$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft File: UdUxrvegh8GOMB4OaixjcbJkw-g.mft (raw, json) Hash identifier: v6qssImIXDwAL2tjv5T+MvHejboCpViwtd+g8eu+UME= Subject key identifier: 21:83:67:8B:57:6D:6A:E5:36:45:85:25:D7:29:DA:54:25:2E:11:5B Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft Manifest number: 01AF Signing time: Sat 31 May 2025 03:06:43 +0000 Manifest this update: Sat 31 May 2025 03:06:42 +0000 Manifest next update: Sat 07 Jun 2025 03:06:42 +0000 Files and hashes: 1: UdUxrvegh8GOMB4OaixjcbJkw-g.crl (hash: kEDHRvEy1uADuddMADsD9sAVobOShvAYGc+dcDixaGY=) 2: 891E633CB7F111EFA500D67CC4F9AE02.roa (hash: y1UQ1O1XftpyphxFOlftvNUIc8YKCDV+diHhEIBCjyQ=) 3: 7D215B2CC3C111EE8F83CE1AC4F9AE02.roa (hash: sUdZMd0Q+ciHznerisP4nkpWQvRZbfYqoJyi+8cz9Yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Validity Not Before: May 31 03:06:42 2025 GMT Not After : Jun 7 03:06:42 2025 GMT Subject: CN=683a7243-e9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fe:86:95:55:25:ff:37:59:32:c3:ff:87:8a: 92:53:a1:03:4d:2c:88:93:a0:a3:7a:b1:2c:e1:9f: 02:2b:55:a9:64:6d:c2:b2:95:43:66:e1:6b:5b:f1: 52:13:07:8f:59:ac:52:77:e4:a6:b9:08:35:de:09: 45:35:19:c7:8e:4b:d8:81:38:48:2f:d6:6c:d3:de: 92:1c:63:e0:ad:b7:1b:49:ef:03:3c:74:90:96:13: df:d9:2b:ab:e8:e4:50:51:b0:a2:3f:ad:ea:4c:be: f8:3f:aa:2a:fa:b8:69:f4:55:87:5f:05:b7:bf:49: 31:b5:32:41:22:37:08:b4:d0:d2:ed:10:d7:0c:62: ab:ab:42:dc:53:62:bf:d4:43:15:41:7a:95:f7:ef: 0a:d6:2a:6a:e7:4e:01:97:96:60:95:f0:32:85:a8: 1f:4b:95:68:d7:3b:98:5b:eb:13:c1:82:bf:59:f2: be:e5:ef:52:e3:a9:72:05:1e:51:16:82:06:6a:6f: 49:d0:43:55:60:0f:b0:38:1e:d5:4c:65:e5:28:eb: 8e:07:fa:50:bb:2d:c3:a9:99:e0:ff:d8:5b:6c:1e: 9a:16:9e:1a:a1:50:f5:6f:3a:16:8d:83:52:42:45: ca:d8:0b:52:c4:ff:87:dc:76:4f:a3:af:0d:01:45: e7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:83:67:8B:57:6D:6A:E5:36:45:85:25:D7:29:DA:54:25:2E:11:5B X509v3 Authority Key Identifier: keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:bf:03:d2:48:d7:59:eb:bd:b1:c8:24:14:cc:0b:ec:02:a5: 33:b0:69:30:79:eb:34:f5:51:99:13:11:dd:66:30:30:bf:11: 04:5a:d8:47:d2:8d:6d:7a:9a:32:77:4d:06:d2:30:c2:fd:f4: bd:75:60:66:43:59:19:f6:22:59:c1:03:a4:9b:05:67:af:65: 3f:77:2f:c7:a4:34:91:4b:ed:32:5c:1b:54:37:fd:ac:74:20: 01:7a:ea:72:d7:93:76:f2:3d:1f:b6:69:94:2d:41:c6:72:7c: 4a:2e:ab:e7:64:61:82:d8:ac:e6:c1:97:57:89:6b:f8:e2:28: 29:fa:b2:b2:40:e9:0f:18:63:51:7d:be:69:94:00:d1:af:5e: a5:32:15:55:06:80:99:2c:5a:a4:dc:b5:4a:10:27:bd:32:8c: 54:df:d0:99:34:4c:94:5d:3b:99:38:b2:7c:07:33:3e:da:7e: 2c:ea:46:03:b0:d0:3d:f1:ee:59:51:f0:c5:17:51:b5:66:4b: 23:ee:0c:9a:79:f7:1f:89:39:8b:d1:b3:3b:f8:8d:95:e6:a8: e9:06:11:99:18:5d:f2:17:de:3f:b5:e9:df:be:52:f1:a1:63: 64:40:cf:6e:45:8d:2a:cc:82:c2:7f:e3:d9:69:5f:16:10:63: 09:c7:d8:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZBRkYxMTAvBgNVBAUTKDUxRDUzMUFFRjdBMDg3QzE4RTMwMUUwRTZBMkM2Mzcx QjI2NEMzRTgwHhcNMjUwNTMxMDMwNjQyWhcNMjUwNjA3MDMwNjQyWjAYMRYwFAYD VQQDEw02ODNhNzI0My1lOWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwv6GlVUl/zdZMsP/h4qSU6EDTSyIk6CjerEs4Z8CK1WpZG3CspVDZuFrW/FS EwePWaxSd+SmuQg13glFNRnHjkvYgThIL9Zs096SHGPgrbcbSe8DPHSQlhPf2Sur 6ORQUbCiP63qTL74P6oq+rhp9FWHXwW3v0kxtTJBIjcItNDS7RDXDGKrq0LcU2K/ 1EMVQXqV9+8K1ipq504Bl5ZglfAyhagfS5Vo1zuYW+sTwYK/WfK+5e9S46lyBR5R FoIGam9J0ENVYA+wOB7VTGXlKOuOB/pQuy3DqZng/9hbbB6aFp4aoVD1bzoWjYNS QkXK2AtSxP+H3HZPo68NAUXnvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGDZ4tX bWrlNkWFJdcp2lQlLhFbMB8GA1UdIwQYMBaAFFHVMa73oIfBjjAeDmosY3GyZMPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkFGRi9EMDYxMUYwNEND NDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4R09NQjRPYWl4amNiSmt3 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkVXhydmVnaDhHT01CNE9haXhqY2JKa3ctZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkFGRi9EMDYxMUYwNENDNDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4 R09NQjRPYWl4amNiSmt3LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbvwPSSNdZ672xyCQUzAvsAqUzsGkwees09VGZExHdZjAwvxEEWthH 0o1tepoyd00G0jDC/fS9dWBmQ1kZ9iJZwQOkmwVnr2U/dy/HpDSRS+0yXBtUN/2s dCABeupy15N28j0ftmmULUHGcnxKLqvnZGGC2KzmwZdXiWv44igp+rKyQOkPGGNR fb5plADRr16lMhVVBoCZLFqk3LVKECe9MoxU39CZNEyUXTuZOLJ8BzM+2n4s6kYD sNA98e5ZUfDFF1G1Zksj7gyaefcfiTmL0bM7+I2V5qjpBhGZGF3yF94/tenfvlLx oWNkQM9uRY0qzILCf+PZaV8WEGMJx9iR -----END CERTIFICATE-----Generated at Sat May 31 17:17:35 2025 by rpki-client