$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft File: UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json) Hash identifier: 7smn41Q6jztEhkOFc89JINKLSMCoGYR3ISVa0K0SDD4= Subject key identifier: C3:69:D0:8D:00:B3:33:50:B6:82:7C:B4:C7:D5:11:42:BD:24:E5:2F Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 Certificate issuer: /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Certificate serial: 0A3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft Manifest number: 0A37 Signing time: Thu 24 Apr 2025 19:38:51 +0000 Manifest this update: Thu 24 Apr 2025 19:38:50 +0000 Manifest next update: Thu 01 May 2025 19:38:50 +0000 Files and hashes: 1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: Qw9IgIbpRWOmp4DR5L7edQDSe0VgJZmex9pFtXXhrTs=) 2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: nyOJoLIDGp7/wafl1yH4CbKrruUiB3iOpUkQ72n7ZjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2621 (0xa3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149DF2, serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Validity Not Before: Apr 24 19:38:50 2025 GMT Not After : May 1 19:38:50 2025 GMT Subject: CN=680a934a-aaca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3d:ba:53:ba:2b:57:57:e5:0b:72:f7:44:ba: 7d:e3:74:ea:83:11:c0:80:d4:be:a4:40:63:4d:51: 33:a0:17:36:75:a0:c7:65:f6:1a:fa:72:e1:e8:e4: d5:df:00:c9:1e:59:68:8d:43:e1:bb:b3:e4:1b:16: 67:3d:62:67:5a:38:3a:52:7e:7a:2e:e5:72:0e:27: b9:2d:7f:1b:91:dc:83:b4:45:cc:4b:d3:39:80:64: de:b2:4f:78:20:4a:e3:ed:c7:3e:25:3b:08:28:cc: 62:f9:6b:62:17:09:40:89:57:5c:37:59:4c:ce:b5: 5a:87:e5:f7:0e:45:40:f8:3e:ea:90:6d:48:be:fb: 42:a9:6a:3e:f2:da:9c:9a:63:44:91:62:6a:61:8e: 72:4a:b6:b0:86:31:89:13:31:1a:23:e4:53:2d:b7: 5a:a5:cc:63:b1:f9:ba:0f:ab:d0:33:01:62:7c:59: 09:04:83:11:cd:92:4c:fa:da:fe:ea:53:7d:a5:cc: be:bb:69:b9:05:0e:c1:6f:7e:50:a6:16:c7:4c:f0: 7e:16:3e:49:37:2c:14:28:69:ae:34:71:8c:c8:5c: 0d:21:d1:2d:df:50:57:9c:12:a0:bf:63:1d:14:13: c1:c8:c8:b6:00:cd:f8:5b:12:81:73:17:8f:2a:ea: 23:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:69:D0:8D:00:B3:33:50:B6:82:7C:B4:C7:D5:11:42:BD:24:E5:2F X509v3 Authority Key Identifier: keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:c7:c9:88:b0:b0:f8:24:f0:9d:a2:16:49:90:27:ea:5f:70: e6:11:17:17:73:13:f3:bd:1e:65:1a:05:74:e0:9b:35:99:83: 4b:1c:82:73:ab:34:ec:2a:7e:08:70:a4:32:fa:14:cd:af:02: 49:c9:fa:df:e9:1d:b9:f9:b5:ed:b0:0b:d6:84:62:36:ba:8b: 3b:a8:44:84:a9:e1:93:7e:1c:33:93:f1:82:2c:91:dd:ca:15: c0:5b:ae:6c:91:d7:86:0c:6c:6a:37:6c:5d:3a:8a:f1:15:bc: d4:60:3b:4b:c4:9e:07:d7:79:4e:20:a1:c9:f8:c3:d1:35:29: 18:68:0d:cd:48:84:0b:74:16:11:98:3f:a8:25:a3:d8:dc:4f: 2e:69:38:30:0a:2a:2e:7a:36:da:ca:f9:0b:b8:07:29:d7:1c: 30:e5:7f:62:e5:ef:20:cf:42:9a:ee:f6:6f:be:1e:f9:9e:34: b4:b3:ea:be:87:a1:83:39:3a:85:45:45:e8:31:9f:df:37:24: 4d:b9:87:c5:08:52:16:23:b1:b3:9a:d6:b3:c9:91:8a:9f:4f: 95:74:30:6e:23:f2:bf:bf:e1:80:ec:a1:61:1e:f7:8c:2a:f5: 2f:60:dd:2e:42:27:74:eb:df:43:53:66:a4:27:d8:a3:f3:c6: 55:5c:db:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlERjIxMTAvBgNVBAUTKDUwRUZFMURGNzI5MTVFRDMzNjFEQjU1OUI1QjZCODNF QUUzRUYzQzAwHhcNMjUwNDI0MTkzODUwWhcNMjUwNTAxMTkzODUwWjAYMRYwFAYD VQQDEw02ODBhOTM0YS1hYWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnz26U7orV1flC3L3RLp943TqgxHAgNS+pEBjTVEzoBc2daDHZfYa+nLh6OTV 3wDJHllojUPhu7PkGxZnPWJnWjg6Un56LuVyDie5LX8bkdyDtEXMS9M5gGTesk94 IErj7cc+JTsIKMxi+WtiFwlAiVdcN1lMzrVah+X3DkVA+D7qkG1IvvtCqWo+8tqc mmNEkWJqYY5ySrawhjGJEzEaI+RTLbdapcxjsfm6D6vQMwFifFkJBIMRzZJM+tr+ 6lN9pcy+u2m5BQ7Bb35QphbHTPB+Fj5JNywUKGmuNHGMyFwNIdEt31BXnBKgv2Md FBPByMi2AM34WxKBcxePKuojWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNp0I0A szNQtoJ8tMfVEUK9JOUvMB8GA1UdIwQYMBaAFFDv4d9ykV7TNh21WbW2uD6uPvPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OURGMi85OTk4RjFDNDY3 OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0TTJIYlZadGJhNFBxNC04 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPX2gzM0tSWHRNMkhiVlp0YmE0UHE0LTg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OURGMi85OTk4RjFDNDY3OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0 TTJIYlZadGJhNFBxNC04OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0x8mIsLD4JPCdohZJkCfqX3DmERcXcxPzvR5lGgV04Js1mYNLHIJz qzTsKn4IcKQy+hTNrwJJyfrf6R25+bXtsAvWhGI2uos7qESEqeGTfhwzk/GCLJHd yhXAW65skdeGDGxqN2xdOorxFbzUYDtLxJ4H13lOIKHJ+MPRNSkYaA3NSIQLdBYR mD+oJaPY3E8uaTgwCiouejbayvkLuAcp1xww5X9i5e8gz0Ka7vZvvh75njS0s+q+ h6GDOTqFRUXoMZ/fNyRNuYfFCFIWI7GzmtazyZGKn0+VdDBuI/K/v+GA7KFhHveM KvUvYN0uQid0699DU2akJ9ij88ZVXNtU -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:52 2025 by rpki-client