$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft File: UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft (raw, json) Hash identifier: obSCevRZxWk7772jqdkt4DIFWTb7uub+Gme+3JIQKRY= Subject key identifier: 40:99:ED:34:74:8C:6A:C3:0B:E9:28:D7:9F:E6:8C:88:F8:5C:B2:39 Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F Certificate issuer: /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft Manifest number: 0144 Signing time: Sat 19 Apr 2025 03:33:34 +0000 Manifest this update: Sat 19 Apr 2025 03:33:33 +0000 Manifest next update: Sat 26 Apr 2025 03:33:33 +0000 Files and hashes: 1: UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl (hash: qWG5ddmcZOLMSZa26+Pj4cEbE4Kow0DsehkkTjEZHog=) 2: 160A52A854EF11EFB9156612C4F9AE02.roa (hash: foSc151i9Iw1FdFYIvaUCOjJLGeEf5CPJvtL9xEjyMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F0FA, serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F Validity Not Before: Apr 19 03:33:33 2025 GMT Not After : Apr 26 03:33:33 2025 GMT Subject: CN=6803198e-dff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b9:ea:20:98:d0:60:7f:7b:5d:d7:77:b3:c1: 0f:93:d6:fc:b4:ce:73:90:17:2b:e2:ae:21:6c:ec: 25:60:8d:65:4e:0b:d8:98:a2:36:d9:3d:09:fa:cd: b2:f4:0a:e1:5c:e0:b8:03:98:cb:16:90:09:b8:61: ea:3a:94:ad:00:18:92:e1:ba:61:1f:9a:a7:0f:a4: e0:2e:26:b4:c7:7f:e9:79:ed:33:fc:de:88:d0:e7: b7:35:77:6f:44:69:32:e1:12:d1:d2:b7:06:67:ed: ab:a2:48:5d:84:c2:ef:50:84:a4:47:df:74:39:db: 05:28:9f:7d:a5:9c:bb:b2:90:05:8b:1a:c5:d0:8a: f8:f7:44:3e:a6:2e:11:06:f5:f8:4e:6a:b0:05:e4: 53:a6:8f:5a:64:9e:7c:06:b3:d0:de:c9:7c:96:54: 01:e3:4e:7e:54:f3:04:2d:e6:fc:5c:dd:60:ac:ba: d8:31:1a:11:01:2d:c8:42:05:c4:6a:69:63:8c:50: 10:3f:c2:be:95:1f:27:d6:49:20:20:43:07:69:44: 8d:90:65:09:08:86:46:c7:11:5c:f2:21:34:72:ed: 63:13:b2:bd:4f:d7:d9:2e:78:77:c5:73:89:33:ac: 0a:48:aa:db:cf:5b:8c:77:fb:d3:b1:6d:26:34:3a: 9a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:99:ED:34:74:8C:6A:C3:0B:E9:28:D7:9F:E6:8C:88:F8:5C:B2:39 X509v3 Authority Key Identifier: keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8e:3f:01:d1:93:05:d6:90:44:72:1b:c7:a2:23:a4:1e:d5: ce:d2:54:51:a2:2f:19:e4:b9:ee:60:be:d6:6a:2c:fd:b7:50: 90:a5:e5:33:68:3c:2c:16:d1:45:af:d7:4b:8c:37:b4:a7:d1: a0:a9:ec:0e:5b:42:e0:6e:f9:90:66:a5:f4:0d:b8:19:b5:ef: e9:b0:dd:6a:de:5c:dd:13:e1:39:fb:66:36:b0:1c:df:ae:85: e1:61:73:1f:39:ea:62:1f:6c:ab:75:dc:0a:db:f5:8d:0a:7f: 1d:5d:49:7b:95:44:58:36:07:6d:55:01:6d:34:2a:bc:6b:11: 1a:43:81:80:fd:75:96:36:a2:71:76:19:c2:ff:36:91:67:5e: 46:98:30:fd:00:26:a6:50:ff:72:2f:8c:fc:13:8e:42:64:97: 34:c6:b8:8b:ac:1a:96:48:db:71:f4:f4:93:e0:23:13:0e:9e: 47:be:db:30:75:5d:f9:0d:82:c2:a5:1f:e9:19:8c:b5:f7:67: ac:73:2d:20:a3:5a:59:3e:f7:9d:ec:1b:83:ef:22:ac:62:d0: 44:af:62:95:40:8b:6c:81:29:7e:5e:38:5e:cc:ea:4b:cc:ee: bf:64:a4:eb:e1:07:fd:f3:55:23:44:06:0e:24:cc:e8:3f:3a: b1:eb:24:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YwRkExMTAvBgNVBAUTKDUwQTU4MEYxQkQxMjVGMEFFREM1OTFGRkM4RENEQTlD NjZFMTJDOUYwHhcNMjUwNDE5MDMzMzMzWhcNMjUwNDI2MDMzMzMzWjAYMRYwFAYD VQQDEw02ODAzMTk4ZS1kZmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7rnqIJjQYH97Xdd3s8EPk9b8tM5zkBcr4q4hbOwlYI1lTgvYmKI22T0J+s2y 9ArhXOC4A5jLFpAJuGHqOpStABiS4bphH5qnD6TgLia0x3/pee0z/N6I0Oe3NXdv RGky4RLR0rcGZ+2rokhdhMLvUISkR990OdsFKJ99pZy7spAFixrF0Ir490Q+pi4R BvX4TmqwBeRTpo9aZJ58BrPQ3sl8llQB405+VPMELeb8XN1grLrYMRoRAS3IQgXE amljjFAQP8K+lR8n1kkgIEMHaUSNkGUJCIZGxxFc8iE0cu1jE7K9T9fZLnh3xXOJ M6wKSKrbz1uMd/vTsW0mNDqaGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECZ7TR0 jGrDC+ko15/mjIj4XLI5MB8GA1UdIwQYMBaAFFClgPG9El8K7cWR/8jc2pxm4Syf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjBGQS8yMDZERkM1MDM0 RTcxMUVFQjBDODM2MTZDNEY5QUUwMi9VS1dBOGIwU1h3cnR4WkhfeU56YW5HYmhM SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLV0E4YjBTWHdydHhaSF95TnphbkdiaExKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjBGQS8yMDZERkM1MDM0RTcxMUVFQjBDODM2MTZDNEY5QUUwMi9VS1dBOGIwU1h3 cnR4WkhfeU56YW5HYmhMSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8jj8B0ZMF1pBEchvHoiOkHtXO0lRRoi8Z5LnuYL7Waiz9t1CQpeUz aDwsFtFFr9dLjDe0p9GgqewOW0LgbvmQZqX0DbgZte/psN1q3lzdE+E5+2Y2sBzf roXhYXMfOepiH2yrddwK2/WNCn8dXUl7lURYNgdtVQFtNCq8axEaQ4GA/XWWNqJx dhnC/zaRZ15GmDD9ACamUP9yL4z8E45CZJc0xriLrBqWSNtx9PST4CMTDp5Hvtsw dV35DYLCpR/pGYy192escy0go1pZPved7BuD7yKsYtBEr2KVQItsgSl+XjhezOpL zO6/ZKTr4Qf981UjRAYOJMzoPzqx6yRC -----END CERTIFICATE-----Generated at Sat Apr 19 08:01:10 2025 by rpki-client