$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft File: umDC9ghXfO5rvRSTcht6rsoodis.mft (raw, json) Hash identifier: tqFFZLTuA0TtVr/i4XrT2vfDMlS5bqSxLJQSYcjVq8k= Subject key identifier: FE:85:DF:BB:EC:82:A5:88:F0:0F:01:6C:B1:5F:9F:0F:C4:26:A5:90 Authority key identifier: BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B Certificate issuer: /CN=A91326FF/serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft Manifest number: A1 Signing time: Tue 01 Jul 2025 06:54:53 +0000 Manifest this update: Tue 01 Jul 2025 06:54:52 +0000 Manifest next update: Tue 08 Jul 2025 06:54:52 +0000 Files and hashes: 1: umDC9ghXfO5rvRSTcht6rsoodis.crl (hash: LKxjLdIHvitmPTGcW5sdMolGJI3Owya54KzFjIxwZbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326FF, serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B Validity Not Before: Jul 1 06:54:52 2025 GMT Not After : Jul 8 06:54:52 2025 GMT Subject: CN=6863863c-94f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:35:a9:14:65:c1:6f:bb:a9:81:fd:62:68:8e: ef:37:24:67:84:41:27:f6:97:7f:bf:02:4c:31:dd: e0:60:c4:84:b3:50:ab:3f:d9:dc:8f:cc:59:80:13: 1d:c6:41:f8:32:fe:d6:f0:9e:b2:99:ad:3a:19:30: 36:09:86:75:77:2e:14:22:2e:70:48:b7:50:a4:e3: a8:1c:0e:6e:6e:e4:7e:66:14:8f:05:cc:9d:96:f5: f7:db:87:92:a3:34:93:96:33:53:77:12:0a:db:d1: 65:ac:9e:92:43:71:55:f8:e0:7b:b6:62:34:14:29: 19:5c:24:78:3b:3c:01:2c:91:58:4f:35:cc:be:38: 0c:10:98:50:9a:e1:f8:3d:e0:5a:6a:cf:cb:d9:c9: 4b:d5:11:d1:51:1e:24:d7:85:aa:2e:08:d9:46:df: 26:2e:6f:9c:33:85:ac:73:62:af:44:ea:1f:bd:83: fc:20:ef:a2:3b:75:d8:74:38:af:37:5f:ae:fe:ff: 32:10:99:33:06:3c:66:32:27:71:f6:1f:af:03:06: 21:49:3f:be:35:a4:4c:9a:2c:53:5e:22:f9:55:18: ce:a2:28:35:1b:c3:d8:ae:6b:18:b9:5a:81:9c:d8: b3:28:69:d5:57:0a:ab:a1:de:87:2c:5d:64:27:de: a7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:85:DF:BB:EC:82:A5:88:F0:0F:01:6C:B1:5F:9F:0F:C4:26:A5:90 X509v3 Authority Key Identifier: keyid:BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:a0:3b:d7:42:f0:79:e2:44:1b:14:76:8f:22:8c:3a:d2:83: 68:9a:1b:aa:80:0a:1f:e1:c5:70:3b:14:8e:60:80:ac:a4:b6: f4:f0:c1:2d:8d:b7:7e:cf:14:87:22:52:32:86:49:f7:03:25: 7c:89:e8:ae:86:b4:43:8f:28:0e:90:6d:c7:4c:5b:0a:59:c3: 0f:9a:5d:6f:c2:9c:ba:fb:1b:28:88:28:ac:88:da:3c:8f:46: 3a:fb:f0:23:08:84:7a:26:a6:e9:c1:c7:53:39:7b:92:eb:ef: 2f:7c:08:03:3e:4a:da:ba:b3:42:d8:79:b6:cc:22:50:cd:85: ec:e8:1e:66:2b:81:02:e7:84:95:69:70:98:e4:fa:c6:2b:82: 3e:d6:92:91:7b:a3:24:bc:e5:c8:7f:02:ac:4d:76:9f:89:56: 07:21:3c:42:7d:aa:46:80:ae:67:83:84:86:10:79:4a:2b:2e: 7d:cf:aa:2f:57:35:f5:9e:67:41:65:7a:d4:b4:e5:ea:35:a1: 72:ce:5c:e4:f4:25:fa:53:11:bb:da:be:06:cc:ae:fd:fd:0e: 44:61:4b:8b:7a:e3:94:50:87:24:5d:cf:4b:ee:82:c3:ec:f1: bb:26:08:fa:a8:8c:2d:f5:ae:d8:37:e4:3f:a7:24:83:be:d8: d5:fa:dd:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI2RkYxMTAvBgNVBAUTKEJBNjBDMkY2MDg1NzdDRUU2QkJEMTQ5MzcyMUI3QUFF Q0EyODc2MkIwHhcNMjUwNzAxMDY1NDUyWhcNMjUwNzA4MDY1NDUyWjAYMRYwFAYD VQQDEw02ODYzODYzYy05NGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6TWpFGXBb7upgf1iaI7vNyRnhEEn9pd/vwJMMd3gYMSEs1CrP9ncj8xZgBMd xkH4Mv7W8J6yma06GTA2CYZ1dy4UIi5wSLdQpOOoHA5ubuR+ZhSPBcydlvX324eS ozSTljNTdxIK29FlrJ6SQ3FV+OB7tmI0FCkZXCR4OzwBLJFYTzXMvjgMEJhQmuH4 PeBaas/L2clL1RHRUR4k14WqLgjZRt8mLm+cM4Wsc2KvROofvYP8IO+iO3XYdDiv N1+u/v8yEJkzBjxmMidx9h+vAwYhST++NaRMmixTXiL5VRjOoig1G8PYrmsYuVqB nNizKGnVVwqrod6HLF1kJ96nyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6F37vs gqWI8A8BbLFfnw/EJqWQMB8GA1UdIwQYMBaAFLpgwvYIV3zua70Uk3Ibeq7KKHYr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZGRi85Q0YwNEQzQzVG OEUxMUVGQjIzRTc5NDVDNEY5QUUwMi91bURDOWdoWGZPNXJ2UlNUY2h0NnJzb29k aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VtREM5Z2hYZk81cnZSU1RjaHQ2cnNvb2Rpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjZGRi85Q0YwNEQzQzVGOEUxMUVGQjIzRTc5NDVDNEY5QUUwMi91bURDOWdoWGZP NXJ2UlNUY2h0NnJzb29kaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCloDvXQvB54kQbFHaPIow60oNomhuqgAof4cVwOxSOYICspLb08MEt jbd+zxSHIlIyhkn3AyV8ieiuhrRDjygOkG3HTFsKWcMPml1vwpy6+xsoiCisiNo8 j0Y6+/AjCIR6JqbpwcdTOXuS6+8vfAgDPkraurNC2Hm2zCJQzYXs6B5mK4EC54SV aXCY5PrGK4I+1pKRe6MkvOXIfwKsTXafiVYHITxCfapGgK5ng4SGEHlKKy59z6ov VzX1nmdBZXrUtOXqNaFyzlzk9CX6UxG72r4GzK79/Q5EYUuLeuOUUIckXc9L7oLD 7PG7Jgj6qIwt9a7YN+Q/pySDvtjV+t0J -----END CERTIFICATE-----Generated at Tue Jul 1 19:47:43 2025 by rpki-client