$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft File: ukny4CpjXdB19WQWbxEfX63lp8s.mft (raw, json) Hash identifier: sl55kjCbr3TV0cTFPsh0snig8NYCrv1WXmPT8przzOk= Subject key identifier: 46:E7:E8:9C:9F:9E:47:42:65:FD:D8:B0:DF:AC:98:70:64:BC:9C:E4 Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB Certificate issuer: /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB Certificate serial: 0670 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft Manifest number: 065F Signing time: Fri 02 May 2025 22:35:39 +0000 Manifest this update: Fri 02 May 2025 22:35:39 +0000 Manifest next update: Fri 09 May 2025 22:35:39 +0000 Files and hashes: 1: ukny4CpjXdB19WQWbxEfX63lp8s.crl (hash: B59sJi2+kS9zwhhFHHWjDCoonW9Y2s5JfDAgHq23T/Y=) 2: D1B6FD008D6D11EB9DB49A32C4F9AE02.roa (hash: vO8BJ986/mLBngVCPGye7C9+jhQy/7A58iRckkgaf5o=) 3: D24316B48D6D11EB9DB49A32C4F9AE02.roa (hash: ydw76epyjXbZhwBlfsXtLnXh1HYx108LFVcke+cDAAQ=) 4: D2CFD4468D6D11EB9DB49A32C4F9AE02.roa (hash: Q6tSeAB9SXDJytuvhS/k9VLqC1gwcOY00UC/xNHWsMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 22:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1648 (0x670) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B, serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB Validity Not Before: May 2 22:35:39 2025 GMT Not After : May 9 22:35:39 2025 GMT Subject: CN=681548bb-ae47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d5:1d:8a:e5:cc:ec:21:90:16:c5:df:41:92: 6c:ef:dc:94:74:9d:be:fd:13:9e:60:ba:ba:87:d7: d4:d7:ac:6d:4f:f4:21:5c:bf:41:7c:d9:13:11:a3: ca:5e:e4:0b:7f:70:aa:c5:47:4e:d0:a6:75:eb:71: ac:ca:3d:40:f8:3a:73:a3:de:e0:1a:eb:a0:af:95: 60:f0:67:d5:ba:6e:b8:1e:a5:d1:80:14:ee:e9:bd: 99:03:fd:e4:27:65:59:f3:c7:7b:80:94:1a:9f:a0: 47:ac:7d:55:2e:2e:ad:63:6f:62:4f:3f:b0:2d:d5: ec:e0:f6:92:4d:d8:8a:eb:c3:45:26:f4:60:25:a4: 8c:a6:f4:68:22:32:29:72:f9:60:80:7c:b9:cf:5c: c9:a2:df:6e:cc:15:76:ea:90:f6:d8:86:35:9f:99: 81:94:03:ef:76:54:6a:10:82:b7:96:8d:6f:dc:9d: b3:aa:16:3b:f4:a4:98:5d:77:01:97:b2:ad:26:9b: 7f:01:d6:d5:2d:a1:c6:56:28:9a:4d:aa:aa:7f:fe: 40:11:27:07:c3:d3:46:c1:b7:f2:bf:e7:ba:72:46: 9c:85:e4:ff:cc:13:35:2e:41:69:64:e7:df:dd:1d: cb:55:12:51:68:99:07:71:8f:4d:f6:29:5a:84:ea: 20:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E7:E8:9C:9F:9E:47:42:65:FD:D8:B0:DF:AC:98:70:64:BC:9C:E4 X509v3 Authority Key Identifier: keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:7f:de:4b:b6:57:21:63:5e:7c:d2:63:81:14:d0:fd:94:6b: df:99:0f:1a:54:cd:3a:fa:c7:70:1f:c8:9d:6e:c2:f6:cd:85: cd:d3:1c:1a:61:6d:0b:1e:24:c7:71:9f:d1:18:03:51:02:0f: 00:cd:69:da:41:98:68:5f:c7:e6:a2:52:68:d8:70:3d:13:0b: f9:23:39:d1:65:f5:09:55:f7:8f:13:27:ed:c6:48:ac:b9:53: c9:f3:5f:b6:ac:84:ae:c7:71:89:4f:62:14:a0:0b:0b:72:6c: bd:34:2d:39:60:44:16:39:c8:09:7e:2d:ae:57:c3:f1:31:cb: fa:cb:13:f2:3a:19:19:9c:eb:66:51:cb:7c:1c:8b:5b:77:8a: 37:ab:be:47:25:ec:42:90:ad:0c:69:2f:9e:21:28:c1:05:ca: 40:6b:4e:76:c5:2b:0a:e6:1b:fc:0d:63:9a:ff:5c:91:28:9c: 6c:c3:19:88:db:11:2a:6f:2f:5d:32:07:30:d2:7e:c4:bd:36: 25:69:01:c4:63:c2:dc:17:9b:4a:a5:b7:e5:87:84:1c:38:f5: 9a:c9:10:7b:db:93:b8:84:28:0d:ce:21:56:1f:01:33:29:31: db:3c:82:70:09:da:db:6d:b2:f9:fc:a8:2d:8c:56:48:01:20: 10:a0:59:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEJBNDlGMkUwMkE2MzVERDA3NUY1NjQxNjZGMTExRjVG QURFNUE3Q0IwHhcNMjUwNTAyMjIzNTM5WhcNMjUwNTA5MjIzNTM5WjAYMRYwFAYD VQQDEw02ODE1NDhiYi1hZTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdUdiuXM7CGQFsXfQZJs79yUdJ2+/ROeYLq6h9fU16xtT/QhXL9BfNkTEaPK XuQLf3CqxUdO0KZ163Gsyj1A+Dpzo97gGuugr5Vg8GfVum64HqXRgBTu6b2ZA/3k J2VZ88d7gJQan6BHrH1VLi6tY29iTz+wLdXs4PaSTdiK68NFJvRgJaSMpvRoIjIp cvlggHy5z1zJot9uzBV26pD22IY1n5mBlAPvdlRqEIK3lo1v3J2zqhY79KSYXXcB l7KtJpt/AdbVLaHGViiaTaqqf/5AEScHw9NGwbfyv+e6ckacheT/zBM1LkFpZOff 3R3LVRJRaJkHcY9N9ilahOogIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbn6Jyf nkdCZf3YsN+smHBkvJzkMB8GA1UdIwQYMBaAFLpJ8uAqY13QdfVkFm8RH1+t5afL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi9GMzZCNzlCMDgw NzcxMUVCQjkyNUYxNTRDNEY5QUUwMi91a255NENwalhkQjE5V1FXYnhFZlg2M2xw OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vrbnk0Q3BqWGRCMTlXUVdieEVmWDYzbHA4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTg4Qi9GMzZCNzlCMDgwNzcxMUVCQjkyNUYxNTRDNEY5QUUwMi91a255NENwalhk QjE5V1FXYnhFZlg2M2xwOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPf95LtlchY1580mOBFND9lGvfmQ8aVM06+sdwH8idbsL2zYXN0xwa YW0LHiTHcZ/RGANRAg8AzWnaQZhoX8fmolJo2HA9Ewv5IznRZfUJVfePEyftxkis uVPJ81+2rISux3GJT2IUoAsLcmy9NC05YEQWOcgJfi2uV8PxMcv6yxPyOhkZnOtm Uct8HItbd4o3q75HJexCkK0MaS+eISjBBcpAa052xSsK5hv8DWOa/1yRKJxswxmI 2xEqby9dMgcw0n7EvTYlaQHEY8LcF5tKpbflh4QcOPWayRB725O4hCgNziFWHwEz KTHbPIJwCdrbbbL5/KgtjFZIASAQoFk0 -----END CERTIFICATE-----Generated at Sat May 3 17:27:33 2025 by rpki-client