$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft File: UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft (raw, json) Hash identifier: CbU3NYZkQF+ctDVSnNFQgyhu7UlqYdGWPHSXqjrBnGo= Subject key identifier: 62:86:DB:37:B5:C9:93:0C:E3:1B:D9:E6:C2:86:57:C6:EC:E2:5B:90 Authority key identifier: 50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3 Certificate issuer: /CN=A91E5191/serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3 Certificate serial: 076F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft Manifest number: 0767 Signing time: Mon 12 May 2025 21:21:34 +0000 Manifest this update: Mon 12 May 2025 21:21:34 +0000 Manifest next update: Mon 19 May 2025 21:21:34 +0000 Files and hashes: 1: UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl (hash: GQLKHRRCQF4/lv2Ky283sDkTyS3PAx6Zh/OAV9Hb6W8=) 2: 3E78F3541E2D11EB95754317C4F9AE02.roa (hash: zj2/IQcxrFfQP3sb/0xMN/kSgo/BiJLwAfEBd9gJdG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1903 (0x76f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5191, serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3 Validity Not Before: May 12 21:21:34 2025 GMT Not After : May 19 21:21:34 2025 GMT Subject: CN=6822665e-0797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:11:a9:d3:bf:6f:e5:16:53:99:61:9b:fa:ac: f0:e8:c8:65:3e:0b:ce:05:89:31:9a:62:a5:61:ec: fe:d2:19:d3:48:66:56:a8:d8:d7:98:0c:76:da:5a: a7:1c:f2:92:9a:ff:52:4d:d7:e4:1f:03:c1:f3:05: ec:22:ca:90:ad:c7:44:78:ae:f8:b2:82:6e:03:75: 6c:2c:0d:2e:c5:b6:5e:2e:d4:d0:a9:64:2a:48:80: 77:3a:cf:e7:4a:0e:c1:ef:1e:9c:aa:b7:e9:ab:89: d1:0c:24:1a:53:1b:25:37:e7:41:69:07:e9:ae:69: c0:d7:e0:c9:da:17:a0:ac:3c:d7:50:3e:97:29:f4: 31:9b:39:4d:f1:54:49:7e:32:39:45:21:bf:80:f4: 32:18:5f:1e:1c:38:49:83:f1:94:33:53:7f:e0:d1: 7d:7c:98:08:76:c8:6b:30:13:14:8c:bc:01:fb:4e: 6e:bc:63:39:a7:ec:75:a3:21:ae:c9:79:7d:5c:27: b7:4c:0c:17:0c:66:51:ac:72:df:47:c6:79:88:39: 46:11:29:b6:19:08:93:f9:ba:cd:b6:01:52:82:ce: c4:32:88:0c:aa:14:f5:df:30:e2:16:1e:08:6a:98: 83:2e:02:43:d0:01:02:e1:32:90:9e:bd:7c:5f:fa: 6a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:86:DB:37:B5:C9:93:0C:E3:1B:D9:E6:C2:86:57:C6:EC:E2:5B:90 X509v3 Authority Key Identifier: keyid:50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f8:88:f9:23:10:b6:89:b5:2c:ca:19:10:e6:02:e3:ce:18: c5:d0:d1:b7:8b:56:e6:27:4e:3a:05:ca:c9:98:b2:75:16:9a: 8e:46:2c:87:1b:aa:e1:0b:dc:48:95:61:c7:4e:2d:7e:92:c9: 95:df:41:c0:a7:06:d7:94:5b:5b:84:fc:39:54:fe:82:ae:d5: 7c:58:12:4e:ac:c1:cd:d6:4c:76:a1:3d:63:b4:93:71:a6:b9: 10:e8:d5:50:00:6b:2e:74:57:03:92:da:bc:af:47:22:1f:89: 2a:81:b7:d8:39:8e:c7:97:2e:40:3f:fb:7e:42:88:a6:ef:7f: 3e:f1:a2:f4:d8:05:34:bc:af:b7:ab:0a:2a:22:dd:88:17:81: b0:fb:9f:73:7a:e3:b9:0a:12:8d:4d:63:32:62:f9:b4:2a:ba: f1:39:e5:35:1d:75:74:42:1f:1c:fe:a5:cf:4b:2c:96:85:9c: e7:e0:71:77:d1:f0:a0:99:b5:f9:5e:4d:61:35:d6:08:02:57: c9:83:dd:50:ad:0d:a0:fc:b4:d2:ca:9e:6a:21:3e:a2:15:5e: 85:38:cf:0f:13:10:31:27:4d:4f:50:5c:bb:a6:a1:a9:14:1e: e8:1f:5d:b1:9a:8c:45:99:54:c3:c1:ba:91:2d:39:7d:32:4a: c8:6c:e0:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUxOTExMTAvBgNVBAUTKDUwQTcxMTZCQjlGMzY5N0JDNUUzRTIyMkVGMDM1Rjcw MzQyQ0REQTMwHhcNMjUwNTEyMjEyMTM0WhcNMjUwNTE5MjEyMTM0WjAYMRYwFAYD VQQDEw02ODIyNjY1ZS0wNzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hGp079v5RZTmWGb+qzw6MhlPgvOBYkxmmKlYez+0hnTSGZWqNjXmAx22lqn HPKSmv9STdfkHwPB8wXsIsqQrcdEeK74soJuA3VsLA0uxbZeLtTQqWQqSIB3Os/n Sg7B7x6cqrfpq4nRDCQaUxslN+dBaQfprmnA1+DJ2hegrDzXUD6XKfQxmzlN8VRJ fjI5RSG/gPQyGF8eHDhJg/GUM1N/4NF9fJgIdshrMBMUjLwB+05uvGM5p+x1oyGu yXl9XCe3TAwXDGZRrHLfR8Z5iDlGESm2GQiT+brNtgFSgs7EMogMqhT13zDiFh4I apiDLgJD0AEC4TKQnr18X/pqgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKG2ze1 yZMM4xvZ5sKGV8bs4luQMB8GA1UdIwQYMBaAFFCnEWu582l7xePiIu8DX3A0LN2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTE5MS80OEFBMDcwNjE5 NzIxMUVCODA1RTZCN0ZDNEY5QUUwMi9VS2NSYTduemFYdkY0LUlpN3dOZmNEUXMz YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLY1JhN256YVh2RjQtSWk3d05mY0RRczNhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTE5MS80OEFBMDcwNjE5NzIxMUVCODA1RTZCN0ZDNEY5QUUwMi9VS2NSYTduemFY dkY0LUlpN3dOZmNEUXMzYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM+Ij5IxC2ibUsyhkQ5gLjzhjF0NG3i1bmJ046BcrJmLJ1FpqORiyH G6rhC9xIlWHHTi1+ksmV30HApwbXlFtbhPw5VP6CrtV8WBJOrMHN1kx2oT1jtJNx prkQ6NVQAGsudFcDktq8r0ciH4kqgbfYOY7Hly5AP/t+Qoim738+8aL02AU0vK+3 qwoqIt2IF4Gw+59zeuO5ChKNTWMyYvm0KrrxOeU1HXV0Qh8c/qXPSyyWhZzn4HF3 0fCgmbX5Xk1hNdYIAlfJg91QrQ2g/LTSyp5qIT6iFV6FOM8PExAxJ01PUFy7pqGp FB7oH12xmoxFmVTDwbqRLTl9MkrIbODv -----END CERTIFICATE-----Generated at Tue May 13 00:38:49 2025 by rpki-client