$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft File: 4UieBUVuksrXFYRyAOSnXWw-Q84.mft (raw, json) Hash identifier: h4iEGHJI37QW3FC3dWDhHlK2WJpDPo43t/m68sRk0xw= Subject key identifier: DF:88:30:76:A0:51:57:D9:8D:32:CC:10:6E:A7:C8:C9:99:73:E8:D2 Authority key identifier: E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE Certificate issuer: /CN=A91F6AE0/serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE Certificate serial: 02C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft Manifest number: 02C1 Signing time: Sat 31 May 2025 01:37:42 +0000 Manifest this update: Sat 31 May 2025 01:37:41 +0000 Manifest next update: Sat 07 Jun 2025 01:37:41 +0000 Files and hashes: 1: 4UieBUVuksrXFYRyAOSnXWw-Q84.crl (hash: uM25Fw/+Rihp+XwsKv61wU3vzMrRs3Y/yvRJwaNRSd4=) 2: E2DF828CF20211ECBCC9B986C4F9AE02.roa (hash: tfUuxZjAK76Q4T6Ge0ulThHXULE82KNLMMQeccievfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 710 (0x2c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6AE0, serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE Validity Not Before: May 31 01:37:41 2025 GMT Not After : Jun 7 01:37:41 2025 GMT Subject: CN=683a5d65-3182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:eb:7a:f3:ae:c3:5f:12:f7:69:68:1d:ab:a0: 64:91:68:d3:a2:e5:e7:5c:13:a9:3a:b3:f9:4d:c4: a0:38:01:2f:cf:08:e7:f9:31:19:d3:e4:ac:64:1c: 66:da:f5:49:15:33:d7:78:99:59:2a:1d:8b:5c:3b: 04:4f:57:2f:4e:00:27:81:99:7c:54:4a:26:59:20: ae:c2:e0:5e:b1:06:9a:4f:f1:f7:a1:57:70:6f:ea: 68:e4:fe:6f:55:5a:b4:e3:ae:41:70:4f:25:87:0c: d3:43:87:00:9f:9b:3c:c3:dd:dd:45:cb:ee:1e:51: 88:f6:b7:8a:03:0c:72:13:25:53:be:5a:77:40:a9: 61:81:e4:47:b9:26:17:71:78:ab:30:2b:b2:05:37: bc:14:a9:ba:af:3f:6a:6e:47:86:90:8c:d8:5d:de: e9:9d:56:05:ab:55:28:5b:a8:a4:93:e1:1d:fc:45: f4:1b:ed:25:11:01:20:63:6b:7c:a5:41:93:4d:2d: b8:09:27:e5:06:90:29:e8:0c:41:96:15:ec:97:1e: 94:e7:57:00:b3:f7:7a:83:51:b6:fc:52:b9:5c:8d: 84:20:aa:36:8f:f8:01:5b:8e:c6:ae:a5:64:2e:25: f5:b5:37:76:cc:26:24:19:63:02:25:a1:6b:e9:57: 26:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:88:30:76:A0:51:57:D9:8D:32:CC:10:6E:A7:C8:C9:99:73:E8:D2 X509v3 Authority Key Identifier: keyid:E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:02:5d:14:71:78:3a:ce:22:ac:6c:93:6e:39:fe:39:6f:df: 1f:52:54:6e:61:d9:33:3d:a0:b8:a7:24:e7:05:d4:69:51:f4: 4f:a2:6b:45:1e:61:a6:57:c8:55:58:0c:d5:b9:75:a8:0f:ed: fc:d6:bf:58:63:16:04:18:e9:1d:8d:1f:eb:86:a0:e8:ef:0d: df:f4:4c:81:56:b2:ad:40:63:74:98:38:41:3d:f6:9e:94:da: a0:bc:a7:f7:68:74:75:d2:38:50:8d:01:07:4d:d6:e6:66:a8: 56:b0:ef:06:58:bf:8d:89:2b:92:d4:9d:8c:8d:5d:fb:56:37: 2e:de:7b:e6:fb:c9:79:bb:98:de:c1:70:8d:19:a9:5e:f5:79: ba:19:a1:02:01:75:2d:d1:3c:4a:44:f7:47:b8:fb:eb:2d:1e: 09:e1:04:e4:ef:61:c3:26:bb:d5:b1:d3:52:cb:1b:6b:91:c0: 93:1b:7c:6c:49:f7:61:75:17:c5:ce:05:29:63:f9:f7:94:b5: 03:42:bc:a1:d6:cf:9e:96:5d:9f:25:e1:28:bf:41:cd:0f:c3: 1c:c9:f8:08:4c:5a:5a:dd:41:89:63:6e:69:f4:17:b0:e9:74: a9:40:4f:d3:13:75:9d:22:f8:0a:04:d8:40:c8:12:1e:48:3c: 36:17:cd:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZBRTAxMTAvBgNVBAUTKEUxNDg5RTA1NDU2RTkyQ0FENzE1ODQ3MjAwRTRBNzVE NkMzRTQzQ0UwHhcNMjUwNTMxMDEzNzQxWhcNMjUwNjA3MDEzNzQxWjAYMRYwFAYD VQQDEw02ODNhNWQ2NS0zMTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAset6867DXxL3aWgdq6BkkWjTouXnXBOpOrP5TcSgOAEvzwjn+TEZ0+SsZBxm 2vVJFTPXeJlZKh2LXDsET1cvTgAngZl8VEomWSCuwuBesQaaT/H3oVdwb+po5P5v VVq0465BcE8lhwzTQ4cAn5s8w93dRcvuHlGI9reKAwxyEyVTvlp3QKlhgeRHuSYX cXirMCuyBTe8FKm6rz9qbkeGkIzYXd7pnVYFq1UoW6ikk+Ed/EX0G+0lEQEgY2t8 pUGTTS24CSflBpAp6AxBlhXslx6U51cAs/d6g1G2/FK5XI2EIKo2j/gBW47GrqVk LiX1tTd2zCYkGWMCJaFr6VcmgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+IMHag UVfZjTLMEG6nyMmZc+jSMB8GA1UdIwQYMBaAFOFIngVFbpLK1xWEcgDkp11sPkPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkFFMC9GQTA0N0Y1NEYx RkMxMUVDOTlCMkNCNkJDNEY5QUUwMi80VWllQlVWdWtzclhGWVJ5QU9TblhXdy1R ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVaWVCVVZ1a3NyWEZZUnlBT1NuWFd3LVE4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkFFMC9GQTA0N0Y1NEYxRkMxMUVDOTlCMkNCNkJDNEY5QUUwMi80VWllQlVWdWtz clhGWVJ5QU9TblhXdy1RODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+Al0UcXg6ziKsbJNuOf45b98fUlRuYdkzPaC4pyTnBdRpUfRPomtF HmGmV8hVWAzVuXWoD+381r9YYxYEGOkdjR/rhqDo7w3f9EyBVrKtQGN0mDhBPfae lNqgvKf3aHR10jhQjQEHTdbmZqhWsO8GWL+NiSuS1J2MjV37Vjcu3nvm+8l5u5je wXCNGale9Xm6GaECAXUt0TxKRPdHuPvrLR4J4QTk72HDJrvVsdNSyxtrkcCTG3xs SfdhdRfFzgUpY/n3lLUDQryh1s+ell2fJeEov0HND8McyfgITFpa3UGJY25p9Bew 6XSpQE/TE3WdIvgKBNhAyBIeSDw2F83V -----END CERTIFICATE-----Generated at Sat May 31 17:06:21 2025 by rpki-client