$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft File: UgGonTDEgplFBBjJVrh3JJcG6Vc.mft (raw, json) Hash identifier: 9iWfTu5oPuUaqyslR0cNM34wV+t20xV8RYzlfrm+H2E= Subject key identifier: 8F:5D:B0:1B:45:B4:F8:95:24:04:62:9A:F5:CF:E3:33:DA:87:1A:22 Authority key identifier: 52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57 Certificate issuer: /CN=A91E7E94/serialNumber=5201A89D30C48299450418C956B877249706E957 Certificate serial: 051F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft Manifest number: 051B Signing time: Thu 24 Apr 2025 23:20:41 +0000 Manifest this update: Thu 24 Apr 2025 23:20:41 +0000 Manifest next update: Thu 01 May 2025 23:20:41 +0000 Files and hashes: 1: UgGonTDEgplFBBjJVrh3JJcG6Vc.crl (hash: G1qGzstyNILAl9a+5D9eMLRk6KQykABHazvMwBVv16Y=) 2: FAF4A0E0FB3211EB967B1759C4F9AE02.roa (hash: 8p1P4mNUhhk/yC7+ElhDZdRf1VN2ly1Yqll2ITw0L78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1311 (0x51f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E94, serialNumber=5201A89D30C48299450418C956B877249706E957 Validity Not Before: Apr 24 23:20:41 2025 GMT Not After : May 1 23:20:41 2025 GMT Subject: CN=680ac749-db0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ab:a6:e5:bd:9b:82:db:74:5e:ee:d0:87:5b: 79:bc:ba:84:61:2f:48:dd:c4:e7:9c:dc:7d:16:3a: 59:ea:62:76:cd:f6:3e:92:a9:6d:62:64:fe:0f:d6: 3d:32:b2:f2:d8:4c:63:a6:06:3b:02:1b:5b:e6:92: e6:44:e8:e9:86:c5:85:a2:6f:59:7c:a4:ff:0e:dd: 0c:2e:0d:d9:58:76:cd:87:a4:2a:51:c6:c2:6c:bb: 2e:99:f9:bb:02:8d:2d:c4:f3:41:36:8e:e4:32:fa: 1b:ae:03:ff:32:50:5c:91:e9:ac:d6:b9:f7:65:1a: 0b:c2:f8:c8:dc:bb:79:b8:50:ad:2b:c7:9d:05:e7: 1e:c3:ee:67:e2:e2:07:31:a5:75:57:a4:8e:0e:61: 83:3e:4b:58:3f:f6:74:84:f1:d8:e9:9d:cc:77:32: ef:8d:3a:f0:b7:78:4b:06:25:2f:2c:21:75:f1:4f: 18:26:4c:70:32:e3:16:0c:23:23:a7:ed:e1:7b:71: 92:f6:10:3c:4f:a6:09:d9:7a:82:44:9f:91:cb:ec: 14:89:2b:f7:4f:a6:2f:17:30:00:ed:62:3b:b1:b1: 13:94:6b:37:19:81:d1:19:4c:fb:03:1e:c5:20:0d: ee:c4:d1:75:49:23:90:06:94:3a:fa:2c:55:6d:04: 89:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5D:B0:1B:45:B4:F8:95:24:04:62:9A:F5:CF:E3:33:DA:87:1A:22 X509v3 Authority Key Identifier: keyid:52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:0f:d9:f0:94:aa:70:fe:2a:40:5d:7b:09:10:55:9c:6c:11: 4b:5d:3e:68:23:40:b8:e1:72:ff:25:fd:19:ab:a5:ea:8d:20: 33:c4:e3:6e:53:4d:8f:1e:a4:a7:21:e9:64:34:ee:0d:c8:ab: 2f:66:0b:37:04:2f:c7:05:40:c1:5c:2b:2d:e2:58:78:6b:2f: b4:e2:7b:86:d1:46:dc:73:58:4e:08:7a:c5:a2:02:0d:2b:dd: 5d:d8:1a:8b:71:4e:95:f7:ef:f9:7c:cd:b1:90:16:37:9e:67: c4:88:5c:bf:51:28:09:62:8c:88:7d:21:ee:2f:f4:42:fa:f7: 34:1f:1b:93:4d:4e:cf:f8:0f:1d:6e:4d:09:bb:17:fe:86:04: 52:d1:78:69:7e:78:47:8b:95:fb:cb:a7:cf:74:75:00:d2:46: 32:c9:de:48:70:2a:26:89:96:bb:5f:7d:07:3a:51:61:1d:90: 7b:d5:49:a8:6e:1a:dd:33:c5:0c:aa:c0:26:e9:80:aa:98:89: bb:40:ef:a9:a6:c7:7f:a2:43:2a:a3:f2:88:bf:5d:c3:86:b6: 10:93:34:07:18:4d:e4:8b:a2:11:5d:64:02:2d:b6:86:24:38: a2:47:a5:fe:c8:c2:ac:0c:a9:0e:ef:01:5e:c4:54:14:d9:18: 9d:a1:5d:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFOTQxMTAvBgNVBAUTKDUyMDFBODlEMzBDNDgyOTk0NTA0MThDOTU2Qjg3NzI0 OTcwNkU5NTcwHhcNMjUwNDI0MjMyMDQxWhcNMjUwNTAxMjMyMDQxWjAYMRYwFAYD VQQDEw02ODBhYzc0OS1kYjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKum5b2bgtt0Xu7Qh1t5vLqEYS9I3cTnnNx9FjpZ6mJ2zfY+kqltYmT+D9Y9 MrLy2ExjpgY7Ahtb5pLmROjphsWFom9ZfKT/Dt0MLg3ZWHbNh6QqUcbCbLsumfm7 Ao0txPNBNo7kMvobrgP/MlBckems1rn3ZRoLwvjI3Lt5uFCtK8edBecew+5n4uIH MaV1V6SODmGDPktYP/Z0hPHY6Z3MdzLvjTrwt3hLBiUvLCF18U8YJkxwMuMWDCMj p+3he3GS9hA8T6YJ2XqCRJ+Ry+wUiSv3T6YvFzAA7WI7sbETlGs3GYHRGUz7Ax7F IA3uxNF1SSOQBpQ6+ixVbQSJdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9dsBtF tPiVJARimvXP4zPahxoiMB8GA1UdIwQYMBaAFFIBqJ0wxIKZRQQYyVa4dySXBulX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U5NC9BMkE3MEM1QUZC MkYxMUVCQTg0MDlFNTRDNEY5QUUwMi9VZ0dvblRERWdwbEZCQmpKVnJoM0pKY0c2 VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VnR29uVERFZ3BsRkJCakpWcmgzSkpjRzZWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0U5NC9BMkE3MEM1QUZCMkYxMUVCQTg0MDlFNTRDNEY5QUUwMi9VZ0dvblRERWdw bEZCQmpKVnJoM0pKY0c2VmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUD9nwlKpw/ipAXXsJEFWcbBFLXT5oI0C44XL/Jf0Zq6XqjSAzxONu U02PHqSnIelkNO4NyKsvZgs3BC/HBUDBXCst4lh4ay+04nuG0Ubcc1hOCHrFogIN K91d2BqLcU6V9+/5fM2xkBY3nmfEiFy/USgJYoyIfSHuL/RC+vc0HxuTTU7P+A8d bk0Juxf+hgRS0XhpfnhHi5X7y6fPdHUA0kYyyd5IcComiZa7X30HOlFhHZB71Umo bhrdM8UMqsAm6YCqmIm7QO+ppsd/okMqo/KIv13DhrYQkzQHGE3ki6IRXWQCLbaG JDiiR6X+yMKsDKkO7wFexFQU2RidoV1a -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:51 2025 by rpki-client