$ rpki-client -vvf rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft File: UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft (raw, json) Hash identifier: XIoC/g89IfrgWp89wDUfZaweUNsbUDtVwRJA/3XT9+4= Subject key identifier: AB:9D:07:E9:0C:0B:D4:5B:29:31:12:FE:1F:0C:6A:BA:B8:A8:4D:A1 Authority key identifier: 50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30 Certificate issuer: /CN=A913318E/serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft Manifest number: C0 Signing time: Sat 29 Mar 2025 05:17:05 +0000 Manifest this update: Sat 29 Mar 2025 05:17:05 +0000 Manifest next update: Sat 05 Apr 2025 05:17:04 +0000 Files and hashes: 1: UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl (hash: jsyPUOsWdwEAgrCdW8Bcq4RxniGmdjC0X6JXeH+FOiU=) 2: 6EAE50E8EBFA11EEA937307AC4F9AE02.roa (hash: n4jE/JU888DErTDFi7j6yPAf5IRm3HLfX3pJFCp7TIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913318E Validity Not Before: Mar 29 05:17:05 2025 GMT Not After : Apr 5 05:17:04 2025 GMT Subject: CN=67e78251-7748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:d4:f3:d7:81:5c:f3:4e:d8:06:b8:67:60: 84:1a:6e:18:1d:d3:3e:21:fc:d8:c4:e2:a8:5c:c7: 19:03:5d:5b:97:d6:a7:67:22:57:38:fe:03:de:dc: 13:c9:de:13:86:e9:81:2c:9c:ad:cb:87:bb:fa:31: 98:28:e8:f3:d7:3f:dc:ba:fc:df:3b:2c:0a:80:c2: 49:37:c0:db:b6:e6:9c:40:52:26:8b:61:81:27:9b: 1a:f1:db:9f:e7:e3:41:20:de:fb:5c:0f:22:e8:8b: b3:ca:07:0a:5e:60:09:ab:d3:40:a5:d0:a3:03:22: 19:83:0b:41:ca:a3:38:9b:db:c4:5c:cb:67:45:01: 3c:6f:d8:27:fd:3d:0e:05:fb:59:ac:18:a8:73:16: 0a:03:96:60:67:ab:8b:e0:e6:6d:01:8d:fd:72:6b: bc:04:d5:55:77:0d:46:88:ca:43:d8:d2:25:4a:96: aa:9f:52:b8:af:58:10:39:c6:81:0e:7a:fc:89:ba: 28:bb:f5:0f:f5:e3:19:4d:f1:40:c9:6c:12:ff:66: 56:82:79:35:e8:8a:1a:6d:88:cd:33:3f:77:03:0f: d9:0d:94:e5:ba:d7:14:a2:03:64:fb:9c:f0:15:e9: b1:f9:b9:f0:e2:19:7d:9e:55:06:b6:4e:68:21:29: c0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9D:07:E9:0C:0B:D4:5B:29:31:12:FE:1F:0C:6A:BA:B8:A8:4D:A1 X509v3 Authority Key Identifier: keyid:50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:c4:bf:3d:a9:63:e4:6d:5d:72:07:8e:ab:51:54:4b:e5:02: 68:98:0f:e4:68:82:de:e3:67:97:be:cc:72:35:14:4c:75:69: 56:2d:83:83:7a:97:54:e0:29:66:b6:9b:01:f2:08:01:3c:a7: 43:4a:6c:09:e0:52:8f:c9:aa:dc:ff:c7:7f:d8:1b:e6:ae:4e: a9:75:3a:e0:00:a7:c9:d0:d6:8d:ca:ad:f3:c8:7e:f9:2f:80: 90:42:57:ed:36:19:96:9f:19:b9:ed:43:6a:3f:ef:d6:65:5c: 0b:e8:9d:d3:79:61:5d:f6:a6:fa:34:7b:a9:c9:1a:61:0d:bd: 58:86:4e:b9:a1:1d:d8:fa:8c:03:3f:63:c1:05:89:77:3f:57: de:84:a5:84:8b:21:47:87:6a:13:0b:47:69:c3:d0:8f:35:9a: fc:61:3e:86:6f:29:56:d2:75:5d:f3:fd:6f:7a:38:7c:51:53: 47:af:88:72:7e:88:81:ea:9f:57:99:01:a1:f9:f2:bb:62:15: 7b:5a:f0:9b:98:84:af:4b:f4:2b:ec:6b:2e:ec:a7:0c:e7:6a: c5:5d:dd:b7:b3:81:f9:3f:2c:53:ab:3d:2f:23:0d:50:e5:04: 56:9f:14:ba:d7:79:63:bb:ee:90:f3:be:91:34:ef:42:42:b4: 17:52:df:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMxOEUxMTAvBgNVBAUTKDUwMEY5MjAwRUI4NkRDNUZEMDZEQjc4NkMwQ0VBNDUy RDBDRTcyMzAwHhcNMjUwMzI5MDUxNzA1WhcNMjUwNDA1MDUxNzA0WjAYMRYwFAYD VQQDEw02N2U3ODI1MS03NzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrvU89eBXPNO2Aa4Z2CEGm4YHdM+IfzYxOKoXMcZA11bl9anZyJXOP4D3twT yd4ThumBLJyty4e7+jGYKOjz1z/cuvzfOywKgMJJN8DbtuacQFImi2GBJ5sa8duf 5+NBIN77XA8i6IuzygcKXmAJq9NApdCjAyIZgwtByqM4m9vEXMtnRQE8b9gn/T0O BftZrBiocxYKA5ZgZ6uL4OZtAY39cmu8BNVVdw1GiMpD2NIlSpaqn1K4r1gQOcaB Dnr8iboou/UP9eMZTfFAyWwS/2ZWgnk16IoabYjNMz93Aw/ZDZTlutcUogNk+5zw Femx+bnw4hl9nlUGtk5oISnA/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKudB+kM C9RbKTES/h8Marq4qE2hMB8GA1UdIwQYMBaAFFAPkgDrhtxf0G23hsDOpFLQznIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzE4RS82QTkwQUY4NEVC RjkxMUVFOURBNzlCNzdDNEY5QUUwMi9VQS1TQU91RzNGX1FiYmVHd002a1V0RE9j akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VBLVNBT3VHM0ZfUWJiZUd3TTZrVXRET2NqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzE4RS82QTkwQUY4NEVCRjkxMUVFOURBNzlCNzdDNEY5QUUwMi9VQS1TQU91RzNG X1FiYmVHd002a1V0RE9jakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBixL89qWPkbV1yB46rUVRL5QJomA/kaILe42eXvsxyNRRMdWlWLYOD epdU4ClmtpsB8ggBPKdDSmwJ4FKPyarc/8d/2Bvmrk6pdTrgAKfJ0NaNyq3zyH75 L4CQQlftNhmWnxm57UNqP+/WZVwL6J3TeWFd9qb6NHupyRphDb1Yhk65oR3Y+owD P2PBBYl3P1fehKWEiyFHh2oTC0dpw9CPNZr8YT6GbylW0nVd8/1vejh8UVNHr4hy foiB6p9XmQGh+fK7YhV7WvCbmISvS/Qr7Gsu7KcM52rFXd23s4H5PyxTqz0vIw1Q 5QRWnxS613lju+6Q876RNO9CQrQXUt9d -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:12 2025 by rpki-client