$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft File: uOpx0E7INugYCHPJ6dQM0uNVNwE.mft (raw, json) Hash identifier: I5Hp5+9kYLbu3r+rnaBEwdgF7ZwJdqAYEwpthZobsYk= Subject key identifier: 2A:CE:1F:40:D7:E5:91:69:6D:5A:70:01:FA:D4:4E:F8:38:12:61:AF Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 Certificate issuer: /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft Manifest number: 01E4 Signing time: Sat 31 May 2025 02:24:51 +0000 Manifest this update: Sat 31 May 2025 02:24:50 +0000 Manifest next update: Sat 07 Jun 2025 02:24:50 +0000 Files and hashes: 1: uOpx0E7INugYCHPJ6dQM0uNVNwE.crl (hash: 0m9Nt1/VW45sRssVNO5IFLLCDx29XbjAWUtY02HB2b4=) 2: CC74271E8A8711ED98572D26C4F9AE02.roa (hash: rGioCcK4Zr+knzNA5J2qJp6M9oaPBmCCilGkVDkio+Y=) 3: C9E35E848A8711ED98572D26C4F9AE02.roa (hash: eHox8CScwy17I91npttE3xAPIO9P1S6yAPyglPvKM8k=) 4: 4865D4707C3111EFBD9FF572C4F9AE02.roa (hash: nGayQSIhHNj55hF0Vf/Lo4S3bo5wcu1gOdllnD1y6Pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCF10, serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Validity Not Before: May 31 02:24:50 2025 GMT Not After : Jun 7 02:24:50 2025 GMT Subject: CN=683a6873-42a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1c:81:38:32:45:e7:90:d0:51:72:0a:cc:7d: 35:7d:9e:39:31:24:56:3e:87:ae:24:94:2b:87:1c: 8f:be:c3:4f:98:a8:8a:b1:98:bb:78:e9:c7:87:b3: 17:2c:7e:82:bf:55:57:f1:34:29:01:2b:e5:cd:22: ec:55:ef:de:a7:e5:ed:59:b3:f2:a6:73:56:a3:8d: 70:a0:34:03:8f:f8:e0:71:9b:64:32:27:b6:ec:3e: 93:52:ad:f6:49:da:90:a8:e5:3c:47:dc:e0:66:8b: 68:91:bb:b4:c2:aa:22:b1:69:e6:b8:c6:72:37:3c: 74:15:50:b0:c1:df:8c:c3:c8:ef:9a:23:c6:ce:7c: 80:50:4b:1a:2f:72:50:5f:96:b9:3e:94:72:18:57: ea:99:ed:fb:5e:a6:1d:de:d4:9c:08:44:e7:10:ba: ff:e8:30:f6:6e:36:2f:dc:96:ba:75:e9:84:2a:07: c9:37:c1:72:0a:d2:8a:a4:15:64:d0:09:e1:95:52: 21:4a:98:c1:be:60:88:9d:d4:c8:0c:cd:87:90:f3: a0:bb:39:37:b0:fb:f8:21:93:70:67:dc:70:1e:24: 5b:de:28:cd:91:52:bb:60:ac:e1:aa:8a:74:8f:51: 07:91:8d:cd:70:92:4f:a3:fa:c9:d5:53:42:87:dc: 24:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CE:1F:40:D7:E5:91:69:6D:5A:70:01:FA:D4:4E:F8:38:12:61:AF X509v3 Authority Key Identifier: keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:71:26:a7:47:83:8d:09:32:e1:ea:45:8e:49:e4:6a:e4:37: 7e:a2:6e:f7:9d:a4:17:32:80:c8:bc:1f:58:76:ce:e4:9c:8f: 30:ac:0e:75:9e:f6:41:34:d1:54:24:9f:8e:d5:aa:43:7d:56: e7:45:15:01:17:9c:f7:2c:c4:76:2e:9d:20:b6:55:31:30:88: e8:71:90:e0:25:7e:2c:74:40:61:12:38:f2:a4:ce:a0:79:47: f6:c4:3d:cf:4f:6b:6c:c4:ac:13:f9:4d:b6:a4:08:f7:16:15: 03:12:a3:e1:7f:a8:ef:7d:f2:86:f8:de:1d:d3:c3:10:22:89: 56:3e:f1:41:a1:0a:7a:44:4b:c2:45:46:72:92:aa:bc:62:31: 18:fc:b8:9c:2d:8f:c2:56:43:a4:19:31:58:9b:8e:b6:1a:f4: 26:dd:af:c6:9b:7e:ca:a4:21:23:98:0e:d2:d6:5c:6e:35:c9: c3:b6:e0:48:86:55:47:3b:80:47:70:e0:a7:c8:a7:7c:c9:8b: 23:92:a3:ba:1e:95:2f:63:97:6b:e5:70:d9:f2:7f:0d:34:00: 0e:70:b4:78:fa:00:ea:ec:6c:13:22:76:9e:81:7b:6d:98:65: 83:e1:98:78:b7:42:1a:63:ee:a5:cc:c5:ad:77:89:d2:a1:e0: 60:1e:f5:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NGMTAxMTAvBgNVBAUTKEI4RUE3MUQwNEVDODM2RTgxODA4NzNDOUU5RDQwQ0Qy RTM1NTM3MDEwHhcNMjUwNTMxMDIyNDUwWhcNMjUwNjA3MDIyNDUwWjAYMRYwFAYD VQQDEw02ODNhNjg3My00MmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRyBODJF55DQUXIKzH01fZ45MSRWPoeuJJQrhxyPvsNPmKiKsZi7eOnHh7MX LH6Cv1VX8TQpASvlzSLsVe/ep+XtWbPypnNWo41woDQDj/jgcZtkMie27D6TUq32 SdqQqOU8R9zgZotokbu0wqoisWnmuMZyNzx0FVCwwd+Mw8jvmiPGznyAUEsaL3JQ X5a5PpRyGFfqme37XqYd3tScCETnELr/6DD2bjYv3Ja6demEKgfJN8FyCtKKpBVk 0AnhlVIhSpjBvmCIndTIDM2HkPOguzk3sPv4IZNwZ9xwHiRb3ijNkVK7YKzhqop0 j1EHkY3NcJJPo/rJ1VNCh9wkywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrOH0DX 5ZFpbVpwAfrUTvg4EmGvMB8GA1UdIwQYMBaAFLjqcdBOyDboGAhzyenUDNLjVTcB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0YxMC9FQzY3MzMzRTYw OTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51Z1lDSFBKNmRRTTB1TlZO d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPcHgwRTdJTnVnWUNIUEo2ZFFNMHVOVk53RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0YxMC9FQzY3MzMzRTYwOTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51 Z1lDSFBKNmRRTTB1TlZOd0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvcSanR4ONCTLh6kWOSeRq5Dd+om73naQXMoDIvB9Yds7knI8wrA51 nvZBNNFUJJ+O1apDfVbnRRUBF5z3LMR2Lp0gtlUxMIjocZDgJX4sdEBhEjjypM6g eUf2xD3PT2tsxKwT+U22pAj3FhUDEqPhf6jvffKG+N4d08MQIolWPvFBoQp6REvC RUZykqq8YjEY/LicLY/CVkOkGTFYm462GvQm3a/Gm37KpCEjmA7S1lxuNcnDtuBI hlVHO4BHcOCnyKd8yYsjkqO6HpUvY5dr5XDZ8n8NNAAOcLR4+gDq7GwTInaegXtt mGWD4Zh4t0IaY+6lzMWtd4nSoeBgHvXp -----END CERTIFICATE-----Generated at Sat May 31 16:44:52 2025 by rpki-client