$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.mft File: UIni3IEtNN89TbWDVc_xSweu3rk.mft (raw, json) Hash identifier: Tops7Ovhk++MazmKOC5ebsmli1qozo7pb6shB0O/lu0= Subject key identifier: 7D:21:19:BE:8A:5C:39:CC:0C:D3:E6:20:5C:E4:44:56:61:61:F9:25 Authority key identifier: 50:89:E2:DC:81:2D:34:DF:3D:4D:B5:83:55:CF:F1:4B:07:AE:DE:B9 Certificate issuer: /CN=A919C5C6/serialNumber=5089E2DC812D34DF3D4DB58355CFF14B07AEDEB9 Certificate serial: 03F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UIni3IEtNN89TbWDVc_xSweu3rk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.mft Manifest number: 03EC Signing time: Sun 11 May 2025 00:04:58 +0000 Manifest this update: Sun 11 May 2025 00:04:58 +0000 Manifest next update: Sun 18 May 2025 00:04:58 +0000 Files and hashes: 1: UIni3IEtNN89TbWDVc_xSweu3rk.crl (hash: 45g2RyocvD322UrkqNmPJmEL4ILKKCNgKu8JaclaczI=) 2: 30BF89A0785C11ECB03F8929C4F9AE02.roa (hash: dqi1jGrgZhfUDsaLgY8PqI8EYscNtf7FIr0kNmEX2/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.crl rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UIni3IEtNN89TbWDVc_xSweu3rk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1008 (0x3f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C5C6, serialNumber=5089E2DC812D34DF3D4DB58355CFF14B07AEDEB9 Validity Not Before: May 11 00:04:58 2025 GMT Not After : May 18 00:04:58 2025 GMT Subject: CN=681fe9aa-4ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:82:e4:a6:7a:bb:d2:0f:e6:0a:f5:6c:0a:33: 6b:e1:f9:82:8f:9e:3b:80:14:35:3a:e2:a1:f2:d4: 3d:4f:c2:fc:d8:34:8e:8c:be:23:f2:c6:00:a5:d4: fd:ae:f7:ab:57:8e:02:70:81:b6:b0:9e:c7:85:a4: 83:47:a4:c8:d7:9a:a0:bc:4d:b8:fb:cd:34:18:25: eb:4d:9d:45:87:26:45:29:3c:fd:a5:a3:d5:db:fb: 76:0c:45:0f:7f:2a:32:f6:43:1d:cc:f5:fd:e1:d7: 93:3f:7f:75:43:3a:59:b3:c7:f5:cf:68:38:d1:be: bb:37:3d:17:fd:74:41:50:fa:c4:83:af:e7:c1:13: 04:95:d6:ba:fc:a0:15:38:89:6d:8c:cd:bc:1f:3e: 90:60:cf:14:29:a8:7b:44:ff:87:0a:ad:5d:5d:b9: 5a:0c:8b:69:11:3c:e3:46:e0:3e:8c:6f:0a:85:22: 78:b4:a0:95:68:43:3f:c7:69:40:90:d4:40:2f:26: e2:11:c8:d7:3b:a2:f1:7d:7a:ec:1f:bf:1e:ea:54: 1c:68:73:87:b0:15:41:29:a5:5f:44:d7:1e:f5:7c: 89:a2:65:9f:ce:25:46:45:8d:fd:7c:b5:b1:61:83: 05:92:53:b0:b9:94:1e:3e:7e:81:4e:be:2e:7c:7e: 45:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:21:19:BE:8A:5C:39:CC:0C:D3:E6:20:5C:E4:44:56:61:61:F9:25 X509v3 Authority Key Identifier: keyid:50:89:E2:DC:81:2D:34:DF:3D:4D:B5:83:55:CF:F1:4B:07:AE:DE:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UIni3IEtNN89TbWDVc_xSweu3rk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:dd:16:1f:dc:7d:d9:ca:ad:8d:81:58:3f:1b:45:a7:62:5d: 94:d4:50:c0:18:13:c8:f9:c6:2f:4a:9b:fd:92:f7:d3:04:eb: 94:f2:8c:c5:52:e6:39:a2:eb:04:e8:90:46:7a:04:65:a2:cc: 4f:10:1d:42:61:20:57:3a:07:26:d4:ad:f4:30:22:91:d6:31: 27:c0:7a:7a:0e:78:37:27:a8:53:2b:76:21:e5:fd:f6:55:b5: 40:21:75:03:0e:1d:79:c3:09:a0:04:75:89:97:46:da:38:da: 45:62:d2:dd:1f:24:cd:80:01:04:2f:cb:fe:3a:2f:64:ab:3d: 21:e9:b9:56:7c:7f:4d:0c:fc:40:26:0a:04:9c:85:b1:72:0c: 2f:7e:74:21:52:60:39:5c:62:00:13:fe:48:37:15:80:cf:28: 98:dc:39:28:7c:83:63:0a:df:57:ed:9e:9c:cc:68:74:33:88: 45:02:c4:de:90:9f:ec:14:3e:be:96:4e:94:76:05:24:30:9e: 24:dc:08:12:60:4e:90:26:28:9e:1d:a3:f7:e8:18:14:9f:79: f1:ae:39:86:61:12:26:f9:93:53:6e:c8:90:4b:ab:ba:bf:27: 34:d3:89:fb:d4:52:04:63:85:75:00:4d:e4:09:a9:7a:c3:35: 17:3b:89:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM1QzYxMTAvBgNVBAUTKDUwODlFMkRDODEyRDM0REYzRDREQjU4MzU1Q0ZGMTRC MDdBRURFQjkwHhcNMjUwNTExMDAwNDU4WhcNMjUwNTE4MDAwNDU4WjAYMRYwFAYD VQQDEw02ODFmZTlhYS00YWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3oLkpnq70g/mCvVsCjNr4fmCj547gBQ1OuKh8tQ9T8L82DSOjL4j8sYApdT9 rverV44CcIG2sJ7HhaSDR6TI15qgvE24+800GCXrTZ1FhyZFKTz9paPV2/t2DEUP fyoy9kMdzPX94deTP391QzpZs8f1z2g40b67Nz0X/XRBUPrEg6/nwRMElda6/KAV OIltjM28Hz6QYM8UKah7RP+HCq1dXblaDItpETzjRuA+jG8KhSJ4tKCVaEM/x2lA kNRALybiEcjXO6LxfXrsH78e6lQcaHOHsBVBKaVfRNce9XyJomWfziVGRY39fLWx YYMFklOwuZQePn6BTr4ufH5F+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0hGb6K XDnMDNPmIFzkRFZhYfklMB8GA1UdIwQYMBaAFFCJ4tyBLTTfPU21g1XP8UsHrt65 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzVDNi83MzYxNzc3Mjc4 NTgxMUVDOTY5OTMyMEVDNEY5QUUwMi9VSW5pM0lFdE5OODlUYldEVmNfeFN3ZXUz cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VJbmkzSUV0Tk44OVRiV0RWY194U3dldTNyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzVDNi83MzYxNzc3Mjc4NTgxMUVDOTY5OTMyMEVDNEY5QUUwMi9VSW5pM0lFdE5O ODlUYldEVmNfeFN3ZXUzcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl3RYf3H3Zyq2NgVg/G0WnYl2U1FDAGBPI+cYvSpv9kvfTBOuU8ozF UuY5ousE6JBGegRlosxPEB1CYSBXOgcm1K30MCKR1jEnwHp6Dng3J6hTK3Yh5f32 VbVAIXUDDh15wwmgBHWJl0baONpFYtLdHyTNgAEEL8v+Oi9kqz0h6blWfH9NDPxA JgoEnIWxcgwvfnQhUmA5XGIAE/5INxWAzyiY3DkofINjCt9X7Z6czGh0M4hFAsTe kJ/sFD6+lk6UdgUkMJ4k3AgSYE6QJiieHaP36BgUn3nxrjmGYRIm+ZNTbsiQS6u6 vyc004n71FIEY4V1AE3kCal6wzUXO4nU -----END CERTIFICATE-----Generated at Sun May 11 19:06:23 2025 by rpki-client