$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft File: uXgEM1AwWT1tlle8RdvRFLEpHSg.mft (raw, json) Hash identifier: brQpgVDZe6KsWr/lZWm22aEAtaDTM1sa4m/o8OPknRc= Subject key identifier: 75:46:9D:6A:D4:DD:5F:DB:A9:7A:AD:53:8A:75:68:41:D0:EC:2D:9C Authority key identifier: B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28 Certificate issuer: /CN=A91E9310/serialNumber=B97804335030593D6D9657BC45DBD114B1291D28 Certificate serial: 0454 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft Manifest number: 0450 Signing time: Sat 31 May 2025 00:24:58 +0000 Manifest this update: Sat 31 May 2025 00:24:57 +0000 Manifest next update: Sat 07 Jun 2025 00:24:57 +0000 Files and hashes: 1: uXgEM1AwWT1tlle8RdvRFLEpHSg.crl (hash: oCBh+izC8QpG4dxxwDkA4Lpva0fNdl1g7LbyTD/X/uI=) 2: E8E2B0AE546511EC8B4A436BC4F9AE02.roa (hash: cL6ZzRiCZvUCUHOXKwXrsJvsEPdauZgSSVWIQ69Rr+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1108 (0x454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9310, serialNumber=B97804335030593D6D9657BC45DBD114B1291D28 Validity Not Before: May 31 00:24:57 2025 GMT Not After : Jun 7 00:24:57 2025 GMT Subject: CN=683a4c59-924e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e5:f6:7e:01:51:d0:b9:55:5a:85:fb:8c:81: 7a:24:75:d7:7e:5b:b8:e1:fc:28:e9:97:39:69:a3: 1d:8a:30:1f:c2:ad:8f:fa:cc:b5:cf:85:42:23:b0: c6:ea:c0:06:84:25:9e:75:6a:91:59:ee:10:ff:95: 87:95:0c:a2:67:53:bb:5d:a9:f6:69:90:53:5b:74: 63:0a:77:e5:e7:c9:58:1c:53:d9:48:8e:74:f4:33: 92:40:35:be:44:09:3d:04:93:d0:08:25:fd:24:83: c3:31:55:ff:0d:51:9f:d6:d6:1a:e4:41:2d:16:6f: d7:cd:13:98:8f:7b:d0:af:f8:48:05:f1:56:91:20: 55:ea:92:a7:6a:a4:cd:9e:95:eb:c3:30:5a:f8:66: 95:3c:65:93:5b:4d:c9:30:7d:d0:bd:a0:90:4e:11: 1e:97:3d:1f:a3:e6:ae:87:7f:04:39:a6:50:e6:2b: ab:01:7b:5b:94:d7:77:37:23:7b:0f:a2:77:28:3c: ef:e6:ab:82:cf:f6:4c:9b:cb:16:c4:40:a1:bd:9a: f7:75:b9:cf:6e:5f:3f:67:ff:36:0f:89:99:8b:29: b1:b5:ca:9d:26:f9:1e:26:e2:54:52:b8:9f:17:77: 94:e7:94:c2:1e:cb:3a:9c:fb:94:80:e5:33:13:1b: 52:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:46:9D:6A:D4:DD:5F:DB:A9:7A:AD:53:8A:75:68:41:D0:EC:2D:9C X509v3 Authority Key Identifier: keyid:B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:65:5d:61:06:6a:b6:cd:04:4e:a2:a0:37:07:6e:49:5b:a0: 78:e0:87:a9:5e:27:a2:39:b5:2b:ad:8d:00:df:83:cb:dd:c0: 80:46:37:58:5d:df:e5:f0:46:e5:d9:df:4f:14:06:6e:d5:13: 3d:57:a8:56:dd:87:e4:bd:c4:4c:7b:e5:cf:f8:27:a5:bc:e0: ad:2c:b2:90:09:3b:5b:42:69:c0:cc:a8:f0:e0:81:2a:db:89: bc:b9:27:3e:c8:1a:c8:33:1c:8c:5d:cd:02:df:88:da:ab:ce: 46:3b:32:cb:e7:4b:24:09:08:7e:c6:3a:9e:81:d4:22:db:e5: 41:d2:45:b3:1e:f8:4f:c6:b7:f1:b2:1a:20:8c:1d:47:dc:4b: 06:b7:6c:62:91:52:c9:70:68:33:45:79:17:ce:45:02:20:80: 8f:df:c1:14:9a:a8:f6:ce:5c:84:1f:97:7a:20:70:63:3e:7d: 1c:e2:79:26:fd:de:4c:83:a4:8f:eb:ef:84:c6:75:47:25:4d: 3d:d0:aa:a7:db:25:10:5f:0e:32:cd:cf:cd:48:13:fc:5b:6f: cd:03:a7:92:e1:5d:a3:82:7c:6b:75:0a:6e:8e:a4:f4:d2:93: c2:4d:e8:92:4f:99:8d:5c:25:4b:5b:9f:7b:75:db:55:92:fd: 49:18:d9:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkzMTAxMTAvBgNVBAUTKEI5NzgwNDMzNTAzMDU5M0Q2RDk2NTdCQzQ1REJEMTE0 QjEyOTFEMjgwHhcNMjUwNTMxMDAyNDU3WhcNMjUwNjA3MDAyNDU3WjAYMRYwFAYD VQQDEw02ODNhNGM1OS05MjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouX2fgFR0LlVWoX7jIF6JHXXflu44fwo6Zc5aaMdijAfwq2P+sy1z4VCI7DG 6sAGhCWedWqRWe4Q/5WHlQyiZ1O7Xan2aZBTW3RjCnfl58lYHFPZSI509DOSQDW+ RAk9BJPQCCX9JIPDMVX/DVGf1tYa5EEtFm/XzROYj3vQr/hIBfFWkSBV6pKnaqTN npXrwzBa+GaVPGWTW03JMH3QvaCQThEelz0fo+auh38EOaZQ5iurAXtblNd3NyN7 D6J3KDzv5quCz/ZMm8sWxEChvZr3dbnPbl8/Z/82D4mZiymxtcqdJvkeJuJUUrif F3eU55TCHss6nPuUgOUzExtSOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVGnWrU 3V/bqXqtU4p1aEHQ7C2cMB8GA1UdIwQYMBaAFLl4BDNQMFk9bZZXvEXb0RSxKR0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTMxMC9EMUIxRDM0NDU0 NjMxMUVDQThGQTQ5NkFDNEY5QUUwMi91WGdFTTFBd1dUMXRsbGU4UmR2UkZMRXBI U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYZ0VNMUF3V1QxdGxsZThSZHZSRkxFcEhTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTMxMC9EMUIxRDM0NDU0NjMxMUVDQThGQTQ5NkFDNEY5QUUwMi91WGdFTTFBd1dU MXRsbGU4UmR2UkZMRXBIU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATZV1hBmq2zQROoqA3B25JW6B44IepXieiObUrrY0A34PL3cCARjdY Xd/l8Ebl2d9PFAZu1RM9V6hW3YfkvcRMe+XP+CelvOCtLLKQCTtbQmnAzKjw4IEq 24m8uSc+yBrIMxyMXc0C34jaq85GOzLL50skCQh+xjqegdQi2+VB0kWzHvhPxrfx shogjB1H3EsGt2xikVLJcGgzRXkXzkUCIICP38EUmqj2zlyEH5d6IHBjPn0c4nkm /d5Mg6SP6++ExnVHJU090Kqn2yUQXw4yzc/NSBP8W2/NA6eS4V2jgnxrdQpujqT0 0pPCTeiST5mNXCVLW597ddtVkv1JGNmB -----END CERTIFICATE-----Generated at Sat May 31 16:47:44 2025 by rpki-client