$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft File: UM3WDPjzEj_evOkIgq83u-PvXEg.mft (raw, json) Hash identifier: 1f4KIdnhoRobJAiJkKGcYm0YJT1ApEMDQJ/SZ9ysOGM= Subject key identifier: CC:3D:34:E5:80:D4:BB:DB:4C:1E:EE:3B:0A:C5:E3:E3:88:B9:F8:38 Authority key identifier: 50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48 Certificate issuer: /CN=A9122C94/serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48 Certificate serial: 0788 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft Manifest number: 0782 Signing time: Thu 24 Jul 2025 21:42:02 +0000 Manifest this update: Thu 24 Jul 2025 21:42:01 +0000 Manifest next update: Thu 31 Jul 2025 21:42:01 +0000 Files and hashes: 1: UM3WDPjzEj_evOkIgq83u-PvXEg.crl (hash: ut/mea7kJ/4mB/lpvwC3vBz6S4gebuT9tr2QaGd/GoI=) 2: 5BF797081CF411EBB5ADE642C4F9AE02.roa (hash: AwRksKXITHLfRHPDls3Dox6LPqS08ltsptsGuhqXo1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 21:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1928 (0x788) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122C94, serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48 Validity Not Before: Jul 24 21:42:01 2025 GMT Not After : Jul 31 21:42:01 2025 GMT Subject: CN=6882a8a9-dbe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c0:b0:d3:90:33:3c:72:f7:ea:b9:e5:d6:79: 2d:ca:00:35:45:46:45:d8:2d:f5:ba:54:9d:71:fd: 29:c3:78:b0:bd:79:e8:6a:3b:74:b3:38:7b:2d:a9: 05:3f:d5:70:eb:19:99:ee:40:67:0f:52:e7:db:a8: 42:38:79:c3:32:11:43:13:7d:68:03:48:93:9f:4b: 91:2d:b4:9d:07:67:08:e7:f3:c8:f0:79:20:b0:13: 28:3f:be:83:60:cc:59:71:17:9a:20:d0:86:c9:b2: 2b:d5:f6:33:62:93:a3:da:77:8c:93:05:77:13:e6: 67:ae:5c:b1:e7:e1:de:b3:f3:7e:4d:24:ed:1e:de: fb:8e:0a:90:57:f1:29:d6:ce:dc:06:43:d6:b9:89: 73:b9:0b:c4:51:37:8a:17:89:ed:28:1c:d8:11:24: 98:a5:47:d2:05:68:76:04:ac:03:9d:0a:a0:8c:0a: b1:04:3d:d2:65:32:8f:47:c5:8a:42:80:5a:cc:d2: 7b:ea:00:e9:0a:3a:8f:78:a0:00:c6:aa:08:28:8f: f9:cd:8e:3e:14:bc:8d:b8:30:57:19:76:b9:ec:74: 8c:b3:4c:89:12:68:7d:df:a1:4c:c1:c8:5d:fd:6c: e8:35:44:f3:21:e6:17:b7:e2:b7:d1:07:fe:89:1c: 8d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3D:34:E5:80:D4:BB:DB:4C:1E:EE:3B:0A:C5:E3:E3:88:B9:F8:38 X509v3 Authority Key Identifier: keyid:50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:a7:01:57:27:c0:11:1c:8c:9e:86:49:50:d4:7e:d0:5e:ee: cd:3f:32:ff:7c:22:ba:59:6a:95:f5:55:c9:6b:a5:b6:38:02: a7:ec:91:28:e4:b9:06:8d:4e:66:77:69:b3:fd:56:ec:c8:a1: 53:0d:55:29:60:f9:3b:37:88:48:0e:ed:95:53:56:35:3c:43: 9e:7e:47:f7:7c:c0:81:1e:ac:25:ca:e9:18:b2:28:3a:6a:0c: 10:c0:57:bb:62:dc:d4:81:66:a5:c1:eb:05:2e:f6:84:14:45: 9a:ea:88:59:79:66:82:9b:30:8c:0e:68:15:f8:c7:22:53:3c: 40:e7:67:a3:cb:79:69:b3:7e:e5:37:55:09:5b:dc:fb:b4:ec: d4:a8:e8:a8:92:ad:fa:98:0c:af:2b:34:92:56:f8:4a:a4:6a: d9:1c:f2:e5:cc:24:bf:cc:02:73:40:8f:34:75:3c:58:55:04: a6:9b:9d:6a:86:bb:0b:a1:3e:0b:4a:20:60:9a:bd:a4:b9:a5: 92:27:46:81:e0:7a:f2:2b:2b:0a:c8:d8:0b:cc:75:bd:e9:77: c1:12:09:62:d3:02:e4:9c:0c:0f:e9:1a:a2:c4:4f:10:12:d7: 29:2d:e7:59:19:87:91:5d:c4:f9:65:66:6b:79:37:20:73:bb: 18:d9:bc:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDOTQxMTAvBgNVBAUTKDUwQ0RENjBDRjhGMzEyM0ZERUJDRTkwODgyQUYzN0JC RTNFRjVDNDgwHhcNMjUwNzI0MjE0MjAxWhcNMjUwNzMxMjE0MjAxWjAYMRYwFAYD VQQDEw02ODgyYThhOS1kYmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosCw05AzPHL36rnl1nktygA1RUZF2C31ulSdcf0pw3iwvXnoajt0szh7LakF P9Vw6xmZ7kBnD1Ln26hCOHnDMhFDE31oA0iTn0uRLbSdB2cI5/PI8HkgsBMoP76D YMxZcReaINCGybIr1fYzYpOj2neMkwV3E+Znrlyx5+Hes/N+TSTtHt77jgqQV/Ep 1s7cBkPWuYlzuQvEUTeKF4ntKBzYESSYpUfSBWh2BKwDnQqgjAqxBD3SZTKPR8WK QoBazNJ76gDpCjqPeKAAxqoIKI/5zY4+FLyNuDBXGXa57HSMs0yJEmh936FMwchd /WzoNUTzIeYXt+K30Qf+iRyN3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMw9NOWA 1LvbTB7uOwrF4+OIufg4MB8GA1UdIwQYMBaAFFDN1gz48xI/3rzpCIKvN7vj71xI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC84MjIyQzI3RTFD RjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVqX2V2T2tJZ3E4M3UtUHZY RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VNM1dEUGp6RWpfZXZPa0lncTgzdS1QdlhFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkM5NC84MjIyQzI3RTFDRjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVq X2V2T2tJZ3E4M3UtUHZYRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHpwFXJ8ARHIyehklQ1H7QXu7NPzL/fCK6WWqV9VXJa6W2OAKn7JEo 5LkGjU5md2mz/VbsyKFTDVUpYPk7N4hIDu2VU1Y1PEOefkf3fMCBHqwlyukYsig6 agwQwFe7YtzUgWalwesFLvaEFEWa6ohZeWaCmzCMDmgV+MciUzxA52ejy3lps37l N1UJW9z7tOzUqOiokq36mAyvKzSSVvhKpGrZHPLlzCS/zAJzQI80dTxYVQSmm51q hrsLoT4LSiBgmr2kuaWSJ0aB4HryKysKyNgLzHW96XfBEgli0wLknAwP6RqixE8Q EtcpLedZGYeRXcT5ZWZreTcgc7sY2bxA -----END CERTIFICATE-----Generated at Fri Jul 25 01:43:21 2025 by rpki-client