$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft File: UjNwqBpuUUYYrnypeV_dEQs1Djc.mft (raw, json) Hash identifier: 3BR1CdI3+PYf73ffbF40J/jiI7M4GtQj/CNhBQo3e7g= Subject key identifier: C3:26:3F:0E:C9:DF:00:5F:13:76:38:1F:9A:43:5D:CE:5E:BA:4B:EB Authority key identifier: 52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 Certificate issuer: /CN=A91C6CB6/serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Certificate serial: 0C79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft Manifest number: 0C63 Signing time: Thu 24 Apr 2025 18:14:40 +0000 Manifest this update: Thu 24 Apr 2025 18:14:39 +0000 Manifest next update: Thu 01 May 2025 18:14:39 +0000 Files and hashes: 1: UjNwqBpuUUYYrnypeV_dEQs1Djc.crl (hash: 6hQJyBHdxh0Hei0ZGvpZHEDXs20W7coQVY6vOXdTEok=) 2: 04E274DA27CB11EE8FA6F46CC4F9AE02.roa (hash: QC+kAoIXXpY6brDwehpJKK1cCBvEWnBsopkp3/fuZEY=) 3: E683FA78277E11EE9D54C13AC4F9AE02.roa (hash: w0i/ARt9lCVRkjFZbSD4igkj3UoeypjyUlDGFiTsJMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3193 (0xc79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CB6, serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Validity Not Before: Apr 24 18:14:39 2025 GMT Not After : May 1 18:14:39 2025 GMT Subject: CN=680a7f90-a66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6b:3a:3b:48:ac:bd:77:18:f1:99:24:de:28: 2b:48:5f:f6:a6:5f:0c:45:db:8b:e0:55:02:ae:f3: 7a:5e:0a:80:62:08:22:70:b6:fb:3b:09:ea:d9:fb: 2a:73:db:ce:1f:6f:c0:6d:9c:e8:26:8d:c8:bb:d0: f9:34:ed:d1:cd:65:e8:05:b2:fa:28:b2:ef:3a:82: 3a:a6:42:4a:1c:44:7f:c8:9d:3f:21:4a:a8:b8:e0: 66:a7:8d:4e:30:14:7f:c9:b7:06:4c:30:ed:35:17: 77:6e:0a:34:7a:95:07:0b:b8:4a:80:25:3b:6a:56: a5:78:64:28:34:34:83:78:bf:24:13:e7:32:c9:70: 03:aa:7c:17:5a:f4:94:c2:97:c9:1a:4f:04:a8:1d: 08:6e:ff:8a:10:8b:11:3d:19:b1:bf:d2:a0:85:8a: d6:4d:e4:81:75:8b:33:29:e4:1c:eb:cb:73:51:b5: fc:4b:7b:19:4b:8c:3b:b1:1c:b1:22:b8:62:38:fa: c5:16:bb:f4:07:4c:1c:23:6e:0d:29:29:9e:e3:37: 56:ac:60:f4:5f:2b:1b:ba:1e:19:0c:fb:0b:ee:bd: 65:d9:9b:a4:4c:3f:71:f5:19:cf:ab:78:0c:59:12: ec:2e:a4:a0:f5:a9:57:74:56:1a:d1:a0:54:0d:f5: 1a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:26:3F:0E:C9:DF:00:5F:13:76:38:1F:9A:43:5D:CE:5E:BA:4B:EB X509v3 Authority Key Identifier: keyid:52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d0:5c:98:a4:d6:5a:9f:5b:6a:f8:8a:23:21:71:d4:e0:91: 40:bd:f6:88:a8:9a:19:8e:66:f1:cf:8f:df:8c:ed:f2:cf:4f: 0c:4a:af:37:4f:98:4f:ae:9c:32:ee:44:39:64:06:25:25:81: 75:79:a3:c0:8d:95:2d:4f:2c:51:eb:36:65:04:14:8b:c6:37: 9e:96:2f:7c:73:28:2b:88:49:d7:b5:43:97:35:de:d8:1f:2a: 31:ac:73:6c:a3:87:b5:6f:90:45:ca:b5:8b:e6:0f:e8:4b:e9: e7:79:06:db:4d:d6:b2:76:c9:2e:1d:35:7c:b3:c4:68:76:53: 70:67:88:59:12:74:70:09:db:44:e3:c4:85:f5:f2:91:c1:b9: bc:44:29:aa:2b:0a:8d:0d:70:40:f8:3e:7b:32:20:6c:54:59: ce:dc:ea:76:e7:1a:24:d2:7f:92:72:3d:a3:ed:cd:a8:25:c9: 0b:00:e2:e5:03:da:1b:22:54:0a:77:c8:c7:4b:8c:fa:81:fe: 7d:4a:fd:92:df:83:94:cb:1e:7c:b8:72:c3:d7:a8:08:0a:be: e7:ee:0d:fc:43:2e:1c:3f:7b:39:54:f9:d4:9c:29:e3:41:cb: e0:cf:d3:3e:84:55:d0:fb:a0:8c:ed:c7:9e:44:2c:ce:dc:77: 13:7e:59:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQjYxMTAvBgNVBAUTKDUyMzM3MEE4MUE2RTUxNDYxOEFFN0NBOTc5NUZERDEx MEIzNTBFMzcwHhcNMjUwNDI0MTgxNDM5WhcNMjUwNTAxMTgxNDM5WjAYMRYwFAYD VQQDEw02ODBhN2Y5MC1hNjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGs6O0isvXcY8Zkk3igrSF/2pl8MRduL4FUCrvN6XgqAYggicLb7Ownq2fsq c9vOH2/AbZzoJo3Iu9D5NO3RzWXoBbL6KLLvOoI6pkJKHER/yJ0/IUqouOBmp41O MBR/ybcGTDDtNRd3bgo0epUHC7hKgCU7alaleGQoNDSDeL8kE+cyyXADqnwXWvSU wpfJGk8EqB0Ibv+KEIsRPRmxv9KghYrWTeSBdYszKeQc68tzUbX8S3sZS4w7sRyx IrhiOPrFFrv0B0wcI24NKSme4zdWrGD0Xysbuh4ZDPsL7r1l2ZukTD9x9RnPq3gM WRLsLqSg9alXdFYa0aBUDfUatQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMmPw7J 3wBfE3Y4H5pDXc5eukvrMB8GA1UdIwQYMBaAFFIzcKgablFGGK58qXlf3RELNQ43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNCNi8yQTRGNTc1RUZF MTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVVWVlybnlwZVZfZEVRczFE amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VqTndxQnB1VVVZWXJueXBlVl9kRVFzMURqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNCNi8yQTRGNTc1RUZFMTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVV WVlybnlwZVZfZEVRczFEamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd0FyYpNZan1tq+IojIXHU4JFAvfaIqJoZjmbxz4/fjO3yz08MSq83 T5hPrpwy7kQ5ZAYlJYF1eaPAjZUtTyxR6zZlBBSLxjeeli98cygriEnXtUOXNd7Y HyoxrHNso4e1b5BFyrWL5g/oS+nneQbbTdaydskuHTV8s8RodlNwZ4hZEnRwCdtE 48SF9fKRwbm8RCmqKwqNDXBA+D57MiBsVFnO3Op25xok0n+Scj2j7c2oJckLAOLl A9obIlQKd8jHS4z6gf59Sv2S34OUyx58uHLD16gICr7n7g38Qy4cP3s5VPnUnCnj Qcvgz9M+hFXQ+6CM7ceeRCzO3HcTflk+ -----END CERTIFICATE-----Generated at Sat Apr 26 05:05:56 2025 by rpki-client