$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft File: UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json) Hash identifier: RjjTVkAvkvwppEj3d3lm1nnzcm67AJ+sio2DgWAhfBo= Subject key identifier: 80:A9:05:4B:B1:D7:AF:FE:11:12:69:E3:18:9B:E9:C8:38:A3:94:04 Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 Certificate issuer: /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Certificate serial: 0A4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft Manifest number: 0A48 Signing time: Fri 30 May 2025 19:54:23 +0000 Manifest this update: Fri 30 May 2025 19:54:23 +0000 Manifest next update: Fri 06 Jun 2025 19:54:23 +0000 Files and hashes: 1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: zjDhEUSGvj5ZkjcxNcyzxaokBZrAf2UhBseCcbEJBcI=) 2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: nyOJoLIDGp7/wafl1yH4CbKrruUiB3iOpUkQ72n7ZjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2638 (0xa4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149DF2, serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Validity Not Before: May 30 19:54:23 2025 GMT Not After : Jun 6 19:54:23 2025 GMT Subject: CN=683a0cef-59ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a5:0b:18:06:ac:5d:04:1b:ce:ed:8a:40:ce: 20:cc:89:56:24:d7:f8:49:44:ca:87:51:3c:6a:bb: 7b:2a:92:d1:e7:c3:10:33:ea:5b:8e:7c:23:85:a7: 7a:ff:d8:ea:cb:55:b1:8b:94:a4:ac:a3:bd:8e:51: 07:84:a6:f8:30:44:90:75:4a:b1:2a:4c:7b:87:2f: 61:40:dd:92:c5:18:e5:d3:69:0f:ed:c8:ef:83:56: 5d:39:97:e7:84:48:06:29:e7:ed:47:13:7c:c2:29: 6a:fc:2b:ab:89:e0:6e:fb:27:d8:fc:ed:bf:49:be: a9:6c:a0:a7:d2:e3:12:f5:38:7a:5e:08:ba:2e:c2: c9:a7:68:02:f1:5f:fc:3f:9f:f3:d6:97:fc:38:b3: 23:cc:ad:f7:04:2c:37:d3:37:52:2a:11:7f:53:83: ca:e6:bb:59:5c:8a:eb:73:f6:b9:df:a9:a9:be:15: 60:a9:c9:e2:48:b0:6d:79:f0:47:9d:fa:ac:4b:d0: 6d:1b:58:83:4f:77:71:75:d3:1c:18:9c:e8:16:ab: e1:13:25:3c:b6:48:2c:55:5f:5d:d1:7a:49:c6:ca: f9:03:96:43:2f:3b:d0:2f:e0:ad:7c:d5:e1:f9:24: 91:b0:d2:a2:35:8a:ab:02:fa:bf:b2:f4:b2:7a:48: 6f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A9:05:4B:B1:D7:AF:FE:11:12:69:E3:18:9B:E9:C8:38:A3:94:04 X509v3 Authority Key Identifier: keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:b5:dd:c4:f2:44:34:35:10:05:50:96:32:07:b7:52:3c:47: d9:cd:fe:fb:c6:85:6f:9b:62:f4:bb:3f:2b:00:12:9a:c6:6d: fb:e0:95:7a:1a:7f:36:81:60:9d:d9:56:f8:be:59:6f:45:bd: b6:f0:40:36:5f:aa:9e:f7:3f:99:05:b9:bf:72:73:d0:12:ab: dd:50:09:1e:04:7c:8c:c2:1a:1c:5e:c0:82:2f:d2:a6:a1:32: fa:a5:7a:db:5a:58:a3:e9:b7:f8:e4:26:91:ba:ae:05:5c:13: 2d:a4:1a:f0:f5:ac:9c:19:f3:b6:ff:ef:e6:ce:2b:7e:89:c1: c4:4a:cc:09:c2:8c:a7:34:5f:86:22:09:a6:8d:71:e7:5f:89: 95:1c:df:c5:4f:d9:1c:71:fd:bc:cb:50:80:d5:64:c4:9d:4c: 9a:a0:5d:97:58:25:b2:72:9f:e2:59:43:be:eb:d9:67:81:79: b6:b0:0d:4f:e8:57:60:89:cb:be:dd:ae:a5:ef:98:f8:e7:9a: d8:76:83:c9:b0:d0:f7:4d:13:c8:11:16:db:fe:bd:5c:2b:ce: c0:58:ab:e0:4d:0d:0f:05:82:53:67:ae:e8:3a:65:40:7f:8e: fd:59:4c:79:d2:ee:7b:d3:a0:b2:66:8f:4f:64:76:ad:ef:76: b2:92:43:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlERjIxMTAvBgNVBAUTKDUwRUZFMURGNzI5MTVFRDMzNjFEQjU1OUI1QjZCODNF QUUzRUYzQzAwHhcNMjUwNTMwMTk1NDIzWhcNMjUwNjA2MTk1NDIzWjAYMRYwFAYD VQQDEw02ODNhMGNlZi01OWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqULGAasXQQbzu2KQM4gzIlWJNf4SUTKh1E8art7KpLR58MQM+pbjnwjhad6 /9jqy1Wxi5SkrKO9jlEHhKb4MESQdUqxKkx7hy9hQN2SxRjl02kP7cjvg1ZdOZfn hEgGKeftRxN8wilq/CurieBu+yfY/O2/Sb6pbKCn0uMS9Th6Xgi6LsLJp2gC8V/8 P5/z1pf8OLMjzK33BCw30zdSKhF/U4PK5rtZXIrrc/a536mpvhVgqcniSLBtefBH nfqsS9BtG1iDT3dxddMcGJzoFqvhEyU8tkgsVV9d0XpJxsr5A5ZDLzvQL+CtfNXh +SSRsNKiNYqrAvq/svSyekhv+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICpBUux 16/+ERJp4xib6cg4o5QEMB8GA1UdIwQYMBaAFFDv4d9ykV7TNh21WbW2uD6uPvPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OURGMi85OTk4RjFDNDY3 OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0TTJIYlZadGJhNFBxNC04 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPX2gzM0tSWHRNMkhiVlp0YmE0UHE0LTg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OURGMi85OTk4RjFDNDY3OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0 TTJIYlZadGJhNFBxNC04OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCotd3E8kQ0NRAFUJYyB7dSPEfZzf77xoVvm2L0uz8rABKaxm374JV6 Gn82gWCd2Vb4vllvRb228EA2X6qe9z+ZBbm/cnPQEqvdUAkeBHyMwhocXsCCL9Km oTL6pXrbWlij6bf45CaRuq4FXBMtpBrw9aycGfO2/+/mzit+icHESswJwoynNF+G IgmmjXHnX4mVHN/FT9kccf28y1CA1WTEnUyaoF2XWCWycp/iWUO+69lngXm2sA1P 6Fdgicu+3a6l75j455rYdoPJsND3TRPIERbb/r1cK87AWKvgTQ0PBYJTZ67oOmVA f479WUx50u5706CyZo9PZHat73aykkNI -----END CERTIFICATE-----Generated at Sat May 31 15:48:31 2025 by rpki-client