$ rpki-client -vvf rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft File: -uYgHGZjkjQL7hOO1BeZuobapog.mft (raw, json) Hash identifier: wKKflms7MwMPKiGW4xA4UoRYGtrSzutQhBKBWH3aCbI= Subject key identifier: 9C:A3:9E:2F:82:BD:6B:AF:AC:F5:2B:B2:EF:48:4B:EF:66:C5:05:77 Authority key identifier: FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88 Certificate issuer: /CN=A9158840/serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688 Certificate serial: 0C2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft Manifest number: 0C1A Signing time: Thu 24 Apr 2025 18:34:37 +0000 Manifest this update: Thu 24 Apr 2025 18:34:37 +0000 Manifest next update: Thu 01 May 2025 18:34:37 +0000 Files and hashes: 1: -uYgHGZjkjQL7hOO1BeZuobapog.crl (hash: 6zFrURqf6eRI+ja1tFegZoPTkvI9a+yCvgEYPUoXhUA=) 2: 513421B0E3AB11EF9C68465CC4F9AE02.roa (hash: /6OtFAV0fvfK8AYoQXUKAPYFcikHsFv3EvaxBMPOB2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3114 (0xc2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158840, serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688 Validity Not Before: Apr 24 18:34:37 2025 GMT Not After : May 1 18:34:37 2025 GMT Subject: CN=680a843d-8812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:85:8e:c6:c7:71:4a:0e:a2:7e:c7:c8:26:15: b4:a6:94:4b:2a:b8:9d:02:e6:a1:94:18:09:06:46: e4:56:0c:be:9a:a3:b0:8e:64:96:e3:e7:ef:f9:42: 74:a5:cc:d7:8c:fa:f3:de:33:61:b9:7b:38:cb:a1: 41:6a:82:76:9d:1f:96:98:41:d7:18:7b:43:3a:8d: ae:d9:c9:99:70:59:10:3c:e8:1a:c9:1a:f1:07:c4: 2d:29:c4:4c:06:4e:78:36:b3:24:b2:4f:e2:65:c2: 5e:3a:c1:40:53:98:83:32:27:e1:ce:d3:12:9a:5a: 04:3d:ac:86:21:1d:17:7d:0c:88:69:c1:40:27:ab: 60:c6:fb:07:0d:d0:40:e6:80:ac:94:25:ce:73:0e: 3e:12:7c:7a:3b:bc:b0:dd:87:98:ff:f1:c5:f2:20: fb:a8:13:7c:49:f4:ed:a7:d3:6d:56:d1:0f:c3:80: ed:81:e1:da:bd:61:c3:a9:ba:7a:2b:d2:76:c2:dc: 8e:07:ea:3e:a3:94:22:38:9a:62:6c:29:d8:e4:37: e6:7a:0b:9c:16:9a:68:bf:4b:f2:03:5e:1f:e1:55: e6:d4:8a:a4:00:c8:27:bc:0e:16:2b:ac:84:f0:fb: 4b:47:96:06:cb:56:3a:3f:e7:5a:79:1c:32:a2:54: 6e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A3:9E:2F:82:BD:6B:AF:AC:F5:2B:B2:EF:48:4B:EF:66:C5:05:77 X509v3 Authority Key Identifier: keyid:FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:99:29:a6:6e:af:f2:72:b7:56:3b:87:69:3b:51:c5:9e:f5: ed:98:18:61:c9:79:ff:a3:99:94:a3:69:e2:be:8f:e4:d9:83: a0:c8:11:1a:85:3e:95:1e:18:59:ca:41:7d:a1:e2:d5:05:d9: a7:9f:b4:94:33:f8:a8:67:fc:f9:96:a8:ef:bb:6c:8e:b6:36: 28:6f:99:8c:7c:90:1b:b4:b9:42:7c:70:b1:ff:30:a8:0f:4d: 89:b9:1a:21:5b:b6:d8:4f:18:49:c8:fb:1d:10:8d:3a:ef:7b: 81:ca:7d:7d:f1:2d:07:0c:32:8b:12:cb:7b:22:ee:e1:14:5b: b6:aa:26:a7:4d:a5:ec:42:57:18:0a:23:8b:22:7e:51:8c:ab: 39:f0:f3:62:d7:fc:80:2a:4c:33:1f:80:86:ec:5e:a9:de:6b: 8e:29:d9:aa:ab:31:db:ce:c2:15:96:d0:4a:c1:61:8e:b3:df: ef:7c:3e:5d:f9:32:66:54:26:4b:0e:b8:f6:c6:19:d8:89:5b: 73:38:1c:d1:f1:47:f5:3c:05:c9:a3:78:f4:25:99:8c:67:0f: 33:7c:85:52:ab:55:e2:de:f7:df:fd:b4:c1:f2:38:37:4e:ab: c7:d1:15:66:7a:6e:7f:20:cd:4d:db:16:68:8e:87:9d:d0:da: eb:05:83:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg4NDAxMTAvBgNVBAUTKEZBRTYyMDFDNjY2MzkyMzQwQkVFMTM4RUQ0MTc5OUJB ODZEQUE2ODgwHhcNMjUwNDI0MTgzNDM3WhcNMjUwNTAxMTgzNDM3WjAYMRYwFAYD VQQDEw02ODBhODQzZC04ODEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4WOxsdxSg6ifsfIJhW0ppRLKridAuahlBgJBkbkVgy+mqOwjmSW4+fv+UJ0 pczXjPrz3jNhuXs4y6FBaoJ2nR+WmEHXGHtDOo2u2cmZcFkQPOgayRrxB8QtKcRM Bk54NrMksk/iZcJeOsFAU5iDMifhztMSmloEPayGIR0XfQyIacFAJ6tgxvsHDdBA 5oCslCXOcw4+Enx6O7yw3YeY//HF8iD7qBN8SfTtp9NtVtEPw4DtgeHavWHDqbp6 K9J2wtyOB+o+o5QiOJpibCnY5DfmegucFppov0vyA14f4VXm1IqkAMgnvA4WK6yE 8PtLR5YGy1Y6P+daeRwyolRunQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyjni+C vWuvrPUrsu9IS+9mxQV3MB8GA1UdIwQYMBaAFPrmIBxmY5I0C+4TjtQXmbqG2qaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODg0MC82MTc3MzMyQTBC ODIxMUVBODA0MTE1NEJDNEY5QUUwMi8tdVlnSEdaamtqUUw3aE9PMUJlWnVvYmFw b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11WWdIR1pqa2pRTDdoT08xQmVadW9iYXBvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODg0MC82MTc3MzMyQTBCODIxMUVBODA0MTE1NEJDNEY5QUUwMi8tdVlnSEdaamtq UUw3aE9PMUJlWnVvYmFwb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOmSmmbq/ycrdWO4dpO1HFnvXtmBhhyXn/o5mUo2nivo/k2YOgyBEa hT6VHhhZykF9oeLVBdmnn7SUM/ioZ/z5lqjvu2yOtjYob5mMfJAbtLlCfHCx/zCo D02JuRohW7bYTxhJyPsdEI0673uByn198S0HDDKLEst7Iu7hFFu2qianTaXsQlcY CiOLIn5RjKs58PNi1/yAKkwzH4CG7F6p3muOKdmqqzHbzsIVltBKwWGOs9/vfD5d +TJmVCZLDrj2xhnYiVtzOBzR8Uf1PAXJo3j0JZmMZw8zfIVSq1Xi3vff/bTB8jg3 TqvH0RVmem5/IM1N2xZojoed0NrrBYPA -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:22 2025 by rpki-client