$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft File: uQQiVZtYxNqonyJNSccf9E-byjQ.mft (raw, json) Hash identifier: mEm54uQxXy0f3XQNAlP8mXvC33zIQeLlECDvDaTVyio= Subject key identifier: 79:A2:16:49:9F:4F:6E:47:5D:31:F8:03:DB:9F:B6:1F:67:47:84:91 Authority key identifier: B9:04:22:55:9B:58:C4:DA:A8:9F:22:4D:49:C7:1F:F4:4F:9B:CA:34 Certificate issuer: /CN=A91EA723/serialNumber=B90422559B58C4DAA89F224D49C71FF44F9BCA34 Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft Manifest number: 01B9 Signing time: Sat 31 May 2025 02:55:56 +0000 Manifest this update: Sat 31 May 2025 02:55:56 +0000 Manifest next update: Sat 07 Jun 2025 02:55:56 +0000 Files and hashes: 1: uQQiVZtYxNqonyJNSccf9E-byjQ.crl (hash: cRIgeQBmSWrCo3K94e3OYtS/v6kKRZvtBsPZvKnqAyg=) 2: 4868355806A611F08F878981C4F9AE02.roa (hash: CY2/EJImr1t3NibBfSgu4VzBiSPC1MYnf7DadJvamq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.crl rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA723, serialNumber=B90422559B58C4DAA89F224D49C71FF44F9BCA34 Validity Not Before: May 31 02:55:56 2025 GMT Not After : Jun 7 02:55:56 2025 GMT Subject: CN=683a6fbc-2ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9f:5d:7b:f2:27:b6:24:ab:9e:1d:5b:d0:8b: 52:c0:3c:c9:16:8d:da:1a:2b:c9:17:8b:f2:eb:7b: c2:a1:b2:2b:7b:8d:a5:c3:ce:8a:f2:d9:28:b3:12: e5:39:41:1d:48:bd:30:2b:74:c4:36:1e:0d:84:57: 9f:b4:b2:66:84:7d:ba:0e:ed:84:60:2f:a6:66:5e: a9:49:3f:97:12:df:35:32:1b:7c:61:d9:c9:9f:dc: 93:94:e1:74:1b:fa:62:69:e9:08:4f:87:54:56:76: e2:52:51:9e:49:a5:5c:ec:53:dd:5c:10:6c:ac:9f: c3:a7:71:92:70:7f:c1:f8:8e:e8:d1:1f:96:96:15: 8d:cc:b1:46:e0:fd:53:11:52:e1:6f:cb:ca:74:ce: bf:13:12:b8:8f:5d:49:83:98:9d:0e:69:54:80:b7: 89:ed:54:bf:d3:c7:96:d8:31:a2:79:8c:3f:6e:2c: db:00:d7:0f:2f:e4:cc:28:ef:51:b2:f6:08:64:cf: 25:ec:7d:a7:73:c1:0d:14:2e:de:5c:6b:ca:1f:30: 71:fa:11:82:49:3a:96:b8:e8:27:c4:9d:3f:34:02: 11:e7:83:d6:f6:a5:07:c8:76:db:86:1b:b0:f0:47: 7c:78:0c:7a:5d:49:f3:90:37:07:85:d3:32:5c:79: 4b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A2:16:49:9F:4F:6E:47:5D:31:F8:03:DB:9F:B6:1F:67:47:84:91 X509v3 Authority Key Identifier: keyid:B9:04:22:55:9B:58:C4:DA:A8:9F:22:4D:49:C7:1F:F4:4F:9B:CA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:6c:5a:68:96:7f:2d:9b:17:4e:9c:66:8d:67:f7:5a:03:da: 99:eb:22:2f:f3:31:90:66:cb:52:65:96:12:55:9e:fa:84:33: f2:20:07:90:54:4e:2a:87:4f:8a:87:19:b8:eb:56:93:04:d2: 27:07:4e:eb:e5:e5:c0:40:44:b1:30:bc:40:80:65:a0:74:46: c9:34:f4:fc:bf:ce:37:e1:ea:0d:a1:f9:03:a2:87:a3:5e:fd: be:70:a2:30:ba:e7:6b:d0:79:3e:67:59:00:39:f5:a9:69:dd: 5f:90:48:4a:7f:8b:bd:e6:31:b4:ec:c8:86:ac:53:2f:72:39: 4c:5b:08:1a:d3:45:89:f8:5b:b3:69:f0:40:ae:33:73:f4:81: dd:0b:7f:48:d4:e4:63:74:3e:af:8d:f1:03:00:7e:9d:1e:d9: 9e:80:3a:15:93:96:08:28:80:62:2e:07:75:77:91:a6:b6:ee: 5a:96:c2:24:b1:d3:24:fc:9c:f2:4f:16:46:32:5b:8b:95:97: 05:03:03:6e:07:8f:ee:26:99:d9:04:97:2b:da:ef:08:dd:ad: 2f:a2:b2:a3:85:c9:ab:6f:99:aa:d2:ad:c2:a5:cf:c5:fd:d4: 2c:f7:ff:42:cc:93:ab:6e:9d:a6:08:06:08:ea:df:9b:b5:b6: 37:37:d5:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3MjMxMTAvBgNVBAUTKEI5MDQyMjU1OUI1OEM0REFBODlGMjI0RDQ5QzcxRkY0 NEY5QkNBMzQwHhcNMjUwNTMxMDI1NTU2WhcNMjUwNjA3MDI1NTU2WjAYMRYwFAYD VQQDEw02ODNhNmZiYy0yYWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZ9de/IntiSrnh1b0ItSwDzJFo3aGivJF4vy63vCobIre42lw86K8tkosxLl OUEdSL0wK3TENh4NhFeftLJmhH26Du2EYC+mZl6pST+XEt81Mht8YdnJn9yTlOF0 G/piaekIT4dUVnbiUlGeSaVc7FPdXBBsrJ/Dp3GScH/B+I7o0R+WlhWNzLFG4P1T EVLhb8vKdM6/ExK4j11Jg5idDmlUgLeJ7VS/08eW2DGieYw/bizbANcPL+TMKO9R svYIZM8l7H2nc8ENFC7eXGvKHzBx+hGCSTqWuOgnxJ0/NAIR54PW9qUHyHbbhhuw 8Ed8eAx6XUnzkDcHhdMyXHlL8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmiFkmf T25HXTH4A9ufth9nR4SRMB8GA1UdIwQYMBaAFLkEIlWbWMTaqJ8iTUnHH/RPm8o0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTcyMy8yQ0Q3RjVDOEIy N0QxMUVEODg1NkZBODFDNEY5QUUwMi91UVFpVlp0WXhOcW9ueUpOU2NjZjlFLWJ5 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VRUWlWWnRZeE5xb255Sk5TY2NmOUUtYnlqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTcyMy8yQ0Q3RjVDOEIyN0QxMUVEODg1NkZBODFDNEY5QUUwMi91UVFpVlp0WXhO cW9ueUpOU2NjZjlFLWJ5alEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTbFpoln8tmxdOnGaNZ/daA9qZ6yIv8zGQZstSZZYSVZ76hDPyIAeQ VE4qh0+Khxm461aTBNInB07r5eXAQESxMLxAgGWgdEbJNPT8v8434eoNofkDooej Xv2+cKIwuudr0Hk+Z1kAOfWpad1fkEhKf4u95jG07MiGrFMvcjlMWwga00WJ+Fuz afBArjNz9IHdC39I1ORjdD6vjfEDAH6dHtmegDoVk5YIKIBiLgd1d5Gmtu5alsIk sdMk/JzyTxZGMluLlZcFAwNuB4/uJpnZBJcr2u8I3a0vorKjhcmrb5mq0q3Cpc/F /dQs9/9CzJOrbp2mCAYI6t+btbY3N9U1 -----END CERTIFICATE-----Generated at Sat May 31 17:37:40 2025 by rpki-client