$ rpki-client -vvf rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft File: UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft (raw, json) Hash identifier: 9igmJ3Z9brceZt+Mr2Py/Pc3jg12B5YBiLorwo9ldY4= Subject key identifier: 4A:3A:45:59:09:75:0D:18:40:D4:B8:03:50:CB:B3:66:F3:2A:BB:C6 Authority key identifier: 50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30 Certificate issuer: /CN=A913318E/serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft Manifest number: CE Signing time: Fri 25 Apr 2025 04:46:49 +0000 Manifest this update: Fri 25 Apr 2025 04:46:49 +0000 Manifest next update: Fri 02 May 2025 04:46:49 +0000 Files and hashes: 1: UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl (hash: f1h3l0DS4v8v2yAP+7AzahOgOf70XPNkiAg/vjBnCl0=) 2: 6EAE50E8EBFA11EEA937307AC4F9AE02.roa (hash: n4jE/JU888DErTDFi7j6yPAf5IRm3HLfX3pJFCp7TIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913318E, serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230 Validity Not Before: Apr 25 04:46:49 2025 GMT Not After : May 2 04:46:49 2025 GMT Subject: CN=680b13b9-7e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:75:bd:68:54:e7:74:76:e7:82:b9:df:b6:02: ae:71:11:0e:23:3d:d0:c0:71:e9:e9:d5:c6:e0:37: 03:f6:f7:c2:4a:6e:d3:73:ec:09:0a:f7:d2:c2:26: c2:d1:16:0f:0d:ff:93:11:99:91:de:50:90:9c:b6: 6e:c0:69:4e:76:8b:16:c3:a4:91:87:4a:70:fe:2e: 87:f6:40:8b:0d:b2:4b:a2:26:59:88:82:3e:10:c3: d3:e5:51:8e:6e:7a:5c:b0:a8:a8:b1:22:2a:40:55: ee:5f:bc:75:39:c6:9b:27:2f:26:f0:80:c1:d6:16: 75:83:b3:08:cf:82:b8:19:2b:19:c4:8d:4e:cb:23: f0:6d:4c:b7:af:3a:84:a4:0d:28:35:93:09:de:3b: ce:40:79:99:13:0a:bd:de:8e:95:73:d0:fd:f3:ee: 3e:03:fd:52:07:43:f7:1e:6e:ee:49:0d:ea:b3:15: f4:ff:20:c2:88:72:80:cd:99:4d:5a:44:45:83:64: 17:45:1b:be:e8:7e:49:4e:69:26:95:4b:29:ad:9a: 28:b7:6e:5d:8c:9f:82:96:0f:ad:95:3c:73:f9:60: ee:ae:7f:60:4e:df:16:cf:9c:c0:9e:58:ba:74:ba: fa:f8:4e:e7:7a:c5:03:37:f4:75:73:65:65:33:b5: 67:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3A:45:59:09:75:0D:18:40:D4:B8:03:50:CB:B3:66:F3:2A:BB:C6 X509v3 Authority Key Identifier: keyid:50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:5c:92:7e:ee:64:a4:fd:d6:a2:dd:54:77:23:66:75:ad:cd: 02:d0:19:4c:34:fe:c2:2b:51:9e:b2:43:2a:4b:02:c9:55:06: 31:27:bb:c9:a2:cd:9f:5e:66:3f:cf:82:41:3a:64:27:c7:38: 9c:25:d9:8c:a5:96:40:4d:49:69:84:a1:63:5e:d7:ee:26:a2: d3:48:cd:7f:e7:88:59:b2:21:4b:6a:bc:e8:61:a2:ef:79:8e: 56:30:a6:15:a1:da:67:c0:d3:a6:d7:c0:c2:83:b8:42:c5:06: bc:6d:b4:dc:a0:e7:5f:9b:6a:ac:74:6d:ea:88:e8:91:3b:5a: 07:c8:7c:b3:f0:f8:76:29:f2:b3:c9:bd:8a:ae:0c:b0:d7:cc: 40:8e:f5:3e:c8:ac:45:1c:01:f1:71:06:24:3c:b9:8a:6f:12: 7d:ac:a1:b6:72:07:61:28:5f:9e:1d:4b:9d:61:8a:b2:59:50: 1e:1c:d8:5c:56:53:a3:23:70:fb:eb:75:35:c5:70:0b:64:6c: 13:10:de:cd:74:d2:09:fd:62:f8:77:28:2f:c7:ab:b6:18:cf: 6b:53:36:81:18:db:7f:00:51:ff:6f:39:01:bd:69:9a:be:d6: 00:f0:91:4c:32:c3:83:77:d9:6d:68:e3:ff:f5:e4:74:23:4d: 8a:f3:ac:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMxOEUxMTAvBgNVBAUTKDUwMEY5MjAwRUI4NkRDNUZEMDZEQjc4NkMwQ0VBNDUy RDBDRTcyMzAwHhcNMjUwNDI1MDQ0NjQ5WhcNMjUwNTAyMDQ0NjQ5WjAYMRYwFAYD VQQDEw02ODBiMTNiOS03ZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3W9aFTndHbngrnftgKucREOIz3QwHHp6dXG4DcD9vfCSm7Tc+wJCvfSwibC 0RYPDf+TEZmR3lCQnLZuwGlOdosWw6SRh0pw/i6H9kCLDbJLoiZZiII+EMPT5VGO bnpcsKiosSIqQFXuX7x1OcabJy8m8IDB1hZ1g7MIz4K4GSsZxI1OyyPwbUy3rzqE pA0oNZMJ3jvOQHmZEwq93o6Vc9D98+4+A/1SB0P3Hm7uSQ3qsxX0/yDCiHKAzZlN WkRFg2QXRRu+6H5JTmkmlUsprZoot25djJ+Clg+tlTxz+WDurn9gTt8Wz5zAnli6 dLr6+E7nesUDN/R1c2VlM7VnPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEo6RVkJ dQ0YQNS4A1DLs2bzKrvGMB8GA1UdIwQYMBaAFFAPkgDrhtxf0G23hsDOpFLQznIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzE4RS82QTkwQUY4NEVC RjkxMUVFOURBNzlCNzdDNEY5QUUwMi9VQS1TQU91RzNGX1FiYmVHd002a1V0RE9j akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VBLVNBT3VHM0ZfUWJiZUd3TTZrVXRET2NqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzE4RS82QTkwQUY4NEVCRjkxMUVFOURBNzlCNzdDNEY5QUUwMi9VQS1TQU91RzNG X1FiYmVHd002a1V0RE9jakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVXJJ+7mSk/dai3VR3I2Z1rc0C0BlMNP7CK1GeskMqSwLJVQYxJ7vJ os2fXmY/z4JBOmQnxzicJdmMpZZATUlphKFjXtfuJqLTSM1/54hZsiFLarzoYaLv eY5WMKYVodpnwNOm18DCg7hCxQa8bbTcoOdfm2qsdG3qiOiRO1oHyHyz8Ph2KfKz yb2Krgyw18xAjvU+yKxFHAHxcQYkPLmKbxJ9rKG2cgdhKF+eHUudYYqyWVAeHNhc VlOjI3D763U1xXALZGwTEN7NdNIJ/WL4dygvx6u2GM9rUzaBGNt/AFH/bzkBvWma vtYA8JFMMsODd9ltaOP/9eR0I02K86wl -----END CERTIFICATE-----Generated at Sat Apr 26 14:10:30 2025 by rpki-client