$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft File: UzSpQuM2kLKBJhu645cTXb6kE5c.mft (raw, json) Hash identifier: qz7XXPJsRwHUjkzLN9XsaNqb2LDrjF/usHe0mkSrpCY= Subject key identifier: DA:E3:9F:D9:3B:EE:F1:DD:BF:85:53:9E:13:78:40:26:6F:FC:CD:85 Authority key identifier: 53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 Certificate issuer: /CN=A91DA022/serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Certificate serial: 0837 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft Manifest number: 0831 Signing time: Fri 30 May 2025 21:00:41 +0000 Manifest this update: Fri 30 May 2025 21:00:40 +0000 Manifest next update: Fri 06 Jun 2025 21:00:40 +0000 Files and hashes: 1: UzSpQuM2kLKBJhu645cTXb6kE5c.crl (hash: 8+u7a3kVSLzfV+JNkT/oPL5Hmp7nHOtemvFhCCiTCCY=) 2: DF3136A2CFF011EAB2F1D086C4F9AE02.roa (hash: P441cSLHyLoUjwh77ci4OGTBUeTeIRb4uG1co2Vb+f8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2103 (0x837) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA022, serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Validity Not Before: May 30 21:00:40 2025 GMT Not After : Jun 6 21:00:40 2025 GMT Subject: CN=683a1c78-b9dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:91:a1:02:34:2f:07:16:ac:b7:87:08:63:1a: 06:68:6e:c3:d5:03:11:05:51:11:bb:f1:b9:fe:50: 11:6d:d4:be:1e:b8:22:ad:93:7a:1e:92:87:8b:bd: 29:39:87:b5:0a:5f:54:8c:e2:81:a5:ed:eb:ac:ec: 6a:e8:e0:13:91:a9:e8:bc:94:76:d6:f4:24:c3:57: 8e:82:6c:4a:a3:49:61:eb:6d:d9:b6:4a:90:83:67: 87:da:25:b1:11:41:fc:14:b3:9b:d0:23:29:7c:cc: f9:d7:7a:9a:a0:2b:50:58:fc:45:9c:20:87:31:5a: 8c:a8:f4:c2:56:50:7d:91:7a:08:00:13:be:1a:cd: d7:aa:ae:11:47:9d:35:6c:aa:bf:ba:43:d2:17:c3: 35:13:9d:aa:15:90:3d:da:9e:41:32:b9:75:1e:1d: a2:03:d3:e9:8c:03:46:ee:a9:4c:58:47:76:70:e0: f6:49:cc:eb:e5:f2:30:f9:ce:59:2a:cf:ec:bf:b8: 0c:0f:96:1c:1d:5e:c7:d9:ef:df:10:4d:a2:44:bd: d2:2c:39:f7:6b:42:af:64:a7:e8:9d:04:0c:32:d0: 74:f8:b8:75:ef:9b:f2:0b:44:d5:10:63:3b:6b:be: 93:86:d9:4e:9e:01:f1:15:e8:8c:dd:cb:cd:11:53: df:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E3:9F:D9:3B:EE:F1:DD:BF:85:53:9E:13:78:40:26:6F:FC:CD:85 X509v3 Authority Key Identifier: keyid:53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:53:4e:4e:75:56:60:10:0e:39:ed:de:fe:df:11:9d:c3:c1: 5c:ff:10:49:44:01:5d:fe:a2:ef:33:cd:54:6d:aa:ab:11:97: 8a:4b:c1:23:f2:1b:b0:3e:52:4d:d0:13:34:83:4c:72:bd:5e: e2:54:f5:f2:28:c2:e2:62:41:76:0c:e7:8a:10:0a:05:53:b2: c1:00:52:19:61:65:ef:39:f5:b0:9a:8e:ac:0b:4f:ce:7b:4d: 79:b3:a2:30:3f:c5:22:00:62:11:8a:32:08:dc:83:96:83:b8: dc:94:e3:25:47:6a:be:9d:ec:a2:8e:c8:42:eb:bb:e7:34:47: c2:4e:03:19:94:38:3a:3d:a1:a4:ec:0e:42:11:78:c2:1f:5c: 64:e1:68:14:7d:a6:71:60:bf:47:35:c5:09:ba:1a:43:39:95: 54:4d:dd:d6:db:83:cd:86:ba:7f:ea:bc:13:8e:6c:d8:43:4c: d8:91:0f:e9:8c:79:5e:0a:ba:9b:70:c8:f2:bc:92:43:ee:3d: 34:f9:7b:7f:c3:3f:86:cf:0a:a6:b0:00:a5:07:c9:ae:76:c9: 04:ee:51:b1:9d:ee:96:c9:ee:53:42:12:6f:5a:63:d7:17:2b: 32:44:c8:ae:f4:af:b4:dc:b4:dd:c2:25:56:e2:37:ec:5c:dc: ea:ae:17:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwMjIxMTAvBgNVBAUTKDUzMzRBOTQyRTMzNjkwQjI4MTI2MUJCQUUzOTcxMzVE QkVBNDEzOTcwHhcNMjUwNTMwMjEwMDQwWhcNMjUwNjA2MjEwMDQwWjAYMRYwFAYD VQQDEw02ODNhMWM3OC1iOWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ZGhAjQvBxast4cIYxoGaG7D1QMRBVERu/G5/lARbdS+HrgirZN6HpKHi70p OYe1Cl9UjOKBpe3rrOxq6OATkanovJR21vQkw1eOgmxKo0lh623ZtkqQg2eH2iWx EUH8FLOb0CMpfMz513qaoCtQWPxFnCCHMVqMqPTCVlB9kXoIABO+Gs3Xqq4RR501 bKq/ukPSF8M1E52qFZA92p5BMrl1Hh2iA9PpjANG7qlMWEd2cOD2Sczr5fIw+c5Z Ks/sv7gMD5YcHV7H2e/fEE2iRL3SLDn3a0KvZKfonQQMMtB0+Lh175vyC0TVEGM7 a76ThtlOngHxFeiM3cvNEVPfaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrjn9k7 7vHdv4VTnhN4QCZv/M2FMB8GA1UdIwQYMBaAFFM0qULjNpCygSYbuuOXE12+pBOX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTAyMi85RDhEOTQ1OENG RUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtMS0JKaHU2NDVjVFhiNmtF NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6U3BRdU0ya0xLQkpodTY0NWNUWGI2a0U1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTAyMi85RDhEOTQ1OENGRUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtM S0JKaHU2NDVjVFhiNmtFNWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9U05OdVZgEA457d7+3xGdw8Fc/xBJRAFd/qLvM81UbaqrEZeKS8Ej 8huwPlJN0BM0g0xyvV7iVPXyKMLiYkF2DOeKEAoFU7LBAFIZYWXvOfWwmo6sC0/O e015s6IwP8UiAGIRijII3IOWg7jclOMlR2q+neyijshC67vnNEfCTgMZlDg6PaGk 7A5CEXjCH1xk4WgUfaZxYL9HNcUJuhpDOZVUTd3W24PNhrp/6rwTjmzYQ0zYkQ/p jHleCrqbcMjyvJJD7j00+Xt/wz+GzwqmsAClB8mudskE7lGxne6Wye5TQhJvWmPX FysyRMiu9K+03LTdwiVW4jfsXNzqrhed -----END CERTIFICATE-----Generated at Sat May 31 16:25:50 2025 by rpki-client