$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft File: UM3WDPjzEj_evOkIgq83u-PvXEg.mft (raw, json) Hash identifier: zEbNs9SAHBzJ5r53ACLlUTl9Q/YjYLAz/P938CIh6sA= Subject key identifier: 2E:94:66:2E:D4:F5:9F:F6:2B:37:3E:B8:6A:BD:67:5B:BD:F3:06:FD Authority key identifier: 50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48 Certificate issuer: /CN=A9122C94/serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48 Certificate serial: 07A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft Manifest number: 079A Signing time: Mon 08 Sep 2025 21:27:44 +0000 Manifest this update: Mon 08 Sep 2025 21:27:44 +0000 Manifest next update: Mon 15 Sep 2025 21:27:44 +0000 Files and hashes: 1: UM3WDPjzEj_evOkIgq83u-PvXEg.crl (hash: rz7EHgP6wEXxT5VKzAthFkCYy4ol9er66ZlZqO7LV3Y=) 2: 5BF797081CF411EBB5ADE642C4F9AE02.roa (hash: AwRksKXITHLfRHPDls3Dox6LPqS08ltsptsGuhqXo1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 21:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1952 (0x7a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122C94, serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48 Validity Not Before: Sep 8 21:27:44 2025 GMT Not After : Sep 15 21:27:44 2025 GMT Subject: CN=68bf4a50-afc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4a:9b:d7:f1:8a:06:6b:08:94:82:96:ab:40: 64:87:95:0a:fb:ff:a0:cd:71:94:33:54:4e:7a:c1: 8b:36:07:44:90:50:b0:86:cf:35:3f:7c:39:db:7b: 4e:ad:cb:bf:48:08:3b:6a:3f:7c:94:2b:11:09:46: c3:46:4b:1d:e9:72:ca:f6:9d:7b:70:4e:83:ec:66: d2:61:af:0c:ce:66:8d:49:d0:2a:19:1e:87:62:a5: 56:93:82:1a:22:ec:dc:86:90:11:80:f3:ec:bf:63: e4:fa:b8:75:f4:61:8b:46:0e:67:56:24:69:2a:60: df:27:73:52:aa:19:f4:48:e5:a4:6f:ca:0b:93:c6: 6c:5e:21:cb:ec:9b:f7:9b:55:20:fb:d8:20:36:59: c6:d4:fc:a7:8d:5b:52:31:c8:34:e9:5b:ef:8d:fc: 30:36:75:2a:95:29:26:01:4c:c9:b1:9c:6e:24:6b: 30:fd:67:de:66:68:f0:b1:d4:86:62:63:b1:a1:58: 98:0e:1a:a8:f6:7c:16:9f:16:b0:aa:0c:b5:ec:e1: 74:a8:04:54:b8:cf:37:70:08:6a:35:29:c6:b8:5d: b8:80:60:fb:38:d5:5c:87:21:74:f4:f4:ce:2e:b4: b3:f4:38:1e:ad:db:ab:cb:8c:59:b0:a7:87:82:51: f6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:94:66:2E:D4:F5:9F:F6:2B:37:3E:B8:6A:BD:67:5B:BD:F3:06:FD X509v3 Authority Key Identifier: keyid:50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:60:ea:e4:99:8c:cd:04:a7:66:4b:5e:55:bb:c3:79:b7:31: b2:b5:82:fe:bf:ed:a6:a7:18:eb:ba:c1:5a:5e:70:4c:85:0b: d1:3c:2e:07:43:08:2f:ba:5b:4c:f9:e1:a9:8d:4c:d7:45:ba: 34:e3:c7:3f:00:13:85:8c:fe:80:04:6d:3c:c6:d6:94:18:3e: 51:d3:ad:7a:3c:b5:74:86:d3:ed:02:60:b8:d6:71:a4:a3:6d: 7c:fe:76:1f:3c:f8:9c:93:80:f8:e6:b5:ab:33:32:14:e6:9c: 27:d5:dc:3d:55:cd:1d:e2:f1:3d:d9:41:b7:80:52:0e:53:7e: 96:f6:35:c6:dc:3e:2c:78:db:66:c0:1c:3c:17:66:4a:d6:ad: 86:28:49:99:c3:a2:6d:d3:7b:27:f3:5e:cb:ae:eb:42:41:1f: 4c:48:d6:40:7d:c0:6e:9a:9a:b2:80:97:b8:94:fe:c1:bb:a2: 6c:73:f0:55:b3:be:64:7d:a5:9b:17:4b:f2:68:c9:1d:e4:79: 8c:8c:77:8d:68:8a:d2:a5:96:d5:15:84:73:65:80:16:a3:2d: e5:c0:9c:ec:d1:89:d0:eb:37:1f:8a:a3:0a:49:bf:55:b1:d5: 79:3b:14:72:f6:38:b2:d9:03:a7:04:6e:4b:a4:74:c0:a3:2f: c6:c6:ef:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDOTQxMTAvBgNVBAUTKDUwQ0RENjBDRjhGMzEyM0ZERUJDRTkwODgyQUYzN0JC RTNFRjVDNDgwHhcNMjUwOTA4MjEyNzQ0WhcNMjUwOTE1MjEyNzQ0WjAYMRYwFAYD VQQDEw02OGJmNGE1MC1hZmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0qb1/GKBmsIlIKWq0Bkh5UK+/+gzXGUM1ROesGLNgdEkFCwhs81P3w523tO rcu/SAg7aj98lCsRCUbDRksd6XLK9p17cE6D7GbSYa8MzmaNSdAqGR6HYqVWk4Ia IuzchpARgPPsv2Pk+rh19GGLRg5nViRpKmDfJ3NSqhn0SOWkb8oLk8ZsXiHL7Jv3 m1Ug+9ggNlnG1PynjVtSMcg06VvvjfwwNnUqlSkmAUzJsZxuJGsw/WfeZmjwsdSG YmOxoViYDhqo9nwWnxawqgy17OF0qARUuM83cAhqNSnGuF24gGD7ONVchyF09PTO LrSz9Dgerdury4xZsKeHglH2CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6UZi7U 9Z/2Kzc+uGq9Z1u98wb9MB8GA1UdIwQYMBaAFFDN1gz48xI/3rzpCIKvN7vj71xI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC84MjIyQzI3RTFD RjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVqX2V2T2tJZ3E4M3UtUHZY RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VNM1dEUGp6RWpfZXZPa0lncTgzdS1QdlhFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkM5NC84MjIyQzI3RTFDRjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVq X2V2T2tJZ3E4M3UtUHZYRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCYOrkmYzNBKdmS15Vu8N5tzGytYL+v+2mpxjrusFaXnBMhQvRPC4H QwgvultM+eGpjUzXRbo048c/ABOFjP6ABG08xtaUGD5R0616PLV0htPtAmC41nGk o218/nYfPPick4D45rWrMzIU5pwn1dw9Vc0d4vE92UG3gFIOU36W9jXG3D4seNtm wBw8F2ZK1q2GKEmZw6Jt03sn817LrutCQR9MSNZAfcBumpqygJe4lP7Bu6Jsc/BV s75kfaWbF0vyaMkd5HmMjHeNaIrSpZbVFYRzZYAWoy3lwJzs0YnQ6zcfiqMKSb9V sdV5OxRy9jiy2QOnBG5LpHTAoy/Gxu9Q -----END CERTIFICATE-----Generated at Wed Sep 10 07:11:54 2025 by rpki-client