$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft File: uSVP8yozKY2dXGFc_aRTFeFcfLU.mft (raw, json) Hash identifier: 8Bj1m65M7KSaKtN2+c7OesCF8ao0bjOeAdGkU0xCwEU= Subject key identifier: 1B:19:07:A4:12:C2:8D:C2:98:8F:9F:66:04:87:76:8F:D6:B5:A1:B8 Authority key identifier: B9:25:4F:F3:2A:33:29:8D:9D:5C:61:5C:FD:A4:53:15:E1:5C:7C:B5 Certificate issuer: /CN=A91F3043/serialNumber=B9254FF32A33298D9D5C615CFDA45315E15C7CB5 Certificate serial: 0649 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft Manifest number: 0640 Signing time: Fri 30 May 2025 22:52:32 +0000 Manifest this update: Fri 30 May 2025 22:52:31 +0000 Manifest next update: Fri 06 Jun 2025 22:52:31 +0000 Files and hashes: 1: uSVP8yozKY2dXGFc_aRTFeFcfLU.crl (hash: 1wn+tuTVsasiwAXbqq+huhDAe0at8XxKX2mzn8DnGGo=) 2: BDFE68F491FD11EB84408D16C4F9AE02.roa (hash: NiOCVi1ZAoRhfdZ2LF+ut8x9beDsO9AQBCdgx3wc2ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.crl rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1609 (0x649) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3043, serialNumber=B9254FF32A33298D9D5C615CFDA45315E15C7CB5 Validity Not Before: May 30 22:52:31 2025 GMT Not After : Jun 6 22:52:31 2025 GMT Subject: CN=683a36b0-7d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:86:86:53:2e:01:d0:91:9e:23:6d:a1:2f:ca: 33:39:af:a9:0a:cf:14:41:38:c8:49:12:d6:2d:7e: 60:a4:c0:8a:84:ca:e4:e2:f5:0e:c4:81:8f:03:10: 2f:fd:ad:30:dd:c0:ab:7a:dc:d8:d9:b2:83:35:94: 29:aa:95:72:40:1f:2c:62:5d:78:56:b7:21:56:a5: 72:4f:0b:55:37:af:0e:de:a8:0f:cf:81:79:8a:8b: 04:27:c6:a5:42:08:83:a4:70:4c:aa:bc:01:d5:42: 35:83:f4:ec:cf:53:68:55:68:56:d9:5b:82:ce:da: 0d:54:45:4b:f8:e3:f5:37:08:17:e9:cd:64:49:b5: 99:ea:f1:b3:db:f1:3d:81:70:15:a1:77:94:83:18: 70:a2:27:79:23:68:48:7b:5f:98:c2:fd:58:71:6d: 94:3a:83:da:64:78:de:a3:56:17:cd:0d:66:09:bc: 39:76:da:c2:17:d8:25:c9:c6:3d:6d:a3:ed:ea:e8: c9:c4:16:0f:3e:11:20:7b:f3:0d:85:0d:b8:d1:aa: a4:42:6d:b9:50:a4:51:21:9a:1e:35:8b:59:82:fd: df:e8:70:ec:7f:10:07:b4:ad:5e:63:d0:64:e1:ca: 3d:51:46:da:7d:21:60:bd:e0:ed:da:89:63:da:b0: 64:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:19:07:A4:12:C2:8D:C2:98:8F:9F:66:04:87:76:8F:D6:B5:A1:B8 X509v3 Authority Key Identifier: keyid:B9:25:4F:F3:2A:33:29:8D:9D:5C:61:5C:FD:A4:53:15:E1:5C:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:5f:6a:e7:2d:83:8f:9d:cb:fc:a6:45:b6:cd:34:d1:d3:b4: 84:c1:26:8d:3b:42:00:d0:02:de:94:20:f6:11:d7:2b:41:73: c3:e4:ea:03:fc:ff:86:a2:09:be:55:59:a7:57:10:f0:98:8d: 28:e1:a0:61:bc:81:95:d0:0f:82:67:64:87:4a:0e:78:72:d3: c3:df:55:86:71:86:1c:00:79:29:5b:66:ea:18:60:52:42:3e: 11:49:19:ff:0f:74:85:51:2a:78:1c:12:3f:97:d1:bf:a6:d8: ca:49:1b:2b:91:60:61:08:dd:d8:3e:06:b2:82:14:b6:a6:7f: 92:f0:30:e2:38:45:00:9b:5c:69:65:f5:03:80:69:03:1d:4b: e4:0c:fc:2d:75:87:2b:bb:80:12:55:7c:59:a3:b9:ed:ce:30: 31:a5:65:25:b5:a9:8b:cd:5a:9d:75:bd:d4:a6:c1:08:ae:be: 73:2e:fd:8d:a6:39:b4:28:0b:ad:7d:33:f2:1d:72:91:c9:93: 9a:50:41:51:23:93:3c:cb:37:1a:78:db:4a:05:ba:d7:e1:0d: f1:f3:31:6b:be:89:e8:d7:fb:85:82:f3:15:4c:ac:25:f9:dd: f9:0e:61:a4:8f:85:4c:81:3b:be:c5:ea:0b:05:e0:9c:66:e2: c2:94:aa:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwNDMxMTAvBgNVBAUTKEI5MjU0RkYzMkEzMzI5OEQ5RDVDNjE1Q0ZEQTQ1MzE1 RTE1QzdDQjUwHhcNMjUwNTMwMjI1MjMxWhcNMjUwNjA2MjI1MjMxWjAYMRYwFAYD VQQDEw02ODNhMzZiMC03ZDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4aGUy4B0JGeI22hL8ozOa+pCs8UQTjISRLWLX5gpMCKhMrk4vUOxIGPAxAv /a0w3cCretzY2bKDNZQpqpVyQB8sYl14VrchVqVyTwtVN68O3qgPz4F5iosEJ8al QgiDpHBMqrwB1UI1g/Tsz1NoVWhW2VuCztoNVEVL+OP1NwgX6c1kSbWZ6vGz2/E9 gXAVoXeUgxhwoid5I2hIe1+Ywv1YcW2UOoPaZHjeo1YXzQ1mCbw5dtrCF9glycY9 baPt6ujJxBYPPhEge/MNhQ240aqkQm25UKRRIZoeNYtZgv3f6HDsfxAHtK1eY9Bk 4co9UUbafSFgveDt2olj2rBk8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsZB6QS wo3CmI+fZgSHdo/WtaG4MB8GA1UdIwQYMBaAFLklT/MqMymNnVxhXP2kUxXhXHy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzA0My8zOTZDNUQ0MDkx RkMxMUVCQTk5OERCMTRDNEY5QUUwMi91U1ZQOHlvektZMmRYR0ZjX2FSVEZlRmNm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VTVlA4eW96S1kyZFhHRmNfYVJURmVGY2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzA0My8zOTZDNUQ0MDkxRkMxMUVCQTk5OERCMTRDNEY5QUUwMi91U1ZQOHlvektZ MmRYR0ZjX2FSVEZlRmNmTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXX2rnLYOPncv8pkW2zTTR07SEwSaNO0IA0ALelCD2EdcrQXPD5OoD /P+Gogm+VVmnVxDwmI0o4aBhvIGV0A+CZ2SHSg54ctPD31WGcYYcAHkpW2bqGGBS Qj4RSRn/D3SFUSp4HBI/l9G/ptjKSRsrkWBhCN3YPgayghS2pn+S8DDiOEUAm1xp ZfUDgGkDHUvkDPwtdYcru4ASVXxZo7ntzjAxpWUltamLzVqddb3UpsEIrr5zLv2N pjm0KAutfTPyHXKRyZOaUEFRI5M8yzcaeNtKBbrX4Q3x8zFrvono1/uFgvMVTKwl +d35DmGkj4VMgTu+xeoLBeCcZuLClKrH -----END CERTIFICATE-----Generated at Sat May 31 15:12:59 2025 by rpki-client