$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft File: UNqjonFb7c_nFOVthUH381hubvc.mft (raw, json) Hash identifier: LBQFGhfa9+uMLvcxwGzPxUbOLaA/05sGJfvN11cuw74= Subject key identifier: D8:57:2E:87:13:B7:7E:D7:05:E2:E7:EE:F3:32:09:12:AA:66:77:A8 Authority key identifier: 50:DA:A3:A2:71:5B:ED:CF:E7:14:E5:6D:85:41:F7:F3:58:6E:6E:F7 Certificate issuer: /CN=A91CBBC4/serialNumber=50DAA3A2715BEDCFE714E56D8541F7F3586E6EF7 Certificate serial: 04CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNqjonFb7c_nFOVthUH381hubvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft Manifest number: 04C3 Signing time: Thu 24 Apr 2025 23:37:00 +0000 Manifest this update: Thu 24 Apr 2025 23:36:59 +0000 Manifest next update: Thu 01 May 2025 23:36:59 +0000 Files and hashes: 1: UNqjonFb7c_nFOVthUH381hubvc.crl (hash: KDoNnia5xT3LKfGcbr9h66Zpp/B/LQiMKl2tcYPevm0=) 2: 8E8A375A1FA211EC8159E249C4F9AE02.roa (hash: UmJY1BD67VDnKp5rZ226vLsxoH0ZrDVh7W0eseZRq3E=) 3: 2B6A29201FA011ECB867890CC4F9AE02.roa (hash: 4+mLuZV5Nt0cl9Ubgj32YK1pqSi8VCWk8bD6pptyrXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.crl rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNqjonFb7c_nFOVthUH381hubvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1227 (0x4cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBBC4, serialNumber=50DAA3A2715BEDCFE714E56D8541F7F3586E6EF7 Validity Not Before: Apr 24 23:36:59 2025 GMT Not After : May 1 23:36:59 2025 GMT Subject: CN=680acb1c-3949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:26:4e:68:2d:0b:e7:0e:f9:f9:25:d1:c2:7c: 5e:07:ae:59:08:63:1a:d1:d4:9d:2a:a1:1d:20:5c: 39:67:32:7d:3c:4a:c1:98:71:15:d9:32:69:7c:65: 0d:e4:ea:fd:af:2f:53:cf:b2:e3:2c:fe:8c:23:3f: fa:4f:77:ca:5c:eb:32:1b:14:da:ad:4d:ef:38:15: a2:1e:2c:76:a7:cc:aa:c6:ea:4a:d8:20:71:79:d9: 82:a9:b3:66:5a:05:4f:45:13:9f:ed:67:bf:20:41: c1:5b:84:d5:3c:27:a0:f6:9b:7c:94:b3:9a:a1:c5: 9e:68:cd:67:1d:bd:f3:b2:54:07:f1:38:4a:dc:88: c4:0e:37:51:32:91:09:e0:4d:b1:a9:3c:22:e7:e5: df:a3:9f:8d:a2:8e:89:12:7c:a8:a9:60:6b:8f:66: ed:70:a9:81:92:78:ad:71:c6:10:a6:28:9a:df:5c: 5a:32:6f:54:61:9a:7f:d2:03:be:a9:4e:e0:2a:dd: f5:65:5d:ac:35:26:68:f0:9a:e1:af:86:d9:37:cc: a9:07:8d:d1:8e:cc:7a:4b:c4:26:01:d0:b1:dc:3a: 09:19:de:8b:f8:04:9b:34:99:70:65:23:40:d8:45: 82:82:b7:16:2d:da:60:40:11:32:4e:7e:e6:db:67: 77:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:57:2E:87:13:B7:7E:D7:05:E2:E7:EE:F3:32:09:12:AA:66:77:A8 X509v3 Authority Key Identifier: keyid:50:DA:A3:A2:71:5B:ED:CF:E7:14:E5:6D:85:41:F7:F3:58:6E:6E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNqjonFb7c_nFOVthUH381hubvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f7:73:87:cd:1c:5c:25:06:55:52:c1:36:b6:46:2c:ae:27: 24:3c:3f:1d:b4:92:3a:21:c9:23:e9:2f:7f:ef:e0:41:3e:48: 40:e2:96:95:fc:c8:51:b0:3a:e2:12:02:8c:e2:f4:aa:1f:de: 24:57:59:10:a1:90:6b:79:17:ca:4c:5c:67:56:9f:41:91:b1: 42:f1:63:4a:77:4d:38:bf:a5:fa:64:5f:56:21:b0:13:09:0b: 46:28:4d:0f:67:87:ca:41:a1:66:9e:10:a4:0e:22:f2:31:a0: 5d:8e:45:a3:76:b9:89:2f:b3:6a:39:87:ee:d1:b1:f4:3c:4f: f2:e9:92:98:b8:93:aa:46:c8:10:8e:1d:45:a3:00:2c:eb:cd: 51:bc:ff:bc:91:c6:b7:40:99:73:dc:ce:c8:24:a6:47:56:f3: 54:03:8b:b8:a4:24:ce:1b:fd:70:50:1f:33:fc:87:94:2d:19: 43:35:5a:0c:9d:eb:96:67:0d:92:d9:f0:df:f0:15:d5:16:43: 55:44:d4:1b:46:eb:35:c8:06:19:20:6b:1c:48:75:41:4f:f0: 20:6f:20:b3:71:68:9f:8c:05:8e:a5:c8:7c:f8:1c:08:fa:3d: 89:b0:f3:63:16:67:cf:7a:b6:49:2e:66:81:c7:85:28:36:56: 0c:3f:53:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCQzQxMTAvBgNVBAUTKDUwREFBM0EyNzE1QkVEQ0ZFNzE0RTU2RDg1NDFGN0Yz NTg2RTZFRjcwHhcNMjUwNDI0MjMzNjU5WhcNMjUwNTAxMjMzNjU5WjAYMRYwFAYD VQQDEw02ODBhY2IxYy0zOTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSZOaC0L5w75+SXRwnxeB65ZCGMa0dSdKqEdIFw5ZzJ9PErBmHEV2TJpfGUN 5Or9ry9Tz7LjLP6MIz/6T3fKXOsyGxTarU3vOBWiHix2p8yqxupK2CBxedmCqbNm WgVPRROf7We/IEHBW4TVPCeg9pt8lLOaocWeaM1nHb3zslQH8ThK3IjEDjdRMpEJ 4E2xqTwi5+Xfo5+Noo6JEnyoqWBrj2btcKmBknitccYQpiia31xaMm9UYZp/0gO+ qU7gKt31ZV2sNSZo8Jrhr4bZN8ypB43Rjsx6S8QmAdCx3DoJGd6L+ASbNJlwZSNA 2EWCgrcWLdpgQBEyTn7m22d3lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhXLocT t37XBeLn7vMyCRKqZneoMB8GA1UdIwQYMBaAFFDao6JxW+3P5xTlbYVB9/NYbm73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkJDNC8zQzRCMDEzMjFG OUMxMUVDOTA5NEYwNURDNEY5QUUwMi9VTnFqb25GYjdjX25GT1Z0aFVIMzgxaHVi dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VOcWpvbkZiN2NfbkZPVnRoVUgzODFodWJ2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkJDNC8zQzRCMDEzMjFGOUMxMUVDOTA5NEYwNURDNEY5QUUwMi9VTnFqb25GYjdj X25GT1Z0aFVIMzgxaHVidmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN93OHzRxcJQZVUsE2tkYsrickPD8dtJI6Ickj6S9/7+BBPkhA4paV /MhRsDriEgKM4vSqH94kV1kQoZBreRfKTFxnVp9BkbFC8WNKd004v6X6ZF9WIbAT CQtGKE0PZ4fKQaFmnhCkDiLyMaBdjkWjdrmJL7NqOYfu0bH0PE/y6ZKYuJOqRsgQ jh1FowAs681RvP+8kca3QJlz3M7IJKZHVvNUA4u4pCTOG/1wUB8z/IeULRlDNVoM neuWZw2S2fDf8BXVFkNVRNQbRus1yAYZIGscSHVBT/AgbyCzcWifjAWOpch8+BwI +j2JsPNjFmfPerZJLmaBx4UoNlYMP1OL -----END CERTIFICATE-----Generated at Sat Apr 26 12:55:43 2025 by rpki-client