$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft File: UGGUcQC8szKJ4moL3-zixfueCdI.mft (raw, json) Hash identifier: 9n7XWbJsUbJhKxeUe91BPMpNrgDYou+OFAX0YYewPiQ= Subject key identifier: 99:1D:5F:97:43:8A:55:22:AB:78:C1:FD:FD:60:1F:54:E0:3B:08:5C Authority key identifier: 50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2 Certificate issuer: /CN=A912BD8E/serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft Manifest number: 52 Signing time: Tue 17 Jun 2025 06:07:28 +0000 Manifest this update: Tue 17 Jun 2025 06:07:28 +0000 Manifest next update: Tue 24 Jun 2025 06:07:28 +0000 Files and hashes: 1: UGGUcQC8szKJ4moL3-zixfueCdI.crl (hash: oxxR+hd+O4h7Wt186zYb1uApN24c7/yDSIyIBuLPGYs=) 2: 08C7D93ACE8911EFBEC5D618C4F9AE02.roa (hash: nvtKwWFEZOMd88gDjqvdFcOF+TJpXNSXEguvJEtlOSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BD8E, serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2 Validity Not Before: Jun 17 06:07:28 2025 GMT Not After : Jun 24 06:07:28 2025 GMT Subject: CN=68510620-e427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fd:86:47:51:e3:8c:57:32:51:c7:85:6d:44: 9a:0a:ed:d3:2c:78:6a:d8:6d:0c:62:c2:a2:52:9b: 71:32:53:19:65:54:90:a5:e8:6b:72:e2:42:ad:53: 8e:dd:a3:16:f9:6f:55:7f:72:eb:93:69:a3:48:3f: ec:44:d3:38:2e:b8:63:af:5f:b8:53:3e:38:b1:23: 71:e1:73:c6:b7:9d:df:c4:b0:16:56:41:ef:8c:42: f7:ff:25:b4:27:0e:05:65:25:80:a3:c0:7c:05:c2: e6:11:d7:f4:2b:11:f1:d1:9a:ba:3f:d7:f3:47:6f: 89:fb:16:0b:66:f7:78:45:ac:ea:69:31:e4:78:95: 3e:7d:05:6a:86:4e:6b:00:63:50:d8:94:71:5d:53: ae:5d:fa:55:ca:d1:b4:72:ea:29:dc:78:3e:a7:d4: b7:09:c7:4e:be:35:37:86:73:71:d4:ce:bb:e9:7d: 00:f9:69:ec:42:83:a0:ab:30:57:87:e6:56:7f:ab: 29:a4:53:e6:5d:e6:41:53:bc:07:1a:d1:a2:18:8e: 5d:e8:0b:21:4c:be:69:ac:0f:24:1d:d5:35:45:35: b9:2f:d4:ec:1d:72:eb:0b:5d:14:b8:69:8a:54:28: 10:fa:6c:d9:17:21:ee:a9:07:41:e9:26:03:a7:e0: 73:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1D:5F:97:43:8A:55:22:AB:78:C1:FD:FD:60:1F:54:E0:3B:08:5C X509v3 Authority Key Identifier: keyid:50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:ff:6d:04:19:ff:12:a8:51:51:3a:98:2d:c8:62:f2:7d:43: e6:8d:00:6d:06:8b:e6:ac:bd:49:78:94:f9:14:3d:4d:bd:38: 41:8c:28:78:6d:eb:49:cd:be:da:2a:e0:11:a5:e5:d0:1c:30: e9:4d:1f:c4:e5:50:e6:8e:f2:33:d9:45:e7:20:65:b6:9e:07: f9:95:31:d4:f7:24:01:5d:0f:98:43:4e:9d:6c:64:23:15:fd: 29:de:10:6d:53:eb:07:09:3e:6d:70:85:54:df:93:ac:3a:44: 4d:d0:a9:39:7d:fa:c2:28:20:25:b8:28:1d:17:b6:a2:93:19: b6:29:80:7d:df:91:18:2f:ad:0e:9e:a2:9e:d9:dd:9e:db:b1: 1a:9e:98:c4:ab:f0:91:90:0b:b7:77:ff:51:29:e0:97:55:7e: 9d:4a:2a:38:2c:c2:2b:eb:04:11:0f:a5:56:2a:e7:39:c5:3f: bd:25:a7:29:27:ae:b1:8d:37:e8:9a:0e:e6:39:02:84:cb:b4: bb:f5:e0:b4:82:84:10:02:35:81:25:7b:94:82:f1:b0:46:c1: b7:02:08:62:19:e4:1a:81:6d:15:27:c9:4f:fe:6d:2a:90:03: 1d:c3:c6:14:53:f2:f5:b2:3c:41:a9:fb:27:3d:d6:e7:a5:2e: 61:88:03:20 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QkQ4RTExMC8GA1UEBRMoNTA2MTk0NzEwMEJDQjMzMjg5RTI2QTBCREZFQ0UyQzVG QjlFMDlEMjAeFw0yNTA2MTcwNjA3MjhaFw0yNTA2MjQwNjA3MjhaMBgxFjAUBgNV BAMTDTY4NTEwNjIwLWU0MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7/YZHUeOMVzJRx4VtRJoK7dMseGrYbQxiwqJSm3EyUxllVJCl6Gty4kKtU47d oxb5b1V/cuuTaaNIP+xE0zguuGOvX7hTPjixI3Hhc8a3nd/EsBZWQe+MQvf/JbQn DgVlJYCjwHwFwuYR1/QrEfHRmro/1/NHb4n7Fgtm93hFrOppMeR4lT59BWqGTmsA Y1DYlHFdU65d+lXK0bRy6inceD6n1LcJx06+NTeGc3HUzrvpfQD5aexCg6CrMFeH 5lZ/qymkU+Zd5kFTvAca0aIYjl3oCyFMvmmsDyQd1TVFNbkv1OwdcusLXRS4aYpU KBD6bNkXIe6pB0HpJgOn4HN/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmR1fl0OK VSKreMH9/WAfVOA7CFwwHwYDVR0jBBgwFoAUUGGUcQC8szKJ4moL3+zixfueCdIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCRDhFLzNBRjU3RkRBQ0U4 ODExRUY4N0MwNzExN0M0RjlBRTAyL1VHR1VjUUM4c3pLSjRtb0wzLXppeGZ1ZUNk SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVUdHVWNRQzhzektKNG1vTDMteml4ZnVlQ2RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC RDhFLzNBRjU3RkRBQ0U4ODExRUY4N0MwNzExN0M0RjlBRTAyL1VHR1VjUUM4c3pL SjRtb0wzLXppeGZ1ZUNkSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABH/bQQZ/xKoUVE6mC3IYvJ9Q+aNAG0Gi+asvUl4lPkUPU29OEGMKHht 60nNvtoq4BGl5dAcMOlNH8TlUOaO8jPZRecgZbaeB/mVMdT3JAFdD5hDTp1sZCMV /SneEG1T6wcJPm1whVTfk6w6RE3QqTl9+sIoICW4KB0XtqKTGbYpgH3fkRgvrQ6e op7Z3Z7bsRqemMSr8JGQC7d3/1Ep4JdVfp1KKjgswivrBBEPpVYq5znFP70lpykn rrGNN+iaDuY5AoTLtLv14LSChBACNYEle5SC8bBGwbcCCGIZ5BqBbRUnyU/+bSqQ Ax3DxhRT8vWyPEGp+yc91uelLmGIAyA= -----END CERTIFICATE-----Generated at Wed Jun 18 17:55:28 2025 by rpki-client