$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft File: UAxgp_acBL6E_PPGVyPAeXDloSg.mft (raw, json) Hash identifier: upDHnd2BqHKaqTeAsNI3TP3zZ+qXQY0UsffTKJkMK68= Subject key identifier: D5:7D:38:C6:94:ED:5A:B8:1C:51:2C:3E:6F:92:56:BC:C1:D6:7F:09 Authority key identifier: 50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28 Certificate issuer: /CN=A91A7978/serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft Manifest number: 3C Signing time: Sat 31 May 2025 07:08:50 +0000 Manifest this update: Sat 31 May 2025 07:08:49 +0000 Manifest next update: Sat 07 Jun 2025 07:08:49 +0000 Files and hashes: 1: UAxgp_acBL6E_PPGVyPAeXDloSg.crl (hash: s7zWs79yHB2urUYo+mc4nGEXnf0l4Op1UzpTwnQuAM0=) 2: 1EF560BEEA6911EF9AE7CD14C4F9AE02.roa (hash: lILeGFy8FkS3op8pqtEQAN5f/QrMhRlzhtxTRP45JV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.crl rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7978, serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128 Validity Not Before: May 31 07:08:49 2025 GMT Not After : Jun 7 07:08:49 2025 GMT Subject: CN=683aab02-59db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8f:45:97:f9:54:63:84:d4:e3:b9:20:be:24: 21:10:43:ae:9d:22:41:20:57:2c:b9:8c:82:35:5b: b7:72:43:d0:de:5e:41:f7:fa:f3:cd:b0:81:8d:ee: c9:6e:01:ed:f0:ad:84:42:b0:d8:70:51:9a:be:de: c6:a0:8a:9f:70:11:f0:d9:e8:09:65:7c:23:e6:0b: ed:8a:a0:dd:3f:55:95:35:f1:c9:b9:7b:4a:54:1d: 99:68:2d:1c:f4:31:83:04:47:26:dc:93:0c:59:0b: 2b:d9:89:f2:b4:60:02:67:a5:af:17:c2:6d:19:b9: 98:05:cd:17:a0:d7:fc:08:d9:26:69:d5:b2:43:83: 4e:50:6b:b7:8a:35:f0:91:09:55:07:97:06:70:37: cb:95:26:07:e8:4e:ff:23:0f:6f:79:5a:c3:4d:91: e4:d2:32:9e:b9:dd:89:88:6d:1b:70:84:5b:98:5a: ed:f2:12:3e:1f:e2:8d:76:a7:e3:c0:4c:f1:88:92: b2:21:ca:76:68:12:6a:7f:2e:3e:79:f8:6a:2f:21: 51:d1:bc:00:2f:e9:7a:fa:2e:66:e5:52:4b:1e:e8: 56:c3:63:98:f4:61:c9:58:eb:4a:9b:6d:f6:19:b5: 01:6e:73:11:9f:07:ce:6b:d3:db:51:35:8b:4d:65: 44:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7D:38:C6:94:ED:5A:B8:1C:51:2C:3E:6F:92:56:BC:C1:D6:7F:09 X509v3 Authority Key Identifier: keyid:50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:c9:d4:14:46:a7:7a:ea:80:b3:21:c3:9b:02:1f:1c:da:d5: f7:33:e1:a0:f4:cb:29:71:39:4b:00:cb:96:fc:ec:9f:a3:44: 6d:6a:04:85:44:83:7e:eb:c3:a0:e3:d4:14:1b:f8:f0:04:c9: bf:c3:2e:14:1d:88:f7:80:9a:34:fd:ba:02:45:8f:0f:43:1c: 92:46:d7:22:91:6e:c6:f0:23:23:23:71:1b:2f:47:b8:49:bd: fe:3f:f5:7e:6b:b8:0d:20:48:94:bf:be:5b:5f:3b:6e:44:48: 30:33:f0:6d:4c:a5:9f:c4:fd:9c:87:1f:c2:a7:8b:e8:4b:c5: 2a:d9:70:26:b4:fd:a3:2b:f8:55:d5:0f:92:35:63:9d:87:9a: d9:24:82:29:33:04:68:2c:68:f1:e0:89:b3:39:b7:3b:94:65: 6c:aa:26:5f:14:15:19:3a:4c:a3:c1:a5:6c:5d:1b:f3:48:6b: d7:26:48:20:b7:1f:68:f6:0b:fe:ab:3a:af:21:19:67:c2:a7: dd:ac:ff:c4:f9:0c:c7:82:84:65:02:b4:69:d7:10:d5:f5:1a: d7:d2:9f:ec:53:6f:58:19:0d:cb:95:25:c7:d8:29:08:19:c9: a6:5e:3d:85:21:0e:3f:42:b0:ba:37:9c:8e:ab:cb:93:9c:d9: 19:7d:ac:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB Nzk3ODExMC8GA1UEBRMoNTAwQzYwQTdGNjlDMDRCRTg0RkNGM0M2NTcyM0MwNzk3 MEU1QTEyODAeFw0yNTA1MzEwNzA4NDlaFw0yNTA2MDcwNzA4NDlaMBgxFjAUBgNV BAMTDTY4M2FhYjAyLTU5ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQj0WX+VRjhNTjuSC+JCEQQ66dIkEgVyy5jII1W7dyQ9DeXkH3+vPNsIGN7slu Ae3wrYRCsNhwUZq+3sagip9wEfDZ6AllfCPmC+2KoN0/VZU18cm5e0pUHZloLRz0 MYMERybckwxZCyvZifK0YAJnpa8Xwm0ZuZgFzReg1/wI2SZp1bJDg05Qa7eKNfCR CVUHlwZwN8uVJgfoTv8jD295WsNNkeTSMp653YmIbRtwhFuYWu3yEj4f4o12p+PA TPGIkrIhynZoEmp/Lj55+GovIVHRvAAv6Xr6LmblUkse6FbDY5j0YclY60qbbfYZ tQFucxGfB85r09tRNYtNZUT3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1X04xpTt WrgcUSw+b5JWvMHWfwkwHwYDVR0jBBgwFoAUUAxgp/acBL6E/PPGVyPAeXDloSgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3OTc4LzU2MkJEQjIyRUE2 ODExRUZCNDEzNUM2MEM0RjlBRTAyL1VBeGdwX2FjQkw2RV9QUEdWeVBBZVhEbG9T Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVUF4Z3BfYWNCTDZFX1BQR1Z5UEFlWERsb1NnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 OTc4LzU2MkJEQjIyRUE2ODExRUZCNDEzNUM2MEM0RjlBRTAyL1VBeGdwX2FjQkw2 RV9QUEdWeVBBZVhEbG9TZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGfJ1BRGp3rqgLMhw5sCHxza1fcz4aD0yylxOUsAy5b87J+jRG1qBIVE g37rw6Dj1BQb+PAEyb/DLhQdiPeAmjT9ugJFjw9DHJJG1yKRbsbwIyMjcRsvR7hJ vf4/9X5ruA0gSJS/vltfO25ESDAz8G1MpZ/E/ZyHH8Kni+hLxSrZcCa0/aMr+FXV D5I1Y52HmtkkgikzBGgsaPHgibM5tzuUZWyqJl8UFRk6TKPBpWxdG/NIa9cmSCC3 H2j2C/6rOq8hGWfCp92s/8T5DMeChGUCtGnXENX1GtfSn+xTb1gZDcuVJcfYKQgZ yaZePYUhDj9CsLo3nI6ry5Oc2Rl9rHQ= -----END CERTIFICATE-----Generated at Sat May 31 16:43:07 2025 by rpki-client