$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft File: UgGonTDEgplFBBjJVrh3JJcG6Vc.mft (raw, json) Hash identifier: MnQEpVjYAIz4SJ9dOLEwVO2hcGLOt4AH1iACUu0ImWg= Subject key identifier: 84:6E:1F:12:89:29:09:7F:F7:4C:32:BF:B5:8D:36:6B:72:61:EB:E1 Authority key identifier: 52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57 Certificate issuer: /CN=A91E7E94/serialNumber=5201A89D30C48299450418C956B877249706E957 Certificate serial: 0527 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft Manifest number: 0523 Signing time: Sat 10 May 2025 23:08:15 +0000 Manifest this update: Sat 10 May 2025 23:08:14 +0000 Manifest next update: Sat 17 May 2025 23:08:14 +0000 Files and hashes: 1: UgGonTDEgplFBBjJVrh3JJcG6Vc.crl (hash: nY/q+m7Xo6P5MsWdyWeEKdu20VkLxuGYpoarg8ogxpU=) 2: FAF4A0E0FB3211EB967B1759C4F9AE02.roa (hash: 8p1P4mNUhhk/yC7+ElhDZdRf1VN2ly1Yqll2ITw0L78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1319 (0x527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E94, serialNumber=5201A89D30C48299450418C956B877249706E957 Validity Not Before: May 10 23:08:14 2025 GMT Not After : May 17 23:08:14 2025 GMT Subject: CN=681fdc5e-a887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ea:dc:0b:30:96:6e:d9:ad:ad:86:50:25:38: 31:b3:fa:92:7d:ce:91:88:56:ce:28:25:39:8d:88: 8f:68:70:f3:82:af:22:4c:5a:11:a8:35:d2:98:24: 14:b8:24:09:10:b2:ce:ce:f9:98:7a:b1:0b:5e:cb: 3f:92:c3:bc:96:63:3b:93:a2:fe:44:2c:e7:75:9f: ec:ab:3c:d1:b9:49:0c:90:b6:35:29:0b:dc:de:de: bd:1b:08:9a:57:10:4f:7e:9f:25:ff:9a:57:e8:54: 76:c2:09:76:a8:a6:57:a3:46:70:9f:7c:92:80:d9: 43:86:90:ca:21:09:90:d1:62:22:93:34:b0:a8:cf: 59:e3:00:3f:41:1d:4e:8a:ef:af:8e:a1:ab:41:b8: 8c:9c:2a:d8:70:1e:cf:88:9f:1f:da:ae:93:3a:53: c5:d1:6c:aa:05:6e:52:e7:1d:28:19:14:fe:db:76: 6c:f4:89:b1:1d:78:c4:0a:1e:ad:e9:20:1c:30:3a: b3:54:6d:70:87:68:da:9c:a1:94:a3:3c:db:f0:8c: 78:e0:3f:d5:6c:85:3b:a7:06:08:21:b9:65:f1:99: 08:d6:6b:b1:d5:a8:ba:c0:12:76:9b:04:e7:42:45: b1:0d:ba:97:40:e0:e4:64:8c:11:89:ad:2a:cb:a9: 34:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6E:1F:12:89:29:09:7F:F7:4C:32:BF:B5:8D:36:6B:72:61:EB:E1 X509v3 Authority Key Identifier: keyid:52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:01:05:db:a3:b0:95:37:37:a8:49:39:74:a1:c7:61:90:85: 3f:b3:68:6d:f1:dd:46:a4:79:1d:8b:46:95:0e:a4:82:e3:2c: d0:44:5b:0f:36:d2:ec:3c:13:ad:9c:ca:cd:b5:46:60:39:f0: 6b:74:12:3e:c3:e4:df:66:7e:e4:63:ee:dc:79:bc:ef:27:b1: a7:e7:88:41:e6:7f:a6:ee:ad:cf:1a:6b:00:9f:b7:40:29:dc: 97:52:20:2f:75:11:bb:87:7e:60:f1:fd:c3:ed:c5:b4:2f:b6: 9d:86:20:fc:22:93:d9:b0:d0:79:70:18:f2:b1:53:84:b2:83: 75:e7:65:eb:0c:a5:64:47:ef:12:1a:37:df:3f:c1:48:82:cf: 7e:8c:1e:46:79:5a:20:67:01:80:ce:bb:03:df:cb:5a:e8:4d: 89:bb:46:c8:0e:59:0b:7d:8a:f4:cf:f4:98:7f:1a:55:9e:39: e8:51:51:ca:6c:9e:88:ce:c3:01:c2:bd:10:1b:17:1a:58:95: f9:40:a5:fd:2a:a6:2a:f4:07:a8:97:03:ad:d9:aa:88:33:6b: 50:c8:93:ad:6e:4d:f0:7c:46:ac:fd:7b:e9:bc:d9:c3:d7:18: fa:37:51:95:9d:b0:19:f2:5d:ac:38:ee:01:ad:5a:da:87:22: 48:72:13:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFOTQxMTAvBgNVBAUTKDUyMDFBODlEMzBDNDgyOTk0NTA0MThDOTU2Qjg3NzI0 OTcwNkU5NTcwHhcNMjUwNTEwMjMwODE0WhcNMjUwNTE3MjMwODE0WjAYMRYwFAYD VQQDEw02ODFmZGM1ZS1hODg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOrcCzCWbtmtrYZQJTgxs/qSfc6RiFbOKCU5jYiPaHDzgq8iTFoRqDXSmCQU uCQJELLOzvmYerELXss/ksO8lmM7k6L+RCzndZ/sqzzRuUkMkLY1KQvc3t69Gwia VxBPfp8l/5pX6FR2wgl2qKZXo0Zwn3ySgNlDhpDKIQmQ0WIikzSwqM9Z4wA/QR1O iu+vjqGrQbiMnCrYcB7PiJ8f2q6TOlPF0WyqBW5S5x0oGRT+23Zs9ImxHXjECh6t 6SAcMDqzVG1wh2janKGUozzb8Ix44D/VbIU7pwYIIbll8ZkI1mux1ai6wBJ2mwTn QkWxDbqXQODkZIwRia0qy6k06wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRuHxKJ KQl/90wyv7WNNmtyYevhMB8GA1UdIwQYMBaAFFIBqJ0wxIKZRQQYyVa4dySXBulX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U5NC9BMkE3MEM1QUZC MkYxMUVCQTg0MDlFNTRDNEY5QUUwMi9VZ0dvblRERWdwbEZCQmpKVnJoM0pKY0c2 VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VnR29uVERFZ3BsRkJCakpWcmgzSkpjRzZWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0U5NC9BMkE3MEM1QUZCMkYxMUVCQTg0MDlFNTRDNEY5QUUwMi9VZ0dvblRERWdw bEZCQmpKVnJoM0pKY0c2VmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiAQXbo7CVNzeoSTl0ocdhkIU/s2ht8d1GpHkdi0aVDqSC4yzQRFsP NtLsPBOtnMrNtUZgOfBrdBI+w+TfZn7kY+7cebzvJ7Gn54hB5n+m7q3PGmsAn7dA KdyXUiAvdRG7h35g8f3D7cW0L7adhiD8IpPZsNB5cBjysVOEsoN152XrDKVkR+8S GjffP8FIgs9+jB5GeVogZwGAzrsD38ta6E2Ju0bIDlkLfYr0z/SYfxpVnjnoUVHK bJ6IzsMBwr0QGxcaWJX5QKX9KqYq9AeolwOt2aqIM2tQyJOtbk3wfEas/XvpvNnD 1xj6N1GVnbAZ8l2sOO4BrVrahyJIchPF -----END CERTIFICATE-----Generated at Sun May 11 10:37:30 2025 by rpki-client