$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft File: U4JkLr15mg-ChtBlSCntdoQw-eQ.mft (raw, json) Hash identifier: GXwBNnE1NBymXmgCUUoqLEX2rF7y32JhRgxQDluIHv4= Subject key identifier: F1:0C:9A:2E:00:3A:ED:3F:0A:D9:4F:A4:53:AF:F7:74:DA:12:3C:C8 Authority key identifier: 53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 Certificate issuer: /CN=A91E6856/serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Certificate serial: 0E52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft Manifest number: 0E4D Signing time: Fri 30 May 2025 17:55:43 +0000 Manifest this update: Fri 30 May 2025 17:55:42 +0000 Manifest next update: Fri 06 Jun 2025 17:55:42 +0000 Files and hashes: 1: U4JkLr15mg-ChtBlSCntdoQw-eQ.crl (hash: szbEULQWs/sKdoVmhiloWsDZihWGKQXBPRHZcKoVN/Y=) 2: 350711FA881211EE9710F928C4F9AE02.roa (hash: /AJd6poS8Ng5rehLy7t+jOBIXVOshJArXBaFYmXY69Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3666 (0xe52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Validity Not Before: May 30 17:55:42 2025 GMT Not After : Jun 6 17:55:42 2025 GMT Subject: CN=6839f11e-92da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:56:fc:41:c1:6e:18:1b:80:de:c4:4c:c6:0b: 17:85:4a:20:6d:10:82:16:0e:bd:1f:c0:c7:c9:1c: dc:a8:d6:5f:33:37:2e:3e:8c:58:94:2a:dd:ef:52: f5:4a:11:ec:89:ea:c9:ea:b6:cc:68:96:c5:a2:8b: 78:b7:84:cb:73:fb:f4:c2:2f:7f:61:37:9a:d1:01: 75:44:0c:79:24:4a:ca:dd:ce:eb:c8:c4:7f:af:c6: 58:39:57:1a:c3:ac:41:4d:9e:c9:2b:c8:66:f7:0e: ce:f6:40:43:e9:53:2e:ee:ef:d5:6d:e5:85:9f:37: 60:5f:56:9d:d1:81:02:90:02:17:c8:09:e1:f2:38: 67:11:57:d1:b3:00:5e:94:ee:73:e6:bc:2a:a5:96: 44:c3:b1:b6:ce:17:6c:a6:80:a3:ae:c7:a1:e4:69: 70:bb:9f:69:04:d3:55:15:45:6a:c4:09:bc:92:83: b5:08:da:73:f2:38:9b:fa:d2:36:c9:24:39:f3:f0: 7e:b6:f6:df:69:64:fc:aa:9e:c9:00:fb:d3:6c:a0: b2:2d:1b:a5:e0:98:03:95:7b:6b:33:66:91:51:d5: 9e:1c:0e:84:ff:43:bd:b7:12:8f:d2:f9:b0:07:f2: c4:a0:f1:d2:0c:fa:af:f1:f2:5d:0f:44:15:cd:71: 63:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0C:9A:2E:00:3A:ED:3F:0A:D9:4F:A4:53:AF:F7:74:DA:12:3C:C8 X509v3 Authority Key Identifier: keyid:53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:73:ec:e2:f5:65:7e:07:bd:86:08:42:99:1d:1e:98:b8:5e: 22:b9:8e:c8:06:d2:f2:89:e3:bb:68:da:63:5a:71:18:f6:5e: 14:da:33:ca:18:f3:a7:5c:6a:12:67:27:17:c6:fa:30:58:0d: 06:37:79:0e:d0:26:9d:6e:f8:25:e5:6e:18:6f:5d:1f:95:38: 54:be:04:7c:d5:c7:de:a3:69:5c:da:de:b3:7b:d0:28:73:85: ba:12:29:55:24:dd:cd:43:e9:a6:c7:73:09:c1:c8:d9:0e:55: 00:6a:9a:e6:d7:0f:ec:2c:04:62:0a:24:8a:df:8a:d4:a1:7e: 95:6b:69:80:e5:b6:20:fb:e7:a9:6e:8c:34:08:67:4f:0c:06: e4:02:e9:8f:d7:43:83:a9:90:bf:67:3d:dd:8d:71:0c:95:5a: 42:09:c3:18:7b:57:28:70:fa:32:0f:eb:d3:88:5a:13:e7:cc: 8b:98:25:e6:ef:0c:89:c3:57:87:b3:63:65:2d:03:dd:0c:c5: 3a:5d:22:89:e1:1d:20:87:19:8d:7f:df:be:b0:5a:36:ad:3a: fe:84:87:43:6b:7b:b0:ef:76:ea:ee:ad:f0:30:69:9f:cc:19: 9a:a6:50:02:b3:f1:fd:07:34:1b:03:9c:a5:2a:5f:4b:de:75: 15:87:55:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDUzODI2NDJFQkQ3OTlBMEY4Mjg2RDA2NTQ4MjlFRDc2 ODQzMEY5RTQwHhcNMjUwNTMwMTc1NTQyWhcNMjUwNjA2MTc1NTQyWjAYMRYwFAYD VQQDEw02ODM5ZjExZS05MmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFb8QcFuGBuA3sRMxgsXhUogbRCCFg69H8DHyRzcqNZfMzcuPoxYlCrd71L1 ShHsierJ6rbMaJbFoot4t4TLc/v0wi9/YTea0QF1RAx5JErK3c7ryMR/r8ZYOVca w6xBTZ7JK8hm9w7O9kBD6VMu7u/VbeWFnzdgX1ad0YECkAIXyAnh8jhnEVfRswBe lO5z5rwqpZZEw7G2zhdspoCjrseh5Glwu59pBNNVFUVqxAm8koO1CNpz8jib+tI2 ySQ58/B+tvbfaWT8qp7JAPvTbKCyLRul4JgDlXtrM2aRUdWeHA6E/0O9txKP0vmw B/LEoPHSDPqv8fJdD0QVzXFjuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEMmi4A Ou0/CtlPpFOv93TaEjzIMB8GA1UdIwQYMBaAFFOCZC69eZoPgobQZUgp7XaEMPnk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yQ0Q0NUZCQTlF MjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1nLUNodEJsU0NudGRvUXct ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0SmtMcjE1bWctQ2h0QmxTQ250ZG9Rdy1lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg1Ni8yQ0Q0NUZCQTlFMjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1n LUNodEJsU0NudGRvUXctZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+c+zi9WV+B72GCEKZHR6YuF4iuY7IBtLyieO7aNpjWnEY9l4U2jPK GPOnXGoSZycXxvowWA0GN3kO0Cadbvgl5W4Yb10flThUvgR81cfeo2lc2t6ze9Ao c4W6EilVJN3NQ+mmx3MJwcjZDlUAaprm1w/sLARiCiSK34rUoX6Va2mA5bYg++ep bow0CGdPDAbkAumP10ODqZC/Zz3djXEMlVpCCcMYe1cocPoyD+vTiFoT58yLmCXm 7wyJw1eHs2NlLQPdDMU6XSKJ4R0ghxmNf9++sFo2rTr+hIdDa3uw73bq7q3wMGmf zBmaplACs/H9BzQbA5ylKl9L3nUVh1XZ -----END CERTIFICATE-----Generated at Sat May 31 17:53:14 2025 by rpki-client