$ rpki-client -vvf rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft File: Co-Ufpyg_6RUeOxip-utknsEGTA.mft (raw, json) Hash identifier: RSjoDkPiRBx8m71N5aoolftqmZkq2vkeOkci0MrolLo= Subject key identifier: B8:71:17:31:40:B3:A2:E2:A4:C1:CA:F1:AE:36:81:CC:05:DA:81:44 Authority key identifier: 0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30 Certificate issuer: /CN=A91160E4/serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930 Certificate serial: 04A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft Manifest number: 0498 Signing time: Sat 31 May 2025 00:12:58 +0000 Manifest this update: Sat 31 May 2025 00:12:58 +0000 Manifest next update: Sat 07 Jun 2025 00:12:58 +0000 Files and hashes: 1: Co-Ufpyg_6RUeOxip-utknsEGTA.crl (hash: 7rGUKAFr9fQSyn0JAnQAI6JI7lEhs5p9VOdbQx3WPeU=) 2: 836F1D0AE0FB11EEB861CD40C4F9AE02.roa (hash: TZrK0Feld/Y4/iPkyFu+uGFDuJj1OCyyDAt+MgPwxHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1185 (0x4a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91160E4, serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930 Validity Not Before: May 31 00:12:58 2025 GMT Not After : Jun 7 00:12:58 2025 GMT Subject: CN=683a498a-52d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:72:fb:50:de:a8:49:b9:0e:5e:48:2c:b2:15: 91:d3:0a:69:f5:b4:45:cc:6e:22:f2:a9:ef:0d:75: 9e:86:63:85:33:95:47:de:c5:6d:da:e1:ce:08:59: 00:0b:04:be:2f:e4:fc:83:ed:09:3e:17:00:39:ae: c2:b4:2d:94:33:d4:03:a6:6c:d0:0e:f0:4f:ff:26: 8a:01:d8:59:85:21:b7:64:fc:5b:71:d8:02:c0:6f: f2:6a:cc:43:f0:1c:38:b8:fc:45:68:16:58:15:74: f5:04:64:69:fa:8a:4b:f4:b0:3f:da:55:2d:92:79: eb:3c:9d:a1:26:f8:e5:3b:52:06:45:12:3a:29:12: 67:da:05:7a:9a:6c:ca:a6:11:31:75:ee:4a:16:fd: 6c:5d:68:6e:3a:96:49:3e:16:b7:4b:ee:88:d8:93: 35:06:9e:be:12:dd:22:78:76:16:81:87:4b:83:16: 95:dc:9c:99:48:3f:da:33:48:30:68:a7:40:38:6f: 44:79:6c:a4:c2:13:fd:61:91:30:1c:0f:75:a2:26: 18:33:e3:a6:2d:01:27:d3:87:22:05:d1:08:29:71: 3f:a0:6c:60:81:f5:d2:ce:34:db:9e:77:43:51:1d: 42:91:74:c4:a3:b5:49:76:84:79:c9:73:25:65:d3: 0e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:71:17:31:40:B3:A2:E2:A4:C1:CA:F1:AE:36:81:CC:05:DA:81:44 X509v3 Authority Key Identifier: keyid:0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7e:53:c4:0c:84:b0:f3:3a:72:3c:03:bc:20:92:1d:be:00: 1c:8f:8b:a8:26:88:18:c8:07:3a:4a:be:e9:19:f9:82:2d:28: 24:8f:5c:10:39:83:27:e2:04:8f:81:55:a8:70:64:48:30:6f: 7e:fc:f8:ef:c9:05:3d:33:91:6b:c5:70:f5:ab:d2:6a:1f:30: 66:df:59:d3:a8:41:57:bb:af:cf:2a:62:c1:71:8b:c8:3f:15: ae:7e:e3:29:ec:ea:2a:d4:77:21:a0:e6:ea:62:7f:b0:c7:e7: 04:5a:db:d4:1e:74:b2:11:d3:f4:e5:99:11:c3:a5:80:05:97: b6:94:50:fe:b5:93:2d:ea:c7:37:bc:3d:90:c7:03:34:16:f6: 53:38:78:73:13:8c:65:c9:cf:64:94:68:1f:3b:20:d0:1e:ce: 94:30:df:68:a7:07:2e:e3:b5:cb:44:82:0a:1a:c4:69:e6:3d: 66:1d:8f:bd:24:e7:b4:2d:4e:23:77:d7:f4:fe:e6:af:76:e8: 14:50:e0:3a:e6:56:96:fa:41:fb:f8:34:0c:35:e8:d1:c2:4f: ba:f8:ac:d6:cb:4b:f9:83:f3:5c:c8:cd:73:07:47:af:4c:cf: e7:30:d0:57:0e:c3:20:81:94:d1:ab:3b:1c:e6:ef:35:27:e7: 89:6d:87:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYwRTQxMTAvBgNVBAUTKDBBOEY5NDdFOUNBMEZGQTQ1NDc4RUM2MkE3RUJBRDky N0IwNDE5MzAwHhcNMjUwNTMxMDAxMjU4WhcNMjUwNjA3MDAxMjU4WjAYMRYwFAYD VQQDEw02ODNhNDk4YS01MmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXL7UN6oSbkOXkgsshWR0wpp9bRFzG4i8qnvDXWehmOFM5VH3sVt2uHOCFkA CwS+L+T8g+0JPhcAOa7CtC2UM9QDpmzQDvBP/yaKAdhZhSG3ZPxbcdgCwG/yasxD 8Bw4uPxFaBZYFXT1BGRp+opL9LA/2lUtknnrPJ2hJvjlO1IGRRI6KRJn2gV6mmzK phExde5KFv1sXWhuOpZJPha3S+6I2JM1Bp6+Et0ieHYWgYdLgxaV3JyZSD/aM0gw aKdAOG9EeWykwhP9YZEwHA91oiYYM+OmLQEn04ciBdEIKXE/oGxggfXSzjTbnndD UR1CkXTEo7VJdoR5yXMlZdMOCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhxFzFA s6LipMHK8a42gcwF2oFEMB8GA1UdIwQYMBaAFAqPlH6coP+kVHjsYqfrrZJ7BBkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjBFNC82MkQ0OENDRTNC QUQxMUVDOUIzQ0VDMUNDNEY5QUUwMi9Dby1VZnB5Z182UlVlT3hpcC11dGtuc0VH VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NvLVVmcHlnXzZSVWVPeGlwLXV0a25zRUdUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjBFNC82MkQ0OENDRTNCQUQxMUVDOUIzQ0VDMUNDNEY5QUUwMi9Dby1VZnB5Z182 UlVlT3hpcC11dGtuc0VHVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9flPEDISw8zpyPAO8IJIdvgAcj4uoJogYyAc6Sr7pGfmCLSgkj1wQ OYMn4gSPgVWocGRIMG9+/PjvyQU9M5FrxXD1q9JqHzBm31nTqEFXu6/PKmLBcYvI PxWufuMp7Ooq1HchoObqYn+wx+cEWtvUHnSyEdP05ZkRw6WABZe2lFD+tZMt6sc3 vD2QxwM0FvZTOHhzE4xlyc9klGgfOyDQHs6UMN9opwcu47XLRIIKGsRp5j1mHY+9 JOe0LU4jd9f0/uavdugUUOA65laW+kH7+DQMNejRwk+6+KzWy0v5g/NcyM1zB0ev TM/nMNBXDsMggZTRqzsc5u81J+eJbYd6 -----END CERTIFICATE-----Generated at Sat May 31 16:49:13 2025 by rpki-client