$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft File: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json) Hash identifier: ABixKVNeXO6ujUKWNqI8D9I6Il/RfIxWCR1Boq7EM6o= Subject key identifier: 71:DD:AB:4A:0C:58:6E:09:4E:21:CB:86:DD:1A:9E:4D:CA:78:49:54 Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B Certificate issuer: /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B Certificate serial: 0360 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft Manifest number: 0351 Signing time: Sat 31 May 2025 01:13:02 +0000 Manifest this update: Sat 31 May 2025 01:13:01 +0000 Manifest next update: Sat 07 Jun 2025 01:13:01 +0000 Files and hashes: 1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: PzfeTxIyQgut4rWiYN1tP3yZ7aoc5hPZQ547xHLLGI4=) 2: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: F6jPBh9YlNU7RVZYywXLeNlWgnFuc8x8f5OICDCdyXk=) 3: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: 2CbWH78pD8qfhUqfDIT0bY8YAkS+SCmh9qliGFNOvyU=) 4: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: vsntEPAhq1q52SAuxi87DOT8T6ZFM5p3hlzlxYIzgx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 864 (0x360) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B Validity Not Before: May 31 01:13:01 2025 GMT Not After : Jun 7 01:13:01 2025 GMT Subject: CN=683a579d-8775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b6:3e:c6:fe:9d:ae:f9:f9:82:09:d3:a1:63: 9e:f6:f0:fb:c9:dd:85:6c:c8:11:6d:7f:37:3d:24: de:d6:1e:68:05:a1:02:5b:c4:15:a1:42:0d:8f:22: bb:58:3f:5a:64:a2:63:43:01:2a:0a:7b:ec:5a:a3: 0d:bd:df:24:5c:3a:77:33:aa:c0:fc:24:fe:6e:68: ee:ce:01:13:c4:16:f6:e1:f3:8a:9c:7f:61:56:08: a1:ed:1b:a4:22:6c:91:c1:61:53:c8:c1:91:10:74: 6f:69:57:85:20:8f:27:fd:c0:37:38:ec:79:76:5f: 1c:31:43:0a:de:5a:51:20:f3:c4:bb:79:fa:fa:a1: e3:bf:9c:77:c9:bd:60:58:c8:c8:7d:58:b4:83:f1: d0:05:4c:1a:ae:8b:8e:44:d7:59:ef:a8:15:fc:fe: 42:8f:4b:72:04:1b:9f:2e:ea:f5:27:25:3e:a7:8f: 1c:54:c2:6f:57:a0:0a:9b:d1:46:f4:04:10:41:5a: 27:35:b3:21:e5:1f:42:27:79:66:d5:d2:a3:eb:d0: 15:88:c3:08:c6:fa:40:c7:47:fa:d9:09:89:46:87: 57:51:0b:75:31:17:4b:ef:9e:3a:1f:31:e1:00:e0: 40:36:54:56:99:45:46:96:c0:46:72:eb:50:a0:42: 64:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DD:AB:4A:0C:58:6E:09:4E:21:CB:86:DD:1A:9E:4D:CA:78:49:54 X509v3 Authority Key Identifier: keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:05:16:5e:73:65:41:40:ed:1f:3f:e1:bc:40:e6:9a:45:ec: 08:9d:52:0f:1c:4e:db:17:1d:45:97:c0:6a:6b:4e:4c:75:0a: f8:6e:b0:f7:44:63:04:d9:58:5d:7a:01:75:b0:f4:77:55:69: f2:aa:af:19:83:6f:64:8f:ae:b2:07:48:d8:e7:fa:80:97:3f: 83:69:43:d8:d0:4a:b4:c3:23:d8:82:00:96:0f:d0:b8:4f:b2: 14:7a:62:dc:8a:cf:65:2a:49:0a:fa:ee:39:35:02:ff:6f:d3: ae:7a:ff:a2:23:38:58:e0:6f:33:77:52:0c:79:84:4e:17:a9: 5c:2c:7a:bc:6a:a7:19:4f:54:bf:6f:ae:96:0a:d7:99:49:81: ff:2a:3f:92:d5:43:ad:79:33:b7:7e:69:d1:3d:66:26:ff:05: 19:e9:20:75:f1:1d:96:43:3e:40:14:ff:25:20:8b:e8:28:b5: 5e:e0:11:69:83:0b:15:f0:35:c5:3d:b7:f3:d9:48:e5:8b:31: ce:06:b9:40:27:be:57:83:d1:b7:93:9f:d0:2b:64:98:d4:08: 29:b1:43:c9:52:c8:c1:6f:dc:3c:f5:f6:18:a2:7d:fa:a7:db: a6:4e:b5:bb:35:d3:8f:f6:7a:ee:6e:76:a5:c6:0a:33:bd:c2: a3:67:5d:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREQzcxMTAvBgNVBAUTKEI4ODkxMTE3ODA2OEQ1NzVERkRERjg0OTQwQ0FCRUFG NDUxQzhDMkIwHhcNMjUwNTMxMDExMzAxWhcNMjUwNjA3MDExMzAxWjAYMRYwFAYD VQQDEw02ODNhNTc5ZC04Nzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybY+xv6drvn5ggnToWOe9vD7yd2FbMgRbX83PSTe1h5oBaECW8QVoUINjyK7 WD9aZKJjQwEqCnvsWqMNvd8kXDp3M6rA/CT+bmjuzgETxBb24fOKnH9hVgih7Ruk ImyRwWFTyMGREHRvaVeFII8n/cA3OOx5dl8cMUMK3lpRIPPEu3n6+qHjv5x3yb1g WMjIfVi0g/HQBUwarouORNdZ76gV/P5Cj0tyBBufLur1JyU+p48cVMJvV6AKm9FG 9AQQQVonNbMh5R9CJ3lm1dKj69AViMMIxvpAx0f62QmJRodXUQt1MRdL7546HzHh AOBANlRWmUVGlsBGcutQoEJktwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHdq0oM WG4JTiHLht0ank3KeElUMB8GA1UdIwQYMBaAFLiJEReAaNV13934SUDKvq9FHIwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNERDNy9GM0YxMDIwRUJC MTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFYWGYzZmhKUU1xLXIwVWNq Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VJa1JGNEJvMVhYZjNmaEpRTXEtcjBVY2pDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NERDNy9GM0YxMDIwRUJCMTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFY WGYzZmhKUU1xLXIwVWNqQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfBRZec2VBQO0fP+G8QOaaRewInVIPHE7bFx1Fl8Bqa05MdQr4brD3 RGME2VhdegF1sPR3VWnyqq8Zg29kj66yB0jY5/qAlz+DaUPY0Eq0wyPYggCWD9C4 T7IUemLcis9lKkkK+u45NQL/b9Ouev+iIzhY4G8zd1IMeYROF6lcLHq8aqcZT1S/ b66WCteZSYH/Kj+S1UOteTO3fmnRPWYm/wUZ6SB18R2WQz5AFP8lIIvoKLVe4BFp gwsV8DXFPbfz2UjlizHOBrlAJ75Xg9G3k5/QK2SY1AgpsUPJUsjBb9w89fYYon36 p9umTrW7NdOP9nrubnalxgozvcKjZ12H -----END CERTIFICATE-----Generated at Sat May 31 17:20:32 2025 by rpki-client