$ rpki-client -vvf rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft File: UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft (raw, json) Hash identifier: X8SbpStpjPKJ1pzDhMff64RPVxJQ+khb0DXkHS+lT4Y= Subject key identifier: 36:78:7C:C3:AC:2D:67:FF:B3:84:4C:23:D5:BD:3A:05:09:76:94:10 Authority key identifier: 51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23 Certificate issuer: /CN=A91383BF/serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft Manifest number: C3 Signing time: Sat 31 May 2025 05:26:12 +0000 Manifest this update: Sat 31 May 2025 05:26:12 +0000 Manifest next update: Sat 07 Jun 2025 05:26:12 +0000 Files and hashes: 1: UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl (hash: pNQ5KPanDNoIR2czz3PpCXSWzp+TyjwEEy+5mmfDt00=) 2: C23053B019A911EF97366417C4F9AE02.roa (hash: YYki0NriwMd0PqjU0EOE6kz16/qKzKdVDNbbepKT0IA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383BF, serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623 Validity Not Before: May 31 05:26:12 2025 GMT Not After : Jun 7 05:26:12 2025 GMT Subject: CN=683a92f4-748e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:35:45:22:ff:a3:b7:d3:f3:30:a3:a1:02:0d: 50:3d:4d:ce:a7:d6:52:6c:cd:96:19:6d:02:cf:55: e6:72:e6:cd:df:82:8b:54:ff:dd:5c:49:8a:f5:c6: 37:96:23:80:e4:f6:ed:f3:73:0b:aa:2c:54:f5:d7: c9:26:59:a5:cc:17:d6:4f:ff:ac:5f:ae:ef:a5:fa: a7:69:d5:01:8c:36:b6:6e:a5:77:10:5d:ad:97:97: b5:e3:bb:16:79:ca:65:76:c7:b1:85:aa:8b:73:c1: 1e:84:b2:37:b9:3c:90:f3:77:05:90:16:72:90:31: 83:85:69:63:cc:a1:ab:0e:e1:00:d3:27:dc:fb:59: 26:2c:60:24:7f:01:a7:6e:8b:fc:50:17:db:70:e2: b8:09:ef:a5:57:66:ae:87:b0:01:0d:2e:fb:ba:d8: d9:c9:66:41:1a:0e:eb:93:8a:cd:a9:6b:af:33:d4: a4:75:72:a2:39:0d:aa:6e:c4:c4:99:0b:e9:c2:6e: c5:e2:1d:7d:9a:f0:ec:56:cc:bb:a0:49:c5:9f:bc: 77:33:b6:df:d0:b3:45:08:01:e1:a6:a9:69:5a:c9: 39:ef:4b:c9:d2:72:df:0e:b4:5d:0d:90:df:3a:91: d0:d2:10:3b:2c:a2:c7:78:97:14:a9:4d:24:1e:c8: a2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:78:7C:C3:AC:2D:67:FF:B3:84:4C:23:D5:BD:3A:05:09:76:94:10 X509v3 Authority Key Identifier: keyid:51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:f3:ce:52:f0:e8:95:64:75:ac:41:bc:42:f9:52:4d:f3:a3: dd:59:31:7d:59:9c:65:14:36:65:11:05:39:70:a4:63:04:8a: 15:51:52:28:99:01:b4:70:1c:0d:96:c4:3a:6a:d6:71:83:f4: ac:e8:0e:2f:f3:95:b2:39:be:3a:91:26:39:fa:53:12:67:08: 03:8f:b0:b1:bf:7f:c6:63:2e:59:1f:86:32:e2:1c:3d:7a:88: 22:63:d4:34:42:17:f5:2f:66:f7:d5:e8:21:b5:bf:2a:6c:d1: db:ab:10:0f:d8:b7:55:e6:8b:da:d0:5b:3d:07:c7:d0:f8:be: b3:18:c4:16:4f:fd:cc:9b:56:96:78:b9:0f:ca:9f:f2:b7:37: 22:92:41:a8:2f:ad:05:10:7a:07:2d:ff:7a:4a:f1:8d:89:97: 2c:a9:6a:95:04:ec:b9:39:d7:93:47:ee:25:27:16:28:e6:d6: a1:b8:7d:c0:33:72:22:e4:28:42:a1:d5:c6:cb:3e:8b:df:37: fb:15:fd:a2:ea:00:0c:9f:b6:34:2d:b8:8f:0a:f3:4d:ad:c9: a3:f0:6e:f6:5f:6f:e5:90:2a:8e:84:44:a4:fd:5c:68:77:d4: 89:19:ad:75:42:32:5c:46:cd:12:a2:25:c9:f5:d2:96:9b:1b: 0e:9e:a4:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQkYxMTAvBgNVBAUTKDUxQTQ4MjU4RDRDRDZFMDFEMjQ1OEM1QjkyMTZFRkE0 NTIxMEI2MjMwHhcNMjUwNTMxMDUyNjEyWhcNMjUwNjA3MDUyNjEyWjAYMRYwFAYD VQQDEw02ODNhOTJmNC03NDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjVFIv+jt9PzMKOhAg1QPU3Op9ZSbM2WGW0Cz1XmcubN34KLVP/dXEmK9cY3 liOA5Pbt83MLqixU9dfJJlmlzBfWT/+sX67vpfqnadUBjDa2bqV3EF2tl5e147sW ecpldsexhaqLc8EehLI3uTyQ83cFkBZykDGDhWljzKGrDuEA0yfc+1kmLGAkfwGn bov8UBfbcOK4Ce+lV2auh7ABDS77utjZyWZBGg7rk4rNqWuvM9SkdXKiOQ2qbsTE mQvpwm7F4h19mvDsVsy7oEnFn7x3M7bf0LNFCAHhpqlpWsk570vJ0nLfDrRdDZDf OpHQ0hA7LKLHeJcUqU0kHsiijQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZ4fMOs LWf/s4RMI9W9OgUJdpQQMB8GA1UdIwQYMBaAFFGkgljUzW4B0kWMW5IW76RSELYj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCRi9GNjdDNjFFQTE5 ODExMUVGQTVBQzQ3NTNDNEY5QUUwMi9VYVNDV05UTmJnSFNSWXhia2hidnBGSVF0 aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VhU0NXTlROYmdIU1JZeGJraGJ2cEZJUXRpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCRi9GNjdDNjFFQTE5ODExMUVGQTVBQzQ3NTNDNEY5QUUwMi9VYVNDV05UTmJn SFNSWXhia2hidnBGSVF0aU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH885S8OiVZHWsQbxC+VJN86PdWTF9WZxlFDZlEQU5cKRjBIoVUVIo mQG0cBwNlsQ6atZxg/Ss6A4v85WyOb46kSY5+lMSZwgDj7Cxv3/GYy5ZH4Yy4hw9 eogiY9Q0Qhf1L2b31eghtb8qbNHbqxAP2LdV5ova0Fs9B8fQ+L6zGMQWT/3Mm1aW eLkPyp/ytzcikkGoL60FEHoHLf96SvGNiZcsqWqVBOy5OdeTR+4lJxYo5tahuH3A M3Ii5ChCodXGyz6L3zf7Ff2i6gAMn7Y0LbiPCvNNrcmj8G72X2/lkCqOhESk/Vxo d9SJGa11QjJcRs0SoiXJ9dKWmxsOnqSV -----END CERTIFICATE-----Generated at Sat May 31 17:26:17 2025 by rpki-client