$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft File: UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft (raw, json) Hash identifier: i/tBhw+adSwTQzzBgWqNvqSh1pBhfvBruqA4zVDB1Aw= Subject key identifier: 3E:56:50:69:5F:9A:33:C5:C9:AF:C5:A6:B6:50:B7:44:DD:B2:BB:7B Authority key identifier: 50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3 Certificate issuer: /CN=A91E5191/serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3 Certificate serial: 075B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft Manifest number: 0753 Signing time: Wed 02 Apr 2025 21:37:35 +0000 Manifest this update: Wed 02 Apr 2025 21:37:34 +0000 Manifest next update: Wed 09 Apr 2025 21:37:34 +0000 Files and hashes: 1: UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl (hash: s6xCe8ejk6acDLRUbqgf4avOLGkzJSGOfH/WWcVMVXY=) 2: 3E78F3541E2D11EB95754317C4F9AE02.roa (hash: zj2/IQcxrFfQP3sb/0xMN/kSgo/BiJLwAfEBd9gJdG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1883 (0x75b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5191 Validity Not Before: Apr 2 21:37:34 2025 GMT Not After : Apr 9 21:37:34 2025 GMT Subject: CN=67edae1e-b75e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1f:4a:bc:34:0d:6f:05:79:44:31:bd:fb:40: 50:28:62:0f:ec:c5:47:00:e8:2d:87:36:be:e2:c3: 5c:10:5c:93:f5:78:2b:85:7c:98:42:8e:9e:96:3b: 83:f9:81:85:ed:17:a2:97:0d:53:d9:c4:64:cd:44: 51:3c:d9:b9:dd:a0:1f:14:76:7c:7f:20:29:51:ae: 60:73:da:bb:6b:90:f0:fc:e8:0d:01:de:87:67:6a: 4b:fa:6e:f9:f8:2d:02:ee:68:99:8b:11:df:67:99: f5:7f:fb:df:5f:c3:ed:d2:f2:79:c9:17:e8:59:ef: bd:16:70:66:13:b5:08:4b:22:40:c9:0c:db:e7:70: 2c:b6:9c:df:cf:ac:6f:c0:59:ae:cd:0b:4e:8f:f4: 61:a3:dd:52:9f:49:47:24:db:97:24:0c:bc:c1:23: f3:f9:0c:97:db:15:f8:f7:57:05:e3:35:a1:c1:df: 65:15:01:2d:74:cc:e5:c6:53:dc:d5:e6:29:37:f3: 8b:88:fb:d7:d6:e5:1c:76:6f:04:dc:f3:8d:66:a2: 42:bc:17:ff:a7:45:b3:cf:ee:4a:08:0c:c2:60:86: 2f:88:9e:44:74:2d:3a:58:29:fd:4d:bb:82:1b:cf: 52:8c:b7:75:e9:dc:49:c3:d4:b4:11:0b:c8:77:cb: 4c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:56:50:69:5F:9A:33:C5:C9:AF:C5:A6:B6:50:B7:44:DD:B2:BB:7B X509v3 Authority Key Identifier: keyid:50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:46:4f:f9:f4:4f:58:34:9f:e3:99:b7:f8:1c:b2:00:80:16: 29:1c:1d:b5:ba:36:8c:70:4d:18:16:47:22:49:34:31:b4:be: 30:ab:32:43:90:67:11:98:57:3e:aa:9c:15:97:ab:52:6c:4a: 52:bc:d4:eb:37:3c:f8:a2:85:da:ea:ec:38:3b:e5:4d:b4:ef: 02:69:d4:09:e4:bf:ba:51:1c:c0:44:b4:4a:e5:67:e9:2d:b5: 38:92:f6:4d:0a:14:99:76:9a:e0:b3:c4:79:88:e0:60:8f:3a: 30:59:ba:1c:47:c9:aa:eb:c0:b9:9b:29:02:e8:4a:82:09:80: a3:ce:cd:31:67:4b:7f:f2:f0:04:c6:e2:9e:6e:07:ad:0d:33: 3c:ae:5d:e4:bc:72:82:7e:9b:e7:eb:cf:53:c7:08:1c:90:63: d4:96:08:47:ff:50:60:47:57:f1:2a:ac:92:7f:8b:53:4e:d5: e7:19:2d:01:d3:c6:2a:4d:cf:ad:d2:48:6c:18:e8:36:02:d4: 2e:ba:73:0f:2d:41:07:27:2d:da:9e:68:7e:16:57:c9:48:49: 1e:9b:0a:75:e2:cd:22:6f:9d:6f:b4:62:11:14:53:c2:b6:0c: 93:08:24:a5:6b:b0:f1:78:41:b4:8b:90:9c:ad:7d:60:71:4b: 67:7d:5f:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUxOTExMTAvBgNVBAUTKDUwQTcxMTZCQjlGMzY5N0JDNUUzRTIyMkVGMDM1Rjcw MzQyQ0REQTMwHhcNMjUwNDAyMjEzNzM0WhcNMjUwNDA5MjEzNzM0WjAYMRYwFAYD VQQDEw02N2VkYWUxZS1iNzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyR9KvDQNbwV5RDG9+0BQKGIP7MVHAOgthza+4sNcEFyT9XgrhXyYQo6eljuD +YGF7Reilw1T2cRkzURRPNm53aAfFHZ8fyApUa5gc9q7a5Dw/OgNAd6HZ2pL+m75 +C0C7miZixHfZ5n1f/vfX8Pt0vJ5yRfoWe+9FnBmE7UISyJAyQzb53Astpzfz6xv wFmuzQtOj/Rho91Sn0lHJNuXJAy8wSPz+QyX2xX491cF4zWhwd9lFQEtdMzlxlPc 1eYpN/OLiPvX1uUcdm8E3PONZqJCvBf/p0Wzz+5KCAzCYIYviJ5EdC06WCn9TbuC G89SjLd16dxJw9S0EQvId8tMoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5WUGlf mjPFya/FprZQt0Tdsrt7MB8GA1UdIwQYMBaAFFCnEWu582l7xePiIu8DX3A0LN2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTE5MS80OEFBMDcwNjE5 NzIxMUVCODA1RTZCN0ZDNEY5QUUwMi9VS2NSYTduemFYdkY0LUlpN3dOZmNEUXMz YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLY1JhN256YVh2RjQtSWk3d05mY0RRczNhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTE5MS80OEFBMDcwNjE5NzIxMUVCODA1RTZCN0ZDNEY5QUUwMi9VS2NSYTduemFY dkY0LUlpN3dOZmNEUXMzYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYRk/59E9YNJ/jmbf4HLIAgBYpHB21ujaMcE0YFkciSTQxtL4wqzJD kGcRmFc+qpwVl6tSbEpSvNTrNzz4ooXa6uw4O+VNtO8CadQJ5L+6URzARLRK5Wfp LbU4kvZNChSZdprgs8R5iOBgjzowWbocR8mq68C5mykC6EqCCYCjzs0xZ0t/8vAE xuKebgetDTM8rl3kvHKCfpvn689TxwgckGPUlghH/1BgR1fxKqySf4tTTtXnGS0B 08YqTc+t0khsGOg2AtQuunMPLUEHJy3anmh+FlfJSEkemwp14s0ib51vtGIRFFPC tgyTCCSla7DxeEG0i5CcrX1gcUtnfV8N -----END CERTIFICATE-----Generated at Fri Apr 4 21:54:10 2025 by rpki-client