$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft File: UNqjonFb7c_nFOVthUH381hubvc.mft (raw, json) Hash identifier: 7fPyvFDnd54a3kx+9PSJA9KE9JRAWI9mN0W0DrvvDIY= Subject key identifier: BD:C6:FE:72:8A:60:51:2D:AA:EA:F7:1A:F9:F1:2B:B7:0B:C3:79:D3 Authority key identifier: 50:DA:A3:A2:71:5B:ED:CF:E7:14:E5:6D:85:41:F7:F3:58:6E:6E:F7 Certificate issuer: /CN=A91CBBC4/serialNumber=50DAA3A2715BEDCFE714E56D8541F7F3586E6EF7 Certificate serial: 04D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNqjonFb7c_nFOVthUH381hubvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft Manifest number: 04C8 Signing time: Sun 04 May 2025 23:27:08 +0000 Manifest this update: Sun 04 May 2025 23:27:08 +0000 Manifest next update: Sun 11 May 2025 23:27:08 +0000 Files and hashes: 1: UNqjonFb7c_nFOVthUH381hubvc.crl (hash: h3HBIjdoN3LelDLQeAna/d2qGlZi69H2ok1Eji7f3xY=) 2: 8E8A375A1FA211EC8159E249C4F9AE02.roa (hash: UmJY1BD67VDnKp5rZ226vLsxoH0ZrDVh7W0eseZRq3E=) 3: 2B6A29201FA011ECB867890CC4F9AE02.roa (hash: 4+mLuZV5Nt0cl9Ubgj32YK1pqSi8VCWk8bD6pptyrXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.crl rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNqjonFb7c_nFOVthUH381hubvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 23:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1232 (0x4d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBBC4, serialNumber=50DAA3A2715BEDCFE714E56D8541F7F3586E6EF7 Validity Not Before: May 4 23:27:08 2025 GMT Not After : May 11 23:27:08 2025 GMT Subject: CN=6817f7cc-9acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:66:fd:4a:af:59:51:a5:76:b8:21:1e:83:90: 2c:8a:09:55:2b:e2:ae:34:c9:66:b4:20:52:8f:52: f9:82:cd:79:94:e6:71:7d:5f:57:b6:80:b6:6d:ce: 1d:61:48:01:2d:55:0c:94:b2:9d:4b:47:ee:d6:8d: 17:91:95:cc:c7:d3:28:65:3a:e0:e1:c7:9d:e6:44: 04:5e:78:a0:fc:ef:37:91:d5:33:ea:a2:23:9f:f4: 3d:6c:f0:4a:b7:26:25:e8:8e:f4:74:ba:04:22:54: 34:94:24:a1:b3:a0:f8:46:73:5e:c6:30:f9:27:04: b8:6a:ab:0f:e2:93:d6:48:b2:19:89:e7:8f:e9:a4: 1f:37:82:05:49:7f:27:89:b4:69:d2:7e:61:3b:71: 03:3f:66:f6:36:6f:54:31:1b:6c:51:a8:d3:e7:bf: 24:8a:30:47:b8:67:dd:9f:bd:7b:58:12:b4:98:8b: 09:d3:00:91:ba:ad:68:01:9b:1f:df:34:1f:a7:6e: 5c:8a:3d:1b:81:c6:bb:c4:43:17:42:19:50:e6:67: 75:a6:cb:6d:a6:85:ee:8e:26:01:e2:1a:47:82:c9: e3:f4:f7:13:70:4e:e7:b4:01:ac:2f:a7:45:4d:f8: bf:2a:59:2c:aa:1f:92:85:eb:f2:25:2e:19:e6:57: 78:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C6:FE:72:8A:60:51:2D:AA:EA:F7:1A:F9:F1:2B:B7:0B:C3:79:D3 X509v3 Authority Key Identifier: keyid:50:DA:A3:A2:71:5B:ED:CF:E7:14:E5:6D:85:41:F7:F3:58:6E:6E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNqjonFb7c_nFOVthUH381hubvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:85:d1:e1:49:e6:79:25:af:78:9f:b6:d3:bd:47:fe:4f:1d: 01:13:9c:b7:fe:83:b3:b8:c3:2d:28:14:8d:a3:a6:78:34:34: 55:07:5d:3c:73:7f:9c:da:31:db:3f:4b:9a:bd:f2:57:11:b3: 8d:e7:1c:f9:70:c9:16:2d:bd:b2:a7:d2:24:73:9b:d3:35:1a: 71:53:e7:90:f1:da:98:3c:3b:0a:03:42:97:3d:77:bb:7c:22: 4a:02:2d:5b:8e:62:27:21:2e:d9:f0:a4:98:12:8f:50:59:0b: e3:fb:c8:76:d9:f2:ec:b8:4e:6c:09:c9:c9:08:16:3b:f3:f7: f8:e6:dd:ed:bf:2e:1b:2c:b9:68:75:59:38:a8:71:4d:6f:e2: 61:7c:df:f9:62:0d:79:3e:4a:6a:5d:e7:d5:6d:54:38:06:88: c2:fb:99:66:47:d1:9c:7c:87:1f:fe:e2:71:bb:82:29:ef:09: d4:ad:f9:3d:7c:a8:6f:4b:fa:c3:c6:f0:36:88:14:17:9d:61: 05:36:c0:08:ea:6f:3d:3b:2a:6f:1c:88:57:27:85:10:34:03: d2:74:84:8d:a4:d6:20:43:a6:3f:54:22:41:ec:8f:f3:90:ba: f5:16:78:8c:eb:b1:b0:62:39:88:81:1b:2f:c2:1c:1e:66:57: 93:00:41:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCQzQxMTAvBgNVBAUTKDUwREFBM0EyNzE1QkVEQ0ZFNzE0RTU2RDg1NDFGN0Yz NTg2RTZFRjcwHhcNMjUwNTA0MjMyNzA4WhcNMjUwNTExMjMyNzA4WjAYMRYwFAYD VQQDEw02ODE3ZjdjYy05YWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mb9Sq9ZUaV2uCEeg5AsiglVK+KuNMlmtCBSj1L5gs15lOZxfV9XtoC2bc4d YUgBLVUMlLKdS0fu1o0XkZXMx9MoZTrg4ced5kQEXnig/O83kdUz6qIjn/Q9bPBK tyYl6I70dLoEIlQ0lCShs6D4RnNexjD5JwS4aqsP4pPWSLIZieeP6aQfN4IFSX8n ibRp0n5hO3EDP2b2Nm9UMRtsUajT578kijBHuGfdn717WBK0mIsJ0wCRuq1oAZsf 3zQfp25cij0bgca7xEMXQhlQ5md1psttpoXujiYB4hpHgsnj9PcTcE7ntAGsL6dF Tfi/Klksqh+ShevyJS4Z5ld4SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3G/nKK YFEtqur3GvnxK7cLw3nTMB8GA1UdIwQYMBaAFFDao6JxW+3P5xTlbYVB9/NYbm73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkJDNC8zQzRCMDEzMjFG OUMxMUVDOTA5NEYwNURDNEY5QUUwMi9VTnFqb25GYjdjX25GT1Z0aFVIMzgxaHVi dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VOcWpvbkZiN2NfbkZPVnRoVUgzODFodWJ2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkJDNC8zQzRCMDEzMjFGOUMxMUVDOTA5NEYwNURDNEY5QUUwMi9VTnFqb25GYjdj X25GT1Z0aFVIMzgxaHVidmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMhdHhSeZ5Ja94n7bTvUf+Tx0BE5y3/oOzuMMtKBSNo6Z4NDRVB108 c3+c2jHbP0uavfJXEbON5xz5cMkWLb2yp9Ikc5vTNRpxU+eQ8dqYPDsKA0KXPXe7 fCJKAi1bjmInIS7Z8KSYEo9QWQvj+8h22fLsuE5sCcnJCBY78/f45t3tvy4bLLlo dVk4qHFNb+JhfN/5Yg15PkpqXefVbVQ4BojC+5lmR9GcfIcf/uJxu4Ip7wnUrfk9 fKhvS/rDxvA2iBQXnWEFNsAI6m89OypvHIhXJ4UQNAPSdISNpNYgQ6Y/VCJB7I/z kLr1FniM67GwYjmIgRsvwhweZleTAEED -----END CERTIFICATE-----Generated at Mon May 5 02:29:54 2025 by rpki-client