$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft File: UG14DtF5dIDxUlE0f8KEQ9culQc.mft (raw, json) Hash identifier: fFtZMR6DaeD7dLrtxUzx4vcae0LZcJrObGsfuRCiErk= Subject key identifier: A0:2F:44:ED:6F:D4:ED:A7:2F:22:EB:B9:62:16:B8:EA:14:35:20:63 Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07 Certificate issuer: /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507 Certificate serial: 0BD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft Manifest number: 0BB9 Signing time: Sat 26 Apr 2025 18:49:01 +0000 Manifest this update: Sat 26 Apr 2025 18:49:01 +0000 Manifest next update: Sat 03 May 2025 18:49:01 +0000 Files and hashes: 1: UG14DtF5dIDxUlE0f8KEQ9culQc.crl (hash: 68uuvL6ZiHZG2IumjTceyBDFh1d3xjlDOpl9SavfVQc=) 2: E5B6117E2BC611EAB1456E4CC4F9AE02.roa (hash: 8xiW94BgUeQq9ZYVRmXYA3GrrXRDCnXkWRMC2enXdlY=) 3: FB2EC05CA3B111EE92169F16C4F9AE02.roa (hash: ZnbBQLWijX811JvZiE0GpFPKxpLE1gcXnN9dflC4yH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3032 (0xbd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EB0C, serialNumber=506D780ED1797480F15251347FC28443D72E9507 Validity Not Before: Apr 26 18:49:01 2025 GMT Not After : May 3 18:49:01 2025 GMT Subject: CN=680d2a9d-3001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e7:ce:6c:ac:e4:0c:ad:bc:28:98:ed:38:65: af:db:07:63:f7:77:33:3d:cd:7c:69:5c:58:ec:8d: db:a8:a3:45:76:d5:06:fb:9b:f2:bc:ee:b4:94:f4: e6:38:4d:27:34:a4:73:1b:1b:b4:40:6a:0e:ef:29: 54:8d:ec:b5:ab:3b:d7:03:78:7d:ff:7e:63:d9:f3: 17:b0:28:37:f5:63:92:df:2d:c2:ad:9a:55:a2:6b: 79:ae:b7:f4:11:19:6b:e9:4d:ec:62:d4:eb:78:ac: 90:96:3e:57:b1:78:30:c0:2e:11:5e:9b:5d:b0:f8: 1a:2b:5c:ae:28:8a:e6:5d:8a:26:06:65:70:b5:d5: ee:82:93:23:7e:85:99:c6:58:6c:ac:2a:c3:7b:1c: f7:84:82:39:85:bf:4b:75:18:21:d4:3d:87:62:a3: 5b:42:20:da:e1:f9:af:34:c8:16:c5:6f:3e:75:7e: b3:5b:4c:fc:66:19:1e:8d:12:34:56:e8:58:a9:89: 88:28:62:39:01:c9:92:28:a5:62:04:92:99:8d:0d: fc:a2:c0:d6:9d:b4:7d:9b:eb:a7:35:92:dc:f5:bc: 57:0d:82:41:19:df:c2:90:88:42:b2:09:af:8f:cf: ca:d4:80:fc:ba:0f:2c:de:3e:d0:bb:d2:53:0f:79: f2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2F:44:ED:6F:D4:ED:A7:2F:22:EB:B9:62:16:B8:EA:14:35:20:63 X509v3 Authority Key Identifier: keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:33:b9:a3:66:4d:02:b7:e5:fd:0b:42:e7:ba:eb:0d:45:b7: 12:6f:ab:ec:ce:cd:81:b4:5b:57:88:1f:08:95:37:aa:37:87: 2f:91:08:c8:a6:72:c1:c4:af:a9:e6:81:82:c9:67:19:dd:3e: 49:e9:be:e8:4b:91:9c:95:c3:c8:70:94:38:7a:14:de:f7:72: 62:0c:3f:8e:39:77:f3:31:0b:59:3c:a3:14:8e:97:0d:e0:7e: dd:21:a0:3f:84:03:84:28:35:94:24:a0:dc:46:80:de:be:7a: 98:9a:39:20:28:d3:01:db:17:7e:a7:79:a0:15:52:51:e3:54: 1d:c1:c3:15:a2:43:4a:63:8b:47:23:90:ed:15:8f:06:f5:8c: b3:5a:92:22:0e:02:81:ad:24:25:c0:b9:95:5f:ef:13:2f:7b: cf:a4:d2:51:6d:a1:3e:c7:0d:3a:e3:ee:7d:4d:82:72:83:af: 5c:33:3d:db:93:96:04:37:d4:27:33:b5:27:89:00:b9:6a:04: af:8c:91:02:81:7b:b0:c1:9f:4a:c3:98:48:7d:5a:cd:06:b8: a3:94:0e:50:e5:65:57:cf:c4:ae:9b:2f:24:b0:34:aa:b9:97: 12:c1:b4:60:0d:fb:d6:81:36:05:ca:38:47:da:1d:90:1f:9c: f4:ae:63:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VCMEMxMTAvBgNVBAUTKDUwNkQ3ODBFRDE3OTc0ODBGMTUyNTEzNDdGQzI4NDQz RDcyRTk1MDcwHhcNMjUwNDI2MTg0OTAxWhcNMjUwNTAzMTg0OTAxWjAYMRYwFAYD VQQDEw02ODBkMmE5ZC0zMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwefObKzkDK28KJjtOGWv2wdj93czPc18aVxY7I3bqKNFdtUG+5vyvO60lPTm OE0nNKRzGxu0QGoO7ylUjey1qzvXA3h9/35j2fMXsCg39WOS3y3CrZpVomt5rrf0 ERlr6U3sYtTreKyQlj5XsXgwwC4RXptdsPgaK1yuKIrmXYomBmVwtdXugpMjfoWZ xlhsrCrDexz3hII5hb9LdRgh1D2HYqNbQiDa4fmvNMgWxW8+dX6zW0z8ZhkejRI0 VuhYqYmIKGI5AcmSKKViBJKZjQ38osDWnbR9m+unNZLc9bxXDYJBGd/CkIhCsgmv j8/K1ID8ug8s3j7Qu9JTD3nyGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAvRO1v 1O2nLyLruWIWuOoUNSBjMB8GA1UdIwQYMBaAFFBteA7ReXSA8VJRNH/ChEPXLpUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUIwQy82MTM3NUI2QTIy MkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJRHhVbEUwZjhLRVE5Y3Vs UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VHMTREdEY1ZElEeFVsRTBmOEtFUTljdWxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUIwQy82MTM3NUI2QTIyMkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJ RHhVbEUwZjhLRVE5Y3VsUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6M7mjZk0Ct+X9C0LnuusNRbcSb6vszs2BtFtXiB8IlTeqN4cvkQjI pnLBxK+p5oGCyWcZ3T5J6b7oS5GclcPIcJQ4ehTe93JiDD+OOXfzMQtZPKMUjpcN 4H7dIaA/hAOEKDWUJKDcRoDevnqYmjkgKNMB2xd+p3mgFVJR41QdwcMVokNKY4tH I5DtFY8G9YyzWpIiDgKBrSQlwLmVX+8TL3vPpNJRbaE+xw064+59TYJyg69cMz3b k5YEN9QnM7UniQC5agSvjJECgXuwwZ9Kw5hIfVrNBrijlA5Q5WVXz8Sumy8ksDSq uZcSwbRgDfvWgTYFyjhH2h2QH5z0rmPQ -----END CERTIFICATE-----Generated at Sun Apr 27 05:24:30 2025 by rpki-client