$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft File: uV2VSq65WdNCfBB2qfV98hw4v8w.mft (raw, json) Hash identifier: HU0zZ8UME6op6NmukkmZoEB5mk+VnSWuiqb61veJR7U= Subject key identifier: C0:88:24:28:17:39:03:3A:FC:BE:D8:F0:66:86:CF:0F:3D:7D:FD:05 Authority key identifier: B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC Certificate issuer: /CN=A91FBD28/serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC Certificate serial: 26B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft Manifest number: 269A Signing time: Sat 31 May 2025 15:39:32 +0000 Manifest this update: Sat 31 May 2025 15:39:32 +0000 Manifest next update: Sat 07 Jun 2025 15:39:32 +0000 Files and hashes: 1: uV2VSq65WdNCfBB2qfV98hw4v8w.crl (hash: aZadr4st2YfMWIuYeP0F8lvFDEolVGC/ZyeXCqHXsiU=) 2: 94688318A57B11EA964E0C3DC4F9AE02.roa (hash: qb9PKTbJFEWjVkrorFJajJwU9G8YZ7gNAVQpMrR1dv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:39:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9913 (0x26b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD28, serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC Validity Not Before: May 31 15:39:32 2025 GMT Not After : Jun 7 15:39:32 2025 GMT Subject: CN=683b22b4-e737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:03:6e:75:7b:a0:1c:4b:b5:d3:49:58:4c:a4: ac:47:92:73:89:51:13:14:3b:a4:59:84:4a:a8:87: 7d:86:a6:04:60:f6:3b:f5:c8:8a:11:df:60:92:3d: 2a:51:0e:d8:af:b6:2a:71:87:81:d7:b8:bf:c0:6c: e7:53:34:e7:0f:4a:64:e7:5e:1a:5f:68:84:fb:58: 49:79:f9:ce:33:bd:d8:20:aa:21:7d:7d:84:d0:03: be:0e:86:8f:02:78:c0:d8:78:a1:21:eb:db:3d:a4: 17:a2:a4:92:b8:20:4b:d9:9e:b1:1d:71:80:18:0c: bc:f1:23:ff:f9:b1:cb:c2:2f:02:57:a5:57:61:01: c5:31:e6:0e:9c:a3:1e:3f:17:eb:88:6b:fc:ac:66: ab:14:a1:38:23:49:49:9a:8b:35:48:6e:08:78:11: 77:2a:b0:54:d5:4b:95:80:f7:92:58:59:0e:d9:f0: e3:03:7b:34:0b:c5:ce:c2:92:b2:5e:2b:cc:bb:ce: d6:9e:36:cc:b2:a1:aa:c2:69:0d:c3:80:86:fc:ac: 31:e7:5d:6e:06:af:dc:c1:9a:68:1a:60:68:27:ff: 91:f3:b7:55:5a:e8:c0:da:51:fe:c5:89:51:54:6e: 7b:c2:14:9f:e6:7c:28:c1:01:6b:5b:9c:3e:65:a0: 6f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:88:24:28:17:39:03:3A:FC:BE:D8:F0:66:86:CF:0F:3D:7D:FD:05 X509v3 Authority Key Identifier: keyid:B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:a7:29:51:28:e4:97:23:48:da:8b:49:8b:6e:25:6b:d5:8b: 97:11:b4:02:8a:9a:63:6d:65:bf:64:56:af:06:dd:20:2c:5e: ab:16:ed:98:32:46:90:49:79:0f:87:03:94:b9:07:c4:c0:2b: 5e:10:b7:c1:7c:d9:3a:f1:ba:60:b7:6a:ce:bb:c7:05:fb:d4: 37:49:cc:b3:0d:c4:78:da:95:cd:04:7d:db:cd:4c:56:ca:84: 93:7d:44:ba:f4:18:c4:57:e4:e6:a4:3e:b3:1a:a2:ca:1a:0b: 9d:b6:78:7c:6a:76:7d:3e:de:d1:68:79:ec:85:73:cc:27:d5: 84:b7:28:4d:78:fa:9c:b2:ba:ce:0a:9a:07:38:a5:2c:1f:a1: f9:a5:84:de:ef:a1:9d:eb:bd:0e:ab:68:a9:0a:26:ef:29:e6: e9:f5:79:ff:2d:61:50:12:69:a2:46:30:5f:ad:57:b6:49:43: a9:c6:25:09:af:df:b1:d7:d9:e4:60:01:f1:db:fd:0b:b8:b3: cf:7f:60:3c:6f:dc:6c:2b:90:9f:32:7c:34:4c:aa:55:20:8c: 99:8d:52:30:eb:f2:c0:d1:a8:1f:30:a8:51:64:93:b1:b1:9c: 90:10:d9:8c:ea:52:57:70:62:98:ff:b3:d3:42:ed:75:d8:8f: e1:d2:86:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEMjgxMTAvBgNVBAUTKEI5NUQ5NTRBQUVCOTU5RDM0MjdDMTA3NkE5RjU3REYy MUMzOEJGQ0MwHhcNMjUwNTMxMTUzOTMyWhcNMjUwNjA3MTUzOTMyWjAYMRYwFAYD VQQDEw02ODNiMjJiNC1lNzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtANudXugHEu100lYTKSsR5JziVETFDukWYRKqId9hqYEYPY79ciKEd9gkj0q UQ7Yr7YqcYeB17i/wGznUzTnD0pk514aX2iE+1hJefnOM73YIKohfX2E0AO+DoaP AnjA2HihIevbPaQXoqSSuCBL2Z6xHXGAGAy88SP/+bHLwi8CV6VXYQHFMeYOnKMe PxfriGv8rGarFKE4I0lJmos1SG4IeBF3KrBU1UuVgPeSWFkO2fDjA3s0C8XOwpKy XivMu87WnjbMsqGqwmkNw4CG/Kwx511uBq/cwZpoGmBoJ/+R87dVWujA2lH+xYlR VG57whSf5nwowQFrW5w+ZaBvCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCIJCgX OQM6/L7Y8GaGzw89ff0FMB8GA1UdIwQYMBaAFLldlUquuVnTQnwQdqn1ffIcOL/M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQyOC9FNkNFRDcyMkUx QjAxMUU0OEMyRERFMTZDNEY5QUUwMi91VjJWU3E2NVdkTkNmQkIycWZWOThodzR2 OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VWMlZTcTY1V2ROQ2ZCQjJxZlY5OGh3NHY4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQyOC9FNkNFRDcyMkUxQjAxMUU0OEMyRERFMTZDNEY5QUUwMi91VjJWU3E2NVdk TkNmQkIycWZWOThodzR2OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXpylRKOSXI0jai0mLbiVr1YuXEbQCippjbWW/ZFavBt0gLF6rFu2Y MkaQSXkPhwOUuQfEwCteELfBfNk68bpgt2rOu8cF+9Q3ScyzDcR42pXNBH3bzUxW yoSTfUS69BjEV+TmpD6zGqLKGgudtnh8anZ9Pt7RaHnshXPMJ9WEtyhNePqcsrrO CpoHOKUsH6H5pYTe76Gd670Oq2ipCibvKebp9Xn/LWFQEmmiRjBfrVe2SUOpxiUJ r9+x19nkYAHx2/0LuLPPf2A8b9xsK5CfMnw0TKpVIIyZjVIw6/LA0agfMKhRZJOx sZyQENmM6lJXcGKY/7PTQu112I/h0oZx -----END CERTIFICATE-----Generated at Sat May 31 17:53:09 2025 by rpki-client