$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft File: UjNwqBpuUUYYrnypeV_dEQs1Djc.mft (raw, json) Hash identifier: B834ibZBidAjV/w4A/x63MA5TsPaS6h0XF3w1CZgsEk= Subject key identifier: D3:A2:B9:84:38:90:F1:35:80:FC:AC:08:64:BE:EE:A3:B3:FB:D1:8B Authority key identifier: 52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 Certificate issuer: /CN=A91C6CB6/serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Certificate serial: 0C70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft Manifest number: 0C5A Signing time: Sun 06 Apr 2025 18:08:51 +0000 Manifest this update: Sun 06 Apr 2025 18:08:51 +0000 Manifest next update: Sun 13 Apr 2025 18:08:51 +0000 Files and hashes: 1: UjNwqBpuUUYYrnypeV_dEQs1Djc.crl (hash: iVd3E36jBe3BK+Iehii8cSOW2toKcfVEyAFNWzvBgQc=) 2: 04E274DA27CB11EE8FA6F46CC4F9AE02.roa (hash: QC+kAoIXXpY6brDwehpJKK1cCBvEWnBsopkp3/fuZEY=) 3: E683FA78277E11EE9D54C13AC4F9AE02.roa (hash: w0i/ARt9lCVRkjFZbSD4igkj3UoeypjyUlDGFiTsJMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 18:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3184 (0xc70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CB6 Validity Not Before: Apr 6 18:08:51 2025 GMT Not After : Apr 13 18:08:51 2025 GMT Subject: CN=67f2c333-b1fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bd:23:17:aa:07:b4:dc:81:31:47:75:a0:c8: b5:8c:96:f7:47:3f:63:d6:19:61:b6:03:5b:80:5d: d0:05:eb:46:df:80:01:25:8f:5e:16:43:c9:3c:af: 54:dd:4f:cd:90:88:6b:8a:7e:e7:c7:11:11:95:62: c5:ac:68:89:54:89:21:61:e8:a3:55:af:34:bf:a3: 0e:73:42:0b:05:18:3d:45:5e:e9:09:97:5f:a0:81: 92:9a:3b:4d:46:69:42:59:42:78:ba:79:a2:8c:3a: e6:9d:fa:54:d1:4b:87:df:ac:a5:42:15:bb:6b:75: 16:62:fe:22:b9:02:c1:21:c0:69:78:7f:de:4c:26: de:4a:4d:ed:7a:a3:16:b5:eb:a5:07:32:cf:14:ab: 5e:74:3a:5c:9b:24:62:43:cb:44:46:0c:f0:6d:77: 53:25:f8:95:9d:3c:f2:15:ff:28:5e:e9:9e:73:4d: 4a:52:35:55:eb:1e:83:be:8f:ad:1d:d7:13:5a:5d: 4f:a1:50:1f:b3:15:da:a7:f8:5b:3d:d7:1e:52:84: b7:71:e6:10:31:30:09:e0:c4:bc:48:2f:1e:ea:74: 63:b8:99:3c:b5:d0:24:76:9e:00:36:86:ae:0e:fc: ec:14:53:c5:0b:9d:14:11:8b:fe:a5:90:5f:1a:b5: b5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A2:B9:84:38:90:F1:35:80:FC:AC:08:64:BE:EE:A3:B3:FB:D1:8B X509v3 Authority Key Identifier: keyid:52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:22:f2:24:9d:73:53:82:d1:d6:31:6f:16:83:c4:d1:a5:a1: e2:3d:87:f7:49:5f:bb:51:ff:10:aa:69:9f:3c:ce:ea:82:bc: d5:93:97:a6:70:ca:78:02:8d:e0:c9:66:00:75:9e:98:70:9d: 50:37:ab:95:3f:62:5e:fb:22:97:75:7b:16:c3:46:2e:12:56: e6:32:17:99:4e:fb:35:19:43:bf:fa:5e:3e:50:65:7f:00:de: fa:c5:7a:54:c3:09:30:98:64:3a:ae:6a:c8:37:09:08:d6:92: 0d:5d:fd:62:fc:e4:6a:b6:95:e4:16:62:99:57:4f:8b:df:af: c1:08:cc:d9:c7:f3:46:4b:4d:39:1a:93:2b:8e:01:db:b0:e4: 86:9a:1c:b0:83:6f:70:cc:1d:95:6f:e7:d2:a8:79:78:1e:d1: 32:c5:1a:0b:93:28:a8:03:9b:20:75:d8:1a:2b:5c:22:54:84: 63:85:fc:17:50:07:89:ad:7f:df:45:be:78:f0:26:1c:ee:c5: 25:5d:ed:77:28:26:66:69:19:db:ac:8c:8b:a8:bc:e7:cc:35: 93:93:ea:83:98:86:0a:07:81:d0:3e:35:1b:f3:eb:52:b9:06: 10:42:fb:d1:38:63:35:8b:e8:f2:f5:72:ad:06:bc:a8:ee:03: d8:09:b3:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQjYxMTAvBgNVBAUTKDUyMzM3MEE4MUE2RTUxNDYxOEFFN0NBOTc5NUZERDEx MEIzNTBFMzcwHhcNMjUwNDA2MTgwODUxWhcNMjUwNDEzMTgwODUxWjAYMRYwFAYD VQQDEw02N2YyYzMzMy1iMWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyr0jF6oHtNyBMUd1oMi1jJb3Rz9j1hlhtgNbgF3QBetG34ABJY9eFkPJPK9U 3U/NkIhrin7nxxERlWLFrGiJVIkhYeijVa80v6MOc0ILBRg9RV7pCZdfoIGSmjtN RmlCWUJ4unmijDrmnfpU0UuH36ylQhW7a3UWYv4iuQLBIcBpeH/eTCbeSk3teqMW teulBzLPFKtedDpcmyRiQ8tERgzwbXdTJfiVnTzyFf8oXumec01KUjVV6x6Dvo+t HdcTWl1PoVAfsxXap/hbPdceUoS3ceYQMTAJ4MS8SC8e6nRjuJk8tdAkdp4ANoau DvzsFFPFC50UEYv+pZBfGrW1IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOiuYQ4 kPE1gPysCGS+7qOz+9GLMB8GA1UdIwQYMBaAFFIzcKgablFGGK58qXlf3RELNQ43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNCNi8yQTRGNTc1RUZF MTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVVWVlybnlwZVZfZEVRczFE amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VqTndxQnB1VVVZWXJueXBlVl9kRVFzMURqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNCNi8yQTRGNTc1RUZFMTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVV WVlybnlwZVZfZEVRczFEamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsIvIknXNTgtHWMW8Wg8TRpaHiPYf3SV+7Uf8QqmmfPM7qgrzVk5em cMp4Ao3gyWYAdZ6YcJ1QN6uVP2Je+yKXdXsWw0YuElbmMheZTvs1GUO/+l4+UGV/ AN76xXpUwwkwmGQ6rmrINwkI1pINXf1i/ORqtpXkFmKZV0+L36/BCMzZx/NGS005 GpMrjgHbsOSGmhywg29wzB2Vb+fSqHl4HtEyxRoLkyioA5sgddgaK1wiVIRjhfwX UAeJrX/fRb548CYc7sUlXe13KCZmaRnbrIyLqLznzDWTk+qDmIYKB4HQPjUb8+tS uQYQQvvROGM1i+jy9XKtBryo7gPYCbMK -----END CERTIFICATE-----Generated at Tue Apr 8 16:14:20 2025 by rpki-client