$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft File: UGGUcQC8szKJ4moL3-zixfueCdI.mft (raw, json) Hash identifier: yyOxsPlVVcP2oBqhBCjtNX9M6/5l0C39xNSgWjNXB/4= Subject key identifier: 4D:3A:1E:04:C3:F2:E5:DB:4D:C6:EB:A5:86:66:5F:D3:69:11:4A:D7 Authority key identifier: 50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2 Certificate issuer: /CN=A912BD8E/serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft Manifest number: 35 Signing time: Sat 19 Apr 2025 06:38:27 +0000 Manifest this update: Sat 19 Apr 2025 06:38:26 +0000 Manifest next update: Sat 26 Apr 2025 06:38:26 +0000 Files and hashes: 1: UGGUcQC8szKJ4moL3-zixfueCdI.crl (hash: 0riWNT9gXSHqFvX9NJ4OKULdYifOzl0oysU+7iGmU9I=) 2: 08C7D93ACE8911EFBEC5D618C4F9AE02.roa (hash: nvtKwWFEZOMd88gDjqvdFcOF+TJpXNSXEguvJEtlOSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 06:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BD8E, serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2 Validity Not Before: Apr 19 06:38:26 2025 GMT Not After : Apr 26 06:38:26 2025 GMT Subject: CN=680344e2-df81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d1:06:cb:4f:77:28:56:57:7f:1d:10:99:25: 0d:94:ad:0c:2b:c2:cb:46:8c:7c:d3:fc:a8:6c:5b: 76:10:ba:07:03:a7:02:f6:23:e2:e2:3f:40:0f:55: 41:4a:c3:e6:a2:e5:9a:55:54:f7:50:5e:fd:87:ad: 1c:7b:0b:90:32:99:e9:6f:25:45:2a:4a:da:d9:4c: ed:b5:47:ca:d1:c8:6c:0e:8f:98:7c:a5:b4:8e:f5: 7b:14:5b:0a:92:3d:88:68:56:13:22:bf:78:18:e8: 46:b1:51:06:49:e9:b6:18:84:13:58:de:20:92:06: 9e:fb:a2:7c:c1:78:ff:64:49:24:fe:19:84:54:91: 9e:ef:a1:5b:c4:e9:3c:6c:db:ec:fe:f1:e9:22:ea: dc:45:58:08:09:2e:c1:21:75:8f:ff:8b:2f:99:b3: c3:ca:8a:6d:df:df:d8:d4:da:b1:9f:53:f0:60:ba: fe:b3:ad:32:70:57:6c:2f:71:46:83:13:c6:91:14: 9b:83:6f:88:7c:51:59:b0:2c:b9:6e:6e:12:22:91: 56:74:92:c2:a9:e2:c8:aa:2e:2d:de:89:a4:e5:9e: be:27:c1:6e:27:6e:9d:8a:ea:b5:a9:cc:92:de:25: 3a:75:cd:61:7d:4f:3b:86:ae:be:54:76:e6:53:6d: db:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3A:1E:04:C3:F2:E5:DB:4D:C6:EB:A5:86:66:5F:D3:69:11:4A:D7 X509v3 Authority Key Identifier: keyid:50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:e9:a1:49:37:f7:6d:b2:01:65:6f:17:10:a0:39:be:3f:82: 6f:38:88:b0:0c:64:b0:ee:7e:75:91:d4:2f:17:f1:01:54:20: ca:e5:86:9c:61:4c:64:50:e1:1e:ee:16:ca:e9:f1:5e:a3:eb: a9:d4:00:51:17:5a:a0:36:b9:32:af:5b:60:24:1a:ab:06:88: f6:3e:ff:1d:c9:44:14:85:67:e7:7d:49:8b:4c:e9:a4:76:2d: 7a:96:fa:0a:35:db:2c:0d:f3:45:6f:06:ea:80:64:db:4a:ec: 58:55:a1:36:03:38:42:a6:9a:24:4b:f6:67:06:41:ed:c5:cc: 0f:23:55:f1:80:15:b9:e7:89:2d:e4:d0:30:86:06:47:8b:62: 67:c7:be:d4:36:af:9d:dc:27:7e:90:1b:70:ed:19:f4:c2:fd: 4e:73:5e:8d:47:5b:e0:63:7c:69:82:ec:ba:32:89:28:9a:4c: d0:93:1f:79:33:4e:3e:80:a3:bc:ea:02:57:60:2f:60:59:d2: 8d:61:52:c0:4a:5c:45:8c:8d:2f:c8:74:58:22:a9:a9:2e:13: 7f:92:bf:61:2f:f3:e4:0b:59:52:7f:9f:5c:8a:e6:18:10:00: 94:28:0d:17:89:13:f6:c9:5c:6f:bc:89:8e:b9:ff:85:a3:84: 50:27:8a:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QkQ4RTExMC8GA1UEBRMoNTA2MTk0NzEwMEJDQjMzMjg5RTI2QTBCREZFQ0UyQzVG QjlFMDlEMjAeFw0yNTA0MTkwNjM4MjZaFw0yNTA0MjYwNjM4MjZaMBgxFjAUBgNV BAMTDTY4MDM0NGUyLWRmODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCj0QbLT3coVld/HRCZJQ2UrQwrwstGjHzT/KhsW3YQugcDpwL2I+LiP0APVUFK w+ai5ZpVVPdQXv2HrRx7C5AymelvJUUqStrZTO21R8rRyGwOj5h8pbSO9XsUWwqS PYhoVhMiv3gY6EaxUQZJ6bYYhBNY3iCSBp77onzBeP9kSST+GYRUkZ7voVvE6Txs 2+z+8eki6txFWAgJLsEhdY//iy+Zs8PKim3f39jU2rGfU/Bguv6zrTJwV2wvcUaD E8aRFJuDb4h8UVmwLLlubhIikVZ0ksKp4siqLi3eiaTlnr4nwW4nbp2K6rWpzJLe JTp1zWF9TzuGrr5UduZTbdt7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTToeBMPy 5dtNxuulhmZf02kRStcwHwYDVR0jBBgwFoAUUGGUcQC8szKJ4moL3+zixfueCdIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCRDhFLzNBRjU3RkRBQ0U4 ODExRUY4N0MwNzExN0M0RjlBRTAyL1VHR1VjUUM4c3pLSjRtb0wzLXppeGZ1ZUNk SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVUdHVWNRQzhzektKNG1vTDMteml4ZnVlQ2RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC RDhFLzNBRjU3RkRBQ0U4ODExRUY4N0MwNzExN0M0RjlBRTAyL1VHR1VjUUM4c3pL SjRtb0wzLXppeGZ1ZUNkSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKfpoUk3922yAWVvFxCgOb4/gm84iLAMZLDufnWR1C8X8QFUIMrlhpxh TGRQ4R7uFsrp8V6j66nUAFEXWqA2uTKvW2AkGqsGiPY+/x3JRBSFZ+d9SYtM6aR2 LXqW+go12ywN80VvBuqAZNtK7FhVoTYDOEKmmiRL9mcGQe3FzA8jVfGAFbnniS3k 0DCGBkeLYmfHvtQ2r53cJ36QG3DtGfTC/U5zXo1HW+BjfGmC7LoyiSiaTNCTH3kz Tj6Ao7zqAldgL2BZ0o1hUsBKXEWMjS/IdFgiqakuE3+Sv2Ev8+QLWVJ/n1yK5hgQ AJQoDReJE/bJXG+8iY65/4WjhFAnihk= -----END CERTIFICATE-----Generated at Sun Apr 20 20:09:49 2025 by rpki-client