$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft File: -uIUFNET23jVT-q6G2BvhUokC9E.mft (raw, json) Hash identifier: ASGFiR7dWcDiXQzASr6qUSJhwV/CNfDjFUgDeYMJ0Xc= Subject key identifier: DE:86:C4:62:A0:33:46:81:B9:85:38:02:A7:FE:54:33:FB:C3:7F:22 Authority key identifier: FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1 Certificate issuer: /CN=A91BDA2A/serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1 Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft Manifest number: 017F Signing time: Sat 31 May 2025 03:21:07 +0000 Manifest this update: Sat 31 May 2025 03:21:06 +0000 Manifest next update: Sat 07 Jun 2025 03:21:06 +0000 Files and hashes: 1: -uIUFNET23jVT-q6G2BvhUokC9E.crl (hash: 8IsZ0h7p1e8nL6jOx+epVgajhvo0BcGAgVJUsrR5CF4=) 2: 05C6C85CF3C211ED8B9B1450C4F9AE02.roa (hash: nYA6dKLF7hZ2252OSmbcet0fM3uQj9FqvEVTxCVbcwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:21:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA2A, serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1 Validity Not Before: May 31 03:21:06 2025 GMT Not After : Jun 7 03:21:06 2025 GMT Subject: CN=683a75a2-5f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c9:7f:19:f7:8f:1b:c6:64:2c:8a:03:ef:1b: 11:2b:04:ea:6d:43:5e:e0:a1:a5:3f:27:55:4b:b2: 81:ec:73:f8:eb:98:96:a8:e4:02:c3:a4:37:7f:31: 8d:cf:e6:2b:c8:38:4b:e0:73:17:f9:09:cc:b1:8c: bc:75:00:fd:53:a8:a0:dc:8a:86:c2:2e:1e:75:30: c1:52:04:0e:4f:1c:5c:0b:fc:d3:30:98:5f:72:cc: 7c:31:d2:5d:72:2e:5a:5c:8b:f7:65:d6:9b:dc:91: 79:29:5c:01:e8:37:75:6a:3d:67:13:ea:7f:8d:3c: e1:19:c7:86:ff:6c:97:f8:40:0c:57:c3:65:43:38: e5:90:2b:a4:15:63:55:c6:e2:42:4e:b5:8f:2d:a9: fd:9a:fa:1e:f4:e7:22:7d:a4:d8:5a:43:e7:24:9c: b8:a9:ef:2c:62:45:b5:a0:df:58:99:e6:ec:0a:8d: 98:df:dc:b6:b5:d9:71:37:e7:b5:6f:42:61:15:1c: fe:13:49:f7:03:20:46:86:42:f1:e3:09:4e:66:d6: d0:8c:26:6e:b2:ac:ed:f4:b0:e1:de:9a:8c:b4:ff: 5f:96:19:e8:03:a2:a5:bb:c3:28:b6:18:fa:ca:7b: 9f:d7:bb:a6:77:79:a9:62:e5:e2:42:42:80:93:b3: cb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:86:C4:62:A0:33:46:81:B9:85:38:02:A7:FE:54:33:FB:C3:7F:22 X509v3 Authority Key Identifier: keyid:FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:be:65:f7:a9:05:c4:f0:16:25:95:91:af:6f:f8:40:00:d1: 92:26:9d:00:f6:b5:46:f6:84:2c:bb:a9:c1:47:fa:55:07:30: b9:90:d9:86:f8:fa:8a:40:62:c8:2e:00:01:1e:b0:9e:34:12: d5:fb:33:13:d9:31:ec:b4:4f:71:a0:51:8d:19:3e:e8:29:6e: 70:94:cf:ed:0d:4c:78:48:a8:71:6d:b7:b6:06:6e:8c:0c:5a: 62:d0:35:53:f9:47:41:1b:40:12:f1:f5:59:e6:b4:a2:d1:ef: a9:a3:14:52:4c:c9:c6:9c:63:26:b8:7c:06:1f:bf:48:2c:81: 47:1b:71:67:4d:db:b1:67:ab:fb:8f:65:2e:19:a0:81:04:7b: 56:68:86:b6:a3:24:b2:9a:ad:fa:4b:8c:7b:d4:a5:17:5c:fb: 6e:a4:4c:70:f0:34:c9:7e:bc:63:4d:a2:5a:59:c5:4f:af:30: 19:3b:95:95:e2:cb:27:c6:a7:ec:6f:fa:60:0d:7f:71:d1:95: 0d:fe:e6:66:34:79:65:7a:e3:e5:f2:68:75:d8:68:9b:73:f1: d6:ab:29:ca:a9:d8:da:fa:3b:5f:4b:19:7b:30:14:a6:17:49: d6:a5:fb:4e:82:c6:02:42:c9:0f:33:09:90:90:f6:14:01:89: d2:78:1f:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMkExMTAvBgNVBAUTKEZBRTIxNDE0RDExM0RCNzhENTRGRUFCQTFCNjA2Rjg1 NEEyNDBCRDEwHhcNMjUwNTMxMDMyMTA2WhcNMjUwNjA3MDMyMTA2WjAYMRYwFAYD VQQDEw02ODNhNzVhMi01ZjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsl/GfePG8ZkLIoD7xsRKwTqbUNe4KGlPydVS7KB7HP465iWqOQCw6Q3fzGN z+YryDhL4HMX+QnMsYy8dQD9U6ig3IqGwi4edTDBUgQOTxxcC/zTMJhfcsx8MdJd ci5aXIv3Zdab3JF5KVwB6Dd1aj1nE+p/jTzhGceG/2yX+EAMV8NlQzjlkCukFWNV xuJCTrWPLan9mvoe9OcifaTYWkPnJJy4qe8sYkW1oN9YmebsCo2Y39y2tdlxN+e1 b0JhFRz+E0n3AyBGhkLx4wlOZtbQjCZusqzt9LDh3pqMtP9flhnoA6Klu8Mothj6 ynuf17umd3mpYuXiQkKAk7PLXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6GxGKg M0aBuYU4Aqf+VDP7w38iMB8GA1UdIwQYMBaAFPriFBTRE9t41U/quhtgb4VKJAvR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEyQS8xNDc3MTFCMkYz QkUxMUVEOUE5QUM2NEZDNEY5QUUwMi8tdUlVRk5FVDIzalZULXE2RzJCdmhVb2tD OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11SVVGTkVUMjNqVlQtcTZHMkJ2aFVva0M5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REEyQS8xNDc3MTFCMkYzQkUxMUVEOUE5QUM2NEZDNEY5QUUwMi8tdUlVRk5FVDIz alZULXE2RzJCdmhVb2tDOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsvmX3qQXE8BYllZGvb/hAANGSJp0A9rVG9oQsu6nBR/pVBzC5kNmG +PqKQGLILgABHrCeNBLV+zMT2THstE9xoFGNGT7oKW5wlM/tDUx4SKhxbbe2Bm6M DFpi0DVT+UdBG0AS8fVZ5rSi0e+poxRSTMnGnGMmuHwGH79ILIFHG3FnTduxZ6v7 j2UuGaCBBHtWaIa2oySymq36S4x71KUXXPtupExw8DTJfrxjTaJaWcVPrzAZO5WV 4ssnxqfsb/pgDX9x0ZUN/uZmNHlleuPl8mh12Gibc/HWqynKqdja+jtfSxl7MBSm F0nWpftOgsYCQskPMwmQkPYUAYnSeB+N -----END CERTIFICATE-----Generated at Sat May 31 16:44:56 2025 by rpki-client