$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft File: UG14DtF5dIDxUlE0f8KEQ9culQc.mft (raw, json) Hash identifier: RMDRHoeU05zzqSQ2vNAjlztf2nbDZ7FBzx6gSRsYU7Q= Subject key identifier: D9:83:81:D4:28:25:82:36:AB:7B:A9:70:9C:FC:E7:3A:14:92:FC:F6 Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07 Certificate issuer: /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507 Certificate serial: 0BE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft Manifest number: 0BC1 Signing time: Mon 12 May 2025 18:49:41 +0000 Manifest this update: Mon 12 May 2025 18:49:41 +0000 Manifest next update: Mon 19 May 2025 18:49:41 +0000 Files and hashes: 1: UG14DtF5dIDxUlE0f8KEQ9culQc.crl (hash: qGMtXKuryyuRiY/DQM2NNoXFcQjhRaJfGxsP59Wy7Hc=) 2: E5B6117E2BC611EAB1456E4CC4F9AE02.roa (hash: 8xiW94BgUeQq9ZYVRmXYA3GrrXRDCnXkWRMC2enXdlY=) 3: FB2EC05CA3B111EE92169F16C4F9AE02.roa (hash: ZnbBQLWijX811JvZiE0GpFPKxpLE1gcXnN9dflC4yH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3040 (0xbe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EB0C, serialNumber=506D780ED1797480F15251347FC28443D72E9507 Validity Not Before: May 12 18:49:41 2025 GMT Not After : May 19 18:49:41 2025 GMT Subject: CN=682242c5-d4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:eb:05:33:d4:09:12:83:9c:49:23:b4:81: 6e:32:5b:19:2b:e5:e9:e1:bd:8d:29:71:0d:c4:e7: 8e:77:e0:78:c7:70:84:18:46:97:d3:c2:2d:6b:7c: ba:5d:09:21:b3:57:34:67:95:ac:5d:83:28:6f:cb: 06:2d:e0:90:9a:a4:a7:b2:5d:3e:2d:09:e8:d6:13: 1b:17:07:87:f3:35:5a:04:6d:5a:82:0c:3d:e1:0e: ad:04:cb:01:7a:ed:37:e9:e8:89:99:9d:71:60:9b: da:01:1a:35:3d:9f:99:ae:7e:6f:cd:9d:96:a7:c8: b9:3c:4b:24:55:5e:5c:a3:2c:36:50:61:ca:88:1f: 94:cc:f8:28:6d:01:ac:60:94:cb:bc:0c:fe:d6:92: e7:8e:87:39:97:af:ac:ad:e3:28:e0:15:98:44:76: f0:a5:49:1b:27:43:bd:c1:83:cc:30:27:8c:ac:ee: ff:b7:02:eb:8a:b1:b4:31:49:38:57:e2:9d:97:06: 2a:29:42:2e:d4:21:1a:44:c1:a2:18:83:bd:a5:58: e1:e4:e6:e7:19:f6:ca:47:42:75:dc:9b:a3:41:ff: ba:90:38:8a:bf:88:85:e8:a5:43:e7:42:9b:3e:c1: 26:55:b6:69:a1:11:10:30:a4:66:31:75:99:7a:63: e1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:83:81:D4:28:25:82:36:AB:7B:A9:70:9C:FC:E7:3A:14:92:FC:F6 X509v3 Authority Key Identifier: keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:f8:fd:4e:0b:f9:41:b3:7c:f3:76:9a:42:00:78:91:e9:81: 9a:9b:13:05:15:2e:16:77:79:fe:87:5c:93:64:4c:8d:29:26: 21:78:66:6a:77:b4:56:17:10:d3:51:fb:a5:a9:cb:98:94:da: 44:24:bc:d9:a8:0b:79:68:6b:55:52:bb:2c:88:f5:62:25:a1: ba:31:86:bd:51:4c:8a:3d:54:98:61:b9:c6:39:2e:c5:6a:66: c2:de:8b:aa:d0:f2:ad:17:bb:54:2b:52:ea:cc:c4:64:68:88: 55:a2:14:29:1e:2a:14:da:5c:52:a1:cd:c0:58:79:6d:13:6e: b6:fa:49:ff:2b:96:ea:18:e3:70:19:72:48:38:5f:27:c7:4b: dc:6a:ad:e0:a0:7b:e3:0a:64:2c:61:2d:e1:94:8e:1f:a3:1c: aa:a9:56:d8:92:93:9e:7f:b8:4a:8f:61:7e:88:9a:eb:98:61: 76:c7:e0:90:25:13:2e:86:8d:77:08:61:da:ff:c6:d4:b5:ad: fc:98:5d:28:80:95:83:a4:14:c9:07:2b:65:b9:59:9f:d4:49: 09:03:09:82:fd:7c:b2:8d:65:f1:cd:92:1b:fd:2f:35:86:fd: 8d:5d:d1:87:db:1b:b7:76:41:0f:6a:84:ba:56:04:53:d7:42: de:43:55:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VCMEMxMTAvBgNVBAUTKDUwNkQ3ODBFRDE3OTc0ODBGMTUyNTEzNDdGQzI4NDQz RDcyRTk1MDcwHhcNMjUwNTEyMTg0OTQxWhcNMjUwNTE5MTg0OTQxWjAYMRYwFAYD VQQDEw02ODIyNDJjNS1kNGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCnrBTPUCRKDnEkjtIFuMlsZK+Xp4b2NKXENxOeOd+B4x3CEGEaX08Ita3y6 XQkhs1c0Z5WsXYMob8sGLeCQmqSnsl0+LQno1hMbFweH8zVaBG1aggw94Q6tBMsB eu036eiJmZ1xYJvaARo1PZ+Zrn5vzZ2Wp8i5PEskVV5coyw2UGHKiB+UzPgobQGs YJTLvAz+1pLnjoc5l6+sreMo4BWYRHbwpUkbJ0O9wYPMMCeMrO7/twLrirG0MUk4 V+KdlwYqKUIu1CEaRMGiGIO9pVjh5ObnGfbKR0J13JujQf+6kDiKv4iF6KVD50Kb PsEmVbZpoREQMKRmMXWZemPhfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmDgdQo JYI2q3upcJz85zoUkvz2MB8GA1UdIwQYMBaAFFBteA7ReXSA8VJRNH/ChEPXLpUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUIwQy82MTM3NUI2QTIy MkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJRHhVbEUwZjhLRVE5Y3Vs UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VHMTREdEY1ZElEeFVsRTBmOEtFUTljdWxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUIwQy82MTM3NUI2QTIyMkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJ RHhVbEUwZjhLRVE5Y3VsUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR+P1OC/lBs3zzdppCAHiR6YGamxMFFS4Wd3n+h1yTZEyNKSYheGZq d7RWFxDTUfulqcuYlNpEJLzZqAt5aGtVUrssiPViJaG6MYa9UUyKPVSYYbnGOS7F ambC3ouq0PKtF7tUK1LqzMRkaIhVohQpHioU2lxSoc3AWHltE262+kn/K5bqGONw GXJIOF8nx0vcaq3goHvjCmQsYS3hlI4foxyqqVbYkpOef7hKj2F+iJrrmGF2x+CQ JRMuho13CGHa/8bUta38mF0ogJWDpBTJBytluVmf1EkJAwmC/XyyjWXxzZIb/S81 hv2NXdGH2xu3dkEPaoS6VgRT10LeQ1XQ -----END CERTIFICATE-----Generated at Wed May 14 15:06:58 2025 by rpki-client