$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft File: UG14DtF5dIDxUlE0f8KEQ9culQc.mft (raw, json) Hash identifier: vx5pkg53wFzXJvLGPjXcJyyuczMLrcZfrTQ/DkGHlEc= Subject key identifier: 50:64:FE:E6:97:7B:20:B3:7C:C5:62:74:69:CC:92:1C:98:74:34:AF Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07 Certificate issuer: /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507 Certificate serial: 0BE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft Manifest number: 0BC9 Signing time: Fri 30 May 2025 19:09:36 +0000 Manifest this update: Fri 30 May 2025 19:09:36 +0000 Manifest next update: Fri 06 Jun 2025 19:09:36 +0000 Files and hashes: 1: UG14DtF5dIDxUlE0f8KEQ9culQc.crl (hash: P/Xrvj75Oh9Ijnn5zmLuEy5fFbF8tf2bLmwssY1aNRc=) 2: E5B6117E2BC611EAB1456E4CC4F9AE02.roa (hash: 8xiW94BgUeQq9ZYVRmXYA3GrrXRDCnXkWRMC2enXdlY=) 3: FB2EC05CA3B111EE92169F16C4F9AE02.roa (hash: ZnbBQLWijX811JvZiE0GpFPKxpLE1gcXnN9dflC4yH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3048 (0xbe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EB0C, serialNumber=506D780ED1797480F15251347FC28443D72E9507 Validity Not Before: May 30 19:09:36 2025 GMT Not After : Jun 6 19:09:36 2025 GMT Subject: CN=683a0270-dab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:58:fa:a8:b0:f4:28:e8:e4:7c:2d:8e:1d:70: 94:55:ca:ad:97:4e:3e:ea:ca:d4:68:74:f7:e5:a0: 61:3b:aa:d1:38:94:f8:83:0c:46:5a:ad:19:ba:1d: f8:56:08:64:7c:19:b2:6e:61:44:c3:07:87:cd:95: 70:78:42:63:5a:cb:f9:51:c1:5a:db:70:39:a2:de: 39:ef:bb:05:46:2c:1d:ec:c1:e8:c2:9a:68:b6:bd: 1a:3f:cf:89:61:c7:3c:9b:71:77:bd:0a:1a:6a:02: 19:ee:e3:12:2f:de:70:05:16:ec:e2:14:36:ca:2f: e4:20:98:56:8c:69:ee:31:f1:c7:d1:ab:22:3a:cb: a1:1c:d5:2c:4b:b1:3e:29:29:24:b8:fa:7d:18:ea: 90:cb:23:51:bd:20:aa:ab:38:f0:14:55:d0:df:6d: 70:25:a6:b9:e7:1d:47:1a:a5:fd:37:ba:d8:05:7b: 2c:47:e1:65:3f:4f:06:6f:4a:b7:5b:fe:59:ba:c1: 26:e5:33:08:0f:6e:b0:e5:b9:f6:e1:32:08:ee:65: e8:4b:33:ba:9f:8b:05:92:ec:07:6c:cd:77:2c:e4: 4f:e3:00:09:d4:d1:7e:9e:f3:ed:75:cc:6f:10:7c: 2b:65:23:86:0c:1d:24:eb:65:19:5b:b0:a7:e2:eb: 57:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:64:FE:E6:97:7B:20:B3:7C:C5:62:74:69:CC:92:1C:98:74:34:AF X509v3 Authority Key Identifier: keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:4a:74:7a:74:81:62:08:1f:21:da:f5:d6:08:71:fc:57:a2: 12:64:d8:a6:e6:f9:6e:f7:fa:aa:5e:b0:83:82:8d:40:da:f0: 92:96:fa:3f:19:ea:f9:58:04:59:7a:f7:ca:aa:3d:ea:ad:a8: 73:00:76:27:9e:39:fa:49:2d:87:0b:82:95:38:a7:e0:93:18: a3:95:cb:78:eb:a4:72:92:23:56:bc:3e:5c:f9:0a:e3:0f:11: 5c:e1:53:4d:d2:69:df:b3:ea:34:e7:c2:bc:cc:be:e4:74:ae: b0:4d:9d:96:f0:69:5c:54:44:47:66:c2:cd:70:22:f3:2b:9c: a2:0f:02:4b:f7:0e:d6:3e:03:52:dd:8b:e1:0b:83:e3:a9:79: c2:df:0a:de:b8:78:06:fa:72:23:a6:aa:ea:cc:e7:8c:66:9e: 95:f7:00:d5:c4:e9:d5:2d:45:1f:f5:1a:9d:58:ab:9b:5f:48: eb:b3:a4:e6:31:2b:a0:fe:01:c5:fe:ff:6f:4a:4f:c3:cc:02: 23:33:ac:1f:53:0a:5f:91:1b:16:6a:19:7b:63:29:bc:21:23: 05:bc:a3:1e:47:3e:31:3f:5a:1f:cb:20:bd:da:a4:72:bd:cf: b1:98:2b:3e:36:af:f1:35:21:f9:cf:22:34:9b:87:96:1c:e5: 3e:c0:fe:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VCMEMxMTAvBgNVBAUTKDUwNkQ3ODBFRDE3OTc0ODBGMTUyNTEzNDdGQzI4NDQz RDcyRTk1MDcwHhcNMjUwNTMwMTkwOTM2WhcNMjUwNjA2MTkwOTM2WjAYMRYwFAYD VQQDEw02ODNhMDI3MC1kYWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Fj6qLD0KOjkfC2OHXCUVcqtl04+6srUaHT35aBhO6rROJT4gwxGWq0Zuh34 VghkfBmybmFEwweHzZVweEJjWsv5UcFa23A5ot4577sFRiwd7MHowppotr0aP8+J Ycc8m3F3vQoaagIZ7uMSL95wBRbs4hQ2yi/kIJhWjGnuMfHH0asiOsuhHNUsS7E+ KSkkuPp9GOqQyyNRvSCqqzjwFFXQ321wJaa55x1HGqX9N7rYBXssR+FlP08Gb0q3 W/5ZusEm5TMID26w5bn24TII7mXoSzO6n4sFkuwHbM13LORP4wAJ1NF+nvPtdcxv EHwrZSOGDB0k62UZW7Cn4utXZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBk/uaX eyCzfMVidGnMkhyYdDSvMB8GA1UdIwQYMBaAFFBteA7ReXSA8VJRNH/ChEPXLpUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUIwQy82MTM3NUI2QTIy MkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJRHhVbEUwZjhLRVE5Y3Vs UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VHMTREdEY1ZElEeFVsRTBmOEtFUTljdWxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUIwQy82MTM3NUI2QTIyMkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJ RHhVbEUwZjhLRVE5Y3VsUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCESnR6dIFiCB8h2vXWCHH8V6ISZNim5vlu9/qqXrCDgo1A2vCSlvo/ Ger5WARZevfKqj3qrahzAHYnnjn6SS2HC4KVOKfgkxijlct466RykiNWvD5c+Qrj DxFc4VNN0mnfs+o058K8zL7kdK6wTZ2W8GlcVERHZsLNcCLzK5yiDwJL9w7WPgNS 3YvhC4PjqXnC3wreuHgG+nIjpqrqzOeMZp6V9wDVxOnVLUUf9RqdWKubX0jrs6Tm MSug/gHF/v9vSk/DzAIjM6wfUwpfkRsWahl7Yym8ISMFvKMeRz4xP1ofyyC92qRy vc+xmCs+Nq/xNSH5zyI0m4eWHOU+wP4X -----END CERTIFICATE-----Generated at Sat May 31 17:26:13 2025 by rpki-client