$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft File: UkWN1qz9QNreWs3IL01ZLaUp58c.mft (raw, json) Hash identifier: ZF15fY7KILLBjou/N/q871bRN6RFdijVra9u1YimD7k= Subject key identifier: 36:DE:FE:72:47:8A:EF:13:0A:7A:87:44:39:CA:6C:BC:9D:F7:07:56 Authority key identifier: 52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7 Certificate issuer: /CN=A91DDDA7/serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7 Certificate serial: 08F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft Manifest number: 08F9 Signing time: Thu 24 Apr 2025 20:13:37 +0000 Manifest this update: Thu 24 Apr 2025 20:13:37 +0000 Manifest next update: Thu 01 May 2025 20:13:37 +0000 Files and hashes: 1: UkWN1qz9QNreWs3IL01ZLaUp58c.crl (hash: xxk6r/gFY7SSf8GL80Cl9Fnn5fYnNG9o3gQcpnEO+mc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2297 (0x8f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDA7, serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7 Validity Not Before: Apr 24 20:13:37 2025 GMT Not After : May 1 20:13:37 2025 GMT Subject: CN=680a9b71-8214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:96:7d:ab:7f:9d:93:8d:fd:5a:32:98:be:d7: e3:18:50:fe:9b:cc:f1:9d:77:ec:5d:ca:86:49:db: 4d:63:db:1a:92:09:9d:82:36:49:00:72:42:79:59: 22:9c:5e:a8:18:1a:b7:8c:a3:2e:22:48:a4:55:2e: ad:e9:7c:ff:3f:48:a2:5a:ce:76:76:b8:1a:87:96: 43:5f:6c:38:37:44:66:4f:92:86:f3:69:0e:95:fd: c2:2e:5c:86:e7:ed:2c:51:d3:7e:e3:d4:65:3c:8b: 87:06:89:29:21:06:0b:b4:62:f0:44:96:07:1e:be: 6d:7c:b9:1c:2b:aa:de:ca:28:97:69:69:66:a6:66: a4:ea:e3:1f:14:7b:ca:d4:a8:cc:83:0b:aa:de:fd: 49:82:84:ac:14:47:52:c5:ef:65:d9:58:2a:49:2b: fb:d0:86:5f:bf:74:52:97:7c:bc:2e:51:8b:ae:80: 52:ec:e1:70:f7:92:d9:c9:a9:74:a9:3f:31:aa:e2: f2:d5:06:22:f9:04:96:e4:7c:c0:03:92:4d:28:86: 62:d8:78:42:e3:30:f5:54:c6:05:a3:a5:04:f5:b6: 6b:53:aa:ae:7e:26:6a:e9:67:be:dd:9c:58:cb:09: 48:20:e5:f6:37:0a:7e:df:04:99:8f:c2:67:66:35: da:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DE:FE:72:47:8A:EF:13:0A:7A:87:44:39:CA:6C:BC:9D:F7:07:56 X509v3 Authority Key Identifier: keyid:52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:c7:54:8e:4b:c9:ca:b1:47:86:a4:c8:68:67:8e:f8:f8:ab: 11:9d:38:6c:93:c6:93:5a:fb:55:0e:45:05:14:90:1a:a0:6a: f6:cc:2f:1e:24:96:60:47:cf:fe:59:81:f8:f2:b5:69:f0:3e: b2:e5:65:7f:bd:76:eb:ec:07:ae:29:98:b2:c7:aa:87:32:75: ed:4a:fa:14:cc:dd:12:8b:23:60:40:0d:63:72:ca:34:61:04: b7:90:10:b9:aa:b8:3f:08:ad:a0:cb:45:0a:ee:62:10:04:08: 75:87:90:3c:ab:01:4e:ae:d2:00:db:c3:85:96:36:68:4c:37: 58:86:fc:03:77:65:b8:a2:10:1c:04:a2:0b:05:52:b9:7a:b3: 6f:32:9e:4e:38:3a:51:f8:97:a5:25:b4:e3:ae:9a:f3:4c:88: 3f:dc:d3:04:0a:65:b2:61:cc:a5:e1:1b:de:f2:74:aa:f6:c9: 63:56:de:bd:b0:8e:a4:73:d4:f6:88:cb:95:bf:bf:4e:48:e7: 1b:5b:0b:57:f6:7c:e9:1a:cf:f3:26:6b:7d:83:75:75:cc:39: dc:1b:9a:c2:fc:32:56:f8:79:b1:1b:b8:d0:93:c0:fe:be:5b: b2:ab:0f:d2:1c:80:a4:43:f9:9b:53:ec:38:d8:40:42:b5:35: d2:44:9d:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREQTcxMTAvBgNVBAUTKDUyNDU4REQ2QUNGRDQwREFERTVBQ0RDODJGNEQ1OTJE QTUyOUU3QzcwHhcNMjUwNDI0MjAxMzM3WhcNMjUwNTAxMjAxMzM3WjAYMRYwFAYD VQQDEw02ODBhOWI3MS04MjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6JZ9q3+dk439WjKYvtfjGFD+m8zxnXfsXcqGSdtNY9sakgmdgjZJAHJCeVki nF6oGBq3jKMuIkikVS6t6Xz/P0iiWs52drgah5ZDX2w4N0RmT5KG82kOlf3CLlyG 5+0sUdN+49RlPIuHBokpIQYLtGLwRJYHHr5tfLkcK6reyiiXaWlmpmak6uMfFHvK 1KjMgwuq3v1JgoSsFEdSxe9l2VgqSSv70IZfv3RSl3y8LlGLroBS7OFw95LZyal0 qT8xquLy1QYi+QSW5HzAA5JNKIZi2HhC4zD1VMYFo6UE9bZrU6qufiZq6We+3ZxY ywlIIOX2Nwp+3wSZj8JnZjXa3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbe/nJH iu8TCnqHRDnKbLyd9wdWMB8GA1UdIwQYMBaAFFJFjdas/UDa3lrNyC9NWS2lKefH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERBNy8xQ0JGRTY0NEE1 MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFOcmVXczNJTDAxWkxhVXA1 OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VrV04xcXo5UU5yZVdzM0lMMDFaTGFVcDU4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERBNy8xQ0JGRTY0NEE1MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFO cmVXczNJTDAxWkxhVXA1OGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIx1SOS8nKsUeGpMhoZ474+KsRnThsk8aTWvtVDkUFFJAaoGr2zC8e JJZgR8/+WYH48rVp8D6y5WV/vXbr7AeuKZiyx6qHMnXtSvoUzN0SiyNgQA1jcso0 YQS3kBC5qrg/CK2gy0UK7mIQBAh1h5A8qwFOrtIA28OFljZoTDdYhvwDd2W4ohAc BKILBVK5erNvMp5OODpR+JelJbTjrprzTIg/3NMECmWyYcyl4Rve8nSq9sljVt69 sI6kc9T2iMuVv79OSOcbWwtX9nzpGs/zJmt9g3V1zDncG5rC/DJW+HmxG7jQk8D+ vluyqw/SHICkQ/mbU+w42EBCtTXSRJ0s -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:39 2025 by rpki-client