$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft File: ujgt6jovW4xMIgXskp9gG-NP538.mft (raw, json) Hash identifier: hXFiNTmseGnz9i+RbiqVJsB0aCnCvLh05amwUd3vHX0= Subject key identifier: 67:36:87:40:31:A3:3D:34:3D:CC:05:EB:42:37:F4:42:A3:CA:1A:19 Authority key identifier: BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F Certificate issuer: /CN=A91B7B34/serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F Certificate serial: 0C3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft Manifest number: 0C33 Signing time: Sat 10 May 2025 18:19:11 +0000 Manifest this update: Sat 10 May 2025 18:19:10 +0000 Manifest next update: Sat 17 May 2025 18:19:10 +0000 Files and hashes: 1: ujgt6jovW4xMIgXskp9gG-NP538.crl (hash: vP1YlqwmsUYOcOOa2RSuOuKwZyDf+Qqj2WOtBtgk9r4=) 2: 52E56FA806C711EA84978821C4F9AE02.roa (hash: pC6YASmlOW3gbC5Njuzzo1yhASqi/WroinaiHpfVYXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3133 (0xc3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B34, serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F Validity Not Before: May 10 18:19:10 2025 GMT Not After : May 17 18:19:10 2025 GMT Subject: CN=681f989e-3ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:df:e5:87:c6:cb:fe:9c:4b:3b:0b:91:58:ba: a2:8e:c8:fc:25:9f:f5:92:16:8f:06:89:6e:2f:aa: bd:ca:89:c4:55:bf:51:e1:f0:cc:84:b0:a7:9a:77: 43:94:0d:53:dd:2d:e8:80:a1:f4:59:b1:79:4a:1e: fc:54:33:f2:14:49:93:bb:e5:be:4d:68:1a:db:8e: 8e:c2:14:d3:b4:81:80:37:12:50:69:88:82:e9:e4: 8f:bf:5d:77:f7:f7:4b:e2:2a:65:6c:b3:90:a3:8c: e7:91:0a:47:d4:c6:9f:73:b1:44:99:be:57:36:95: 33:63:d2:25:9f:2a:06:dc:14:c6:a8:9e:7a:1b:4e: dd:68:c0:1e:55:09:e2:e0:e6:f9:d5:48:58:a4:75: dd:c7:eb:82:40:d7:bb:34:91:18:51:9b:68:f2:ea: 10:36:bd:d5:b4:fe:7a:15:e0:9f:54:21:9c:58:30: 04:10:66:db:46:3f:5d:e8:aa:73:82:7e:4e:8a:f5: 58:d6:35:5b:39:b6:24:57:d7:a0:e0:d1:89:da:1d: 0d:1e:22:b6:38:41:71:3a:da:7c:7f:7c:60:6d:3a: 25:cb:b8:7e:23:14:a9:72:2c:46:92:0d:70:95:b6: cd:dd:61:55:d1:a2:8c:71:a0:56:29:7c:05:87:67: 4f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:36:87:40:31:A3:3D:34:3D:CC:05:EB:42:37:F4:42:A3:CA:1A:19 X509v3 Authority Key Identifier: keyid:BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:67:f9:28:91:4c:a5:c5:29:d0:08:ad:e3:ec:11:14:14:2c: 40:ef:30:91:2d:22:fe:f1:0d:91:6a:80:04:82:c9:8a:20:ee: aa:6e:57:27:0a:83:9b:0f:b1:73:dc:f6:5b:43:55:f5:9e:bf: 30:a2:4b:fc:ba:ab:bc:2a:5d:aa:8b:3e:c7:26:25:95:57:4a: 36:f9:6a:5d:37:3f:2f:17:86:c6:3e:fa:22:c7:c7:63:15:f3: 4f:41:c3:42:94:2b:30:a8:c7:c4:56:b5:99:4b:fd:da:ea:b0: 5e:b9:b4:40:c2:9d:e7:40:d3:75:86:4a:4e:0b:37:eb:63:ce: f5:15:5c:52:84:eb:f2:95:70:a1:07:04:12:c6:37:83:de:64: f6:50:12:fb:c8:39:8c:38:49:99:0e:ba:8a:78:51:91:05:78: cf:b0:86:b4:39:42:85:f4:e6:6f:7e:4b:44:b2:a5:3a:2e:45: 49:9c:fd:84:5e:2a:84:ec:25:cb:8b:20:e2:93:e6:47:ed:40: ca:84:73:60:38:5e:63:cc:04:d2:c8:f8:f4:a2:a1:96:3a:1a: 77:11:53:34:72:18:ab:fd:9f:d1:9d:a5:3f:83:6b:e1:ef:3d: 27:f4:0b:5c:e3:71:dc:fd:b3:1f:ca:16:cf:87:34:ea:d1:0d: 59:6b:64:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMzQxMTAvBgNVBAUTKEJBMzgyREVBM0EyRjVCOEM0QzIyMDVFQzkyOUY2MDFC RTM0RkU3N0YwHhcNMjUwNTEwMTgxOTEwWhcNMjUwNTE3MTgxOTEwWjAYMRYwFAYD VQQDEw02ODFmOTg5ZS0zYWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4d/lh8bL/pxLOwuRWLqijsj8JZ/1khaPBoluL6q9yonEVb9R4fDMhLCnmndD lA1T3S3ogKH0WbF5Sh78VDPyFEmTu+W+TWga246OwhTTtIGANxJQaYiC6eSPv113 9/dL4iplbLOQo4znkQpH1Mafc7FEmb5XNpUzY9IlnyoG3BTGqJ56G07daMAeVQni 4Ob51UhYpHXdx+uCQNe7NJEYUZto8uoQNr3VtP56FeCfVCGcWDAEEGbbRj9d6Kpz gn5OivVY1jVbObYkV9eg4NGJ2h0NHiK2OEFxOtp8f3xgbToly7h+IxSpcixGkg1w lbbN3WFV0aKMcaBWKXwFh2dPsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGc2h0Ax oz00PcwF60I39EKjyhoZMB8GA1UdIwQYMBaAFLo4Leo6L1uMTCIF7JKfYBvjT+d/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IzNC9ERUNFM0VCQTA2 QzYxMUVBQTUxQTYwMjFDNEY5QUUwMi91amd0Nmpvdlc0eE1JZ1hza3A5Z0ctTlA1 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VqZ3Q2am92VzR4TUlnWHNrcDlnRy1OUDUzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IzNC9ERUNFM0VCQTA2QzYxMUVBQTUxQTYwMjFDNEY5QUUwMi91amd0Nmpvdlc0 eE1JZ1hza3A5Z0ctTlA1MzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5Z/kokUylxSnQCK3j7BEUFCxA7zCRLSL+8Q2RaoAEgsmKIO6qblcn CoObD7Fz3PZbQ1X1nr8wokv8uqu8Kl2qiz7HJiWVV0o2+WpdNz8vF4bGPvoix8dj FfNPQcNClCswqMfEVrWZS/3a6rBeubRAwp3nQNN1hkpOCzfrY871FVxShOvylXCh BwQSxjeD3mT2UBL7yDmMOEmZDrqKeFGRBXjPsIa0OUKF9OZvfktEsqU6LkVJnP2E XiqE7CXLiyDik+ZH7UDKhHNgOF5jzATSyPj0oqGWOhp3EVM0chir/Z/RnaU/g2vh 7z0n9Atc43Hc/bMfyhbPhzTq0Q1Za2TU -----END CERTIFICATE-----Generated at Mon May 12 18:35:15 2025 by rpki-client