$ rpki-client -vvf rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft File: Co-Ufpyg_6RUeOxip-utknsEGTA.mft (raw, json) Hash identifier: 1hl/aA6/m7FINj0gLhgO7hNMNKl65pQDTqbRGahdbmY= Subject key identifier: 29:8B:81:E8:B3:3C:3E:B6:E9:8A:A5:8D:B6:66:06:44:FB:81:FD:A2 Authority key identifier: 0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30 Certificate issuer: /CN=A91160E4/serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930 Certificate serial: 0482 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft Manifest number: 047A Signing time: Thu 03 Apr 2025 00:06:41 +0000 Manifest this update: Thu 03 Apr 2025 00:06:40 +0000 Manifest next update: Thu 10 Apr 2025 00:06:40 +0000 Files and hashes: 1: Co-Ufpyg_6RUeOxip-utknsEGTA.crl (hash: 8xcAvIOZJqwSJVmrNoVMO1szIKlFZ2N2qHh6dtdTTfg=) 2: 836F1D0AE0FB11EEB861CD40C4F9AE02.roa (hash: G6D+kVCjoKTID4GwOYvgCJyZFvlBrk4t/pbjgO4vN0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1154 (0x482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91160E4 Validity Not Before: Apr 3 00:06:40 2025 GMT Not After : Apr 10 00:06:40 2025 GMT Subject: CN=67edd110-b6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:01:09:ea:74:c4:b9:e7:42:1f:9b:86:d1:6c: a1:4d:0c:5d:49:01:be:7b:84:c1:77:1d:9f:7c:61: a9:8c:bf:6b:ff:79:ea:a0:44:ac:06:65:c7:b3:59: 05:87:a3:55:6d:a8:b1:dc:a1:92:ee:db:50:dc:22: 07:a4:df:cc:b0:d5:39:f6:ad:5f:c1:f2:a7:1f:c1: 21:dc:af:1f:e2:f0:45:9e:a9:b5:30:4e:c9:1a:94: af:e8:d1:86:38:0e:c7:d9:a3:41:d4:32:d8:b1:d8: 53:02:be:03:38:9e:8a:b9:43:ca:83:3e:62:d6:78: ae:01:71:02:b7:dc:73:9f:56:d4:69:7f:88:72:ea: 17:1b:90:bd:00:88:04:ca:ce:41:11:b0:a2:3f:e7: 14:e7:8c:b8:fe:dd:40:00:86:3c:04:5a:42:bd:16: b5:e4:b3:75:5b:15:0e:90:e3:52:60:b8:eb:3e:f1: a7:b2:a5:38:76:56:e7:5e:94:9f:28:62:b6:1e:74: 59:ba:7f:ad:ed:8a:70:77:5f:95:99:5b:ed:3b:43: 73:30:46:7f:8e:41:23:7b:f8:1f:22:71:24:2f:b6: 4c:50:0b:02:c7:15:e6:04:19:cb:8b:b9:eb:15:58: 00:1b:d5:41:5f:8d:ed:6a:90:bf:fb:47:f8:fa:a8: 0a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8B:81:E8:B3:3C:3E:B6:E9:8A:A5:8D:B6:66:06:44:FB:81:FD:A2 X509v3 Authority Key Identifier: keyid:0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a9:4e:af:60:40:81:ad:70:54:35:1d:4f:43:20:59:7d:85: 80:a3:f4:b4:d4:b7:cc:c3:7c:79:65:55:69:d2:cb:87:81:cc: 2d:56:85:5c:8e:39:d8:a8:bf:db:29:28:f0:d8:3a:e0:0d:45: da:9c:f3:1e:38:a2:4f:48:13:fb:f8:74:ef:6f:93:14:8c:28: 73:05:8f:96:4f:47:f0:59:1d:e1:36:07:ee:15:69:75:6b:f7: 1f:94:55:98:a0:96:b3:ea:74:46:f6:53:77:e9:4c:10:2b:82: 48:cf:11:0a:fb:50:37:c9:49:26:d2:df:6c:eb:41:2b:22:64: 48:9e:f8:4a:86:30:a8:91:82:89:61:f8:87:c7:0b:d6:59:fe: e4:f0:d2:c1:34:83:75:49:50:63:87:1c:78:4f:dc:8b:f0:19: 23:7c:e5:6a:6b:92:85:b4:69:5d:67:fc:2d:54:a2:a4:48:0d: 7c:1c:23:aa:b4:32:3d:17:16:39:88:2f:d5:90:36:45:49:71: a6:f3:0d:db:59:5d:9d:c0:32:a8:c5:a2:30:40:40:37:b7:bb: c7:47:db:52:15:63:b8:20:68:f8:95:12:cb:ed:24:60:3b:3e: a2:23:ff:6a:d6:54:2d:72:f0:da:7f:9b:83:80:db:ba:f3:34: 3c:b3:e8:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYwRTQxMTAvBgNVBAUTKDBBOEY5NDdFOUNBMEZGQTQ1NDc4RUM2MkE3RUJBRDky N0IwNDE5MzAwHhcNMjUwNDAzMDAwNjQwWhcNMjUwNDEwMDAwNjQwWjAYMRYwFAYD VQQDEw02N2VkZDExMC1iNmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwEJ6nTEuedCH5uG0WyhTQxdSQG+e4TBdx2ffGGpjL9r/3nqoESsBmXHs1kF h6NVbaix3KGS7ttQ3CIHpN/MsNU59q1fwfKnH8Eh3K8f4vBFnqm1ME7JGpSv6NGG OA7H2aNB1DLYsdhTAr4DOJ6KuUPKgz5i1niuAXECt9xzn1bUaX+IcuoXG5C9AIgE ys5BEbCiP+cU54y4/t1AAIY8BFpCvRa15LN1WxUOkONSYLjrPvGnsqU4dlbnXpSf KGK2HnRZun+t7Ypwd1+VmVvtO0NzMEZ/jkEje/gfInEkL7ZMUAsCxxXmBBnLi7nr FVgAG9VBX43tapC/+0f4+qgKqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmLgeiz PD626YqljbZmBkT7gf2iMB8GA1UdIwQYMBaAFAqPlH6coP+kVHjsYqfrrZJ7BBkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjBFNC82MkQ0OENDRTNC QUQxMUVDOUIzQ0VDMUNDNEY5QUUwMi9Dby1VZnB5Z182UlVlT3hpcC11dGtuc0VH VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NvLVVmcHlnXzZSVWVPeGlwLXV0a25zRUdUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjBFNC82MkQ0OENDRTNCQUQxMUVDOUIzQ0VDMUNDNEY5QUUwMi9Dby1VZnB5Z182 UlVlT3hpcC11dGtuc0VHVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+qU6vYECBrXBUNR1PQyBZfYWAo/S01LfMw3x5ZVVp0suHgcwtVoVc jjnYqL/bKSjw2DrgDUXanPMeOKJPSBP7+HTvb5MUjChzBY+WT0fwWR3hNgfuFWl1 a/cflFWYoJaz6nRG9lN36UwQK4JIzxEK+1A3yUkm0t9s60ErImRInvhKhjCokYKJ YfiHxwvWWf7k8NLBNIN1SVBjhxx4T9yL8BkjfOVqa5KFtGldZ/wtVKKkSA18HCOq tDI9FxY5iC/VkDZFSXGm8w3bWV2dwDKoxaIwQEA3t7vHR9tSFWO4IGj4lRLL7SRg Oz6iI/9q1lQtcvDaf5uDgNu68zQ8s+hj -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:53 2025 by rpki-client