$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft File: UTbgDQPR84UAq2cpty7T1yzWoQU.mft (raw, json) Hash identifier: xTFPbNJZ2r7ReOxy4+5mZeq32MlFl3R+MFq/0mGfy/M= Subject key identifier: 37:80:A9:AD:3F:11:D3:96:92:5C:32:EF:07:5B:93:1B:44:53:F2:33 Authority key identifier: 51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05 Certificate issuer: /CN=A919B3BC/serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105 Certificate serial: 1E0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft Manifest number: 1DF5 Signing time: Fri 16 May 2025 16:19:19 +0000 Manifest this update: Fri 16 May 2025 16:19:18 +0000 Manifest next update: Fri 23 May 2025 16:19:18 +0000 Files and hashes: 1: UTbgDQPR84UAq2cpty7T1yzWoQU.crl (hash: SA/qBhSNHbvEPT9BE3ZQiLiHToPcKbYgqdvE7baYWV0=) 2: 03D29A521AD611F0BC67FC1CC4F9AE02.roa (hash: rt/eyNRwh3HSmHt+oMSmnpP/31deXcLSwt8yukP8jbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 15:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7690 (0x1e0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B3BC, serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105 Validity Not Before: May 16 16:19:18 2025 GMT Not After : May 23 16:19:18 2025 GMT Subject: CN=68276586-d11a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cc:1e:a7:a5:db:85:42:ed:94:d4:c9:58:1f: 66:a8:8b:26:33:bb:ac:19:24:9d:d5:66:39:8c:94: 02:30:35:90:b0:5c:47:99:92:a5:4f:5e:3b:cc:e3: 09:11:3d:f7:dc:33:4e:82:cf:df:22:69:c9:55:e8: a4:60:86:da:7f:70:54:0b:47:cc:d6:80:00:09:59: cd:3d:3e:93:1e:d1:49:64:c3:e9:e2:0d:ab:b9:a1: ca:90:a8:da:fd:e6:51:81:cf:56:0c:9b:08:ff:91: c7:55:12:18:83:bd:92:7a:27:b8:83:9f:68:f0:09: ae:04:08:5f:26:71:6e:e1:71:cd:af:73:44:fd:42: 45:2b:3f:5f:3d:ca:d2:62:8a:e8:8a:f6:4d:f5:3f: b3:48:a3:6c:e7:aa:00:0c:b9:3b:13:bf:e6:16:93: 09:d5:a6:9f:b4:44:09:b6:87:cc:f8:cb:06:7e:fd: a5:16:ae:b8:f2:bc:a1:10:e6:2e:14:2e:83:ff:cd: a3:43:b1:12:e2:14:67:d6:da:c8:0d:75:aa:1e:04: 50:9d:63:17:05:31:f6:69:36:b5:f6:92:15:a5:26: da:b0:3e:38:6f:82:65:dd:f2:9f:6f:f1:27:17:52: 7e:59:f9:c9:54:93:8a:89:71:45:b2:9b:0c:e9:34: 39:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:80:A9:AD:3F:11:D3:96:92:5C:32:EF:07:5B:93:1B:44:53:F2:33 X509v3 Authority Key Identifier: keyid:51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:dd:b7:5d:21:78:e8:75:1e:5d:02:55:92:0f:a8:3e:42:9a: 59:19:16:2e:ee:b8:b7:08:a8:29:e6:e3:e4:f0:46:9c:2b:95: 6a:71:e4:94:71:f5:ed:2c:3b:93:9b:56:ba:cd:8c:ab:70:81: 9c:ea:cf:69:71:05:26:ed:1d:06:18:34:79:12:fe:75:be:36: 16:4d:85:78:c6:d7:6f:30:5b:da:78:62:2e:0d:ec:5b:15:e3: 3f:d4:6e:7f:66:99:90:ac:16:80:13:b0:0e:e0:00:d2:fa:79: 03:ae:98:74:d5:43:e8:58:d3:f2:00:6d:d4:8c:a0:2f:3b:57: 40:0c:78:8e:a9:f5:1e:73:3c:a2:14:d1:94:e8:30:1c:97:2c: 65:89:a7:1d:ac:5b:f2:ce:5b:cf:cf:5b:fe:83:e2:1a:78:2a: e6:57:12:a9:cf:72:f4:88:73:86:de:38:e0:b6:8f:1e:57:e7: f3:df:16:fc:fa:87:91:6f:d9:99:04:94:ae:55:5e:92:bf:f6: d3:6f:18:8f:b3:0b:36:b0:54:96:4f:44:32:89:b2:a3:d4:ac: e5:43:cb:7c:cf:ea:1d:57:8f:5c:6b:dd:b1:bb:84:ed:02:c3: 6a:5d:54:67:07:74:37:66:3a:19:d8:34:c4:e8:0e:ed:e7:ff: 95:69:3a:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIzQkMxMTAvBgNVBAUTKDUxMzZFMDBEMDNEMUYzODUwMEFCNjcyOUI3MkVEM0Q3 MkNENkExMDUwHhcNMjUwNTE2MTYxOTE4WhcNMjUwNTIzMTYxOTE4WjAYMRYwFAYD VQQDEw02ODI3NjU4Ni1kMTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6cwep6XbhULtlNTJWB9mqIsmM7usGSSd1WY5jJQCMDWQsFxHmZKlT147zOMJ ET333DNOgs/fImnJVeikYIbaf3BUC0fM1oAACVnNPT6THtFJZMPp4g2ruaHKkKja /eZRgc9WDJsI/5HHVRIYg72Seie4g59o8AmuBAhfJnFu4XHNr3NE/UJFKz9fPcrS YoroivZN9T+zSKNs56oADLk7E7/mFpMJ1aaftEQJtofM+MsGfv2lFq648ryhEOYu FC6D/82jQ7ES4hRn1trIDXWqHgRQnWMXBTH2aTa19pIVpSbasD44b4Jl3fKfb/En F1J+WfnJVJOKiXFFspsM6TQ5JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeAqa0/ EdOWklwy7wdbkxtEU/IzMB8GA1UdIwQYMBaAFFE24A0D0fOFAKtnKbcu09cs1qEF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjNCQy8zMDQxOTdFODhG OUIxMUU2QkVDNUNCMjVDNEY5QUUwMi9VVGJnRFFQUjg0VUFxMmNwdHk3VDF5eldv UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VUYmdEUVBSODRVQXEyY3B0eTdUMXl6V29RVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjNCQy8zMDQxOTdFODhGOUIxMUU2QkVDNUNCMjVDNEY5QUUwMi9VVGJnRFFQUjg0 VUFxMmNwdHk3VDF5eldvUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa3bddIXjodR5dAlWSD6g+QppZGRYu7ri3CKgp5uPk8EacK5VqceSU cfXtLDuTm1a6zYyrcIGc6s9pcQUm7R0GGDR5Ev51vjYWTYV4xtdvMFvaeGIuDexb FeM/1G5/ZpmQrBaAE7AO4ADS+nkDrph01UPoWNPyAG3UjKAvO1dADHiOqfUeczyi FNGU6DAclyxliacdrFvyzlvPz1v+g+IaeCrmVxKpz3L0iHOG3jjgto8eV+fz3xb8 +oeRb9mZBJSuVV6Sv/bTbxiPsws2sFSWT0QyibKj1KzlQ8t8z+odV49ca92xu4Tt AsNqXVRnB3Q3ZjoZ2DTE6A7t5/+VaTq0 -----END CERTIFICATE-----Generated at Sat May 17 00:04:14 2025 by rpki-client