$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft File: u-KUkERtaHB2W05h1-ubIsYARjg.mft (raw, json) Hash identifier: VCyqfdkgGyHBqvzB5cpppPmvP0Nw6hySVfTICPFqCiY= Subject key identifier: A2:B2:67:18:A4:87:EB:4A:60:A2:CE:52:24:A1:62:D5:53:6E:41:96 Authority key identifier: BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38 Certificate issuer: /CN=A9186D83/serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638 Certificate serial: 0C69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft Manifest number: 0C51 Signing time: Wed 14 May 2025 18:37:53 +0000 Manifest this update: Wed 14 May 2025 18:37:53 +0000 Manifest next update: Wed 21 May 2025 18:37:53 +0000 Files and hashes: 1: u-KUkERtaHB2W05h1-ubIsYARjg.crl (hash: XaldXn6mRdPIE57okaDBYvzt9f2VOosQQPottR8vaqE=) 2: 8BA504FCB27911EB978CE10AC4F9AE02.roa (hash: I8Ss/Oj3Q9umSrFxZnObaXQe/cu017hGcC027pv/vs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3177 (0xc69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D83, serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638 Validity Not Before: May 14 18:37:53 2025 GMT Not After : May 21 18:37:53 2025 GMT Subject: CN=6824e301-c022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:94:b0:4c:fa:3c:6f:87:94:d1:36:62:c6:49: a9:19:b8:01:a6:58:1a:34:c1:d8:72:ca:be:9e:3c: d1:19:f4:c0:b0:de:2b:73:66:15:8c:8e:f6:a7:77: f2:1a:7e:a4:18:44:6d:d2:87:de:18:4c:d3:6b:1a: 95:6d:b6:a3:92:03:b2:ce:2e:d4:26:f3:8a:1e:2b: 47:59:3d:b7:29:03:33:3f:11:53:6b:e3:42:8b:81: 19:d6:36:c0:99:dc:90:7f:ea:07:41:74:00:ba:f9: 9c:dd:c9:0d:44:3d:47:d9:aa:69:9c:88:e7:04:d9: d3:1c:89:ff:a4:99:80:a0:91:35:7f:0b:86:10:93: 3b:eb:4b:40:8b:e6:28:ee:9d:aa:37:90:ff:4f:f3: a1:8b:f5:af:fb:4b:f6:e4:2f:1c:23:9f:fb:ee:16: 6c:17:13:e7:10:00:39:10:b5:90:4b:6b:20:61:e5: 09:0d:77:4d:85:d7:82:35:77:89:88:17:b8:49:68: a5:9a:46:ef:2e:b0:cb:5f:92:e2:5e:03:b1:dc:15: 76:a5:71:c9:a8:13:25:3f:2e:ab:d6:15:8a:9e:e5: bd:75:00:89:af:be:bc:e8:f1:df:fa:78:82:ef:e5: 8a:d2:02:81:e3:9b:5f:79:a4:ac:3d:d6:35:e2:a6: 2b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B2:67:18:A4:87:EB:4A:60:A2:CE:52:24:A1:62:D5:53:6E:41:96 X509v3 Authority Key Identifier: keyid:BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:52:2f:9f:22:0d:a2:1f:60:a9:d8:10:1a:d3:b2:f3:14:e7: dc:c7:8a:b1:ad:bb:db:37:a6:90:f7:a9:1e:ed:95:20:07:e8: da:15:42:43:0c:64:49:f8:6d:00:27:43:57:86:35:e7:8c:b2: b6:69:df:97:e5:ae:d5:7b:08:95:cf:c6:67:16:36:43:cd:9f: fb:3e:f8:cc:9c:bc:da:1e:80:03:33:df:6c:c4:0b:5f:22:9b: 6f:29:cc:ad:82:7f:b0:59:c2:d7:8f:08:00:6b:64:c0:73:a6: 0e:d4:86:ab:f4:bd:c0:77:ee:81:ae:32:75:79:74:31:1f:cc: 7f:e9:bc:94:14:38:6a:fd:e7:d1:17:25:89:59:49:20:70:31: dc:f5:60:fc:c1:e8:43:76:b8:cd:81:1f:bb:96:d1:0d:1b:c6: 3a:38:00:c8:ad:fc:75:e2:9b:29:3e:d6:b9:f6:ed:7c:3a:00: c6:48:63:a6:05:b0:a7:31:6a:7a:d8:d6:f7:47:20:5a:1c:6a: 87:39:ef:89:7e:cf:1b:42:1d:b0:de:cd:e6:c4:5a:c3:cf:3c: 56:56:21:ae:7f:b1:4d:a4:4c:4a:0c:2e:dd:3d:0c:12:d2:e6: df:63:25:4c:9a:21:dd:bc:d3:e1:78:a0:67:a4:44:c8:d2:e4: cd:d3:35:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEODMxMTAvBgNVBAUTKEJCRTI5NDkwNDQ2RDY4NzA3NjVCNEU2MUQ3RUI5QjIy QzYwMDQ2MzgwHhcNMjUwNTE0MTgzNzUzWhcNMjUwNTIxMTgzNzUzWjAYMRYwFAYD VQQDEw02ODI0ZTMwMS1jMDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5SwTPo8b4eU0TZixkmpGbgBplgaNMHYcsq+njzRGfTAsN4rc2YVjI72p3fy Gn6kGERt0ofeGEzTaxqVbbajkgOyzi7UJvOKHitHWT23KQMzPxFTa+NCi4EZ1jbA mdyQf+oHQXQAuvmc3ckNRD1H2appnIjnBNnTHIn/pJmAoJE1fwuGEJM760tAi+Yo 7p2qN5D/T/Ohi/Wv+0v25C8cI5/77hZsFxPnEAA5ELWQS2sgYeUJDXdNhdeCNXeJ iBe4SWilmkbvLrDLX5LiXgOx3BV2pXHJqBMlPy6r1hWKnuW9dQCJr7686PHf+niC 7+WK0gKB45tfeaSsPdY14qYrCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKyZxik h+tKYKLOUiShYtVTbkGWMB8GA1UdIwQYMBaAFLvilJBEbWhwdltOYdfrmyLGAEY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ4My8xNDk3NDdCRTA2 MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFIQjJXMDVoMS11YklzWUFS amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtS1VrRVJ0YUhCMlcwNWgxLXViSXNZQVJqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ4My8xNDk3NDdCRTA2MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFI QjJXMDVoMS11YklzWUFSamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJUi+fIg2iH2Cp2BAa07LzFOfcx4qxrbvbN6aQ96ke7ZUgB+jaFUJD DGRJ+G0AJ0NXhjXnjLK2ad+X5a7VewiVz8ZnFjZDzZ/7PvjMnLzaHoADM99sxAtf IptvKcytgn+wWcLXjwgAa2TAc6YO1Iar9L3Ad+6BrjJ1eXQxH8x/6byUFDhq/efR FyWJWUkgcDHc9WD8wehDdrjNgR+7ltENG8Y6OADIrfx14pspPta59u18OgDGSGOm BbCnMWp62Nb3RyBaHGqHOe+Jfs8bQh2w3s3mxFrDzzxWViGuf7FNpExKDC7dPQwS 0ubfYyVMmiHdvNPheKBnpETI0uTN0zUP -----END CERTIFICATE-----Generated at Thu May 15 19:48:34 2025 by rpki-client