$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft File: ukny4CpjXdB19WQWbxEfX63lp8s.mft (raw, json) Hash identifier: BOXEiy44RMUwduD+M8+UCTl8KZpkgpZWmupjw7NaeQ8= Subject key identifier: 46:42:18:92:87:20:F5:63:4E:E9:42:9F:39:2F:66:09:D9:D3:A6:F7 Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB Certificate issuer: /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB Certificate serial: 067D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft Manifest number: 066C Signing time: Fri 30 May 2025 22:37:40 +0000 Manifest this update: Fri 30 May 2025 22:37:39 +0000 Manifest next update: Fri 06 Jun 2025 22:37:39 +0000 Files and hashes: 1: ukny4CpjXdB19WQWbxEfX63lp8s.crl (hash: bO8S9a44ZvEx2FotEvjVxhhNFGM8yl6YJwOL0IIntls=) 2: D1B6FD008D6D11EB9DB49A32C4F9AE02.roa (hash: vO8BJ986/mLBngVCPGye7C9+jhQy/7A58iRckkgaf5o=) 3: D24316B48D6D11EB9DB49A32C4F9AE02.roa (hash: ydw76epyjXbZhwBlfsXtLnXh1HYx108LFVcke+cDAAQ=) 4: D2CFD4468D6D11EB9DB49A32C4F9AE02.roa (hash: Q6tSeAB9SXDJytuvhS/k9VLqC1gwcOY00UC/xNHWsMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1661 (0x67d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B, serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB Validity Not Before: May 30 22:37:39 2025 GMT Not After : Jun 6 22:37:39 2025 GMT Subject: CN=683a3334-53d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:df:64:2f:04:80:72:9e:58:fe:46:44:b7:26: ff:dd:54:42:64:34:67:37:be:ea:f3:20:53:ff:d1: 54:be:9c:59:e6:e8:a5:cf:4a:4d:a0:c6:2b:d3:1e: d5:73:8b:db:d5:9f:6e:a9:2c:1f:33:75:b4:c5:86: 30:d4:37:4d:49:91:c3:69:a5:2c:b5:99:1f:97:b8: 9c:c0:cc:02:b6:73:8c:cf:88:f2:87:3f:94:e7:12: c9:4e:03:af:8d:99:13:08:e9:14:e1:77:61:4b:05: e2:92:b9:72:db:18:1e:a7:97:d8:b6:ae:94:6e:c2: 8e:62:47:29:0e:d9:35:fc:cf:88:3d:33:72:51:67: 4a:58:be:8b:3b:77:f9:66:ef:6b:21:72:cf:f5:7d: 72:36:87:e9:9e:81:9a:f5:48:81:9e:44:ce:43:99: 54:b0:71:8a:f5:35:23:78:85:59:b5:50:ae:3e:43: a8:34:c2:87:3b:bc:12:18:a6:de:7f:c7:d0:a0:6f: 00:88:35:a3:10:6d:64:c6:ce:27:9c:d9:33:0c:dc: 97:01:fe:75:f1:eb:38:cf:76:67:aa:1c:67:3b:9f: 9f:c7:a9:a8:02:b7:a2:aa:8e:90:52:d3:a4:66:fe: 0d:43:85:a7:35:84:6e:30:10:4c:75:db:25:72:12: db:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:42:18:92:87:20:F5:63:4E:E9:42:9F:39:2F:66:09:D9:D3:A6:F7 X509v3 Authority Key Identifier: keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:0e:61:bb:5d:8e:3d:8a:b8:22:02:08:f8:25:50:3b:cd:e4: 47:a4:94:b1:93:6f:3c:81:99:a5:43:0f:28:b7:f6:d8:b0:f9: a4:6e:7e:be:2b:17:f0:9a:5d:7d:fb:c7:41:ea:ad:f9:3a:e0: 10:48:1e:5e:64:90:6e:ab:a3:be:d7:ae:d3:57:29:1e:a1:05: bf:90:3a:3b:62:2d:10:11:71:64:2b:a4:83:0d:36:80:be:c3: 33:bb:a9:ed:27:4f:cd:8d:b1:a4:28:33:16:1a:02:6e:2e:69: 02:a5:6e:b9:37:ca:9d:f4:77:86:ab:4b:35:0e:dc:86:76:8d: e8:40:55:ac:21:ed:15:d9:38:f9:e0:b3:33:64:ed:13:c8:5d: 2e:01:aa:06:09:2d:ea:27:da:61:d6:b9:07:d9:79:18:70:88: fc:48:76:db:aa:37:4b:10:aa:1d:76:39:c4:c6:a7:a9:09:e6: 87:be:cc:43:52:16:b8:07:fe:36:cb:14:d4:00:cc:80:f6:8b: 34:2f:a0:25:3c:80:14:f6:d5:2e:d8:61:16:96:04:4e:80:c5: 75:e1:66:4c:08:34:db:bd:eb:ef:5f:02:2b:80:86:2a:f6:61: 51:27:1f:ea:3b:fb:18:9c:56:09:79:8a:86:a5:57:91:2a:91: 51:ac:6d:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEJBNDlGMkUwMkE2MzVERDA3NUY1NjQxNjZGMTExRjVG QURFNUE3Q0IwHhcNMjUwNTMwMjIzNzM5WhcNMjUwNjA2MjIzNzM5WjAYMRYwFAYD VQQDEw02ODNhMzMzNC01M2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyN9kLwSAcp5Y/kZEtyb/3VRCZDRnN77q8yBT/9FUvpxZ5uilz0pNoMYr0x7V c4vb1Z9uqSwfM3W0xYYw1DdNSZHDaaUstZkfl7icwMwCtnOMz4jyhz+U5xLJTgOv jZkTCOkU4XdhSwXikrly2xgep5fYtq6UbsKOYkcpDtk1/M+IPTNyUWdKWL6LO3f5 Zu9rIXLP9X1yNofpnoGa9UiBnkTOQ5lUsHGK9TUjeIVZtVCuPkOoNMKHO7wSGKbe f8fQoG8AiDWjEG1kxs4nnNkzDNyXAf518es4z3ZnqhxnO5+fx6moAreiqo6QUtOk Zv4NQ4WnNYRuMBBMddslchLbJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZCGJKH IPVjTulCnzkvZgnZ06b3MB8GA1UdIwQYMBaAFLpJ8uAqY13QdfVkFm8RH1+t5afL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi9GMzZCNzlCMDgw NzcxMUVCQjkyNUYxNTRDNEY5QUUwMi91a255NENwalhkQjE5V1FXYnhFZlg2M2xw OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vrbnk0Q3BqWGRCMTlXUVdieEVmWDYzbHA4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTg4Qi9GMzZCNzlCMDgwNzcxMUVCQjkyNUYxNTRDNEY5QUUwMi91a255NENwalhk QjE5V1FXYnhFZlg2M2xwOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcDmG7XY49irgiAgj4JVA7zeRHpJSxk288gZmlQw8ot/bYsPmkbn6+ Kxfwml19+8dB6q35OuAQSB5eZJBuq6O+167TVykeoQW/kDo7Yi0QEXFkK6SDDTaA vsMzu6ntJ0/NjbGkKDMWGgJuLmkCpW65N8qd9HeGq0s1DtyGdo3oQFWsIe0V2Tj5 4LMzZO0TyF0uAaoGCS3qJ9ph1rkH2XkYcIj8SHbbqjdLEKoddjnExqepCeaHvsxD Uha4B/42yxTUAMyA9os0L6AlPIAU9tUu2GEWlgROgMV14WZMCDTbvevvXwIrgIYq 9mFRJx/qO/sYnFYJeYqGpVeRKpFRrG22 -----END CERTIFICATE-----Generated at Sat May 31 17:40:57 2025 by rpki-client