$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft File: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft (raw, json) Hash identifier: Wl7wtzo46vXtqgfmDIu3e75bsoaRmF3cFRGf5fSq330= Subject key identifier: 44:3C:0F:87:FB:E1:40:22:2D:AA:16:76:06:23:52:83:DF:FD:45:5F Authority key identifier: 52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E Certificate issuer: /CN=A919EF51/serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E Certificate serial: 0B1F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft Manifest number: 0B17 Signing time: Wed 14 May 2025 19:20:59 +0000 Manifest this update: Wed 14 May 2025 19:20:58 +0000 Manifest next update: Wed 21 May 2025 19:20:58 +0000 Files and hashes: 1: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl (hash: O5IvGJLPAQ1DFOJi0MCu6hx9jajVHQ3kwqqVOApCB28=) 2: BC60BC2A63F711EA8CBEB029C4F9AE02.roa (hash: wRvd5l9La3MSVA49dLn9S92nbQQvOi4LJr/5XnlTFpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2847 (0xb1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF51, serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E Validity Not Before: May 14 19:20:58 2025 GMT Not After : May 21 19:20:58 2025 GMT Subject: CN=6824ed1b-8874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8c:2b:17:7f:0d:22:32:8f:cd:8a:f2:a3:f9: e4:4d:bd:7e:c6:d9:51:e8:b6:50:58:a6:e8:c3:73: 7d:25:fa:df:e4:b8:e9:66:7b:e0:7f:7c:fd:57:52: f7:3a:b2:b4:e3:f7:51:26:16:4f:9e:96:1d:09:a9: cf:37:cd:cb:71:53:ac:ab:d6:74:de:f2:a6:98:99: c4:52:f9:12:bb:2c:b0:e7:5a:26:9e:48:cf:6d:b6: 46:3a:d0:31:85:86:c7:4b:4f:ab:03:32:b0:05:7e: e0:17:01:e4:ed:de:81:54:fc:5c:0b:b5:1a:ef:11: 28:3c:fb:ad:1e:f9:68:0c:30:d0:24:cf:7c:65:c8: a0:53:95:5e:09:b3:70:e5:7a:3d:07:a6:a5:9b:02: 3f:9e:39:04:99:80:2a:54:00:1c:56:07:f7:75:e4: 58:34:ac:4c:2e:f0:d5:9d:40:7f:f5:b3:2e:22:dd: a3:d2:46:62:5f:91:ec:ba:8d:47:98:41:a3:77:ea: 7b:8f:e1:00:2b:52:0c:aa:ab:73:ef:09:6e:03:25: e2:6f:aa:18:e7:98:de:7b:20:b8:a0:2a:b3:37:dc: 4c:88:02:18:8d:76:11:f4:8d:db:62:7a:4a:90:6d: 59:84:ae:a7:19:a1:35:20:c4:8d:0c:16:c2:a8:fa: e3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3C:0F:87:FB:E1:40:22:2D:AA:16:76:06:23:52:83:DF:FD:45:5F X509v3 Authority Key Identifier: keyid:52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:77:88:c5:ab:6b:aa:66:3c:14:9c:4d:53:5f:c0:b2:0d:2d: 2c:29:c5:3b:91:5c:37:9d:13:64:1f:2e:ef:49:73:b7:82:ff: 78:e6:ef:fc:b5:34:1e:0e:cf:73:46:1c:5c:39:26:65:ae:d2: 1d:88:c9:a4:06:b0:87:70:88:b5:1e:7f:7c:15:59:55:47:ca: 9c:db:e0:e3:35:9d:33:98:17:01:d5:d1:2f:ad:b3:de:66:b4: af:3a:6e:a2:63:1c:84:7b:48:75:62:53:65:9e:51:56:65:a9: 5d:90:2f:a1:89:47:4c:b1:f1:e1:a5:b2:0c:9d:da:0e:a2:ea: 5e:88:3f:23:a6:0f:37:fb:c8:6a:3e:e1:b5:4a:4a:d3:66:81: e8:49:de:b8:0f:aa:f4:0c:ef:12:06:3e:05:c1:32:7d:05:7b: 91:e7:47:41:81:0a:a0:74:87:30:56:48:01:87:a6:9e:42:0a: 94:7b:49:3b:62:66:d6:ac:56:b8:30:9c:bf:d8:e8:30:71:a6: 63:af:a6:72:4e:f5:d8:4e:9a:38:ea:70:a9:e6:4f:bf:aa:b3: d9:2f:6e:7b:d2:da:3f:3b:af:4e:e1:ab:e4:7a:1f:25:dd:d2: e5:75:e2:1c:e6:4b:2f:00:db:c4:37:9b:69:67:b5:db:e4:63: 61:73:57:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNTExMTAvBgNVBAUTKDUyRDY4MEUwNDVEQ0U5OTA3ODlFMEQ3NzcyNjE3QzYw QzM2RUQxOEUwHhcNMjUwNTE0MTkyMDU4WhcNMjUwNTIxMTkyMDU4WjAYMRYwFAYD VQQDEw02ODI0ZWQxYi04ODc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIwrF38NIjKPzYryo/nkTb1+xtlR6LZQWKbow3N9Jfrf5LjpZnvgf3z9V1L3 OrK04/dRJhZPnpYdCanPN83LcVOsq9Z03vKmmJnEUvkSuyyw51omnkjPbbZGOtAx hYbHS0+rAzKwBX7gFwHk7d6BVPxcC7Ua7xEoPPutHvloDDDQJM98ZcigU5VeCbNw 5Xo9B6almwI/njkEmYAqVAAcVgf3deRYNKxMLvDVnUB/9bMuIt2j0kZiX5Hsuo1H mEGjd+p7j+EAK1IMqqtz7wluAyXib6oY55jeeyC4oCqzN9xMiAIYjXYR9I3bYnpK kG1ZhK6nGaE1IMSNDBbCqPrjFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQ8D4f7 4UAiLaoWdgYjUoPf/UVfMB8GA1UdIwQYMBaAFFLWgOBF3OmQeJ4Nd3JhfGDDbtGO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9CQTNDRDRBNjNE ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9VdGFBNEVYYzZaQjRuZzEzY21GOFlNTnUw WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1V0YUE0RVhjNlpCNG5nMTNjbUY4WU1OdTBZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY1MS9CQTNDRDRBNjNEODIxMUVBOUYyNjczNzBDNEY5QUUwMi9VdGFBNEVYYzZa QjRuZzEzY21GOFlNTnUwWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHd4jFq2uqZjwUnE1TX8CyDS0sKcU7kVw3nRNkHy7vSXO3gv945u/8 tTQeDs9zRhxcOSZlrtIdiMmkBrCHcIi1Hn98FVlVR8qc2+DjNZ0zmBcB1dEvrbPe ZrSvOm6iYxyEe0h1YlNlnlFWZaldkC+hiUdMsfHhpbIMndoOoupeiD8jpg83+8hq PuG1SkrTZoHoSd64D6r0DO8SBj4FwTJ9BXuR50dBgQqgdIcwVkgBh6aeQgqUe0k7 YmbWrFa4MJy/2OgwcaZjr6ZyTvXYTpo46nCp5k+/qrPZL2570to/O69O4avkeh8l 3dLldeIc5ksvANvEN5tpZ7Xb5GNhc1fK -----END CERTIFICATE-----Generated at Thu May 15 09:54:34 2025 by rpki-client