$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft File: UGGUcQC8szKJ4moL3-zixfueCdI.mft (raw, json) Hash identifier: TqnXPlyopcUGRIafbmk03b8jYJqU6/B4c3fVU8Pv/3M= Subject key identifier: A2:FE:C1:C6:0D:77:1C:F9:3F:1B:3A:1A:B3:5C:EC:54:39:AF:CA:21 Authority key identifier: 50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2 Certificate issuer: /CN=A912BD8E/serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft Manifest number: 4C Signing time: Thu 05 Jun 2025 06:41:25 +0000 Manifest this update: Thu 05 Jun 2025 06:41:24 +0000 Manifest next update: Thu 12 Jun 2025 06:41:24 +0000 Files and hashes: 1: UGGUcQC8szKJ4moL3-zixfueCdI.crl (hash: 0Uz9HYJTMSXz7iXMKpxPz5uoxtbWqfjqFrizt/SuyOA=) 2: 08C7D93ACE8911EFBEC5D618C4F9AE02.roa (hash: nvtKwWFEZOMd88gDjqvdFcOF+TJpXNSXEguvJEtlOSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 06:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BD8E, serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2 Validity Not Before: Jun 5 06:41:24 2025 GMT Not After : Jun 12 06:41:24 2025 GMT Subject: CN=68413c15-eb65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:54:d9:3e:84:bb:d5:45:5c:0d:a7:6e:7e: ff:68:94:f1:97:68:29:55:0c:38:7d:d7:5f:36:68: e8:7e:24:75:52:34:0d:02:4d:6a:e3:d6:d7:20:61: 0a:f3:49:5b:9b:54:1a:79:cd:59:16:8d:83:1f:5d: 3f:71:40:5b:bc:96:74:48:76:78:f7:be:aa:69:e8: 8a:e5:91:77:c9:fb:e5:6a:36:8d:46:fc:26:27:49: dc:88:b5:de:b1:f5:94:d8:db:25:32:a1:6e:98:72: d7:da:c7:8e:eb:80:cd:6f:47:5c:d1:51:56:b9:df: 81:5d:86:bf:26:f5:d7:c1:7b:16:18:50:39:1c:04: 5c:0c:03:c6:0f:e5:0e:b2:8a:56:65:4f:c7:10:a8: 41:3c:a6:97:b4:0c:a5:ef:1e:1a:ec:c0:e6:11:ca: 19:4b:71:aa:51:a7:2b:14:05:24:d2:cd:ff:f3:0e: 29:31:17:c6:7d:fc:26:4b:28:15:4a:fc:58:75:4a: fa:4c:48:2f:43:f5:21:45:f9:23:cd:c3:35:eb:4b: 8a:9f:0c:08:3f:18:f9:68:d4:ae:0a:d3:67:ea:fc: bb:be:14:5b:48:bd:ae:2f:5e:dc:9b:03:91:78:4f: c8:5f:74:29:1b:bb:91:2a:69:22:b9:14:25:91:88: b4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FE:C1:C6:0D:77:1C:F9:3F:1B:3A:1A:B3:5C:EC:54:39:AF:CA:21 X509v3 Authority Key Identifier: keyid:50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:7d:97:61:80:b9:90:5f:75:c3:bf:7e:da:29:83:c4:ef:7d: 6e:71:fc:94:10:68:6f:59:76:00:b6:9a:ed:a6:2a:02:ce:b7: 3c:f2:1f:a7:3e:2e:00:63:f3:37:56:16:b8:60:0e:90:54:6e: 78:90:6e:54:cb:e0:31:cd:51:1a:07:e4:f6:cb:8b:2e:df:7b: 68:ce:be:04:7b:ec:25:5c:9f:bd:3f:a1:ca:3e:ba:0f:14:84: 44:a6:b1:bb:41:00:a5:57:14:01:4d:3c:13:fc:9c:88:80:d0: 8f:45:e8:42:af:32:79:dd:e2:52:35:57:2b:1d:40:b6:53:1e: 24:48:73:1b:3a:09:dc:5e:9a:59:ca:13:80:6e:68:c1:b5:8b: 9d:39:60:3c:ec:e1:54:13:00:ef:a6:8c:ac:db:34:78:df:7c: 45:da:a6:4f:9b:6c:b6:5a:c4:97:bc:c5:bc:b7:44:cf:a7:a4: 55:1e:6b:82:65:16:54:0f:8b:92:bb:02:29:5d:af:b6:22:8c: b0:5c:6c:36:28:97:e0:a8:c8:03:1a:ee:ad:a5:44:4b:af:64: 78:5e:38:81:e6:e5:d1:08:0b:80:8b:2f:d1:26:c7:d6:83:68: 9a:c0:93:19:95:c1:3d:65:86:60:fc:94:ae:ce:d6:c9:ce:8d: 03:d2:ed:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QkQ4RTExMC8GA1UEBRMoNTA2MTk0NzEwMEJDQjMzMjg5RTI2QTBCREZFQ0UyQzVG QjlFMDlEMjAeFw0yNTA2MDUwNjQxMjRaFw0yNTA2MTIwNjQxMjRaMBgxFjAUBgNV BAMTDTY4NDEzYzE1LWViNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIl1TZPoS71UVcDadufv9olPGXaClVDDh91182aOh+JHVSNA0CTWrj1tcgYQrz SVubVBp5zVkWjYMfXT9xQFu8lnRIdnj3vqpp6IrlkXfJ++VqNo1G/CYnSdyItd6x 9ZTY2yUyoW6Yctfax47rgM1vR1zRUVa534Fdhr8m9dfBexYYUDkcBFwMA8YP5Q6y ilZlT8cQqEE8ppe0DKXvHhrswOYRyhlLcapRpysUBSTSzf/zDikxF8Z9/CZLKBVK /Fh1SvpMSC9D9SFF+SPNwzXrS4qfDAg/GPlo1K4K02fq/Lu+FFtIva4vXtybA5F4 T8hfdCkbu5EqaSK5FCWRiLQxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUov7Bxg13 HPk/Gzoas1zsVDmvyiEwHwYDVR0jBBgwFoAUUGGUcQC8szKJ4moL3+zixfueCdIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCRDhFLzNBRjU3RkRBQ0U4 ODExRUY4N0MwNzExN0M0RjlBRTAyL1VHR1VjUUM4c3pLSjRtb0wzLXppeGZ1ZUNk SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVUdHVWNRQzhzektKNG1vTDMteml4ZnVlQ2RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC RDhFLzNBRjU3RkRBQ0U4ODExRUY4N0MwNzExN0M0RjlBRTAyL1VHR1VjUUM4c3pL SjRtb0wzLXppeGZ1ZUNkSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ19l2GAuZBfdcO/ftopg8TvfW5x/JQQaG9ZdgC2mu2mKgLOtzzyH6c+ LgBj8zdWFrhgDpBUbniQblTL4DHNURoH5PbLiy7fe2jOvgR77CVcn70/oco+ug8U hESmsbtBAKVXFAFNPBP8nIiA0I9F6EKvMnnd4lI1VysdQLZTHiRIcxs6CdxemlnK E4BuaMG1i505YDzs4VQTAO+mjKzbNHjffEXapk+bbLZaxJe8xby3RM+npFUea4Jl FlQPi5K7Aildr7YijLBcbDYol+CoyAMa7q2lREuvZHheOIHm5dEIC4CLL9Emx9aD aJrAkxmVwT1lhmD8lK7O1snOjQPS7V4= -----END CERTIFICATE-----Generated at Sat Jun 7 05:12:46 2025 by rpki-client