$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft File: ukny4CpjXdB19WQWbxEfX63lp8s.mft (raw, json) Hash identifier: YkALup8cnwWyTTBD1PykftTNDWu2p2RN2+QSez94NC4= Subject key identifier: 9D:CF:9B:C7:2D:98:D5:C9:05:B2:61:DB:EC:17:DE:17:8E:93:72:DD Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB Certificate issuer: /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB Certificate serial: 065E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft Manifest number: 064D Signing time: Fri 28 Mar 2025 22:47:17 +0000 Manifest this update: Fri 28 Mar 2025 22:47:16 +0000 Manifest next update: Fri 04 Apr 2025 22:47:16 +0000 Files and hashes: 1: ukny4CpjXdB19WQWbxEfX63lp8s.crl (hash: QYLwtPDjKQojDAV69v2ccCpBoFsV7+4+3QkX/+P1XwE=) 2: D1B6FD008D6D11EB9DB49A32C4F9AE02.roa (hash: vO8BJ986/mLBngVCPGye7C9+jhQy/7A58iRckkgaf5o=) 3: D24316B48D6D11EB9DB49A32C4F9AE02.roa (hash: ydw76epyjXbZhwBlfsXtLnXh1HYx108LFVcke+cDAAQ=) 4: D2CFD4468D6D11EB9DB49A32C4F9AE02.roa (hash: Q6tSeAB9SXDJytuvhS/k9VLqC1gwcOY00UC/xNHWsMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1630 (0x65e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B Validity Not Before: Mar 28 22:47:16 2025 GMT Not After : Apr 4 22:47:16 2025 GMT Subject: CN=67e726f4-8bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:75:71:6f:f3:0a:ac:15:ad:60:89:fd:1e: 9e:60:03:61:67:21:da:b7:64:c7:35:3e:33:43:47: 0f:a3:a1:fc:c0:b5:54:e2:cf:54:7e:76:3a:51:ef: 99:93:28:6c:ff:76:c1:ea:7d:20:32:b4:8d:07:25: 2e:f7:a0:49:08:16:fd:79:4b:08:7c:71:32:fc:e3: 95:85:77:b3:f5:9a:ce:54:86:a7:b5:67:69:98:f2: a7:51:77:0d:40:ac:6a:2d:b2:f7:72:cf:0a:6a:18: 0e:0f:d5:06:10:5d:0b:91:b9:91:c0:bf:fb:e3:f4: 85:de:1b:96:4b:93:8b:97:62:a1:b0:ee:b0:b4:74: 76:e7:f1:a0:7a:1e:87:02:b2:66:a0:0b:f9:87:37: 38:d5:1a:f5:11:dc:32:5d:97:08:34:b1:28:e0:0b: 14:1b:e1:be:6d:d4:3f:90:73:a0:f0:e8:df:73:1e: 4a:6d:08:4f:21:48:4c:63:39:23:73:97:32:60:9b: 09:26:23:3f:05:84:55:1e:18:5d:d5:52:7e:9d:10: f9:70:b2:52:b2:5d:60:61:27:fb:c8:61:a7:21:73: 85:8a:e4:5e:5c:fa:3b:50:e1:f5:9d:1b:b1:5b:54: c6:a2:a6:65:99:80:32:de:b3:f1:86:83:77:a7:12: 4c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CF:9B:C7:2D:98:D5:C9:05:B2:61:DB:EC:17:DE:17:8E:93:72:DD X509v3 Authority Key Identifier: keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:08:24:59:24:78:37:4a:fa:9b:74:06:81:b5:49:02:b6:cb: be:36:66:cf:83:36:8d:f1:4b:8a:cc:2f:6e:1d:84:8d:ed:ac: f0:25:df:67:62:74:af:d4:96:9d:c1:25:2c:4d:4b:8e:e6:0f: fb:1b:2e:4d:fe:94:15:6f:d9:cb:03:0b:4c:13:92:5f:12:96: 6e:10:8b:65:21:79:dc:60:3d:1d:62:d7:fa:ec:99:f7:4b:72: 1a:a1:41:ee:38:30:36:db:01:cf:9b:ef:08:32:9f:d3:ef:c8: aa:e4:e1:ab:3e:a5:c2:c3:ac:c6:e4:c2:b9:1b:ee:10:42:d6: 79:69:4f:5b:a0:2a:4e:6a:21:c5:ca:e2:ea:61:ba:e9:c7:ad: 19:f3:44:ca:82:35:e9:be:72:8b:1b:a8:0f:f3:c4:8e:5f:a6: 83:8f:56:20:ed:94:4a:4f:6d:b4:78:a7:9e:4f:ef:2b:23:c8: ad:14:9d:d0:9c:20:b5:04:ea:e9:7f:97:aa:95:2b:2e:2f:ba: 39:de:1a:2c:d9:4d:e7:a4:37:3b:bb:f8:f7:52:0e:73:34:bf: dd:82:00:bf:6a:bd:94:18:7c:4a:57:3d:0e:52:31:5e:6e:18: 84:47:97:64:fc:8f:2c:c4:a4:5c:1d:42:0e:53:9e:ee:37:ab: be:14:80:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEJBNDlGMkUwMkE2MzVERDA3NUY1NjQxNjZGMTExRjVG QURFNUE3Q0IwHhcNMjUwMzI4MjI0NzE2WhcNMjUwNDA0MjI0NzE2WjAYMRYwFAYD VQQDEw02N2U3MjZmNC04YmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvx1cW/zCqwVrWCJ/R6eYANhZyHat2THNT4zQ0cPo6H8wLVU4s9UfnY6Ue+Z kyhs/3bB6n0gMrSNByUu96BJCBb9eUsIfHEy/OOVhXez9ZrOVIantWdpmPKnUXcN QKxqLbL3cs8KahgOD9UGEF0LkbmRwL/74/SF3huWS5OLl2KhsO6wtHR25/Ggeh6H ArJmoAv5hzc41Rr1EdwyXZcINLEo4AsUG+G+bdQ/kHOg8Ojfcx5KbQhPIUhMYzkj c5cyYJsJJiM/BYRVHhhd1VJ+nRD5cLJSsl1gYSf7yGGnIXOFiuReXPo7UOH1nRux W1TGoqZlmYAy3rPxhoN3pxJMrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3Pm8ct mNXJBbJh2+wX3heOk3LdMB8GA1UdIwQYMBaAFLpJ8uAqY13QdfVkFm8RH1+t5afL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi9GMzZCNzlCMDgw NzcxMUVCQjkyNUYxNTRDNEY5QUUwMi91a255NENwalhkQjE5V1FXYnhFZlg2M2xw OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vrbnk0Q3BqWGRCMTlXUVdieEVmWDYzbHA4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTg4Qi9GMzZCNzlCMDgwNzcxMUVCQjkyNUYxNTRDNEY5QUUwMi91a255NENwalhk QjE5V1FXYnhFZlg2M2xwOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJCCRZJHg3SvqbdAaBtUkCtsu+NmbPgzaN8UuKzC9uHYSN7azwJd9n YnSv1JadwSUsTUuO5g/7Gy5N/pQVb9nLAwtME5JfEpZuEItlIXncYD0dYtf67Jn3 S3IaoUHuODA22wHPm+8IMp/T78iq5OGrPqXCw6zG5MK5G+4QQtZ5aU9boCpOaiHF yuLqYbrpx60Z80TKgjXpvnKLG6gP88SOX6aDj1Yg7ZRKT220eKeeT+8rI8itFJ3Q nCC1BOrpf5eqlSsuL7o53hos2U3npDc7u/j3Ug5zNL/dggC/ar2UGHxKVz0OUjFe bhiER5dk/I8sxKRcHUIOU57uN6u+FICM -----END CERTIFICATE-----Generated at Fri Apr 4 22:26:59 2025 by rpki-client