$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft File: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft (raw, json) Hash identifier: klN8Y5lZ7+dygp0Lmtr4c/OwzouH2G4l5rr2Ar74iyY= Subject key identifier: 76:36:6C:72:69:85:78:2B:A3:98:E3:7B:29:F3:B5:53:D1:C8:15:0B Authority key identifier: B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 Certificate issuer: /CN=A91D1149/serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Certificate serial: 0E55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft Manifest number: 0E4C Signing time: Fri 30 May 2025 17:56:00 +0000 Manifest this update: Fri 30 May 2025 17:56:00 +0000 Manifest next update: Fri 06 Jun 2025 17:56:00 +0000 Files and hashes: 1: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl (hash: 4Sz6k9+9/koTfE5pbgiqjv4ObEHRvm5sfAHUB3YcIAU=) 2: BD22841E9E4911E9A136D25AC4F9AE02.roa (hash: CD3KMyXKPVQJ5ERiU0fhGp4XONa4jeSt2SNuNzmurV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3669 (0xe55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1149, serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Validity Not Before: May 30 17:56:00 2025 GMT Not After : Jun 6 17:56:00 2025 GMT Subject: CN=6839f130-5918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b0:bc:97:fa:2a:9c:50:9c:2c:cf:fc:c0:47: 37:71:12:cd:77:df:39:fa:a7:20:69:c7:9d:fc:cf: f7:f5:01:77:19:df:45:35:8d:a8:e4:cc:5b:51:cd: 2d:ed:ca:e8:45:c2:41:1e:c7:91:76:8e:27:2a:25: fa:dd:c2:ab:eb:8f:e0:e5:fd:77:ca:61:f0:c0:1b: 0e:a9:9b:1a:19:f3:82:51:0c:b4:7c:dc:63:3f:25: 06:7a:77:d6:10:fd:99:e6:08:c1:db:7b:65:0e:7a: e6:1a:19:b5:03:dc:ee:af:75:e1:a6:45:48:3b:df: ee:a5:62:45:2a:76:a3:71:4a:d7:3d:a2:69:f6:3b: ae:a2:46:58:01:87:57:4c:b4:b3:72:ca:9b:7d:dc: 77:69:78:d4:c0:83:23:27:1d:cb:f2:37:f2:a9:54: 08:73:6e:f0:74:d1:d4:12:69:02:56:fb:ba:2a:01: e2:b8:96:87:66:ed:3a:09:86:c3:b5:f0:80:55:c2: d1:ec:bc:fc:aa:2c:43:f9:6f:19:93:bc:52:9f:73: 9c:d7:2d:d9:d7:bf:94:db:34:1c:45:25:11:27:9e: 12:6e:cb:81:32:5a:fd:43:79:fe:8e:b2:8d:b4:15: d3:98:ce:ba:99:28:cb:87:16:ab:78:6e:ec:40:d1: 44:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:36:6C:72:69:85:78:2B:A3:98:E3:7B:29:F3:B5:53:D1:C8:15:0B X509v3 Authority Key Identifier: keyid:B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:01:84:c7:2f:eb:50:ef:90:37:52:b4:1e:eb:1f:18:1e:99: 44:6d:5a:80:e9:c4:26:28:93:5d:62:2b:3f:be:91:dd:b7:6c: 03:d7:ed:88:af:d2:b4:42:fe:6d:07:65:e2:89:27:50:8d:35: 15:bb:0d:f6:ba:42:54:7f:ef:dc:d3:35:ca:c2:ff:e6:b4:9b: 99:4a:e3:85:d1:e0:45:a9:4e:78:fe:1d:87:b8:42:a0:88:cd: a3:dd:3f:4b:34:2c:45:21:30:2d:b9:09:9d:a6:b2:2a:5f:7d: 40:96:e9:d6:d1:f2:b0:7a:3a:bb:c9:f4:69:cd:67:55:92:02: 21:c2:b4:37:f8:cc:1c:08:c9:ac:03:df:3b:c7:34:f2:ac:7d: 94:36:1a:44:c4:82:24:65:22:b4:dd:8a:e9:36:24:50:de:3a: dc:85:1a:d5:fa:6d:00:1c:c2:d9:61:07:69:cb:8b:da:1b:04: e1:7b:73:e8:e4:94:6b:7d:2d:13:bb:33:44:f7:51:f8:7d:be: 97:8a:cf:f0:84:d8:d6:5b:64:fa:5b:3a:5a:53:b6:a3:2e:62: 0b:2a:c3:47:ee:7d:96:84:d5:1a:c2:78:56:3b:58:71:46:b2: 03:f5:6f:d9:5d:03:f5:ef:89:fa:a4:8b:57:97:39:a4:10:44: 44:f7:d6:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExNDkxMTAvBgNVBAUTKEI4MzQwMUNGQkM0MDVDRkI1MkZEQTBGRUJENEEwMkI3 QjFDRTI3NjIwHhcNMjUwNTMwMTc1NjAwWhcNMjUwNjA2MTc1NjAwWjAYMRYwFAYD VQQDEw02ODM5ZjEzMC01OTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9rC8l/oqnFCcLM/8wEc3cRLNd985+qcgaced/M/39QF3Gd9FNY2o5MxbUc0t 7croRcJBHseRdo4nKiX63cKr64/g5f13ymHwwBsOqZsaGfOCUQy0fNxjPyUGenfW EP2Z5gjB23tlDnrmGhm1A9zur3XhpkVIO9/upWJFKnajcUrXPaJp9juuokZYAYdX TLSzcsqbfdx3aXjUwIMjJx3L8jfyqVQIc27wdNHUEmkCVvu6KgHiuJaHZu06CYbD tfCAVcLR7Lz8qixD+W8Zk7xSn3Oc1y3Z17+U2zQcRSURJ54SbsuBMlr9Q3n+jrKN tBXTmM66mSjLhxareG7sQNFE8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHY2bHJp hXgro5jjeynztVPRyBULMB8GA1UdIwQYMBaAFLg0Ac+8QFz7Uv2g/r1KArexzidi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTE0OS8yNEJCMjRDRTlF NDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQdFNfYUQtdlVvQ3Q3SE9K MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VEUUJ6N3hBWFB0U19hRC12VW9DdDdIT0oySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTE0OS8yNEJCMjRDRTlFNDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQ dFNfYUQtdlVvQ3Q3SE9KMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAAYTHL+tQ75A3UrQe6x8YHplEbVqA6cQmKJNdYis/vpHdt2wD1+2I r9K0Qv5tB2XiiSdQjTUVuw32ukJUf+/c0zXKwv/mtJuZSuOF0eBFqU54/h2HuEKg iM2j3T9LNCxFITAtuQmdprIqX31AlunW0fKwejq7yfRpzWdVkgIhwrQ3+MwcCMms A987xzTyrH2UNhpExIIkZSK03YrpNiRQ3jrchRrV+m0AHMLZYQdpy4vaGwThe3Po 5JRrfS0TuzNE91H4fb6Xis/whNjWW2T6WzpaU7ajLmILKsNH7n2WhNUawnhWO1hx RrID9W/ZXQP174n6pItXlzmkEERE99Yv -----END CERTIFICATE-----Generated at Sat May 31 17:37:51 2025 by rpki-client