$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft File: umDC9ghXfO5rvRSTcht6rsoodis.mft (raw, json) Hash identifier: kzK8h93I1bI77k6YJb25hEsRi3SXdzb2tf9groLzUX0= Subject key identifier: 5B:2D:41:48:3E:32:08:7C:8D:5B:D5:D0:4A:BA:49:75:F6:A3:E7:5B Authority key identifier: BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B Certificate issuer: /CN=A91326FF/serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft Manifest number: 7E Signing time: Mon 21 Apr 2025 05:29:52 +0000 Manifest this update: Mon 21 Apr 2025 05:29:51 +0000 Manifest next update: Mon 28 Apr 2025 05:29:51 +0000 Files and hashes: 1: umDC9ghXfO5rvRSTcht6rsoodis.crl (hash: eduTZboWikk6JGV2S9EYZ181GS4HsK0i5MrKnNnNj7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 05:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326FF, serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B Validity Not Before: Apr 21 05:29:51 2025 GMT Not After : Apr 28 05:29:51 2025 GMT Subject: CN=6805d7cf-a137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:70:ac:14:ee:0f:df:46:ed:6e:f0:10:6c: d2:5e:33:da:75:45:8e:32:aa:7d:64:5e:8c:50:1c: 1b:8e:0d:a1:8b:03:da:fb:e9:30:2c:08:be:6c:fc: d2:ed:23:d0:25:86:da:2e:b8:9c:26:7c:94:e7:51: 25:10:e0:b0:fc:ca:9d:90:9f:be:1c:f3:65:4f:2d: 37:b7:64:d6:7d:0a:3e:7a:49:56:c2:47:56:7b:8f: 29:cb:eb:f0:60:5b:02:b2:02:45:d9:a7:ff:9d:e3: ba:c1:02:e6:33:ec:ce:23:67:f8:2c:73:71:55:ec: d4:b1:85:de:7b:83:b2:5b:8e:77:c8:69:a5:ef:41: 89:e5:fb:da:ac:9b:e6:b9:e6:cb:8f:dd:7e:c0:e3: 50:e9:41:38:ce:0b:ee:8c:03:ac:d3:ab:b7:7a:35: 8b:81:05:96:89:dc:0b:d7:c6:ab:e3:74:52:20:8c: 04:dd:c1:12:c6:f4:52:d7:6e:c5:fc:e2:cb:b5:d4: bf:08:0c:64:c4:67:5a:7c:bf:9a:6d:0e:3f:4c:a0: 81:a9:1f:c4:03:2f:e6:8b:44:aa:83:68:b7:13:de: 81:39:86:3b:b7:a6:d3:bd:b9:9f:b5:02:27:9b:0d: a1:9f:6e:77:29:d6:c0:dc:c0:36:37:fe:a4:e9:78: ee:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2D:41:48:3E:32:08:7C:8D:5B:D5:D0:4A:BA:49:75:F6:A3:E7:5B X509v3 Authority Key Identifier: keyid:BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:82:69:20:2d:a1:99:54:de:8e:20:f5:10:6e:42:9c:06:21: ab:5f:2c:72:98:f7:23:62:3a:7f:87:3b:03:14:51:81:06:d8: 2c:1e:76:43:28:9f:01:eb:a6:d4:37:5a:a4:5b:dd:54:f2:5e: 40:80:57:82:3c:d5:8d:ee:6c:50:4e:fa:47:ae:e8:45:1b:bd: ec:e4:a6:0c:e6:9e:a8:df:a6:3e:47:44:e4:0a:49:fb:b6:b5: ec:78:c1:17:63:51:f2:12:e0:9e:d4:0c:65:72:93:a2:07:58: 61:be:e5:71:b9:36:d1:d0:36:ce:2c:3f:7e:25:0b:a8:0f:08: 72:37:63:70:e5:f5:4b:5d:5f:92:0a:f4:f4:4f:30:7e:f9:22: e6:03:d2:2a:92:b0:ec:2d:d9:39:58:23:23:ba:41:1b:d5:90: 5f:51:88:a5:b6:ee:a4:0d:10:d5:ed:56:b2:4a:79:ba:88:07: 23:72:74:1d:58:66:e1:dd:4e:9d:51:27:13:17:2a:e2:76:6e: f0:3e:2e:a1:39:a9:e1:b8:f5:2b:bc:8d:44:19:91:cf:e1:57: 70:9c:8e:e4:7e:4b:af:7e:ca:94:65:2d:bc:8f:40:2e:3d:fd: 2f:ca:cd:97:9a:a4:00:ba:5f:e3:95:0f:21:b5:55:47:ce:20: 3e:88:69:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MjZGRjExMC8GA1UEBRMoQkE2MEMyRjYwODU3N0NFRTZCQkQxNDkzNzIxQjdBQUVD QTI4NzYyQjAeFw0yNTA0MjEwNTI5NTFaFw0yNTA0MjgwNTI5NTFaMBgxFjAUBgNV BAMTDTY4MDVkN2NmLWExMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEzHCsFO4P30btbvAQbNJeM9p1RY4yqn1kXoxQHBuODaGLA9r76TAsCL5s/NLt I9AlhtouuJwmfJTnUSUQ4LD8yp2Qn74c82VPLTe3ZNZ9Cj56SVbCR1Z7jynL6/Bg WwKyAkXZp/+d47rBAuYz7M4jZ/gsc3FV7NSxhd57g7JbjnfIaaXvQYnl+9qsm+a5 5suP3X7A41DpQTjOC+6MA6zTq7d6NYuBBZaJ3AvXxqvjdFIgjATdwRLG9FLXbsX8 4su11L8IDGTEZ1p8v5ptDj9MoIGpH8QDL+aLRKqDaLcT3oE5hju3ptO9uZ+1Aieb DaGfbncp1sDcwDY3/qTpeO5VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWy1BSD4y CHyNW9XQSrpJdfaj51swHwYDVR0jBBgwFoAUumDC9ghXfO5rvRSTcht6rsoodisw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyNkZGLzlDRjA0RDNDNUY4 RTExRUZCMjNFNzk0NUM0RjlBRTAyL3VtREM5Z2hYZk81cnZSU1RjaHQ2cnNvb2Rp cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdW1EQzlnaFhmTzVydlJTVGNodDZyc29vZGlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy NkZGLzlDRjA0RDNDNUY4RTExRUZCMjNFNzk0NUM0RjlBRTAyL3VtREM5Z2hYZk81 cnZSU1RjaHQ2cnNvb2Rpcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD+CaSAtoZlU3o4g9RBuQpwGIatfLHKY9yNiOn+HOwMUUYEG2CwedkMo nwHrptQ3WqRb3VTyXkCAV4I81Y3ubFBO+keu6EUbvezkpgzmnqjfpj5HROQKSfu2 tex4wRdjUfIS4J7UDGVyk6IHWGG+5XG5NtHQNs4sP34lC6gPCHI3Y3Dl9UtdX5IK 9PRPMH75IuYD0iqSsOwt2TlYIyO6QRvVkF9RiKW27qQNENXtVrJKebqIByNydB1Y ZuHdTp1RJxMXKuJ2bvA+LqE5qeG49Su8jUQZkc/hV3CcjuR+S69+ypRlLbyPQC49 /S/KzZeapAC6X+OVDyG1VUfOID6IaTs= -----END CERTIFICATE-----Generated at Tue Apr 22 06:06:29 2025 by rpki-client