$ rpki-client -vvf rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft File: c-uK0qOl84q_4a4oB08oMcJzG6k.mft (raw, json) Hash identifier: 8j2oTKwRvWDBKMXfc0faX8HOkFIomaPLDUfo6onzYfU= Subject key identifier: 48:20:D4:CE:BA:81:A9:BE:5C:EF:46:23:C0:64:AC:D4:1B:F5:4C:90 Authority key identifier: 73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9 Certificate issuer: /CN=A91E42AA/serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft Manifest number: 86 Signing time: Sat 31 May 2025 06:08:27 +0000 Manifest this update: Sat 31 May 2025 06:08:26 +0000 Manifest next update: Sat 07 Jun 2025 06:08:26 +0000 Files and hashes: 1: c-uK0qOl84q_4a4oB08oMcJzG6k.crl (hash: j+EgRnvdVe/2PXJGVV7YuJYE4J35TPxDNF9V7qHwP70=) 2: 8B7BD7CC700211EF9FEC365AC4F9AE02.roa (hash: MYqPgxBGfIGKCkX+SQW42+81sVWr8a9Nd2V6LH33Vw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E42AA, serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9 Validity Not Before: May 31 06:08:26 2025 GMT Not After : Jun 7 06:08:26 2025 GMT Subject: CN=683a9cda-4b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:15:ea:32:ed:f3:d3:f4:59:11:d9:db:04:43: c1:72:56:8b:96:e5:3c:f2:94:85:9b:74:42:51:94: 38:f4:d9:79:3b:9a:93:2d:04:a9:e4:9d:a6:79:69: da:a8:c3:bd:c1:05:60:34:cb:a4:f9:cb:40:be:ec: d0:4e:28:73:06:65:a8:ef:25:ff:8e:16:39:fa:62: 47:d2:9a:ad:77:97:1f:db:57:62:cb:18:8d:c9:56: 56:3b:a7:a4:12:66:a1:25:dd:38:a9:74:51:1f:2b: 2d:74:33:49:3b:47:fa:91:41:a2:bf:9c:5a:44:5d: 3a:d0:b0:82:54:7d:5c:e0:50:74:11:8e:3c:e0:12: 5e:a9:e3:60:e7:65:c3:d3:b3:98:3d:3c:e1:a6:b9: c6:fe:23:d3:aa:b7:c7:c8:8c:68:26:90:ce:2a:21: e5:7f:02:98:61:69:73:6a:84:0c:93:88:d3:83:09: ba:0f:76:2e:de:28:a1:3d:c9:a9:74:b5:ca:d3:f6: 57:56:28:0d:27:4e:d4:81:b0:19:4f:6a:91:b8:37: 7c:60:be:91:89:4f:3a:9b:8c:45:85:d4:86:1a:b6: a0:49:9e:fe:7b:8f:e7:83:98:42:b7:ed:3b:04:6c: db:18:61:4f:63:bb:ce:59:dc:d0:ea:ef:00:00:ae: 36:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:20:D4:CE:BA:81:A9:BE:5C:EF:46:23:C0:64:AC:D4:1B:F5:4C:90 X509v3 Authority Key Identifier: keyid:73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:19:5f:8c:47:9e:c4:55:8a:29:04:4b:18:b9:f3:b0:89:da: 75:56:48:6a:32:e5:20:4e:ff:df:0d:7d:2c:d2:99:d8:19:e0: be:8c:23:b5:77:7c:d4:7e:1f:39:1c:19:d5:81:3f:83:69:48: 11:7a:50:57:15:a4:bc:ba:d5:50:ea:71:3f:94:72:41:f6:ab: 99:ad:14:7a:6b:80:7d:71:fe:08:9f:d6:13:0f:15:80:46:6c: d0:a1:f9:d9:7e:90:86:35:2e:a9:0f:a4:a7:a2:52:24:ed:26: ea:39:1f:56:e0:d8:8a:c1:b4:31:b6:83:8d:a0:2f:4b:70:0d: 3f:46:b3:8c:98:b9:db:03:cd:cc:4d:c7:59:19:0e:84:c4:83: c6:aa:a2:75:4b:4a:91:ae:a2:fc:be:88:0f:30:59:68:7d:11: 22:60:b3:cb:49:af:e7:7e:d0:03:34:e2:d5:a6:85:91:cc:28: 36:7a:e7:14:59:06:ba:67:31:f7:60:5e:fd:08:f9:80:a5:5a: f7:af:a9:79:81:80:e1:b3:21:0b:ba:6a:4f:9c:fc:cd:82:94: 80:62:e0:7d:7e:91:f4:b0:1a:b4:93:65:e5:e1:5d:24:32:04: 22:a5:d2:5f:59:16:9d:ef:b6:5c:7b:4d:27:5e:86:e4:d3:4b: 15:2e:20:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQyQUExMTAvBgNVBAUTKDczRUI4QUQyQTNBNUYzOEFCRkUxQUUyODA3NEYyODMx QzI3MzFCQTkwHhcNMjUwNTMxMDYwODI2WhcNMjUwNjA3MDYwODI2WjAYMRYwFAYD VQQDEw02ODNhOWNkYS00YjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBXqMu3z0/RZEdnbBEPBclaLluU88pSFm3RCUZQ49Nl5O5qTLQSp5J2meWna qMO9wQVgNMuk+ctAvuzQTihzBmWo7yX/jhY5+mJH0pqtd5cf21diyxiNyVZWO6ek EmahJd04qXRRHystdDNJO0f6kUGiv5xaRF060LCCVH1c4FB0EY484BJeqeNg52XD 07OYPTzhprnG/iPTqrfHyIxoJpDOKiHlfwKYYWlzaoQMk4jTgwm6D3Yu3iihPcmp dLXK0/ZXVigNJ07UgbAZT2qRuDd8YL6RiU86m4xFhdSGGragSZ7+e4/ng5hCt+07 BGzbGGFPY7vOWdzQ6u8AAK425QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgg1M66 gam+XO9GI8BkrNQb9UyQMB8GA1UdIwQYMBaAFHPritKjpfOKv+GuKAdPKDHCcxup MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDJBQS9FNDA3QjMzMDcw MDExMUVGQkJFOEExNThDNEY5QUUwMi9jLXVLMHFPbDg0cV80YTRvQjA4b01jSnpH NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MtdUswcU9sODRxXzRhNG9CMDhvTWNKekc2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDJBQS9FNDA3QjMzMDcwMDExMUVGQkJFOEExNThDNEY5QUUwMi9jLXVLMHFPbDg0 cV80YTRvQjA4b01jSnpHNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLGV+MR57EVYopBEsYufOwidp1VkhqMuUgTv/fDX0s0pnYGeC+jCO1 d3zUfh85HBnVgT+DaUgRelBXFaS8utVQ6nE/lHJB9quZrRR6a4B9cf4In9YTDxWA RmzQofnZfpCGNS6pD6SnolIk7SbqOR9W4NiKwbQxtoONoC9LcA0/RrOMmLnbA83M TcdZGQ6ExIPGqqJ1S0qRrqL8vogPMFlofREiYLPLSa/nftADNOLVpoWRzCg2eucU WQa6ZzH3YF79CPmApVr3r6l5gYDhsyELumpPnPzNgpSAYuB9fpH0sBq0k2Xl4V0k MgQipdJfWRad77Zce00nXobk00sVLiAe -----END CERTIFICATE-----Generated at Sat May 31 17:24:48 2025 by rpki-client