$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft File: uG8rXtaXoSH08p1YIDcs8UBVEgs.mft (raw, json) Hash identifier: bIY9Z4dLF+ANJIGRN7NQiVNxxAY+uKhBkspHJopu3FE= Subject key identifier: A1:8B:C8:2C:EB:4F:DB:5D:C4:0F:AE:9E:96:2A:34:77:E4:76:20:51 Authority key identifier: B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B Certificate issuer: /CN=A91AF0C6/serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft Manifest number: 014F Signing time: Sat 31 May 2025 03:50:48 +0000 Manifest this update: Sat 31 May 2025 03:50:47 +0000 Manifest next update: Sat 07 Jun 2025 03:50:47 +0000 Files and hashes: 1: uG8rXtaXoSH08p1YIDcs8UBVEgs.crl (hash: kqCZ0BfSvWsNvoQMzyO8KIZB5wLfRrfB3wd+NGJe5BI=) 2: A915A3543FEC11EE99AC0F43C4F9AE02.roa (hash: go8uCjvo0RCrR73Y9GSlxE8uDTmJOu4MaZ77GeOcrFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:50:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0C6, serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B Validity Not Before: May 31 03:50:47 2025 GMT Not After : Jun 7 03:50:47 2025 GMT Subject: CN=683a7c97-241c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0b:ff:10:ab:20:cf:73:83:a1:e4:56:7b:d2: 8f:b4:96:13:28:88:01:c8:bb:a5:8c:25:3c:45:33: 2e:9b:b7:8c:69:59:01:0d:c4:b0:4a:8e:ec:c6:78: 88:c2:73:70:8d:10:f7:11:0f:99:0b:6f:c9:84:fc: 64:4a:1b:74:0f:17:1d:66:0e:85:bb:03:75:43:27: 12:8e:db:0a:67:73:3a:fc:e2:57:3b:f2:f1:a6:03: c5:5c:4a:3f:37:2b:0c:f8:ac:c8:3c:d7:39:fb:4b: af:aa:00:58:3f:6e:82:90:4c:4c:bb:f3:8e:92:04: 91:0a:c8:de:c5:db:d3:67:11:6a:33:28:e0:d6:75: 2a:91:59:2b:0a:76:51:22:4e:9f:fa:65:52:5c:55: 1e:a5:06:a2:d5:66:dd:ac:d5:f3:c7:96:e9:f9:38: 3f:c6:19:06:b6:8b:6a:9a:91:e2:1e:d5:81:9c:df: 73:e2:be:e0:6c:d0:1f:46:ea:89:ea:bd:aa:b7:52: 74:90:af:6f:68:a8:e2:4a:fb:19:98:33:89:f2:1a: da:b0:53:0e:82:72:ab:4b:fd:a4:e6:fe:3d:ef:96: 61:cb:33:15:84:4f:03:33:39:96:0c:c3:25:5c:97: 53:35:fc:30:c2:b9:e2:9f:69:6e:a7:91:a0:17:ca: 02:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8B:C8:2C:EB:4F:DB:5D:C4:0F:AE:9E:96:2A:34:77:E4:76:20:51 X509v3 Authority Key Identifier: keyid:B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:5f:07:f7:89:c0:8b:01:8a:60:2a:6f:ea:4d:7d:24:82:71: f6:e3:38:3d:bb:e0:62:09:da:29:14:eb:66:d3:7f:7c:f4:f0: be:ea:4c:a9:5f:70:3d:db:82:5d:2d:8f:c6:a6:29:12:08:d5: 32:72:85:ce:66:35:ba:bc:5a:16:62:5b:a3:cc:2d:5b:92:33: ab:0d:32:2b:f5:68:e6:4e:70:7e:fe:85:77:18:b1:ae:57:c5: 71:94:30:2e:ad:37:ab:b8:17:11:f0:9f:0e:77:6e:c1:e9:c9: 2e:70:b8:89:92:9d:4a:98:34:05:97:7d:b0:6a:88:d8:30:c4: 64:a1:70:14:5e:a3:b0:69:92:1a:da:98:99:0a:87:c5:0e:4d: 34:0c:3c:56:4e:a3:59:5e:c5:28:0e:50:71:0c:e0:81:cd:35: 79:2c:10:94:9e:38:99:ed:e9:37:8d:52:d1:f4:1d:91:8f:74: 79:7e:24:2a:5a:31:5b:1a:77:1f:1d:38:29:21:97:b6:6e:ec: c9:9a:80:cc:f2:df:8b:d0:25:2d:5a:27:d5:b6:38:d1:f4:b4: 45:69:28:d2:d7:3b:4a:a1:ff:bb:64:b7:dd:cd:80:b6:cc:27: 0a:28:37:ee:fd:37:8a:6c:e9:53:44:51:5f:f1:b1:44:16:27: ba:6b:9e:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQzYxMTAvBgNVBAUTKEI4NkYyQjVFRDY5N0ExMjFGNEYyOUQ1ODIwMzcyQ0Yx NDA1NTEyMEIwHhcNMjUwNTMxMDM1MDQ3WhcNMjUwNjA3MDM1MDQ3WjAYMRYwFAYD VQQDEw02ODNhN2M5Ny0yNDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQv/EKsgz3ODoeRWe9KPtJYTKIgByLuljCU8RTMum7eMaVkBDcSwSo7sxniI wnNwjRD3EQ+ZC2/JhPxkSht0DxcdZg6FuwN1QycSjtsKZ3M6/OJXO/LxpgPFXEo/ NysM+KzIPNc5+0uvqgBYP26CkExMu/OOkgSRCsjexdvTZxFqMyjg1nUqkVkrCnZR Ik6f+mVSXFUepQai1WbdrNXzx5bp+Tg/xhkGtotqmpHiHtWBnN9z4r7gbNAfRuqJ 6r2qt1J0kK9vaKjiSvsZmDOJ8hrasFMOgnKrS/2k5v4975ZhyzMVhE8DMzmWDMMl XJdTNfwwwrnin2lup5GgF8oCwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGLyCzr T9tdxA+unpYqNHfkdiBRMB8GA1UdIwQYMBaAFLhvK17Wl6Eh9PKdWCA3LPFAVRIL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBDNi8zRkNFQkQyMjNG RUMxMUVFQURGNUQzMzhDNEY5QUUwMi91RzhyWHRhWG9TSDA4cDFZSURjczhVQlZF Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VHOHJYdGFYb1NIMDhwMVlJRGNzOFVCVkVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBDNi8zRkNFQkQyMjNGRUMxMUVFQURGNUQzMzhDNEY5QUUwMi91RzhyWHRhWG9T SDA4cDFZSURjczhVQlZFZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdXwf3icCLAYpgKm/qTX0kgnH24zg9u+BiCdopFOtm03989PC+6kyp X3A924JdLY/GpikSCNUycoXOZjW6vFoWYlujzC1bkjOrDTIr9WjmTnB+/oV3GLGu V8VxlDAurTeruBcR8J8Od27B6ckucLiJkp1KmDQFl32waojYMMRkoXAUXqOwaZIa 2piZCofFDk00DDxWTqNZXsUoDlBxDOCBzTV5LBCUnjiZ7ek3jVLR9B2Rj3R5fiQq WjFbGncfHTgpIZe2buzJmoDM8t+L0CUtWifVtjjR9LRFaSjS1ztKof+7ZLfdzYC2 zCcKKDfu/TeKbOlTRFFf8bFEFie6a57m -----END CERTIFICATE-----Generated at Sat May 31 16:49:08 2025 by rpki-client