$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft File: uo1v5dgowFOZs-GqZY_AWIYf3OA.mft (raw, json) Hash identifier: f1cpBgLkd9U9tY/h7jy/T8XSq30nncLLVLuGoZOsad0= Subject key identifier: 7F:24:61:0C:FD:04:BD:7C:7D:E8:82:3B:3A:A7:41:7A:C3:E7:12:06 Authority key identifier: BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0 Certificate issuer: /CN=A91AAF02/serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0 Certificate serial: 0F2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft Manifest number: 0F24 Signing time: Fri 30 May 2025 17:48:38 +0000 Manifest this update: Fri 30 May 2025 17:48:37 +0000 Manifest next update: Fri 06 Jun 2025 17:48:37 +0000 Files and hashes: 1: uo1v5dgowFOZs-GqZY_AWIYf3OA.crl (hash: fZBHrAyihaLVIATTK971S/Ru/h8Iy/GFm2Ejl8qUYmg=) 2: 7EA856A6C3F511EEB2610F2FC4F9AE02.roa (hash: tn6ujwfx2fxOjVcWSqeXpg3bHl3JICdgt6OHucuWivU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3887 (0xf2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02, serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0 Validity Not Before: May 30 17:48:37 2025 GMT Not After : Jun 6 17:48:37 2025 GMT Subject: CN=6839ef76-c4b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:93:ad:b5:65:58:fb:b6:82:1b:ba:34:2d:49: 9d:47:6d:fe:5a:ce:2c:c9:3e:6e:24:83:a9:b4:ba: d7:60:64:52:a7:c8:33:1c:a7:57:30:34:c9:20:63: 84:b1:ce:e2:c9:b0:a1:97:dc:c0:5f:4b:9d:d8:d9: 31:fb:ef:4d:69:e0:e9:53:d6:fc:f5:69:82:e7:c6: 9c:98:65:e3:3c:09:dc:2a:94:12:b4:52:97:b5:5d: 1d:71:d8:b7:b3:5f:4e:6f:2b:52:71:95:f8:b6:db: 1b:10:a6:9c:aa:3a:99:01:9a:48:3f:db:a7:0d:d7: 57:41:b0:6d:75:4c:7f:20:4e:51:92:49:61:64:ed: f1:a6:51:4a:72:16:be:05:17:7d:1e:9f:61:7e:e0: 4d:dd:64:c1:a9:55:f6:a5:05:95:26:a2:2f:43:62: f0:f8:d6:74:bd:26:8e:e1:df:a1:d5:2a:8a:43:05: c5:cb:21:c7:bd:33:07:8d:fa:6a:d8:49:b0:26:c5: f6:d2:8c:f4:68:1b:0c:51:ba:70:14:9c:f8:ed:9b: 35:6c:16:a6:e2:39:58:23:83:7c:ce:50:99:45:3a: 7c:07:68:88:bf:b7:17:3e:48:20:2d:87:33:b1:d3: 8d:03:5e:4e:26:8f:40:f9:05:72:36:dc:ec:2e:8b: ca:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:24:61:0C:FD:04:BD:7C:7D:E8:82:3B:3A:A7:41:7A:C3:E7:12:06 X509v3 Authority Key Identifier: keyid:BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:19:f0:4f:d4:f1:41:85:ef:5c:4a:f4:4a:f0:c4:86:94:86: 1d:24:90:f6:8f:89:b6:cf:b6:3f:4b:7e:95:98:b5:a6:24:9a: df:f7:88:83:a8:0f:ab:03:d5:a8:eb:e7:97:34:38:e2:d2:2f: 59:ef:a1:1e:4d:c1:d4:43:e7:4c:5f:cd:ff:8c:d1:75:55:8b: 16:5d:5b:07:24:8d:e0:6b:3b:77:ae:7a:be:d3:e3:6b:65:3e: d7:4d:66:07:7a:49:8f:17:a8:f2:72:b2:31:82:6f:09:c3:b4: c4:73:5f:9a:f7:15:4d:3a:49:a7:65:9f:84:e8:36:70:ea:f2: 87:3a:c3:c8:e9:c3:0c:b2:be:37:f3:5b:7d:ff:96:59:ab:c4: 25:5e:47:68:93:e2:bf:b6:ca:c6:92:f4:56:5b:82:96:13:0e: 99:cd:58:05:7e:c5:55:40:94:d0:42:ce:9d:69:bb:18:09:50: 6b:fd:9a:f8:f0:e4:ea:35:05:20:b5:a6:2d:6d:e9:28:8b:9c: 92:c7:29:c9:e5:90:b1:6e:be:e4:69:32:f4:af:7f:da:32:7a: 5c:9e:c0:04:51:35:dd:dd:80:44:46:6e:5e:34:f9:71:45:f9: 41:e1:3d:75:82:1c:26:7d:40:0c:e4:83:f1:8f:70:42:28:e8: 4a:64:73:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKEJBOEQ2RkU1RDgyOEMwNTM5OUIzRTFBQTY1OEZDMDU4 ODYxRkRDRTAwHhcNMjUwNTMwMTc0ODM3WhcNMjUwNjA2MTc0ODM3WjAYMRYwFAYD VQQDEw02ODM5ZWY3Ni1jNGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5OttWVY+7aCG7o0LUmdR23+Ws4syT5uJIOptLrXYGRSp8gzHKdXMDTJIGOE sc7iybChl9zAX0ud2Nkx++9NaeDpU9b89WmC58acmGXjPAncKpQStFKXtV0dcdi3 s19ObytScZX4ttsbEKacqjqZAZpIP9unDddXQbBtdUx/IE5RkklhZO3xplFKcha+ BRd9Hp9hfuBN3WTBqVX2pQWVJqIvQ2Lw+NZ0vSaO4d+h1SqKQwXFyyHHvTMHjfpq 2EmwJsX20oz0aBsMUbpwFJz47Zs1bBam4jlYI4N8zlCZRTp8B2iIv7cXPkggLYcz sdONA15OJo9A+QVyNtzsLovK6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8kYQz9 BL18feiCOzqnQXrD5xIGMB8GA1UdIwQYMBaAFLqNb+XYKMBTmbPhqmWPwFiGH9zg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi9FQUNENDg3Njc2 NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dGT1pzLUdxWllfQVdJWWYz T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VvMXY1ZGdvd0ZPWnMtR3FaWV9BV0lZZjNPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUYwMi9FQUNENDg3Njc2NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dG T1pzLUdxWllfQVdJWWYzT0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeGfBP1PFBhe9cSvRK8MSGlIYdJJD2j4m2z7Y/S36VmLWmJJrf94iD qA+rA9Wo6+eXNDji0i9Z76EeTcHUQ+dMX83/jNF1VYsWXVsHJI3gazt3rnq+0+Nr ZT7XTWYHekmPF6jycrIxgm8Jw7TEc1+a9xVNOkmnZZ+E6DZw6vKHOsPI6cMMsr43 81t9/5ZZq8QlXkdok+K/tsrGkvRWW4KWEw6ZzVgFfsVVQJTQQs6dabsYCVBr/Zr4 8OTqNQUgtaYtbekoi5ySxynJ5ZCxbr7kaTL0r3/aMnpcnsAEUTXd3YBERm5eNPlx RflB4T11ghwmfUAM5IPxj3BCKOhKZHOP -----END CERTIFICATE-----Generated at Sat May 31 14:49:42 2025 by rpki-client