$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft File: ujgt6jovW4xMIgXskp9gG-NP538.mft (raw, json) Hash identifier: 0fvH9z8j4s9bPRTIB7vqHSBs5KkXRnApNu6YHVxfagM= Subject key identifier: F0:BC:C8:DF:E9:DA:AA:9A:B6:26:B9:83:D0:50:88:BD:D2:82:C1:C5 Authority key identifier: BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F Certificate issuer: /CN=A91B7B34/serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F Certificate serial: 0C35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft Manifest number: 0C2B Signing time: Thu 24 Apr 2025 18:27:27 +0000 Manifest this update: Thu 24 Apr 2025 18:27:26 +0000 Manifest next update: Thu 01 May 2025 18:27:26 +0000 Files and hashes: 1: ujgt6jovW4xMIgXskp9gG-NP538.crl (hash: pBwy27OSRQtZXmJt1L2vNgEam+xyb0KkRhUR4c+Xt8c=) 2: 52E56FA806C711EA84978821C4F9AE02.roa (hash: pC6YASmlOW3gbC5Njuzzo1yhASqi/WroinaiHpfVYXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3125 (0xc35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B34, serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F Validity Not Before: Apr 24 18:27:26 2025 GMT Not After : May 1 18:27:26 2025 GMT Subject: CN=680a828e-b2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:a9:31:8e:80:57:49:c6:17:8c:38:67:6e: 64:c1:e8:9d:24:1f:ac:ae:23:b5:bf:f0:38:0c:6c: 5b:5f:b9:dd:2c:30:48:4b:d0:91:bd:e6:af:88:6c: c2:cb:6a:df:c6:20:d6:5b:8c:9c:c8:d7:5c:cb:16: f0:49:bf:05:97:bf:11:3b:ab:dd:74:23:30:72:3b: b7:c6:50:27:f2:08:0c:da:b8:1d:d9:b0:2f:33:62: 00:25:09:a9:00:97:6b:b5:d2:fd:5a:84:d0:01:fa: 64:26:e1:89:91:73:f4:44:3c:e9:0b:31:fa:82:3e: b9:98:51:f2:be:f7:6c:3f:58:5a:76:35:30:bd:23: f8:19:05:95:1a:7d:ca:8b:55:49:9b:8d:42:10:9a: 36:9c:f7:a0:39:7e:1f:b3:d1:06:ff:b3:20:56:e3: 56:ca:ae:bf:ba:bd:44:c3:44:9c:d0:27:e0:27:1c: a8:16:03:bd:78:c4:80:a6:fc:09:ef:a1:32:0a:2e: 04:91:06:da:0f:96:95:fe:53:c4:3b:29:67:8b:40: d8:cc:c5:6d:5e:54:30:4c:7a:49:76:b4:f9:d8:8a: d8:38:4b:a2:b5:bf:44:c8:fa:39:63:20:7f:52:c6: 8a:f0:f8:ed:0e:54:bd:18:0a:48:a8:e8:14:bb:ba: 88:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BC:C8:DF:E9:DA:AA:9A:B6:26:B9:83:D0:50:88:BD:D2:82:C1:C5 X509v3 Authority Key Identifier: keyid:BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:5a:b2:f6:0f:7d:5b:7f:49:80:97:3c:12:e2:62:a1:21:c7: e7:a2:49:ba:3e:c7:84:15:b5:f3:47:f7:14:f1:e6:4c:5c:63: 6d:91:9d:46:31:c3:dd:31:2f:db:dd:b6:7d:bc:3b:1d:c0:22: 8d:2e:89:7a:b3:6d:49:1a:15:df:fa:26:e9:75:c8:03:5e:45: 5e:df:35:d4:6d:75:fb:48:1d:1e:0a:34:99:2a:99:a2:1c:7d: 21:44:2b:35:a7:27:55:11:df:cc:26:87:bb:3b:69:06:ed:0f: 4f:ce:ea:b2:62:b5:19:55:a2:56:46:d5:11:e4:93:84:e7:da: 09:87:15:1d:a9:93:7a:35:be:29:6d:65:75:ec:3b:05:3c:87: 6c:a9:93:ba:91:f5:ef:2d:cd:45:bf:63:29:81:0c:6f:90:fe: 02:4f:bc:91:10:0e:a9:e1:0e:40:08:ee:72:4f:62:5e:e1:5c: b1:e1:48:bf:38:b7:47:82:e9:9f:b8:5a:c7:79:99:8b:ea:be: 5d:0c:23:eb:dc:00:66:2a:06:24:2c:eb:74:4f:d2:66:de:af: 4b:29:9a:a0:68:40:2c:9d:62:d7:9f:78:04:20:12:c4:76:13: ba:1e:9f:37:2c:14:4b:27:27:86:58:4d:53:7c:95:97:97:84: c0:a6:dc:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMzQxMTAvBgNVBAUTKEJBMzgyREVBM0EyRjVCOEM0QzIyMDVFQzkyOUY2MDFC RTM0RkU3N0YwHhcNMjUwNDI0MTgyNzI2WhcNMjUwNTAxMTgyNzI2WjAYMRYwFAYD VQQDEw02ODBhODI4ZS1iMmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8upMY6AV0nGF4w4Z25kweidJB+sriO1v/A4DGxbX7ndLDBIS9CRveaviGzC y2rfxiDWW4ycyNdcyxbwSb8Fl78RO6vddCMwcju3xlAn8ggM2rgd2bAvM2IAJQmp AJdrtdL9WoTQAfpkJuGJkXP0RDzpCzH6gj65mFHyvvdsP1hadjUwvSP4GQWVGn3K i1VJm41CEJo2nPegOX4fs9EG/7MgVuNWyq6/ur1Ew0Sc0CfgJxyoFgO9eMSApvwJ 76EyCi4EkQbaD5aV/lPEOylni0DYzMVtXlQwTHpJdrT52IrYOEuitb9EyPo5YyB/ UsaK8PjtDlS9GApIqOgUu7qIyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPC8yN/p 2qqatia5g9BQiL3SgsHFMB8GA1UdIwQYMBaAFLo4Leo6L1uMTCIF7JKfYBvjT+d/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IzNC9ERUNFM0VCQTA2 QzYxMUVBQTUxQTYwMjFDNEY5QUUwMi91amd0Nmpvdlc0eE1JZ1hza3A5Z0ctTlA1 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VqZ3Q2am92VzR4TUlnWHNrcDlnRy1OUDUzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IzNC9ERUNFM0VCQTA2QzYxMUVBQTUxQTYwMjFDNEY5QUUwMi91amd0Nmpvdlc0 eE1JZ1hza3A5Z0ctTlA1MzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBWrL2D31bf0mAlzwS4mKhIcfnokm6PseEFbXzR/cU8eZMXGNtkZ1G McPdMS/b3bZ9vDsdwCKNLol6s21JGhXf+ibpdcgDXkVe3zXUbXX7SB0eCjSZKpmi HH0hRCs1pydVEd/MJoe7O2kG7Q9PzuqyYrUZVaJWRtUR5JOE59oJhxUdqZN6Nb4p bWV17DsFPIdsqZO6kfXvLc1Fv2MpgQxvkP4CT7yREA6p4Q5ACO5yT2Je4Vyx4Ui/ OLdHgumfuFrHeZmL6r5dDCPr3ABmKgYkLOt0T9Jm3q9LKZqgaEAsnWLXn3gEIBLE dhO6Hp83LBRLJyeGWE1TfJWXl4TAptx7 -----END CERTIFICATE-----Generated at Sat Apr 26 03:45:28 2025 by rpki-client