$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft File: UPqOjU4pl_9d5gjaeMrGVMzRabY.mft (raw, json) Hash identifier: J+rPsIbqdbCotKRmEksmLuWLyo8TkdC+kFc48xi31UQ= Subject key identifier: 79:96:65:56:81:54:9E:96:18:24:CD:B9:51:9E:2E:01:C9:AA:8E:06 Authority key identifier: 50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6 Certificate issuer: /CN=A91AEE26/serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6 Certificate serial: 08D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft Manifest number: 08D0 Signing time: Thu 24 Apr 2025 20:19:57 +0000 Manifest this update: Thu 24 Apr 2025 20:19:57 +0000 Manifest next update: Thu 01 May 2025 20:19:57 +0000 Files and hashes: 1: UPqOjU4pl_9d5gjaeMrGVMzRabY.crl (hash: 7wSo6IJNnzkz3KBqcSNtZtUr8I7RjIGQUnxOzTyMoME=) 2: CD095756AF1211EAA486D140C4F9AE02.roa (hash: Z259vozdwtPUaPkxXgMTZo8w1xwG+zonsUhvjUkyWKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2265 (0x8d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE26, serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6 Validity Not Before: Apr 24 20:19:57 2025 GMT Not After : May 1 20:19:57 2025 GMT Subject: CN=680a9ced-7d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c5:40:92:fa:30:69:d9:d6:01:30:bc:06:08: 05:e0:7d:f4:01:89:b9:81:a2:0f:51:61:46:9c:8a: 3c:15:17:5f:eb:f5:a9:c4:46:03:75:b1:d6:02:31: 84:40:17:39:b6:b9:be:5d:3d:20:6e:ad:c0:e3:9e: 78:c3:2d:b7:c4:eb:df:e5:39:3d:81:7e:bf:95:ea: f6:93:e3:20:8b:66:55:50:f1:72:a0:ec:c8:1b:b3: 4e:b9:da:d8:a4:58:77:92:f4:4f:2f:84:52:88:c2: 3d:bb:52:8a:79:75:2b:73:30:a7:dd:69:56:87:0d: 51:13:eb:24:5f:74:75:b0:cc:ee:26:bf:01:47:05: b1:99:ce:b1:58:bd:94:9c:ee:bd:29:93:cb:0e:2e: 7f:98:f5:9f:f2:f1:c8:4b:4a:ce:7f:a7:4a:70:2e: c3:31:e7:56:94:52:17:d0:65:a9:28:20:22:a1:97: 82:d2:5e:51:c2:3f:1c:a3:56:43:3b:64:69:af:78: 1c:a7:cd:88:cc:5d:82:76:b7:c5:c4:2e:96:a2:33: 4c:aa:ca:45:51:9a:83:ea:54:dc:3e:7a:0b:a0:9f: e9:24:7e:5a:98:c9:75:d0:ed:dc:f1:99:da:fc:08: 60:d4:fa:96:44:c6:38:fa:7a:f0:a0:3d:24:33:4f: 65:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:96:65:56:81:54:9E:96:18:24:CD:B9:51:9E:2E:01:C9:AA:8E:06 X509v3 Authority Key Identifier: keyid:50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:b7:10:49:9f:08:ae:f8:3e:c3:35:92:3a:04:0b:89:16:ed: c5:55:d6:b2:96:4e:3b:8c:90:96:4e:c8:5f:d1:79:a3:8c:1d: 77:98:ad:37:97:df:cc:50:86:74:ea:52:c8:d9:08:67:8a:95: 0e:f1:da:f1:02:3a:2a:df:56:7c:eb:41:46:4d:2f:40:5f:2c: ff:6c:06:aa:df:8a:36:34:46:37:06:54:ae:b4:95:37:12:64: 58:bd:23:33:7f:ad:5d:88:59:87:2d:46:a5:b6:89:d6:a8:a1: 09:74:23:60:3e:27:e5:6a:3e:2f:70:b4:0c:4d:66:69:ad:57: 54:31:e2:26:79:bc:ba:0e:b8:5b:f2:8e:c6:96:5c:54:9c:d1: f8:0c:28:06:bb:4d:ea:6d:a7:13:03:65:ce:2a:ae:ce:8c:a8: ac:9f:dc:70:16:c5:0a:06:e5:59:11:81:bc:fa:c8:99:35:a6: 2d:b3:69:fc:66:db:6c:04:69:a1:07:75:0e:12:69:e3:33:0c: 38:83:50:ee:1b:fb:6c:78:7f:f0:97:39:b5:9e:18:e3:26:d1: 28:15:8e:c1:19:fa:c7:d1:41:70:fc:f1:61:18:94:bb:76:0c: 9e:eb:6b:3d:c2:60:80:77:6a:96:a8:b7:6d:09:df:31:de:af: 4d:c4:30:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFMjYxMTAvBgNVBAUTKDUwRkE4RThENEUyOTk3RkY1REU2MDhEQTc4Q0FDNjU0 Q0NEMTY5QjYwHhcNMjUwNDI0MjAxOTU3WhcNMjUwNTAxMjAxOTU3WjAYMRYwFAYD VQQDEw02ODBhOWNlZC03ZDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3sVAkvowadnWATC8BggF4H30AYm5gaIPUWFGnIo8FRdf6/WpxEYDdbHWAjGE QBc5trm+XT0gbq3A4554wy23xOvf5Tk9gX6/ler2k+Mgi2ZVUPFyoOzIG7NOudrY pFh3kvRPL4RSiMI9u1KKeXUrczCn3WlWhw1RE+skX3R1sMzuJr8BRwWxmc6xWL2U nO69KZPLDi5/mPWf8vHIS0rOf6dKcC7DMedWlFIX0GWpKCAioZeC0l5Rwj8co1ZD O2Rpr3gcp82IzF2CdrfFxC6WojNMqspFUZqD6lTcPnoLoJ/pJH5amMl10O3c8Zna /Ahg1PqWRMY4+nrwoD0kM09lswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmWZVaB VJ6WGCTNuVGeLgHJqo4GMB8GA1UdIwQYMBaAFFD6jo1OKZf/XeYI2njKxlTM0Wm2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUUyNi9BN0MxNjEwQ0FG MTAxMUVBQkY2MUQzM0FDNEY5QUUwMi9VUHFPalU0cGxfOWQ1Z2phZU1yR1ZNelJh YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VQcU9qVTRwbF85ZDVnamFlTXJHVk16UmFiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUUyNi9BN0MxNjEwQ0FGMTAxMUVBQkY2MUQzM0FDNEY5QUUwMi9VUHFPalU0cGxf OWQ1Z2phZU1yR1ZNelJhYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgtxBJnwiu+D7DNZI6BAuJFu3FVdaylk47jJCWTshf0XmjjB13mK03 l9/MUIZ06lLI2QhnipUO8drxAjoq31Z860FGTS9AXyz/bAaq34o2NEY3BlSutJU3 EmRYvSMzf61diFmHLUaltonWqKEJdCNgPiflaj4vcLQMTWZprVdUMeImeby6Drhb 8o7GllxUnNH4DCgGu03qbacTA2XOKq7OjKisn9xwFsUKBuVZEYG8+siZNaYts2n8 ZttsBGmhB3UOEmnjMww4g1DuG/tseH/wlzm1nhjjJtEoFY7BGfrH0UFw/PFhGJS7 dgye62s9wmCAd2qWqLdtCd8x3q9NxDCx -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:46 2025 by rpki-client