$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft File: uOVJaYlT9l5x-4S20zjAisF4Glo.mft (raw, json) Hash identifier: rCqcyETzORZidLrIGzHY9r+MonFDhCW7ywenyF+R41c= Subject key identifier: 1A:3C:F0:64:79:23:C4:E9:77:3F:DF:CB:04:62:1A:27:41:38:0C:05 Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A Certificate issuer: /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Certificate serial: 0994 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft Manifest number: 097D Signing time: Fri 30 May 2025 20:21:54 +0000 Manifest this update: Fri 30 May 2025 20:21:54 +0000 Manifest next update: Fri 06 Jun 2025 20:21:54 +0000 Files and hashes: 1: uOVJaYlT9l5x-4S20zjAisF4Glo.crl (hash: yam0MQrpEeZlXVoXKqka+UJGU8PaETMRXykvmUGH0SU=) 2: 4B31BDC4B76911ED8A503224C4F9AE02.roa (hash: l0BRfiLqHQsOV1ADKIbKK5vOrt/xeo6mhndQAShwIN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2452 (0x994) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5C70, serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Validity Not Before: May 30 20:21:54 2025 GMT Not After : Jun 6 20:21:54 2025 GMT Subject: CN=683a1362-4c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:29:5d:ea:85:0b:2f:27:0b:72:ee:cc:f8:79: cb:1a:8b:cf:69:fe:0a:ae:ab:c7:61:ad:00:d3:a7: 94:3c:1e:37:b3:a1:2a:c9:fe:7d:2c:46:9d:0f:d4: a0:5e:3a:24:22:cd:54:40:78:e9:2e:ff:2a:10:0c: ec:b1:fd:07:b0:1a:3f:a0:79:5a:8f:91:67:1e:d8: 0c:fe:ec:54:14:9a:ef:da:ae:7a:97:f4:2b:13:d6: e4:56:f5:04:9f:5f:fc:fc:43:e1:7f:bb:91:ad:de: fa:f0:2d:29:23:da:0e:a2:91:85:24:a1:0a:5c:d1: a9:6c:a5:b0:c4:84:75:e8:f0:0c:15:be:21:98:26: b3:cd:e4:eb:7b:a3:8e:53:3a:e0:33:3e:91:a6:b9: ca:84:b3:3f:36:c4:70:18:1a:9a:1c:c6:d2:2b:2f: 25:9a:14:67:4e:ec:4b:a4:d0:5e:59:ee:b1:11:51: c3:c9:e6:e9:28:af:d7:f0:81:f0:ad:cf:79:4a:d0: 41:72:42:93:47:02:fb:6c:33:be:a4:9a:0a:7a:7f: a9:a4:14:c1:b2:67:26:34:8b:e6:47:4d:5b:4d:05: 8d:49:7d:10:a4:d0:e3:a8:5d:0b:3c:9e:17:e3:43: c6:c1:91:01:b0:8b:e1:a1:d2:20:e8:11:46:78:c5: 75:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3C:F0:64:79:23:C4:E9:77:3F:DF:CB:04:62:1A:27:41:38:0C:05 X509v3 Authority Key Identifier: keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:1e:d2:ea:a9:0b:12:9b:24:d0:50:f0:41:e9:82:04:44:63: a8:1a:ed:18:2d:5e:5b:ab:1b:bf:54:aa:5f:64:eb:8e:36:9e: da:b3:c2:42:86:73:2c:92:c4:96:57:8b:09:90:4d:78:b6:6e: 82:ea:7d:27:a7:07:19:d3:12:20:09:cc:e2:36:8a:79:68:74: 11:38:61:65:41:f6:1e:6c:08:d1:28:32:82:4b:4c:53:b1:19: 8e:87:59:42:49:fd:33:03:44:91:a7:9a:85:ab:04:75:29:f2: 8f:12:90:6e:6c:e8:3a:f2:c7:44:18:2c:2d:be:2d:54:67:2c: fa:56:a6:e8:07:b7:59:af:e2:6c:e5:56:8e:15:25:d1:9e:19: 88:c2:be:a4:2d:a6:c7:f9:90:f6:9e:6d:5a:c2:33:a7:b2:ff: ea:dd:c4:43:80:26:21:8f:d5:7d:f8:50:2d:f8:bf:bf:cd:9d: 34:b1:55:3a:07:65:51:d0:59:de:52:9e:d5:83:29:cb:84:c0: c6:aa:d0:4a:6c:81:13:59:39:ba:63:78:0b:4e:b1:79:92:b7: a5:49:53:bb:43:5b:7e:69:a8:a3:d7:6f:8f:78:dc:e3:70:9d: 9a:e6:38:71:6a:96:ae:be:7b:1b:25:d3:1e:79:7d:29:81:00: 29:43:75:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDNzAxMTAvBgNVBAUTKEI4RTU0OTY5ODk1M0Y2NUU3MUZCODRCNkQzMzhDMDhB QzE3ODFBNUEwHhcNMjUwNTMwMjAyMTU0WhcNMjUwNjA2MjAyMTU0WjAYMRYwFAYD VQQDEw02ODNhMTM2Mi00YzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnild6oULLycLcu7M+HnLGovPaf4KrqvHYa0A06eUPB43s6Eqyf59LEadD9Sg XjokIs1UQHjpLv8qEAzssf0HsBo/oHlaj5FnHtgM/uxUFJrv2q56l/QrE9bkVvUE n1/8/EPhf7uRrd768C0pI9oOopGFJKEKXNGpbKWwxIR16PAMFb4hmCazzeTre6OO UzrgMz6RprnKhLM/NsRwGBqaHMbSKy8lmhRnTuxLpNBeWe6xEVHDyebpKK/X8IHw rc95StBBckKTRwL7bDO+pJoKen+ppBTBsmcmNIvmR01bTQWNSX0QpNDjqF0LPJ4X 40PGwZEBsIvhodIg6BFGeMV1nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBo88GR5 I8Tpdz/fywRiGidBOAwFMB8GA1UdIwQYMBaAFLjlSWmJU/ZecfuEttM4wIrBeBpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUM3MC8yM0EwQUMwNjkx MDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDlsNXgtNFMyMHpqQWlzRjRH bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPVkphWWxUOWw1eC00UzIwempBaXNGNEdsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUM3MC8yM0EwQUMwNjkxMDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDls NXgtNFMyMHpqQWlzRjRHbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOHtLqqQsSmyTQUPBB6YIERGOoGu0YLV5bqxu/VKpfZOuONp7as8JC hnMsksSWV4sJkE14tm6C6n0npwcZ0xIgCcziNop5aHQROGFlQfYebAjRKDKCS0xT sRmOh1lCSf0zA0SRp5qFqwR1KfKPEpBubOg68sdEGCwtvi1UZyz6VqboB7dZr+Js 5VaOFSXRnhmIwr6kLabH+ZD2nm1awjOnsv/q3cRDgCYhj9V9+FAt+L+/zZ00sVU6 B2VR0FneUp7VgynLhMDGqtBKbIETWTm6Y3gLTrF5krelSVO7Q1t+aaij12+PeNzj cJ2a5jhxapauvnsbJdMeeX0pgQApQ3Wx -----END CERTIFICATE-----Generated at Sat May 31 17:46:23 2025 by rpki-client