$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft File: umn8tA4zSXV_ok-OM1eRxfAEXVg.mft (raw, json) Hash identifier: 0v0nM2IHt0PBXcqWCLhvbccSFdVBm2vEMqPMZR9Mbzw= Subject key identifier: 0A:BA:08:80:83:18:01:A7:8B:70:10:E4:1C:DD:34:AE:62:25:5D:83 Authority key identifier: BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58 Certificate issuer: /CN=A91EBA81/serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58 Certificate serial: 03FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft Manifest number: 03F0 Signing time: Sat 29 Mar 2025 00:48:36 +0000 Manifest this update: Sat 29 Mar 2025 00:48:36 +0000 Manifest next update: Sat 05 Apr 2025 00:48:36 +0000 Files and hashes: 1: umn8tA4zSXV_ok-OM1eRxfAEXVg.crl (hash: sPIhrJ5PUqmOFVIvdMkoB/mqAXWGGvZRwEamvxXNkAs=) 2: 159DA092E9B711EFB8454123C4F9AE02.roa (hash: tjoX2rKURmmp0SIpilUWla3AD/nRXhfocceVz0iL1og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1019 (0x3fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA81 Validity Not Before: Mar 29 00:48:36 2025 GMT Not After : Apr 5 00:48:36 2025 GMT Subject: CN=67e74364-5ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:84:a0:b5:4e:09:93:3c:c1:e0:07:7f:3a:36: 30:4f:26:bb:3f:95:78:8d:62:b8:a5:af:5c:7b:95: 74:d1:83:d4:c9:ef:f7:41:eb:66:78:f1:cb:c6:65: a6:23:84:c3:53:37:f5:4b:5b:45:51:86:9c:29:36: c5:78:77:27:31:5e:d7:3e:7f:a1:86:cc:7c:e2:4a: 90:d7:bc:fd:73:d8:c3:cf:f2:97:36:25:59:35:01: da:76:ab:2a:70:0f:f3:d1:39:ec:6b:fd:53:c7:50: f6:82:04:ad:d1:b5:6c:01:7f:5e:3c:67:a5:1a:a2: e1:c3:e8:c0:db:3a:b9:26:6f:00:ec:23:82:e9:de: dd:50:8b:ca:04:8c:91:47:de:fc:f1:97:86:8b:92: 68:53:15:a9:f5:6b:1c:65:ea:23:ee:85:87:09:90: 7e:31:2a:f2:8c:23:26:c3:bc:75:46:dc:f3:53:a9: 3c:78:3e:c4:04:47:6f:9d:52:84:2e:52:00:4d:e2: b7:48:71:88:03:39:e2:31:69:33:a2:06:5b:d3:12: b6:11:cd:43:c5:03:c2:61:bc:8a:35:7c:07:80:8a: dd:f4:5a:91:a9:a7:f8:15:57:24:63:ef:c5:b1:dc: f6:4f:18:31:20:2e:4d:8a:a3:51:ab:f9:01:96:68: 74:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BA:08:80:83:18:01:A7:8B:70:10:E4:1C:DD:34:AE:62:25:5D:83 X509v3 Authority Key Identifier: keyid:BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:0a:a1:c6:50:53:72:94:de:6f:9d:c6:18:2c:4e:4c:1d:de: ee:1c:64:37:7d:3b:16:a8:ce:25:21:b3:f2:21:5d:1f:32:73: 4d:5c:a7:f9:a3:c8:29:c9:8e:50:70:b8:ac:49:be:b4:d4:a5: f4:d6:b4:2f:2d:7d:f9:db:21:7b:aa:69:3b:ce:c1:94:17:80: 14:13:3c:e1:b3:0f:70:4f:21:d1:68:85:df:6e:9d:1c:c2:7c: f6:14:15:00:85:d9:6a:e9:4e:21:82:6a:86:e8:f1:f1:62:12: 26:d1:0a:dc:d4:dc:48:67:58:5b:7a:71:66:c8:13:0f:11:a4: f8:9f:54:79:8d:7e:20:c3:95:ad:1d:e0:68:67:fe:8c:78:a1: dd:4f:e0:51:88:60:4d:e6:d6:5d:b9:26:40:5c:d2:6e:d9:25: d1:b8:13:0b:ec:0d:af:93:24:33:30:bf:37:46:73:1f:21:80: d5:49:6b:4a:60:f2:b7:c2:c2:cc:dd:8e:29:2a:99:25:a6:54: 74:19:b3:09:65:4d:68:9b:10:7d:af:a7:df:e4:21:24:a0:8d: 3d:50:5b:c7:41:e3:cc:db:24:32:db:99:3e:20:f7:54:7f:a6: 80:58:2f:ea:db:d3:97:6f:91:2d:82:76:90:41:0d:cb:97:36: 14:3e:14:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBODExMTAvBgNVBAUTKEJBNjlGQ0I0MEUzMzQ5NzU3RkEyNEY4RTMzNTc5MUM1 RjAwNDVENTgwHhcNMjUwMzI5MDA0ODM2WhcNMjUwNDA1MDA0ODM2WjAYMRYwFAYD VQQDEw02N2U3NDM2NC01YWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3oSgtU4JkzzB4Ad/OjYwTya7P5V4jWK4pa9ce5V00YPUye/3QetmePHLxmWm I4TDUzf1S1tFUYacKTbFeHcnMV7XPn+hhsx84kqQ17z9c9jDz/KXNiVZNQHadqsq cA/z0Tnsa/1Tx1D2ggSt0bVsAX9ePGelGqLhw+jA2zq5Jm8A7COC6d7dUIvKBIyR R9788ZeGi5JoUxWp9WscZeoj7oWHCZB+MSryjCMmw7x1RtzzU6k8eD7EBEdvnVKE LlIATeK3SHGIAzniMWkzogZb0xK2Ec1DxQPCYbyKNXwHgIrd9FqRqaf4FVckY+/F sdz2TxgxIC5NiqNRq/kBlmh0aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAq6CICD GAGni3AQ5BzdNK5iJV2DMB8GA1UdIwQYMBaAFLpp/LQOM0l1f6JPjjNXkcXwBF1Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE4MS9DRTEzNkJEMDc0 NTcxMUVDQjM5ODc1MThDNEY5QUUwMi91bW44dEE0elNYVl9vay1PTTFlUnhmQUVY VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vtbjh0QTR6U1hWX29rLU9NMWVSeGZBRVhWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE4MS9DRTEzNkJEMDc0NTcxMUVDQjM5ODc1MThDNEY5QUUwMi91bW44dEE0elNY Vl9vay1PTTFlUnhmQUVYVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDICqHGUFNylN5vncYYLE5MHd7uHGQ3fTsWqM4lIbPyIV0fMnNNXKf5 o8gpyY5QcLisSb601KX01rQvLX352yF7qmk7zsGUF4AUEzzhsw9wTyHRaIXfbp0c wnz2FBUAhdlq6U4hgmqG6PHxYhIm0Qrc1NxIZ1hbenFmyBMPEaT4n1R5jX4gw5Wt HeBoZ/6MeKHdT+BRiGBN5tZduSZAXNJu2SXRuBML7A2vkyQzML83RnMfIYDVSWtK YPK3wsLM3Y4pKpklplR0GbMJZU1omxB9r6ff5CEkoI09UFvHQePM2yQy25k+IPdU f6aAWC/q29OXb5EtgnaQQQ3LlzYUPhRL -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:07 2025 by rpki-client