$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft File: UMP9EvajMVgZtSurzBmPsNv9QTo.mft (raw, json) Hash identifier: Sdh8+EgPDouyI6qtQK3pCqbfUEZjbzgE50fuhv54+1M= Subject key identifier: FC:0A:95:CC:33:50:50:46:8F:E3:40:A8:9F:FF:C1:CB:A5:27:AD:10 Authority key identifier: 50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A Certificate issuer: /CN=A91CE616/serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A Certificate serial: 03C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft Manifest number: 03C1 Signing time: Thu 17 Apr 2025 00:17:25 +0000 Manifest this update: Thu 17 Apr 2025 00:17:24 +0000 Manifest next update: Thu 24 Apr 2025 00:17:24 +0000 Files and hashes: 1: UMP9EvajMVgZtSurzBmPsNv9QTo.crl (hash: PuNEH6AQocdbhs2rZBYsSimyetPg1zEC29Gn6/ohWow=) 2: 296C190484AD11EC9C3F837CC4F9AE02.roa (hash: /RxOlV3ierU9U8XUpOrcDZ1BfZBiiZXrWx/RXW8pGyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 00:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 966 (0x3c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE616, serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A Validity Not Before: Apr 17 00:17:24 2025 GMT Not After : Apr 24 00:17:24 2025 GMT Subject: CN=68004895-e947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3c:3a:97:1b:a9:f3:f8:51:f7:8e:42:6c:6f: d0:fe:f7:1a:4d:38:18:17:5c:b4:5b:f0:1c:b4:de: bd:bb:b7:23:be:9a:67:ab:a2:81:79:bf:b1:06:69: ec:40:f0:bf:f2:de:f9:a0:51:fa:83:d2:fb:e4:ec: 1d:9d:26:74:75:22:b5:2c:82:fe:65:9f:72:b0:22: 86:f5:05:e3:2e:de:06:1f:e8:cd:1c:da:de:56:1d: 88:40:41:e6:48:f7:ba:3d:93:30:dc:58:a2:f0:63: d6:6a:80:c3:7e:9c:8e:f1:6a:e6:48:bb:7d:eb:c3: 84:53:bb:b8:44:50:c4:6c:2f:c5:9f:55:7c:99:99: eb:d7:26:42:ef:d2:41:ec:16:89:a5:45:67:86:e8: b5:da:44:da:51:34:ad:45:79:bc:c8:b6:2a:aa:ea: 4f:91:55:7d:13:2e:6c:f4:6f:06:c5:b0:c8:13:cd: ff:cf:14:87:7a:01:33:87:dd:0d:f7:4b:b0:78:4c: 8e:e6:42:d9:fb:f3:e4:2c:f0:f1:da:1b:3e:37:30: 8b:e2:b1:9d:4f:bc:94:5d:85:13:12:dc:86:a1:fa: df:a3:9d:a8:25:0a:b1:da:5d:b3:77:00:5a:c1:fc: 73:cb:d2:3e:97:bc:cd:89:35:67:d0:6e:69:51:b0: 24:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0A:95:CC:33:50:50:46:8F:E3:40:A8:9F:FF:C1:CB:A5:27:AD:10 X509v3 Authority Key Identifier: keyid:50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:7d:60:e8:84:b6:99:c7:bc:c3:bc:57:30:fa:93:53:a6:07: 2a:37:34:b5:e8:56:27:b0:a6:4d:53:60:ec:4b:6e:85:92:d0: 6c:8c:42:3e:23:f9:1d:c4:2e:e3:94:a4:77:ae:05:fb:b2:ac: 0a:f9:a4:2d:f2:27:63:27:d2:08:a1:6c:a1:a3:e4:b5:1d:bc: 6b:5f:a8:39:be:a7:40:41:a4:78:0b:8a:fc:9e:9d:09:f4:e4: e3:4b:ac:63:94:0e:8a:cd:cc:19:34:f7:e5:36:8e:41:2e:28: 31:bd:50:34:61:ef:89:d2:30:7b:07:3d:b1:38:7c:da:88:b8: 1c:a9:3d:ac:c9:b7:e9:8c:89:a9:57:5b:07:08:1e:0e:1c:96: 0e:1e:b6:70:ba:d2:ba:40:54:de:d9:83:f1:4f:b1:b3:22:41: 33:c7:4e:c5:03:00:ae:b6:e3:7b:52:c6:cb:10:cb:5b:fb:fb: 54:0c:ee:a4:a6:42:0a:07:bd:40:b0:e7:8f:f1:3d:fe:44:f6: 3f:b1:59:ad:83:b0:c5:4c:cd:a3:3e:ed:90:0b:d2:86:6d:30: 77:57:ed:db:40:96:35:31:3d:ed:cf:b8:6e:78:55:a9:dc:07: a3:5e:08:a7:78:d6:06:28:42:e2:b1:75:0b:06:39:9c:b4:2f: 57:a9:e7:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2MTYxMTAvBgNVBAUTKDUwQzNGRDEyRjZBMzMxNTgxOUI1MkJBQkNDMTk4RkIw REJGRDQxM0EwHhcNMjUwNDE3MDAxNzI0WhcNMjUwNDI0MDAxNzI0WjAYMRYwFAYD VQQDEw02ODAwNDg5NS1lOTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDw6lxup8/hR945CbG/Q/vcaTTgYF1y0W/ActN69u7cjvppnq6KBeb+xBmns QPC/8t75oFH6g9L75OwdnSZ0dSK1LIL+ZZ9ysCKG9QXjLt4GH+jNHNreVh2IQEHm SPe6PZMw3Fii8GPWaoDDfpyO8WrmSLt968OEU7u4RFDEbC/Fn1V8mZnr1yZC79JB 7BaJpUVnhui12kTaUTStRXm8yLYqqupPkVV9Ey5s9G8GxbDIE83/zxSHegEzh90N 90uweEyO5kLZ+/PkLPDx2hs+NzCL4rGdT7yUXYUTEtyGofrfo52oJQqx2l2zdwBa wfxzy9I+l7zNiTVn0G5pUbAk4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwKlcwz UFBGj+NAqJ//wculJ60QMB8GA1UdIwQYMBaAFFDD/RL2ozFYGbUrq8wZj7Db/UE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTYxNi9BN0U0MjkxNjg0 QTgxMUVDQjI1MDA4NzFDNEY5QUUwMi9VTVA5RXZhak1WZ1p0U3VyekJtUHNOdjlR VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VNUDlFdmFqTVZnWnRTdXJ6Qm1Qc052OVFUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTYxNi9BN0U0MjkxNjg0QTgxMUVDQjI1MDA4NzFDNEY5QUUwMi9VTVA5RXZhak1W Z1p0U3VyekJtUHNOdjlRVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqfWDohLaZx7zDvFcw+pNTpgcqNzS16FYnsKZNU2DsS26FktBsjEI+ I/kdxC7jlKR3rgX7sqwK+aQt8idjJ9IIoWyho+S1HbxrX6g5vqdAQaR4C4r8np0J 9OTjS6xjlA6KzcwZNPflNo5BLigxvVA0Ye+J0jB7Bz2xOHzaiLgcqT2sybfpjImp V1sHCB4OHJYOHrZwutK6QFTe2YPxT7GzIkEzx07FAwCutuN7UsbLEMtb+/tUDO6k pkIKB71AsOeP8T3+RPY/sVmtg7DFTM2jPu2QC9KGbTB3V+3bQJY1MT3tz7hueFWp 3AejXgineNYGKELisXULBjmctC9Xqeei -----END CERTIFICATE-----Generated at Fri Apr 18 06:11:48 2025 by rpki-client