$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft File: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft (raw, json) Hash identifier: Ej2cTFhI5lXoR+U53VvfR2K8/jXdpd0RK+lnp6+xjv0= Subject key identifier: 67:16:B9:1D:F3:75:4B:18:44:8E:88:E3:76:99:B2:26:F6:1F:1E:51 Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 Certificate issuer: /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft Manifest number: DD Signing time: Sat 31 May 2025 05:09:08 +0000 Manifest this update: Sat 31 May 2025 05:09:08 +0000 Manifest next update: Sat 07 Jun 2025 05:09:07 +0000 Files and hashes: 1: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl (hash: KJxpOJaz5FoGFtfexsJ9iRIRlO2BaqRTzmbNSQa7XgM=) 2: 99244E94FE0211EEB1F40344C4F9AE02.roa (hash: ryfpBDCWcmiRZYqeao/rsVyXOOOGDWQajzrZGBcgq+0=) 3: 03BA6992ED7711EE9998FC11C4F9AE02.roa (hash: NecAjd+CZeOPqXXjjBIs9rEIjFJr1slo8jl+q1zHuq8=) 4: 38556AC6ED7711EEA7B2AF12C4F9AE02.roa (hash: x08O0LKYaX3hn9bkCscla0qFn3NKZcPh8LO75bK0AIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE959, serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Validity Not Before: May 31 05:09:08 2025 GMT Not After : Jun 7 05:09:07 2025 GMT Subject: CN=683a8ef4-004a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cc:f8:70:4e:df:d4:72:09:2f:d9:f8:33:da: 5e:46:52:5c:07:86:92:ce:91:af:e1:1d:f2:58:07: ef:9c:4c:25:05:6d:7e:db:b3:dc:2c:62:60:49:b9: b5:ad:59:97:68:38:ae:b5:0a:9f:04:f4:d4:b4:22: 36:a1:92:d3:d5:df:d2:7c:6c:e3:a4:90:ce:86:1f: ab:93:dd:f0:2b:03:65:ad:72:89:a6:37:dc:dd:c4: 9d:eb:dc:a3:4b:c4:03:08:d5:a9:ab:08:04:2b:8f: c6:96:c4:57:dd:b3:0f:e2:ce:2b:57:eb:5e:c1:8a: 7d:3b:5e:ae:1d:39:26:83:58:b7:a6:a5:f8:0e:15: 64:0a:83:67:ae:70:9f:9f:85:8a:68:9e:19:8e:41: f3:cd:f2:74:45:af:97:69:1a:23:f8:66:58:6a:3b: 43:0f:10:66:3d:50:60:bc:76:f1:07:15:ab:4e:db: c8:28:63:1e:b2:68:2a:c5:2a:b4:14:aa:07:f8:8d: ad:66:7c:23:f2:69:39:6b:ba:d5:7d:c0:b8:d8:16: d6:99:be:78:8a:35:a2:26:9d:d6:5b:ff:c9:1b:b9: 24:e3:0b:d0:fa:10:cc:01:fa:fd:fe:39:84:3c:9d: 43:89:bc:20:8d:94:f9:8d:81:43:85:8c:0f:55:b2: a3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:16:B9:1D:F3:75:4B:18:44:8E:88:E3:76:99:B2:26:F6:1F:1E:51 X509v3 Authority Key Identifier: keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:a9:61:1d:0e:bb:65:5e:5c:82:f3:66:bf:22:55:c3:c3:f8: 38:d2:db:bb:45:0e:97:17:64:d5:7f:d8:43:04:c2:7b:66:f8: 6d:38:6e:4a:4d:a7:e0:38:c2:59:65:bb:49:e9:c8:76:b3:c7: ad:27:7e:75:ac:09:f0:c5:89:d4:f9:29:6c:cf:6f:8a:70:6c: 26:18:36:28:4c:e2:cc:4e:ec:7d:06:be:ba:a3:be:13:ff:21: a3:9b:44:d4:4d:86:96:63:94:1e:54:cb:4a:a3:09:b8:93:3e: 85:88:12:99:33:85:33:a1:14:ca:f0:46:c8:ea:11:64:b1:29: fb:b7:21:22:53:03:ed:f6:28:6a:3c:be:df:7f:0e:f3:f4:26: 8d:45:ef:1e:3c:e6:ae:9b:f3:da:46:ce:44:f0:a4:af:25:51: 49:ec:02:c1:72:00:33:91:6f:40:ae:26:4c:f2:2a:ea:bf:16: 23:d9:bf:0f:33:7f:a6:40:71:a8:d3:1a:73:d7:12:27:de:a9: 57:c2:26:a5:d9:9f:58:86:77:4a:e9:89:0f:06:d5:42:3e:b2: 88:e6:30:31:e3:64:93:5a:94:05:94:36:76:57:58:5f:07:ba: 07:a3:38:ad:6e:64:51:61:93:d9:e6:cb:15:1e:71:c9:4b:05: 98:ea:2c:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NTkxMTAvBgNVBAUTKEQ2RUMyMkE3M0E1OUQyQUE5NTU5OTc0NzAyNzlDNjYy RDExMDg4RjIwHhcNMjUwNTMxMDUwOTA4WhcNMjUwNjA3MDUwOTA3WjAYMRYwFAYD VQQDEw02ODNhOGVmNC0wMDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3sz4cE7f1HIJL9n4M9peRlJcB4aSzpGv4R3yWAfvnEwlBW1+27PcLGJgSbm1 rVmXaDiutQqfBPTUtCI2oZLT1d/SfGzjpJDOhh+rk93wKwNlrXKJpjfc3cSd69yj S8QDCNWpqwgEK4/GlsRX3bMP4s4rV+tewYp9O16uHTkmg1i3pqX4DhVkCoNnrnCf n4WKaJ4ZjkHzzfJ0Ra+XaRoj+GZYajtDDxBmPVBgvHbxBxWrTtvIKGMesmgqxSq0 FKoH+I2tZnwj8mk5a7rVfcC42BbWmb54ijWiJp3WW//JG7kk4wvQ+hDMAfr9/jmE PJ1DibwgjZT5jYFDhYwPVbKj+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcWuR3z dUsYRI6I43aZsib2Hx5RMB8GA1UdIwQYMBaAFNbsIqc6WdKqlVmXRwJ5xmLREIjy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk1OS9BQTRDNzdFQ0VE NzYxMUVFQUQ4NzFBMTFDNEY5QUUwMi8xdXdpcHpwWjBxcVZXWmRIQW5uR1l0RVFp UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF1d2lwenBaMHFxVldaZEhBbm5HWXRFUWlQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTk1OS9BQTRDNzdFQ0VENzYxMUVFQUQ4NzFBMTFDNEY5QUUwMi8xdXdpcHpwWjBx cVZXWmRIQW5uR1l0RVFpUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXqWEdDrtlXlyC82a/IlXDw/g40tu7RQ6XF2TVf9hDBMJ7ZvhtOG5K TafgOMJZZbtJ6ch2s8etJ351rAnwxYnU+Slsz2+KcGwmGDYoTOLMTux9Br66o74T /yGjm0TUTYaWY5QeVMtKowm4kz6FiBKZM4UzoRTK8EbI6hFksSn7tyEiUwPt9ihq PL7ffw7z9CaNRe8ePOaum/PaRs5E8KSvJVFJ7ALBcgAzkW9AriZM8irqvxYj2b8P M3+mQHGo0xpz1xIn3qlXwial2Z9YhndK6YkPBtVCPrKI5jAx42STWpQFlDZ2V1hf B7oHozitbmRRYZPZ5ssVHnHJSwWY6iyl -----END CERTIFICATE-----Generated at Sat May 31 16:53:41 2025 by rpki-client