$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft File: u-KUkERtaHB2W05h1-ubIsYARjg.mft (raw, json) Hash identifier: dw1NZ7sv9J5GyPytdshYV2pT1IFtbWpkk3Ra4M88ylw= Subject key identifier: DA:C5:75:71:DD:7F:36:11:DC:B3:27:25:C3:0F:CA:14:3B:81:C9:C5 Authority key identifier: BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38 Certificate issuer: /CN=A9186D83/serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638 Certificate serial: 0C71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft Manifest number: 0C59 Signing time: Fri 30 May 2025 18:39:58 +0000 Manifest this update: Fri 30 May 2025 18:39:58 +0000 Manifest next update: Fri 06 Jun 2025 18:39:58 +0000 Files and hashes: 1: u-KUkERtaHB2W05h1-ubIsYARjg.crl (hash: XXMHs+Na/iBah2eJe6leOii6PvsfwzIsWLaCHHCBr3E=) 2: 8BA504FCB27911EB978CE10AC4F9AE02.roa (hash: I8Ss/Oj3Q9umSrFxZnObaXQe/cu017hGcC027pv/vs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3185 (0xc71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D83, serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638 Validity Not Before: May 30 18:39:58 2025 GMT Not After : Jun 6 18:39:58 2025 GMT Subject: CN=6839fb7e-9ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:28:d0:0d:e3:93:3f:51:f4:27:b5:ad:27:c6: 0f:5e:eb:04:74:5b:a9:75:b9:a2:1f:6d:d8:e3:3a: a7:76:0a:2d:38:2d:11:26:4f:94:27:e0:3a:9c:8e: 48:dc:a1:c3:05:a2:3b:ad:3b:b6:46:f8:44:0b:2e: 52:10:b2:f5:01:01:9b:44:44:1b:9a:6c:29:03:b4: 06:40:05:f1:16:60:77:cb:2d:06:7a:9e:f2:e3:93: 4d:75:2b:08:32:c5:f3:e4:cb:b7:fa:37:50:79:9e: c0:d4:79:b4:20:85:80:42:6b:a9:cb:75:77:21:50: bb:c0:68:02:5d:a1:85:26:eb:a9:0a:e4:25:cd:1f: 12:ee:6c:bd:60:03:98:59:54:47:cb:5c:61:b6:cb: b8:f9:e5:78:9c:9d:29:17:1e:11:b3:bb:d6:bf:81: bb:00:74:e8:97:fb:3e:b0:fe:47:59:50:e3:db:99: df:43:d9:5c:5f:61:6b:64:25:28:96:41:03:28:0d: 33:dd:cb:d4:7b:5a:70:da:9b:e4:85:d0:76:28:22: 1d:5a:5f:7c:91:7c:7b:d8:39:96:e3:b2:4a:82:a0: a5:46:fd:79:17:d2:39:b2:df:e3:67:72:5e:90:04: 5a:99:64:5c:3d:fe:eb:41:05:a3:2c:0e:53:34:d3: e7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C5:75:71:DD:7F:36:11:DC:B3:27:25:C3:0F:CA:14:3B:81:C9:C5 X509v3 Authority Key Identifier: keyid:BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f9:86:94:5a:fa:e5:e7:e4:96:64:4f:96:7e:7c:5f:ee:61: 5f:36:81:e6:6e:3b:b8:1b:31:17:bc:35:d1:6a:c3:9c:36:f5: 85:17:28:fe:73:a9:20:8a:43:dd:29:4e:ba:82:33:97:8b:20: 01:a6:90:9f:a1:ee:3a:04:74:22:32:64:42:7e:e2:9f:0c:08: 71:83:29:b1:bd:1d:bf:a8:ee:50:69:76:9a:13:55:4f:19:f4: 81:98:8d:8a:28:1d:9a:f7:73:a6:4a:c7:af:15:27:01:0f:98: 2b:72:47:90:5e:b0:7e:e3:27:f3:4e:50:9c:55:73:45:ed:09: 95:b7:39:cb:21:6f:aa:73:6f:44:94:ab:52:41:fa:0a:21:64: c2:42:c7:ff:60:43:97:d3:fa:a3:07:6e:52:86:d5:c5:e4:c1: 56:ec:64:62:52:27:20:29:df:13:ee:fd:16:f7:f9:f4:5f:43: 30:49:89:3f:30:ea:ae:b7:a8:97:41:0d:1a:bb:0a:47:0d:95: 58:6a:65:0b:b6:f5:43:ff:bb:53:97:63:16:0d:0c:d8:6e:f9: d3:52:88:59:b2:dc:31:8e:f1:37:80:e3:cf:1f:6f:e2:b2:d6: 91:0a:aa:2a:5e:09:af:20:a9:a1:92:d3:c0:86:ea:11:b8:0c: a8:1a:6f:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEODMxMTAvBgNVBAUTKEJCRTI5NDkwNDQ2RDY4NzA3NjVCNEU2MUQ3RUI5QjIy QzYwMDQ2MzgwHhcNMjUwNTMwMTgzOTU4WhcNMjUwNjA2MTgzOTU4WjAYMRYwFAYD VQQDEw02ODM5ZmI3ZS05YWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CjQDeOTP1H0J7WtJ8YPXusEdFupdbmiH23Y4zqndgotOC0RJk+UJ+A6nI5I 3KHDBaI7rTu2RvhECy5SELL1AQGbREQbmmwpA7QGQAXxFmB3yy0Gep7y45NNdSsI MsXz5Mu3+jdQeZ7A1Hm0IIWAQmupy3V3IVC7wGgCXaGFJuupCuQlzR8S7my9YAOY WVRHy1xhtsu4+eV4nJ0pFx4Rs7vWv4G7AHTol/s+sP5HWVDj25nfQ9lcX2FrZCUo lkEDKA0z3cvUe1pw2pvkhdB2KCIdWl98kXx72DmW47JKgqClRv15F9I5st/jZ3Je kARamWRcPf7rQQWjLA5TNNPneQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrFdXHd fzYR3LMnJcMPyhQ7gcnFMB8GA1UdIwQYMBaAFLvilJBEbWhwdltOYdfrmyLGAEY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ4My8xNDk3NDdCRTA2 MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFIQjJXMDVoMS11YklzWUFS amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtS1VrRVJ0YUhCMlcwNWgxLXViSXNZQVJqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ4My8xNDk3NDdCRTA2MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFI QjJXMDVoMS11YklzWUFSamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq+YaUWvrl5+SWZE+Wfnxf7mFfNoHmbju4GzEXvDXRasOcNvWFFyj+ c6kgikPdKU66gjOXiyABppCfoe46BHQiMmRCfuKfDAhxgymxvR2/qO5QaXaaE1VP GfSBmI2KKB2a93OmSsevFScBD5grckeQXrB+4yfzTlCcVXNF7QmVtznLIW+qc29E lKtSQfoKIWTCQsf/YEOX0/qjB25ShtXF5MFW7GRiUicgKd8T7v0W9/n0X0MwSYk/ MOqut6iXQQ0auwpHDZVYamULtvVD/7tTl2MWDQzYbvnTUohZstwxjvE3gOPPH2/i staRCqoqXgmvIKmhktPAhuoRuAyoGm/J -----END CERTIFICATE-----Generated at Sat May 31 17:32:51 2025 by rpki-client