$ rpki-client -vvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft File: UN4cYHM-ori3boQDYJGOHyXEbkM.mft (raw, json) Hash identifier: jMYBamBHcIkd2tdtEgh9g2ka6G7OPOsk9Q8+97GJmPo= Subject key identifier: 9A:A5:46:71:78:FE:F2:A4:F7:8A:99:9C:DB:10:C6:99:74:81:30:B8 Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43 Certificate issuer: /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43 Certificate serial: 0BD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft Manifest number: 0BC7 Signing time: Thu 24 Apr 2025 18:47:54 +0000 Manifest this update: Thu 24 Apr 2025 18:47:54 +0000 Manifest next update: Thu 01 May 2025 18:47:54 +0000 Files and hashes: 1: UN4cYHM-ori3boQDYJGOHyXEbkM.crl (hash: NnHTqPyHN7SIk27TgnhDRewOpaTx3nLICI3tbYdkEZ0=) 2: 46C5452E0DD711EF85707821C4F9AE02.roa (hash: 7j0YGYj1RqHQkRdbQBx20wV0PO4RbHrIjhOnv/h1yok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3031 (0xbd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916701E, serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43 Validity Not Before: Apr 24 18:47:54 2025 GMT Not After : May 1 18:47:54 2025 GMT Subject: CN=680a875a-78f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:91:5d:98:22:69:41:1a:62:df:7c:d5:a8:8e: 99:53:e0:44:ff:15:72:81:2b:1f:82:f9:ec:06:9e: eb:21:25:e9:be:a2:d6:cf:e0:54:5d:88:56:01:77: ee:3a:60:90:35:c5:dc:a1:f8:fb:11:71:c0:1d:41: 8d:2d:a7:7f:d4:05:8e:c3:9e:69:bd:45:52:2e:1f: 6b:40:9b:72:f4:45:68:64:df:f8:25:1a:33:ef:b4: 16:e7:4a:c1:4a:59:47:35:6b:47:02:99:08:29:9f: 9d:46:ca:e8:a1:21:9a:a8:94:43:32:c5:dd:4b:a4: b7:2e:87:f5:14:d3:3d:58:c3:c0:97:d4:e0:b6:97: ef:fe:a7:7d:aa:88:5f:aa:a7:d0:27:7c:de:74:37: d6:aa:2c:09:18:5a:ef:f1:5e:1a:00:2f:d4:8b:b6: 61:02:ec:f3:89:b8:f1:03:1c:6b:72:5a:29:a1:53: c5:eb:12:7c:69:fe:a3:f9:2a:dc:de:e5:df:0a:e1: fe:be:af:6e:59:74:5f:d2:f6:4a:b1:f0:89:2d:07: 8b:b7:96:d8:10:62:e2:69:23:fd:99:ae:03:0b:a8: 6d:89:be:1f:40:dc:79:14:b9:70:58:36:79:a9:13: 1d:47:19:78:1f:ee:bd:ce:92:7c:e2:66:27:ae:aa: 5c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A5:46:71:78:FE:F2:A4:F7:8A:99:9C:DB:10:C6:99:74:81:30:B8 X509v3 Authority Key Identifier: keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c7:b4:1b:b1:87:f1:50:1a:80:55:42:fe:7d:63:98:18:1d: ab:a8:36:cf:3a:ac:30:6b:64:7e:8d:ef:33:66:cc:a6:1d:39: cc:36:31:d0:34:37:85:71:3c:4a:d9:37:f4:b4:f0:b3:f7:39: 93:df:4f:f2:da:cc:6c:1f:dc:c8:b7:f1:5f:91:a5:d2:6b:4f: 86:58:99:c7:e9:37:f6:e2:e9:f4:9f:bb:ed:38:f3:d2:21:42: 79:66:b9:da:7b:01:c0:ac:bb:ec:df:80:ec:2b:58:40:f9:6c: a4:5d:a3:1d:c7:10:ab:ad:2c:0e:ee:b2:5f:e4:90:5c:3c:06: 50:59:8e:eb:b4:75:00:65:4a:04:d1:0f:e1:3c:a8:d9:ae:c2: c3:cf:99:e3:b1:73:9a:3a:0e:05:d9:69:ab:8d:86:85:07:08: 60:42:1b:b8:11:d5:ee:bc:e1:0a:88:0c:aa:7a:d0:f3:1c:aa: 5e:66:a0:40:e5:02:44:da:bd:7b:a8:2f:64:17:05:70:8a:5a: 1c:41:a8:bd:ad:45:a5:da:c3:ab:f5:8c:06:d7:de:41:95:18: 47:32:2f:1f:5a:4d:39:3a:dd:ba:80:5b:24:47:e4:19:49:bb: ed:a2:ec:84:7c:76:3a:f0:90:a3:c7:09:59:a0:40:20:13:9b: cb:f5:52:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwMUUxMTAvBgNVBAUTKDUwREUxQzYwNzMzRUEyQjhCNzZFODQwMzYwOTE4RTFG MjVDNDZFNDMwHhcNMjUwNDI0MTg0NzU0WhcNMjUwNTAxMTg0NzU0WjAYMRYwFAYD VQQDEw02ODBhODc1YS03OGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpFdmCJpQRpi33zVqI6ZU+BE/xVygSsfgvnsBp7rISXpvqLWz+BUXYhWAXfu OmCQNcXcofj7EXHAHUGNLad/1AWOw55pvUVSLh9rQJty9EVoZN/4JRoz77QW50rB SllHNWtHApkIKZ+dRsrooSGaqJRDMsXdS6S3Lof1FNM9WMPAl9Tgtpfv/qd9qohf qqfQJ3zedDfWqiwJGFrv8V4aAC/Ui7ZhAuzzibjxAxxrclopoVPF6xJ8af6j+Src 3uXfCuH+vq9uWXRf0vZKsfCJLQeLt5bYEGLiaSP9ma4DC6htib4fQNx5FLlwWDZ5 qRMdRxl4H+69zpJ84mYnrqpc8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqlRnF4 /vKk94qZnNsQxpl0gTC4MB8GA1UdIwQYMBaAFFDeHGBzPqK4t26EA2CRjh8lxG5D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAxRS83ODVEN0VEMjFD MDgxMUVBODU3NkIxNTFDNEY5QUUwMi9VTjRjWUhNLW9yaTNib1FEWUpHT0h5WEVi a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VONGNZSE0tb3JpM2JvUURZSkdPSHlYRWJrTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzAxRS83ODVEN0VEMjFDMDgxMUVBODU3NkIxNTFDNEY5QUUwMi9VTjRjWUhNLW9y aTNib1FEWUpHT0h5WEVia00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/x7QbsYfxUBqAVUL+fWOYGB2rqDbPOqwwa2R+je8zZsymHTnMNjHQ NDeFcTxK2Tf0tPCz9zmT30/y2sxsH9zIt/FfkaXSa0+GWJnH6Tf24un0n7vtOPPS IUJ5ZrnaewHArLvs34DsK1hA+WykXaMdxxCrrSwO7rJf5JBcPAZQWY7rtHUAZUoE 0Q/hPKjZrsLDz5njsXOaOg4F2WmrjYaFBwhgQhu4EdXuvOEKiAyqetDzHKpeZqBA 5QJE2r17qC9kFwVwilocQai9rUWl2sOr9YwG195BlRhHMi8fWk05Ot26gFskR+QZ SbvtouyEfHY68JCjxwlZoEAgE5vL9VL4 -----END CERTIFICATE-----Generated at Sat Apr 26 13:08:42 2025 by rpki-client