$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.mft File: UIni3IEtNN89TbWDVc_xSweu3rk.mft (raw, json) Hash identifier: FULjosr+Mky5FnuGxKYMxtDQ69XZ5lCrxkYkpoJE7RQ= Subject key identifier: 07:36:6D:C1:30:92:2C:F9:B6:5F:8D:7B:F1:96:F9:C9:27:61:16:B4 Authority key identifier: 50:89:E2:DC:81:2D:34:DF:3D:4D:B5:83:55:CF:F1:4B:07:AE:DE:B9 Certificate issuer: /CN=A919C5C6/serialNumber=5089E2DC812D34DF3D4DB58355CFF14B07AEDEB9 Certificate serial: 03E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UIni3IEtNN89TbWDVc_xSweu3rk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.mft Manifest number: 03E4 Signing time: Fri 25 Apr 2025 00:18:17 +0000 Manifest this update: Fri 25 Apr 2025 00:18:16 +0000 Manifest next update: Fri 02 May 2025 00:18:16 +0000 Files and hashes: 1: UIni3IEtNN89TbWDVc_xSweu3rk.crl (hash: 7nQofsAv9AKFfetDiLiGoAd8vTfPHrgdYgBm0qNXLP0=) 2: 30BF89A0785C11ECB03F8929C4F9AE02.roa (hash: dqi1jGrgZhfUDsaLgY8PqI8EYscNtf7FIr0kNmEX2/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.crl rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UIni3IEtNN89TbWDVc_xSweu3rk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1000 (0x3e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C5C6, serialNumber=5089E2DC812D34DF3D4DB58355CFF14B07AEDEB9 Validity Not Before: Apr 25 00:18:16 2025 GMT Not After : May 2 00:18:16 2025 GMT Subject: CN=680ad4c9-1230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:86:ae:20:86:aa:2a:16:35:0b:b2:a0:30:ac: dd:7e:86:40:c7:02:b0:06:52:52:4d:5f:b1:66:c9: 9b:6c:ae:a0:84:db:ed:f9:79:a2:18:f5:b4:b6:4f: 16:d1:4f:86:50:ea:68:99:92:5c:d1:6a:a1:e1:3e: f7:a0:ad:c0:b6:d7:ab:ff:6f:39:05:41:aa:67:ab: 0a:3b:e4:64:3d:fe:88:e1:9e:17:fe:e6:60:8c:32: 36:6f:f3:93:99:38:8a:98:76:99:45:9b:0a:a3:99: 8d:1e:bb:68:de:4c:62:d5:07:c0:80:07:41:59:7e: b4:18:aa:80:80:3f:32:fe:27:69:5a:db:e4:44:e4: 8f:af:81:8b:4b:cc:e3:d9:1a:84:51:15:8d:32:f9: 39:9c:59:c0:1e:b5:5b:89:38:88:a1:66:00:4b:54: 95:db:31:89:a9:eb:dd:fe:94:35:65:4b:76:9b:24: 9d:ec:03:9a:99:ff:4e:ce:7f:03:c2:02:90:17:b8: 92:b3:ec:3e:40:2e:5a:0e:e1:22:34:9a:bd:6b:f3: e2:1d:85:31:d0:65:5c:2a:81:9d:99:69:7b:7e:bd: 16:4c:6e:d4:d8:c1:3b:78:ba:9e:20:db:b1:97:f0: 69:70:31:91:c7:c6:ac:b4:cc:4d:e7:f9:6e:40:e8: 60:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:36:6D:C1:30:92:2C:F9:B6:5F:8D:7B:F1:96:F9:C9:27:61:16:B4 X509v3 Authority Key Identifier: keyid:50:89:E2:DC:81:2D:34:DF:3D:4D:B5:83:55:CF:F1:4B:07:AE:DE:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UIni3IEtNN89TbWDVc_xSweu3rk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:04:3a:4b:be:50:a2:4d:0a:da:de:57:b1:65:38:60:8f:ce: e1:15:8c:fd:24:ad:a2:19:ab:d9:4d:3f:80:1b:d8:27:fc:18: 99:2f:36:c0:1c:bc:12:b0:6e:c1:ce:ba:04:a5:ac:4a:66:7d: 3a:68:44:48:7e:9c:80:66:c9:ec:0d:0f:74:13:75:0f:9c:27: 6c:d5:f6:c2:3a:c6:41:fe:19:be:b4:7b:06:74:43:5a:27:d6: bb:56:bf:fb:d4:84:cc:a3:bc:cc:2e:b2:c6:f6:14:8b:84:b9: ef:d5:90:04:6a:8d:1c:8d:da:24:16:dc:9e:e4:b6:f7:1c:d1: 2d:77:e0:2d:f1:c7:80:e2:a9:7a:05:cb:bd:b8:81:9e:f3:58: b0:b5:58:cc:4e:be:b8:a3:95:55:22:c3:60:b1:5c:fc:ff:38: 61:ef:12:77:1d:53:d4:ac:18:72:e8:84:c4:22:0a:7f:83:20: d1:34:f8:0c:64:54:2f:7f:2b:cc:51:dd:56:6e:af:a2:9b:50: c5:38:44:21:1e:3d:79:6e:4f:35:fc:3f:a5:91:e1:aa:30:c6: 58:6a:32:7d:4a:41:72:f2:75:9a:41:20:bd:0f:64:80:05:58: 0e:29:fc:91:9b:3e:5d:8e:dc:e5:3b:c7:32:30:37:4b:bb:11: ec:8e:24:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM1QzYxMTAvBgNVBAUTKDUwODlFMkRDODEyRDM0REYzRDREQjU4MzU1Q0ZGMTRC MDdBRURFQjkwHhcNMjUwNDI1MDAxODE2WhcNMjUwNTAyMDAxODE2WjAYMRYwFAYD VQQDEw02ODBhZDRjOS0xMjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYauIIaqKhY1C7KgMKzdfoZAxwKwBlJSTV+xZsmbbK6ghNvt+XmiGPW0tk8W 0U+GUOpomZJc0Wqh4T73oK3Atter/285BUGqZ6sKO+RkPf6I4Z4X/uZgjDI2b/OT mTiKmHaZRZsKo5mNHrto3kxi1QfAgAdBWX60GKqAgD8y/idpWtvkROSPr4GLS8zj 2RqEURWNMvk5nFnAHrVbiTiIoWYAS1SV2zGJqevd/pQ1ZUt2mySd7AOamf9Ozn8D wgKQF7iSs+w+QC5aDuEiNJq9a/PiHYUx0GVcKoGdmWl7fr0WTG7U2ME7eLqeINux l/BpcDGRx8astMxN5/luQOhgVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAc2bcEw kiz5tl+Ne/GW+cknYRa0MB8GA1UdIwQYMBaAFFCJ4tyBLTTfPU21g1XP8UsHrt65 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzVDNi83MzYxNzc3Mjc4 NTgxMUVDOTY5OTMyMEVDNEY5QUUwMi9VSW5pM0lFdE5OODlUYldEVmNfeFN3ZXUz cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VJbmkzSUV0Tk44OVRiV0RWY194U3dldTNyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzVDNi83MzYxNzc3Mjc4NTgxMUVDOTY5OTMyMEVDNEY5QUUwMi9VSW5pM0lFdE5O ODlUYldEVmNfeFN3ZXUzcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARBDpLvlCiTQra3lexZThgj87hFYz9JK2iGavZTT+AG9gn/BiZLzbA HLwSsG7BzroEpaxKZn06aERIfpyAZsnsDQ90E3UPnCds1fbCOsZB/hm+tHsGdENa J9a7Vr/71ITMo7zMLrLG9hSLhLnv1ZAEao0cjdokFtye5Lb3HNEtd+At8ceA4ql6 Bcu9uIGe81iwtVjMTr64o5VVIsNgsVz8/zhh7xJ3HVPUrBhy6ITEIgp/gyDRNPgM ZFQvfyvMUd1Wbq+im1DFOEQhHj15bk81/D+lkeGqMMZYajJ9SkFy8nWaQSC9D2SA BVgOKfyRmz5djtzlO8cyMDdLuxHsjiR3 -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:47 2025 by rpki-client