:b4:7a:64: bb:6a:3b:d9:5e:a4:10:e3:0f:34:7c:52:d7:f3:c9: b3:1e:85:9e:31:86:e0:2e:fb:5f:27:70:8e:fb:30: 41:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F2:28:97:0C:3B:FE:36:2B:66:17:59:06:70:EA:57:BD:58:09:C6 X509v3 Authority Key Identifier: keyid:52:B2:19:95:42:9C:44:F8:A7:F4:EC:99:E5:30:40:87:0D:6D:38:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:cd:ae:6a:ec:e3:39:81:0c:2a:14:ca:37:20:0a:74:20:3d: a6:13:f3:af:9c:48:de:8d:5b:99:fa:24:3b:82:8c:fb:5f:0e: 11:bb:2d:55:a8:87:fd:c7:6b:e1:c8:ab:65:61:7a:3c:15:60: 4a:2b:03:89:31:04:aa:aa:0f:41:75:71:af:e4:e2:95:e4:f9: 6f:03:4a:29:98:33:69:fb:2f:5d:62:48:e2:c7:4b:6a:56:ef: 76:a3:bb:45:62:a9:b1:c8:75:95:2e:29:91:bb:a1:12:05:54: 86:e7:7d:b5:20:ea:8e:32:43:65:d2:6d:af:26:53:45:27:70: 5b:b7:8b:f3:16:61:e0:c6:9c:90:d0:9f:a1:5f:6f:c6:4e:07: c5:06:65:e6:e9:af:9e:3b:4b:a4:11:52:2e:f2:71:92:e1:f8: 41:7b:0b:da:94:df:40:f0:e7:0c:ab:0d:da:29:e2:0f:9b:75: 80:ed:0d:e2:1d:6f:09:40:72:9e:e2:2e:33:12:85:47:a8:e8: bb:1e:d0:d2:23:da:b3:a1:ed:27:13:e1:bd:54:e8:29:d1:dd: 7e:fe:06:a3:3f:12:c8:28:5a:82:9c:61:3a:de:d0:28:4d:1b: 06:af:a1:10:db:cb:7a:0d:75:5e:d6:4c:b6:d9:06:42:6a:1f: 95:bd:f2:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1OUQxMTAvBgNVBAUTKDUyQjIxOTk1NDI5QzQ0RjhBN0Y0RUM5OUU1MzA0MDg3 MEQ2RDM4NUIwHhcNMjUwNTMwMjAwNzM4WhcNMjUwNjA2MjAwNzM4WjAYMRYwFAYD VQQDEw02ODNhMTAwYS0yNjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6WOGq/acJTf+D3LSCQ13U5BPLUkWH+tkuHc+0DMdTUXz30o5qmpAaLRyBWJX Xij5Mfbv48OnoCXIufTJnMrfc/RbQ00XtYTorRVGf4lts6aO3LwOy6iF/PJY5fY9 kGs97b99mRXAjfHX4SeAhGy8cDu3KNwP0FAzA8I5gZYdlQnDE2TTPAHdlTtZ/w8B JYSuDELOytXhVjsL0enIeF7z6jw+zTNeB1pE+fYjgU3+NJ+98j8TTW1k7wI6Ifjn Be8YedK0HUiZovwWsL2EFnPdXq9TsreIrZp5noU39bS0emS7ajvZXqQQ4w80fFLX 88mzHoWeMYbgLvtfJ3CO+zBBSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7yKJcM O/42K2YXWQZw6le9WAnGMB8GA1UdIwQYMBaAFFKyGZVCnET4p/TsmeUwQIcNbThb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU5RC81RkFCOTcyRTdF RjYxMUVBQTk3OUEzMkRDNEY5QUUwMi9VcklabFVLY1JQaW45T3laNVRCQWh3MXRP RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VySVpsVUtjUlBpbjlPeVo1VEJBaHcxdE9Gcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDU5RC81RkFCOTcyRTdFRjYxMUVBQTk3OUEzMkRDNEY5QUUwMi9VcklabFVLY1JQ aW45T3laNVRCQWh3MXRPRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNza5q7OM5gQwqFMo3IAp0ID2mE/OvnEjejVuZ+iQ7goz7Xw4Ruy1V qIf9x2vhyKtlYXo8FWBKKwOJMQSqqg9BdXGv5OKV5PlvA0opmDNp+y9dYkjix0tq Vu92o7tFYqmxyHWVLimRu6ESBVSG5321IOqOMkNl0m2vJlNFJ3Bbt4vzFmHgxpyQ 0J+hX2/GTgfFBmXm6a+eO0ukEVIu8nGS4fhBewvalN9A8OcMqw3aKeIPm3WA7Q3i HW8JQHKe4i4zEoVHqOi7HtDSI9qzoe0nE+G9VOgp0d1+/gajPxLIKFqCnGE63tAo TRsGr6EQ28t6DXVe1ky22QZCah+VvfLi -----END CERTIFICATE-----Generated at Sat May 31 17:36:02 2025 by rpki-client