$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft File: UT8gd9itkRrHe1tcWbPiFMeLAjs.mft (raw, json) Hash identifier: CPhtRt2H0KRdc4oawRP0WrNq6Sixi3/EspS43VgUaK4= Subject key identifier: B2:35:C2:72:0B:DD:BD:6D:B4:7C:8B:FC:58:8E:FB:20:B9:F7:AC:CE Authority key identifier: 51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B Certificate issuer: /CN=A917E1B9/serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B Certificate serial: 05AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft Manifest number: 05A5 Signing time: Thu 08 May 2025 22:59:51 +0000 Manifest this update: Thu 08 May 2025 22:59:50 +0000 Manifest next update: Thu 15 May 2025 22:59:50 +0000 Files and hashes: 1: UT8gd9itkRrHe1tcWbPiFMeLAjs.crl (hash: ivI6fp7Pgya0Oh/UoEDCDGRZPh47LgzQjwkl3d6/6TE=) 2: 7F27A9D6C88211EBB7A6F948C4F9AE02.roa (hash: iMlOmr2fNq87x6S0R4H0l10i8IQao1B6aqgg50klXMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 22:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1450 (0x5aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1B9, serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B Validity Not Before: May 8 22:59:50 2025 GMT Not After : May 15 22:59:50 2025 GMT Subject: CN=681d3766-856c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cc:2c:c8:01:c4:61:26:ad:46:6e:32:85:b8: cb:b4:e1:cb:aa:d3:b0:00:b0:17:66:e3:7d:a2:de: 46:2d:f3:80:d5:3b:dd:b0:e9:2b:43:d4:9b:62:2b: ef:0b:db:cf:b4:c6:74:c5:91:ba:ee:8e:c7:e7:0d: bc:7d:b2:5e:34:e9:95:83:ce:d1:83:94:1f:51:af: f5:7b:f9:52:e3:c2:d1:e0:9f:4a:26:3e:06:e2:0f: ab:d3:7c:b5:d0:0e:b8:0c:fb:66:73:ce:39:a0:63: cb:04:92:50:6e:fe:ee:a7:74:69:8b:3e:83:8a:a5: 12:b5:f1:b6:a9:8f:01:3a:97:d1:c1:d8:fd:ab:7f: 2c:2f:57:c6:12:22:08:ea:7d:3b:50:e1:91:4e:ac: 61:ad:9e:3d:71:93:d7:98:f0:d3:07:ce:ba:e5:7a: 71:54:ba:fc:b6:7e:69:b3:f1:3b:1a:37:d2:97:21: 15:e5:e3:d0:1f:a3:80:ed:d2:69:68:d0:6b:b3:a2: ed:3a:40:85:c5:32:dd:5d:c5:99:72:31:be:34:8d: 0e:58:cf:a2:06:c8:d4:cc:67:72:a6:e8:af:2e:ac: 1f:2d:af:3b:19:1f:2d:f1:6b:a4:dc:13:53:11:8a: a0:ad:96:cd:8e:48:f0:23:28:34:f8:7b:10:1e:e2: 4a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:35:C2:72:0B:DD:BD:6D:B4:7C:8B:FC:58:8E:FB:20:B9:F7:AC:CE X509v3 Authority Key Identifier: keyid:51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f3:77:0e:f7:17:09:ee:07:d8:e5:bc:27:23:51:3f:20:b7: 99:23:21:75:aa:8e:dc:cf:57:34:b3:80:36:f5:9f:7d:47:86: 56:4b:96:75:22:c8:7e:dc:83:02:63:b6:52:2e:f7:cb:1c:e4: f4:b7:25:af:ee:fe:fd:c1:3f:ab:13:24:68:59:91:49:2f:1f: ea:56:1a:33:ef:c0:2d:b4:c0:0b:1b:36:ab:de:1f:07:65:88: 6d:db:72:1a:fe:7a:d9:24:c2:36:de:04:f0:16:8a:44:1a:72: de:a4:e1:40:77:c0:95:a3:c5:28:ba:f8:fe:b1:46:f2:65:c5: da:f3:02:f2:32:9f:81:00:4e:b5:57:d6:45:fb:d7:17:31:a6: 1f:63:54:41:6b:7d:f1:73:8e:f5:68:5a:57:c9:30:0d:53:35: 2c:66:83:cb:e8:eb:81:1b:5c:a4:47:c7:a1:75:71:d9:e5:d2: 3c:63:a3:1a:0b:01:1e:80:79:5f:09:aa:62:ff:23:e5:2e:92: 02:9f:64:f1:ad:92:89:d7:bf:bf:7c:d7:78:85:6d:c6:fa:c2: 3f:ce:56:e8:16:8e:4f:95:a8:c8:e6:99:8e:a4:16:4f:2b:f0: 10:20:5b:02:9e:6c:1d:1c:03:ce:18:05:e3:c6:28:27:b9:ce: 9c:06:dc:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxQjkxMTAvBgNVBAUTKDUxM0YyMDc3RDhBRDkxMUFDNzdCNUI1QzU5QjNFMjE0 Qzc4QjAyM0IwHhcNMjUwNTA4MjI1OTUwWhcNMjUwNTE1MjI1OTUwWjAYMRYwFAYD VQQDEw02ODFkMzc2Ni04NTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cwsyAHEYSatRm4yhbjLtOHLqtOwALAXZuN9ot5GLfOA1TvdsOkrQ9SbYivv C9vPtMZ0xZG67o7H5w28fbJeNOmVg87Rg5QfUa/1e/lS48LR4J9KJj4G4g+r03y1 0A64DPtmc845oGPLBJJQbv7up3Rpiz6DiqUStfG2qY8BOpfRwdj9q38sL1fGEiII 6n07UOGRTqxhrZ49cZPXmPDTB8665XpxVLr8tn5ps/E7GjfSlyEV5ePQH6OA7dJp aNBrs6LtOkCFxTLdXcWZcjG+NI0OWM+iBsjUzGdypuivLqwfLa87GR8t8Wuk3BNT EYqgrZbNjkjwIyg0+HsQHuJKPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLI1wnIL 3b1ttHyL/FiO+yC596zOMB8GA1UdIwQYMBaAFFE/IHfYrZEax3tbXFmz4hTHiwI7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFCOS9DREI3MDJGNkM4 N0IxMUVCQUZBNjk1M0JDNEY5QUUwMi9VVDhnZDlpdGtSckhlMXRjV2JQaUZNZUxB anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VUOGdkOWl0a1JySGUxdGNXYlBpRk1lTEFqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTFCOS9DREI3MDJGNkM4N0IxMUVCQUZBNjk1M0JDNEY5QUUwMi9VVDhnZDlpdGtS ckhlMXRjV2JQaUZNZUxBanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO83cO9xcJ7gfY5bwnI1E/ILeZIyF1qo7cz1c0s4A29Z99R4ZWS5Z1 Ish+3IMCY7ZSLvfLHOT0tyWv7v79wT+rEyRoWZFJLx/qVhoz78AttMALGzar3h8H ZYht23Ia/nrZJMI23gTwFopEGnLepOFAd8CVo8Uouvj+sUbyZcXa8wLyMp+BAE61 V9ZF+9cXMaYfY1RBa33xc471aFpXyTANUzUsZoPL6OuBG1ykR8ehdXHZ5dI8Y6Ma CwEegHlfCapi/yPlLpICn2TxrZKJ17+/fNd4hW3G+sI/zlboFo5PlajI5pmOpBZP K/AQIFsCnmwdHAPOGAXjxignuc6cBtxg -----END CERTIFICATE-----Generated at Fri May 9 23:53:06 2025 by rpki-client