$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft File: UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft (raw, json) Hash identifier: dYJEAQWW+ugQQWeu3N3JP8FZnNzerLIC+A0MVs/C9po= Subject key identifier: 82:51:04:94:A8:22:64:57:D2:57:10:53:39:12:E6:BB:08:84:3E:2D Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F Certificate issuer: /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft Manifest number: 0147 Signing time: Fri 25 Apr 2025 03:25:48 +0000 Manifest this update: Fri 25 Apr 2025 03:25:48 +0000 Manifest next update: Fri 02 May 2025 03:25:48 +0000 Files and hashes: 1: UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl (hash: CyEKwWm/MHXJ4oI+8L+Xq0iZ7V5KPF+wxyQrQEl7FMY=) 2: 160A52A854EF11EFB9156612C4F9AE02.roa (hash: foSc151i9Iw1FdFYIvaUCOjJLGeEf5CPJvtL9xEjyMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F0FA, serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F Validity Not Before: Apr 25 03:25:48 2025 GMT Not After : May 2 03:25:48 2025 GMT Subject: CN=680b00bc-1cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:02:97:14:1e:93:0f:f4:10:ab:fb:ab:e0:77: 2f:8b:b7:33:a4:07:08:7b:38:07:44:d1:e1:d0:04: d6:9b:12:dd:2d:f1:d1:98:81:2e:86:60:0d:bc:1e: f3:66:65:f9:87:94:e7:d5:15:c0:6b:bb:b8:85:09: b8:02:88:6c:0a:6a:16:6b:1f:aa:7e:ac:c5:48:40: 33:6c:3f:bd:d8:01:5d:cf:b2:51:7f:df:2f:c9:f3: 36:67:4e:ae:d6:9f:c3:2c:e0:31:3e:42:94:30:34: af:22:75:eb:fe:40:e7:11:1d:f4:86:bc:81:60:a3: 64:c1:38:80:45:6f:54:73:ed:05:c7:42:87:c8:31: 46:fb:23:fd:7b:66:26:09:ac:95:a4:59:e5:a1:78: 31:6c:04:8b:33:3e:9b:a4:f0:ec:46:a8:a6:68:69: 10:10:1d:a9:b8:d3:a3:f5:44:03:b8:fa:5c:71:f1: f1:cc:d3:5f:95:fd:03:09:ba:5d:30:b8:09:6c:d0: 17:57:e6:a7:36:b0:de:98:99:5b:9e:b9:48:b6:c7: 7e:4b:68:9a:36:87:b7:6d:88:86:bf:97:71:c5:8a: e3:a4:53:53:bf:5b:44:6f:4e:27:82:47:4d:a1:e4: 7c:aa:ac:c4:aa:dd:95:5a:f9:24:9b:26:7d:79:de: 02:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:51:04:94:A8:22:64:57:D2:57:10:53:39:12:E6:BB:08:84:3E:2D X509v3 Authority Key Identifier: keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:87:30:22:a4:be:da:bd:6f:21:84:c5:41:b3:a2:1c:26:e7: 71:c3:20:b8:04:84:1e:49:ec:cc:b4:16:bd:55:64:23:4e:06: ef:f3:3f:14:1e:a7:a1:59:d7:c3:27:2e:3d:03:4b:19:b7:0f: fb:8c:0e:4f:53:d8:94:cc:96:c6:47:1a:99:cc:32:86:78:4d: 1b:09:a3:cd:ff:ab:8d:7a:73:49:53:7c:93:10:6d:44:ad:47: 5d:5b:6d:0a:6e:39:33:42:ce:ee:2c:75:66:2a:bb:68:fb:17: cb:8d:1b:15:64:64:34:3f:12:79:21:2e:39:24:96:d9:e7:1a: 72:80:97:61:92:87:46:94:92:6c:1b:85:11:bf:f5:4b:12:a3: fe:b8:28:53:02:eb:a8:1a:e0:d4:35:18:c0:c0:13:e3:76:18: 18:b5:8a:c0:58:41:c3:76:f2:0a:17:e4:1b:cb:66:1c:1c:60: dd:15:56:2e:69:65:e5:c2:86:67:44:1d:84:5c:6f:3c:d8:55: 45:06:83:66:1a:48:df:19:f7:a0:1c:49:85:67:1d:27:97:b5: 51:67:a7:31:c6:38:97:23:80:e2:c3:b9:b3:19:16:78:16:48: b2:17:ad:05:40:ef:77:fc:71:32:0a:b7:94:f6:2e:63:bd:c7: 96:04:a5:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YwRkExMTAvBgNVBAUTKDUwQTU4MEYxQkQxMjVGMEFFREM1OTFGRkM4RENEQTlD NjZFMTJDOUYwHhcNMjUwNDI1MDMyNTQ4WhcNMjUwNTAyMDMyNTQ4WjAYMRYwFAYD VQQDEw02ODBiMDBiYy0xY2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wKXFB6TD/QQq/ur4Hcvi7czpAcIezgHRNHh0ATWmxLdLfHRmIEuhmANvB7z ZmX5h5Tn1RXAa7u4hQm4AohsCmoWax+qfqzFSEAzbD+92AFdz7JRf98vyfM2Z06u 1p/DLOAxPkKUMDSvInXr/kDnER30hryBYKNkwTiARW9Uc+0Fx0KHyDFG+yP9e2Ym CayVpFnloXgxbASLMz6bpPDsRqimaGkQEB2puNOj9UQDuPpccfHxzNNflf0DCbpd MLgJbNAXV+anNrDemJlbnrlItsd+S2iaNoe3bYiGv5dxxYrjpFNTv1tEb04ngkdN oeR8qqzEqt2VWvkkmyZ9ed4CmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJRBJSo ImRX0lcQUzkS5rsIhD4tMB8GA1UdIwQYMBaAFFClgPG9El8K7cWR/8jc2pxm4Syf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjBGQS8yMDZERkM1MDM0 RTcxMUVFQjBDODM2MTZDNEY5QUUwMi9VS1dBOGIwU1h3cnR4WkhfeU56YW5HYmhM SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLV0E4YjBTWHdydHhaSF95TnphbkdiaExKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjBGQS8yMDZERkM1MDM0RTcxMUVFQjBDODM2MTZDNEY5QUUwMi9VS1dBOGIwU1h3 cnR4WkhfeU56YW5HYmhMSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAChzAipL7avW8hhMVBs6IcJudxwyC4BIQeSezMtBa9VWQjTgbv8z8U HqehWdfDJy49A0sZtw/7jA5PU9iUzJbGRxqZzDKGeE0bCaPN/6uNenNJU3yTEG1E rUddW20KbjkzQs7uLHVmKrto+xfLjRsVZGQ0PxJ5IS45JJbZ5xpygJdhkodGlJJs G4URv/VLEqP+uChTAuuoGuDUNRjAwBPjdhgYtYrAWEHDdvIKF+Qby2YcHGDdFVYu aWXlwoZnRB2EXG882FVFBoNmGkjfGfegHEmFZx0nl7VRZ6cxxjiXI4Diw7mzGRZ4 FkiyF60FQO93/HEyCreU9i5jvceWBKUL -----END CERTIFICATE-----Generated at Sat Apr 26 12:38:44 2025 by rpki-client