$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft File: xUK94Lg0fDed4d4dgkOpLLlMh00.mft (raw, json) Hash identifier: uomHUl5FmYFPQ1eJwOaQCgaWYxR11r3z4Snw7m8ZviY= Subject key identifier: 8F:54:ED:CA:EC:EA:CF:B3:13:F4:2C:0B:25:A9:43:67:0A:D4:03:C9 Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D Certificate issuer: /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft Manifest number: 0101 Signing time: Sat 31 May 2025 04:44:03 +0000 Manifest this update: Sat 31 May 2025 04:44:03 +0000 Manifest next update: Sat 07 Jun 2025 04:44:03 +0000 Files and hashes: 1: xUK94Lg0fDed4d4dgkOpLLlMh00.crl (hash: pn+SKHtvlAcgH3j/JuLwE8KEYP0abI2aQJuQfq5O9WY=) 2: FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (hash: +xX3fyh3F9druR4nFxovnFPsJhxpAOsF0rFF0c+Rr5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB297, serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D Validity Not Before: May 31 04:44:03 2025 GMT Not After : Jun 7 04:44:03 2025 GMT Subject: CN=683a8913-b878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:83:c0:77:df:fb:01:b6:2d:bb:21:6f:c0:97: 6b:ad:27:51:7e:af:f0:93:13:c0:79:41:d8:cd:26: 64:5d:e8:32:85:15:83:05:79:7c:96:e3:d7:81:16: cc:dc:ad:6b:f3:bd:84:a7:c1:c6:01:62:55:97:0d: 14:a8:6f:da:da:1b:f1:23:e2:05:75:d4:22:46:09: 63:2e:d0:d0:08:44:b1:e6:e6:e4:36:50:f3:7e:33: e8:f6:3a:4e:0c:ac:ad:c6:13:3a:d1:53:e1:93:3b: 20:92:9b:49:53:2c:9a:bf:77:18:28:da:f7:50:91: d7:16:41:40:4a:24:15:52:41:17:9c:f1:7f:99:9a: e8:8e:87:f1:bc:38:82:f2:52:8f:d6:a6:29:82:56: 46:7f:2d:0d:77:c5:e7:71:95:8a:92:0e:fa:5e:41: 1b:45:30:9a:64:e7:b5:14:31:ff:89:f0:96:7e:1c: 5f:62:bd:27:50:94:36:66:e3:04:38:af:35:0c:e7: 27:a9:f3:63:fe:f4:a2:2e:4b:b1:8b:29:1a:3e:6e: d4:9e:95:39:f9:e6:cc:67:0b:6d:4f:10:73:5f:c7: 03:aa:d0:f4:28:50:49:9b:86:8d:e0:d1:be:a5:82: d0:f2:70:c5:c5:b8:9d:0b:47:1d:0c:dc:1a:ba:a0: b4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:54:ED:CA:EC:EA:CF:B3:13:F4:2C:0B:25:A9:43:67:0A:D4:03:C9 X509v3 Authority Key Identifier: keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:54:cc:91:47:7d:67:94:55:20:cd:fa:87:25:91:58:b6:85: a0:95:99:25:8d:18:f6:33:c7:4f:8c:40:37:3f:38:69:e5:09: c4:bc:03:2e:05:03:1f:9d:5e:c9:73:6f:8c:15:66:55:e7:13: 90:45:7b:11:96:1f:db:cb:b3:94:b4:76:a6:fb:73:e1:a1:29: bb:6c:46:46:31:61:14:4b:78:b1:a9:a2:e2:12:d8:f8:4d:ff: 22:3e:d9:e2:01:6b:27:47:b9:d0:f8:21:c3:c6:fd:0c:40:dc: d9:8c:95:10:ba:7b:c4:f1:49:02:88:18:60:ed:1a:d0:a1:ed: a6:8b:a9:a4:c7:1d:99:75:1e:34:60:27:87:3c:01:93:50:34: 67:82:75:c2:0d:88:f3:fe:af:58:96:b5:ce:6e:3d:99:4e:e6: 4d:ea:98:c8:b8:1a:c8:02:7a:30:05:9a:0f:61:4a:27:e8:b1: 8f:88:e3:b7:a3:5f:f1:59:1d:50:5d:11:53:ef:92:15:bf:8a: 91:15:6d:6b:34:24:e5:de:87:24:d8:fe:54:cc:b1:15:26:99: 54:39:3d:f0:60:1f:79:82:25:e4:ef:8e:e1:16:c3:7b:69:32: 87:56:76:bf:33:62:0d:7c:4d:4e:f3:55:4e:e9:e0:be:28:bf: 39:fa:30:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIyOTcxMTAvBgNVBAUTKEM1NDJCREUwQjgzNDdDMzc5REUxREUxRDgyNDNBOTJD Qjk0Qzg3NEQwHhcNMjUwNTMxMDQ0NDAzWhcNMjUwNjA3MDQ0NDAzWjAYMRYwFAYD VQQDEw02ODNhODkxMy1iODc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4PAd9/7AbYtuyFvwJdrrSdRfq/wkxPAeUHYzSZkXegyhRWDBXl8luPXgRbM 3K1r872Ep8HGAWJVlw0UqG/a2hvxI+IFddQiRgljLtDQCESx5ubkNlDzfjPo9jpO DKytxhM60VPhkzsgkptJUyyav3cYKNr3UJHXFkFASiQVUkEXnPF/mZrojofxvDiC 8lKP1qYpglZGfy0Nd8XncZWKkg76XkEbRTCaZOe1FDH/ifCWfhxfYr0nUJQ2ZuME OK81DOcnqfNj/vSiLkuxiykaPm7UnpU5+ebMZwttTxBzX8cDqtD0KFBJm4aN4NG+ pYLQ8nDFxbidC0cdDNwauqC0jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9U7crs 6s+zE/QsCyWpQ2cK1APJMB8GA1UdIwQYMBaAFMVCveC4NHw3neHeHYJDqSy5TIdN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjI5Ny85QTg5MEU2RUI1 RTExMUVFQTBBNjE3NkRDNEY5QUUwMi94VUs5NExnMGZEZWQ0ZDRkZ2tPcExMbE1o MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVSzk0TGcwZkRlZDRkNGRna09wTExsTWgwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjI5Ny85QTg5MEU2RUI1RTExMUVFQTBBNjE3NkRDNEY5QUUwMi94VUs5NExnMGZE ZWQ0ZDRkZ2tPcExMbE1oMDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcVMyRR31nlFUgzfqHJZFYtoWglZkljRj2M8dPjEA3Pzhp5QnEvAMu BQMfnV7Jc2+MFWZV5xOQRXsRlh/by7OUtHam+3PhoSm7bEZGMWEUS3ixqaLiEtj4 Tf8iPtniAWsnR7nQ+CHDxv0MQNzZjJUQunvE8UkCiBhg7RrQoe2mi6mkxx2ZdR40 YCeHPAGTUDRngnXCDYjz/q9YlrXObj2ZTuZN6pjIuBrIAnowBZoPYUon6LGPiOO3 o1/xWR1QXRFT75IVv4qRFW1rNCTl3ock2P5UzLEVJplUOT3wYB95giXk747hFsN7 aTKHVna/M2INfE1O81VO6eC+KL85+jAY -----END CERTIFICATE-----Generated at Sat May 31 16:27:45 2025 by rpki-client