$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft File: ulogxAaFivwlBqk1eGMWQUZSYJ0.mft (raw, json) Hash identifier: fqYJgkztoGe7O1jzYm2HIW/Sln80KZBx6HaOq7ZLaI8= Subject key identifier: 19:81:D2:4F:A5:0E:B5:33:73:99:F8:28:BA:34:82:F4:C2:80:C4:22 Authority key identifier: BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D Certificate issuer: /CN=A912C2D5/serialNumber=BA5A20C406858AFC2506A935786316414652609D Certificate serial: 0A4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft Manifest number: 0A49 Signing time: Thu 24 Apr 2025 19:35:50 +0000 Manifest this update: Thu 24 Apr 2025 19:35:49 +0000 Manifest next update: Thu 01 May 2025 19:35:49 +0000 Files and hashes: 1: ulogxAaFivwlBqk1eGMWQUZSYJ0.crl (hash: W1IBkdXHAX3MNBD7oQCosWoT6usjI4ePJfIsvNGFIbA=) 2: BD63D19A650D11EA8FAFD931C4F9AE02.roa (hash: OYSrFAczlfKVSdgUfDN8+TnLYrywWcmrp5Q486bnheI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2639 (0xa4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2D5, serialNumber=BA5A20C406858AFC2506A935786316414652609D Validity Not Before: Apr 24 19:35:49 2025 GMT Not After : May 1 19:35:49 2025 GMT Subject: CN=680a9296-8976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ca:1f:34:0b:c9:00:39:3d:72:82:3b:7e:05: b1:c4:02:bb:40:89:fa:7f:db:b3:b8:ea:bf:69:4a: 5a:22:7b:fd:05:df:5a:58:b5:ee:84:d0:b2:1f:bf: 6a:a0:96:15:c7:94:94:72:1e:46:61:21:6e:e8:30: 93:1f:89:d4:86:18:d9:a2:f7:85:58:4a:f2:50:ee: fb:91:57:70:9c:6c:dc:e8:44:76:6e:1f:61:3d:a8: b6:a3:29:94:aa:8a:cd:f1:5f:e8:0b:c6:c4:48:1c: 74:03:29:68:63:38:00:50:ce:95:64:73:bc:38:53: 39:fb:49:01:a3:3f:30:b1:d8:ba:06:48:20:1d:27: 5e:ff:e5:c8:a4:2c:fb:f3:06:5d:dd:6f:66:d4:58: 9b:02:24:20:7a:54:e5:b8:08:65:e8:d3:26:fd:d5: 17:a9:b8:c0:ff:1f:36:50:38:6c:82:db:c4:96:74: 09:8f:ba:85:a2:bf:2b:e1:b8:2d:e2:b7:e7:96:f1: 4e:4a:79:ec:f5:e0:54:8c:9c:96:19:64:06:06:87: 40:a5:a4:51:70:aa:9c:a7:3d:52:da:ad:5c:12:2c: 5b:7e:cf:73:97:84:c7:b8:e8:0e:64:15:51:76:14: 43:cc:92:f9:bc:1c:3c:96:5b:8f:2b:29:21:2d:fe: 34:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:81:D2:4F:A5:0E:B5:33:73:99:F8:28:BA:34:82:F4:C2:80:C4:22 X509v3 Authority Key Identifier: keyid:BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:71:19:18:52:94:22:55:c4:e8:79:67:90:4c:f4:1a:79:be: 60:ad:70:76:c9:c9:09:57:d0:71:4a:1e:70:94:f6:c8:25:3a: 22:a3:30:4e:77:13:08:fd:7f:ae:37:90:c6:0e:16:66:c9:77: 53:7d:51:a1:a3:23:b1:bd:22:e7:00:ba:94:ef:fd:e8:e8:39: 23:f2:87:8b:9e:de:af:a2:33:a2:86:a1:40:ce:0a:b6:3f:ee: 0e:5b:63:a1:ab:01:2c:fa:1d:a5:20:b6:86:20:d4:16:4d:e2: 2b:f0:b1:22:9a:57:63:12:4d:b0:d4:1d:1c:20:9e:f2:92:eb: fb:94:af:9b:f3:28:d3:a0:2f:d8:e2:64:ea:ad:37:c2:28:df: 18:75:47:6a:60:bd:4d:ac:e1:16:78:78:54:4a:17:18:bd:95: 32:db:3f:58:f2:c8:f8:16:f2:6d:e8:f2:16:0d:98:91:46:64: f4:f7:68:59:7e:36:79:d2:ef:e6:1a:5a:73:5c:57:b8:6d:9b: 45:ab:38:1c:a2:63:18:70:bb:5b:e1:0c:cc:4e:8a:59:c1:4b: dd:54:88:71:cc:7e:4b:67:4a:2c:60:45:56:0f:70:19:e6:ec: 57:22:3a:f8:95:a5:93:1d:9e:5f:45:f7:74:41:35:3d:3e:e7: 81:eb:97:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMyRDUxMTAvBgNVBAUTKEJBNUEyMEM0MDY4NThBRkMyNTA2QTkzNTc4NjMxNjQx NDY1MjYwOUQwHhcNMjUwNDI0MTkzNTQ5WhcNMjUwNTAxMTkzNTQ5WjAYMRYwFAYD VQQDEw02ODBhOTI5Ni04OTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8ofNAvJADk9coI7fgWxxAK7QIn6f9uzuOq/aUpaInv9Bd9aWLXuhNCyH79q oJYVx5SUch5GYSFu6DCTH4nUhhjZoveFWEryUO77kVdwnGzc6ER2bh9hPai2oymU qorN8V/oC8bESBx0AyloYzgAUM6VZHO8OFM5+0kBoz8wsdi6BkggHSde/+XIpCz7 8wZd3W9m1FibAiQgelTluAhl6NMm/dUXqbjA/x82UDhsgtvElnQJj7qFor8r4bgt 4rfnlvFOSnns9eBUjJyWGWQGBodApaRRcKqcpz1S2q1cEixbfs9zl4THuOgOZBVR dhRDzJL5vBw8lluPKykhLf40BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmB0k+l DrUzc5n4KLo0gvTCgMQiMB8GA1UdIwQYMBaAFLpaIMQGhYr8JQapNXhjFkFGUmCd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzJENS8zNzdBRjgyNjY0 MUIxMUVBOTkwNDJGMjBDNEY5QUUwMi91bG9neEFhRml2d2xCcWsxZUdNV1FVWlNZ SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vsb2d4QWFGaXZ3bEJxazFlR01XUVVaU1lKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzJENS8zNzdBRjgyNjY0MUIxMUVBOTkwNDJGMjBDNEY5QUUwMi91bG9neEFhRml2 d2xCcWsxZUdNV1FVWlNZSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwcRkYUpQiVcToeWeQTPQaeb5grXB2yckJV9BxSh5wlPbIJToiozBO dxMI/X+uN5DGDhZmyXdTfVGhoyOxvSLnALqU7/3o6Dkj8oeLnt6vojOihqFAzgq2 P+4OW2OhqwEs+h2lILaGINQWTeIr8LEimldjEk2w1B0cIJ7ykuv7lK+b8yjToC/Y 4mTqrTfCKN8YdUdqYL1NrOEWeHhUShcYvZUy2z9Y8sj4FvJt6PIWDZiRRmT092hZ fjZ50u/mGlpzXFe4bZtFqzgcomMYcLtb4QzMTopZwUvdVIhxzH5LZ0osYEVWD3AZ 5uxXIjr4laWTHZ5fRfd0QTU9PueB65ch -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:42 2025 by rpki-client