$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft File: Ska_UrGTBkf9JbeWkm28YUBL4-0.mft (raw, json) Hash identifier: RHIprAr98PsxiB4BaYPRiJ8Js7g/9/0hou0D7aX8b7g= Subject key identifier: 9B:10:94:A2:F0:94:C4:74:AC:90:02:91:57:8F:29:EA:A6:1F:B5:A2 Authority key identifier: 4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED Certificate issuer: /CN=A91A8859/serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED Certificate serial: 0C43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft Manifest number: 0C3B Signing time: Wed 14 May 2025 18:35:32 +0000 Manifest this update: Wed 14 May 2025 18:35:32 +0000 Manifest next update: Wed 21 May 2025 18:35:32 +0000 Files and hashes: 1: Ska_UrGTBkf9JbeWkm28YUBL4-0.crl (hash: pHIBSnIAcgRmCfOuJHaIP+mrYezH6VNYfFMwJtaMLWw=) 2: 692ABA5A09DF11EAA6052433C4F9AE02.roa (hash: Ry01yZ5BQjClLdraAGF0vxY6zRTp62DNKwkQE7m6ywY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3139 (0xc43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8859, serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED Validity Not Before: May 14 18:35:32 2025 GMT Not After : May 21 18:35:32 2025 GMT Subject: CN=6824e274-f3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:e0:8e:e3:98:b4:49:2d:83:24:d1:1a:9d: 59:fd:b1:43:81:0b:5f:6f:a5:76:e5:05:cd:cc:fa: 9e:e5:dc:98:07:84:07:46:68:25:4b:2b:03:01:89: 8a:58:29:e4:a0:eb:e7:99:a4:39:e9:b9:fc:31:62: be:fe:83:b8:83:bb:1d:26:96:5e:fc:18:43:d3:ca: 63:56:62:02:92:a6:8a:ac:80:d9:ce:d0:3d:47:ed: 49:8d:b2:1e:f5:c7:a0:37:26:23:38:4a:a6:7e:54: 00:65:40:fa:e3:c7:ea:cd:76:a5:0e:8e:2d:6a:68: 10:a5:1f:25:d7:45:aa:e9:9f:e5:29:c7:92:74:08: 30:a0:b7:39:af:2d:8c:55:f8:62:70:a5:57:58:56: dc:8a:55:67:3b:ed:58:6d:14:c6:7e:a5:f8:79:7e: c5:52:20:9c:a4:1c:8c:64:f4:6f:d8:50:66:ac:56: 52:50:f3:cc:b6:f8:d1:b6:68:73:90:7c:2b:98:74: 5c:c9:ac:72:e7:49:63:d9:2b:82:59:c8:8c:83:42: d7:2c:ed:59:95:c3:f6:55:1d:12:73:7b:d9:d8:0c: 3c:a7:28:8b:bc:35:06:93:e5:c9:d5:37:e6:bb:9a: 27:7b:7d:62:aa:d6:90:49:cd:cd:b9:d3:eb:97:6f: 5d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:10:94:A2:F0:94:C4:74:AC:90:02:91:57:8F:29:EA:A6:1F:B5:A2 X509v3 Authority Key Identifier: keyid:4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:53:23:45:57:bc:eb:3c:b2:98:46:87:3a:5b:23:f9:7f:91: f2:11:77:0d:75:7f:6e:b8:39:5a:25:7e:93:f6:97:52:1a:71: 29:fa:9f:a2:cf:45:e5:7d:ac:f4:27:5f:32:28:99:5c:e0:f3: df:9e:bd:fa:c9:3e:b6:90:38:a5:d0:e3:8c:c3:58:e6:13:6f: b5:77:ae:ba:04:75:b2:ad:80:64:59:2f:a9:6c:8f:2d:49:9e: 69:79:32:7a:24:1d:88:47:b0:cf:c1:8a:fc:7b:58:e3:b8:67: 6b:7b:85:78:33:02:e2:6c:16:9d:6b:d6:8b:63:d9:7f:92:31: 28:43:4d:b8:10:dc:89:74:1c:a2:40:fa:70:9a:93:33:31:21: ce:88:dd:41:09:8b:d5:8a:ef:6f:99:d7:73:31:56:47:5e:b7: 61:f2:f0:04:7c:5b:b4:2f:da:16:6e:c9:46:6f:22:43:ef:e4: a6:c9:34:ba:e1:33:31:f7:bf:f2:01:9d:b8:8e:cb:47:aa:f9: 23:3f:1a:1e:a3:8b:76:8f:2d:24:f1:1e:50:22:48:db:78:80: 1f:09:62:16:eb:a4:a2:58:89:07:27:91:5f:98:8f:ff:bd:00: 97:16:ed:b9:f3:d7:0b:b3:9a:af:7c:40:61:32:33:80:1f:66: 10:9f:08:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg4NTkxMTAvBgNVBAUTKDRBNDZCRjUyQjE5MzA2NDdGRDI1Qjc5NjkyNkRCQzYx NDA0QkUzRUQwHhcNMjUwNTE0MTgzNTMyWhcNMjUwNTIxMTgzNTMyWjAYMRYwFAYD VQQDEw02ODI0ZTI3NC1mM2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsHgjuOYtEktgyTRGp1Z/bFDgQtfb6V25QXNzPqe5dyYB4QHRmglSysDAYmK WCnkoOvnmaQ56bn8MWK+/oO4g7sdJpZe/BhD08pjVmICkqaKrIDZztA9R+1JjbIe 9cegNyYjOEqmflQAZUD648fqzXalDo4tamgQpR8l10Wq6Z/lKceSdAgwoLc5ry2M VfhicKVXWFbcilVnO+1YbRTGfqX4eX7FUiCcpByMZPRv2FBmrFZSUPPMtvjRtmhz kHwrmHRcyaxy50lj2SuCWciMg0LXLO1ZlcP2VR0Sc3vZ2Aw8pyiLvDUGk+XJ1Tfm u5one31iqtaQSc3NudPrl29dlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsQlKLw lMR0rJACkVePKeqmH7WiMB8GA1UdIwQYMBaAFEpGv1KxkwZH/SW3lpJtvGFAS+Pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODg1OS84REJEN0RCQTA1 MjcxMUVBOEYxN0M3MzFDNEY5QUUwMi9Ta2FfVXJHVEJrZjlKYmVXa20yOFlVQkw0 LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NrYV9VckdUQmtmOUpiZVdrbTI4WVVCTDQtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODg1OS84REJEN0RCQTA1MjcxMUVBOEYxN0M3MzFDNEY5QUUwMi9Ta2FfVXJHVEJr ZjlKYmVXa20yOFlVQkw0LTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZUyNFV7zrPLKYRoc6WyP5f5HyEXcNdX9uuDlaJX6T9pdSGnEp+p+i z0Xlfaz0J18yKJlc4PPfnr36yT62kDil0OOMw1jmE2+1d666BHWyrYBkWS+pbI8t SZ5peTJ6JB2IR7DPwYr8e1jjuGdre4V4MwLibBada9aLY9l/kjEoQ024ENyJdByi QPpwmpMzMSHOiN1BCYvViu9vmddzMVZHXrdh8vAEfFu0L9oWbslGbyJD7+SmyTS6 4TMx97/yAZ24jstHqvkjPxoeo4t2jy0k8R5QIkjbeIAfCWIW66SiWIkHJ5FfmI// vQCXFu2589cLs5qvfEBhMjOAH2YQnwg2 -----END CERTIFICATE-----Generated at Thu May 15 09:16:50 2025 by rpki-client