$ rpki-client -vvf rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft File: -uYgHGZjkjQL7hOO1BeZuobapog.mft (raw, json) Hash identifier: wp1TaAoZYiu1A3Q7HVOo0yg2xl0JKFGVKHRRlPqIGWw= Subject key identifier: D8:41:4F:75:84:78:61:11:C3:FF:A8:3D:A8:3A:AC:92:D8:D0:A1:98 Authority key identifier: FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88 Certificate issuer: /CN=A9158840/serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688 Certificate serial: 0C3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft Manifest number: 0C2B Signing time: Fri 30 May 2025 18:48:32 +0000 Manifest this update: Fri 30 May 2025 18:48:32 +0000 Manifest next update: Fri 06 Jun 2025 18:48:32 +0000 Files and hashes: 1: -uYgHGZjkjQL7hOO1BeZuobapog.crl (hash: kSv1BnXI1bnY4/HKqxneNbuVnw7WHK05kisxrPO9xM8=) 2: 513421B0E3AB11EF9C68465CC4F9AE02.roa (hash: /6OtFAV0fvfK8AYoQXUKAPYFcikHsFv3EvaxBMPOB2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3131 (0xc3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158840, serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688 Validity Not Before: May 30 18:48:32 2025 GMT Not After : Jun 6 18:48:32 2025 GMT Subject: CN=6839fd80-c3a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2a:02:0c:15:b4:f7:86:cc:1d:fe:6c:8f:4d: 63:83:20:11:89:a0:1f:0f:26:95:43:9c:f5:71:e7: 94:9b:28:7e:c2:54:47:ad:8c:0b:53:45:8d:3e:ad: f5:07:a4:fb:2f:f7:3f:84:3e:eb:98:be:55:e6:00: a6:08:12:ca:82:2b:0d:eb:b9:c3:8c:ae:d6:37:ec: 72:a7:86:a4:69:0d:03:7f:10:a9:b6:cc:a5:e6:19: ed:dc:d8:0e:cc:08:63:a4:90:b5:89:e1:04:1d:4e: 36:b6:c3:5e:ff:bc:df:2f:a7:71:71:d6:ac:64:80: 67:e2:21:48:f0:c9:28:35:e5:73:53:aa:1c:c2:bd: d4:0b:ea:65:99:c0:79:25:1c:cd:8c:b0:f1:ac:19: 62:d3:bf:50:e5:d9:96:0d:11:94:57:28:e2:17:40: fd:67:71:0e:2c:0f:e7:95:a5:c2:19:f6:3a:29:d9: 14:f5:43:ed:78:40:2f:05:2f:58:58:f6:50:73:c5: ce:79:17:0d:47:b7:36:43:32:ce:e7:55:9f:32:64: ac:b6:5c:11:3b:7c:a4:e8:f9:cc:99:23:b5:b3:fd: a8:f4:43:f7:97:ff:2e:f3:18:cb:34:7e:0d:a8:16: 48:c8:e1:11:1d:5a:d0:cc:fb:c7:d6:f8:8e:01:a5: 88:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:41:4F:75:84:78:61:11:C3:FF:A8:3D:A8:3A:AC:92:D8:D0:A1:98 X509v3 Authority Key Identifier: keyid:FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:4a:a0:8d:ca:9a:91:98:e7:18:68:9a:5f:17:58:1d:b8:0d: fd:83:53:4d:3a:5f:77:32:50:31:e5:1a:1f:48:99:a2:c7:8d: e8:e4:27:21:ac:bc:36:10:55:87:33:a7:4c:bc:b1:e3:ef:a5: 6e:95:f9:d0:c3:1c:d3:8d:af:a2:17:b0:f7:55:52:f5:b0:2c: a4:e7:68:74:ec:c9:83:ac:c0:d6:bb:cd:ca:28:36:bf:29:36: fb:f4:0b:dc:ef:d7:3d:87:f9:fd:21:24:96:f3:31:d3:36:22: 74:2d:ca:1d:cc:3b:a5:25:1f:68:41:e9:f9:14:ab:fe:58:b6: de:27:71:a0:aa:18:03:43:57:7e:4b:22:61:e3:09:ad:51:62: 3b:a8:0b:24:7e:31:90:e2:82:79:13:30:19:21:a5:d0:96:bc: 80:0b:24:a0:a8:e8:86:a1:5c:89:64:9d:c3:1f:f3:88:55:4a: 0f:2b:c0:96:52:56:9f:7d:93:c9:f7:4e:4d:2b:1f:25:66:63: 30:61:50:9f:93:64:e1:71:77:36:7b:9c:a1:a0:66:e1:fd:49: d4:1c:8a:3e:a3:cf:88:36:84:2c:d8:b7:7e:23:ca:94:83:bc: 4f:ae:11:0b:c7:02:3a:87:fa:11:2d:5d:6a:2c:9e:12:90:6e: ae:69:89:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg4NDAxMTAvBgNVBAUTKEZBRTYyMDFDNjY2MzkyMzQwQkVFMTM4RUQ0MTc5OUJB ODZEQUE2ODgwHhcNMjUwNTMwMTg0ODMyWhcNMjUwNjA2MTg0ODMyWjAYMRYwFAYD VQQDEw02ODM5ZmQ4MC1jM2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ioCDBW094bMHf5sj01jgyARiaAfDyaVQ5z1ceeUmyh+wlRHrYwLU0WNPq31 B6T7L/c/hD7rmL5V5gCmCBLKgisN67nDjK7WN+xyp4akaQ0DfxCptsyl5hnt3NgO zAhjpJC1ieEEHU42tsNe/7zfL6dxcdasZIBn4iFI8MkoNeVzU6ocwr3UC+plmcB5 JRzNjLDxrBli079Q5dmWDRGUVyjiF0D9Z3EOLA/nlaXCGfY6KdkU9UPteEAvBS9Y WPZQc8XOeRcNR7c2QzLO51WfMmSstlwRO3yk6PnMmSO1s/2o9EP3l/8u8xjLNH4N qBZIyOERHVrQzPvH1viOAaWIbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhBT3WE eGERw/+oPag6rJLY0KGYMB8GA1UdIwQYMBaAFPrmIBxmY5I0C+4TjtQXmbqG2qaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODg0MC82MTc3MzMyQTBC ODIxMUVBODA0MTE1NEJDNEY5QUUwMi8tdVlnSEdaamtqUUw3aE9PMUJlWnVvYmFw b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11WWdIR1pqa2pRTDdoT08xQmVadW9iYXBvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODg0MC82MTc3MzMyQTBCODIxMUVBODA0MTE1NEJDNEY5QUUwMi8tdVlnSEdaamtq UUw3aE9PMUJlWnVvYmFwb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3SqCNypqRmOcYaJpfF1gduA39g1NNOl93MlAx5RofSJmix43o5Cch rLw2EFWHM6dMvLHj76VulfnQwxzTja+iF7D3VVL1sCyk52h07MmDrMDWu83KKDa/ KTb79Avc79c9h/n9ISSW8zHTNiJ0LcodzDulJR9oQen5FKv+WLbeJ3GgqhgDQ1d+ SyJh4wmtUWI7qAskfjGQ4oJ5EzAZIaXQlryACySgqOiGoVyJZJ3DH/OIVUoPK8CW UlaffZPJ905NKx8lZmMwYVCfk2ThcXc2e5yhoGbh/UnUHIo+o8+INoQs2Ld+I8qU g7xPrhELxwI6h/oRLV1qLJ4SkG6uaYnw -----END CERTIFICATE-----Generated at Sat May 31 17:46:23 2025 by rpki-client