$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.mft File: UEMacUvIutzoUZ5LmRR-FR7fd5c.mft (raw, json) Hash identifier: +pzC353w/M7Y4JWJ2hEgGtEd5H3cao2p7U3j5dD09Dk= Subject key identifier: 75:93:63:9C:63:B3:07:E2:17:72:7C:23:DB:C0:E6:EA:82:C9:64:6F Authority key identifier: 50:43:1A:71:4B:C8:BA:DC:E8:51:9E:4B:99:14:7E:15:1E:DF:77:97 Certificate issuer: /CN=A91DA289/serialNumber=50431A714BC8BADCE8519E4B99147E151EDF7797 Certificate serial: 0617 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UEMacUvIutzoUZ5LmRR-FR7fd5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.mft Manifest number: 0611 Signing time: Thu 24 Apr 2025 22:37:26 +0000 Manifest this update: Thu 24 Apr 2025 22:37:25 +0000 Manifest next update: Thu 01 May 2025 22:37:25 +0000 Files and hashes: 1: UEMacUvIutzoUZ5LmRR-FR7fd5c.crl (hash: A1U8SncLVce/bS4V952QHpc7TDqo/9Mvw9K1E13e0UA=) 2: 0BE0F63C9CBB11EBA4731E19C4F9AE02.roa (hash: ln0lvafoMsf2mDlhqtsb54uvMwde1qgk9VtDAAnL3YY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.crl rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UEMacUvIutzoUZ5LmRR-FR7fd5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1559 (0x617) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA289, serialNumber=50431A714BC8BADCE8519E4B99147E151EDF7797 Validity Not Before: Apr 24 22:37:25 2025 GMT Not After : May 1 22:37:25 2025 GMT Subject: CN=680abd26-9429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a9:ad:ce:ee:91:12:9c:b0:0b:41:de:6f:21: c5:93:cd:85:fc:03:cb:f7:a4:4b:de:37:c7:a1:3b: da:3d:23:4d:d4:cb:03:13:1d:55:d5:63:f4:07:a6: e2:b9:b0:f4:e6:9f:53:09:10:a6:4f:7e:a4:06:d3: a8:81:da:29:2f:59:e9:46:b5:de:f9:55:37:bb:7d: 12:b0:9a:8a:2d:7f:e6:1b:f5:30:0c:89:8f:75:3c: 95:8e:f2:b7:19:98:19:9e:3c:5b:6c:f8:62:71:cf: e5:53:9a:22:ef:af:77:43:bf:c0:50:55:e0:9c:e4: c8:07:77:35:1f:2b:74:55:42:d2:ab:30:91:1d:59: 46:09:8e:4c:bb:7c:31:df:02:0b:26:d8:b8:b9:f3: ea:30:9d:4e:51:6b:0f:65:f5:a1:93:50:aa:6f:64: 1a:36:ad:16:1c:db:d6:2a:94:36:b6:10:19:10:c3: 7f:6f:dd:2d:89:cc:84:9c:ee:15:d5:34:91:62:89: a5:b2:f8:7a:32:2b:4e:cb:54:57:7b:e3:c1:14:87: 49:1f:37:a1:2f:58:a0:72:6e:6c:f1:5f:a6:c6:46: 57:05:fd:e5:4a:64:cc:f6:e3:dd:d5:eb:5c:3c:47: df:17:34:e2:25:48:33:0d:43:35:25:06:e8:77:46: c5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:93:63:9C:63:B3:07:E2:17:72:7C:23:DB:C0:E6:EA:82:C9:64:6F X509v3 Authority Key Identifier: keyid:50:43:1A:71:4B:C8:BA:DC:E8:51:9E:4B:99:14:7E:15:1E:DF:77:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UEMacUvIutzoUZ5LmRR-FR7fd5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:91:2d:01:01:35:d1:02:9f:b5:f0:75:86:d0:c8:05:22:72: 34:03:46:24:c0:f8:0f:34:05:b2:0e:21:e6:e3:e8:60:1f:af: 5e:6d:f6:2c:c0:ec:77:3f:94:2f:33:ea:b5:35:8e:67:b6:e9: 63:20:b4:f4:b9:8f:d3:d7:a9:0d:3a:57:01:96:79:cc:4c:5a: 2f:60:01:01:3a:54:8e:7c:68:b9:52:17:73:a8:c5:a2:3b:a1: ff:97:6e:88:77:91:c0:67:c0:c4:59:da:60:2b:2b:08:85:86: 12:ea:21:de:7d:44:04:c8:c3:0c:76:ed:3c:7c:d7:25:c5:39: 6b:9c:16:4d:bf:de:73:04:d5:eb:5c:e7:c9:25:00:db:3c:3d: c8:07:c1:97:db:5a:cc:e3:59:3d:94:ba:bc:9f:1c:3d:0c:2c: a9:64:37:81:1d:59:98:a6:7f:45:90:8c:40:e3:e9:67:7b:65: a7:bb:2b:a9:e8:2d:86:db:c8:7f:6d:d1:4b:04:ac:01:ee:bd: 70:4b:92:c4:47:7a:86:3a:b3:3e:71:79:23:94:25:a1:00:19: b4:c1:e8:db:3a:1d:49:bd:ab:86:25:90:ae:a0:4c:3b:a5:5c: 49:fc:07:54:96:65:30:d7:c9:be:aa:b2:1a:98:1f:1f:6b:19: 36:f2:c1:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEyODkxMTAvBgNVBAUTKDUwNDMxQTcxNEJDOEJBRENFODUxOUU0Qjk5MTQ3RTE1 MUVERjc3OTcwHhcNMjUwNDI0MjIzNzI1WhcNMjUwNTAxMjIzNzI1WjAYMRYwFAYD VQQDEw02ODBhYmQyNi05NDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvamtzu6REpywC0HebyHFk82F/APL96RL3jfHoTvaPSNN1MsDEx1V1WP0B6bi ubD05p9TCRCmT36kBtOogdopL1npRrXe+VU3u30SsJqKLX/mG/UwDImPdTyVjvK3 GZgZnjxbbPhicc/lU5oi7693Q7/AUFXgnOTIB3c1Hyt0VULSqzCRHVlGCY5Mu3wx 3wILJti4ufPqMJ1OUWsPZfWhk1Cqb2QaNq0WHNvWKpQ2thAZEMN/b90ticyEnO4V 1TSRYomlsvh6MitOy1RXe+PBFIdJHzehL1igcm5s8V+mxkZXBf3lSmTM9uPd1etc PEffFzTiJUgzDUM1JQbod0bFOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWTY5xj swfiF3J8I9vA5uqCyWRvMB8GA1UdIwQYMBaAFFBDGnFLyLrc6FGeS5kUfhUe33eX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTI4OS9FMDFCMDU0NDlD QjgxMUVCQUYxQkEzMTVDNEY5QUUwMi9VRU1hY1V2SXV0em9VWjVMbVJSLUZSN2Zk NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VFTWFjVXZJdXR6b1VaNUxtUlItRlI3ZmQ1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTI4OS9FMDFCMDU0NDlDQjgxMUVCQUYxQkEzMTVDNEY5QUUwMi9VRU1hY1V2SXV0 em9VWjVMbVJSLUZSN2ZkNWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3kS0BATXRAp+18HWG0MgFInI0A0YkwPgPNAWyDiHm4+hgH69ebfYs wOx3P5QvM+q1NY5ntuljILT0uY/T16kNOlcBlnnMTFovYAEBOlSOfGi5UhdzqMWi O6H/l26Id5HAZ8DEWdpgKysIhYYS6iHefUQEyMMMdu08fNclxTlrnBZNv95zBNXr XOfJJQDbPD3IB8GX21rM41k9lLq8nxw9DCypZDeBHVmYpn9FkIxA4+lne2Wnuyup 6C2G28h/bdFLBKwB7r1wS5LER3qGOrM+cXkjlCWhABm0wejbOh1JvauGJZCuoEw7 pVxJ/AdUlmUw18m+qrIamB8faxk28sE+ -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:21 2025 by rpki-client