$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft File: UmRCqpPf8MUTmmF7DeZFtznmvs0.mft (raw, json) Hash identifier: Y7vCEkymzMqaGVdfIMQrdHvGDnKhxBj2biFg+dM07qA= Subject key identifier: 9D:8E:E3:A1:82:7D:92:84:1B:D0:61:B0:81:16:A9:83:B9:A0:7E:26 Authority key identifier: 52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD Certificate issuer: /CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Certificate serial: 09EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft Manifest number: 09E2 Signing time: Sun 08 Jun 2025 19:38:46 +0000 Manifest this update: Sun 08 Jun 2025 19:38:45 +0000 Manifest next update: Sun 15 Jun 2025 19:38:45 +0000 Files and hashes: 1: UmRCqpPf8MUTmmF7DeZFtznmvs0.crl (hash: ixjp8wF00BDF+sPuhPcE3cBgJQCOqg5UN8wZ/timnzo=) 2: 1C9AB3F67D6711EA90858415C4F9AE02.roa (hash: 32MI8zjp+omn2pz5wQODlf3/KMVL7tiwkuXJGcfvP+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 19:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2538 (0x9ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D7D, serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Validity Not Before: Jun 8 19:38:45 2025 GMT Not After : Jun 15 19:38:45 2025 GMT Subject: CN=6845e6c6-b215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:88:68:55:11:67:96:b6:87:dc:26:6b:f5:7c: 28:83:8c:cd:3c:95:06:0f:80:34:9f:63:e0:bf:c6: b5:bc:f4:c7:a4:2c:ab:d6:a2:2d:33:72:ad:c6:d3: c5:86:93:51:a4:90:d5:ff:e9:fb:f0:7d:60:4f:32: 2c:fc:fc:99:5e:14:ac:5f:f5:f7:f2:c6:8a:13:8c: e9:cd:15:75:e9:5d:8a:c0:e6:2f:30:60:a6:66:c3: f5:c8:21:df:50:ad:40:b8:a7:8c:a6:2a:61:7d:e1: 65:fd:b9:99:74:fd:3d:45:f5:fc:85:dd:04:ed:76: 1c:a2:5e:b1:e5:de:e4:ae:bc:3d:3e:ad:a6:69:77: 8f:e3:09:73:8d:4a:da:f4:a2:59:f1:9c:d4:0f:ea: 24:aa:69:fc:87:61:11:09:c0:84:30:af:9c:be:69: 06:c2:f5:df:74:90:93:65:d4:79:99:55:90:27:f0: db:c6:ea:94:56:3a:af:26:df:b4:99:ca:a9:26:ea: ec:5d:55:68:87:76:56:88:31:fb:44:fe:bc:b9:c0: 30:09:ae:05:6b:02:5b:14:c7:64:e0:88:a6:65:80: ba:2e:eb:e4:80:f8:4d:8e:53:50:4f:e2:30:53:a0: fa:0b:5f:ea:28:3f:b0:d0:db:c1:ae:01:15:82:a6: c3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8E:E3:A1:82:7D:92:84:1B:D0:61:B0:81:16:A9:83:B9:A0:7E:26 X509v3 Authority Key Identifier: keyid:52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:e0:ae:c7:99:be:3a:0e:83:09:e4:9d:2c:ad:b1:5d:57:58: b9:1d:f9:2a:98:13:cf:67:f2:15:97:2d:9a:33:c2:57:42:bd: ab:c8:75:3e:2b:4a:9c:09:49:cf:08:8e:70:bb:74:32:2d:17: 5e:80:69:60:22:7e:39:dd:49:01:18:25:50:f2:11:5f:ed:d4: 4e:8f:21:74:89:23:96:fc:f1:d7:54:01:85:f1:7c:64:8f:6f: c3:74:e3:c9:c7:7d:b3:00:ed:c0:52:b2:f6:49:83:56:ba:23: 1d:d0:40:5a:36:ac:39:31:94:ef:8c:cb:d2:7a:6a:70:55:ca: d0:57:96:23:57:43:0b:8a:4b:ca:3c:74:cc:2b:26:fe:01:a5: 6f:76:26:df:93:17:59:43:83:73:36:a6:49:16:68:11:10:f4: a4:4c:94:02:f6:8d:f0:13:65:58:3e:75:3f:ab:fe:9d:1d:f3: ff:31:12:52:a7:2f:ef:ee:ff:b4:43:79:21:d9:96:94:02:37: 29:7d:db:af:9e:f4:63:38:77:66:3a:0d:39:05:17:a5:23:ab: 0d:50:c2:05:bd:75:15:d8:06:c0:a0:92:da:c8:3b:f8:d3:ce: c7:0c:1d:39:91:bc:f0:f1:5f:67:bf:e4:75:c9:6c:6f:62:2a: 49:35:a4:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEN0QxMTAvBgNVBAUTKDUyNjQ0MkFBOTNERkYwQzUxMzlBNjE3QjBERTY0NUI3 MzlFNkJFQ0QwHhcNMjUwNjA4MTkzODQ1WhcNMjUwNjE1MTkzODQ1WjAYMRYwFAYD VQQDEw02ODQ1ZTZjNi1iMjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIhoVRFnlraH3CZr9Xwog4zNPJUGD4A0n2Pgv8a1vPTHpCyr1qItM3KtxtPF hpNRpJDV/+n78H1gTzIs/PyZXhSsX/X38saKE4zpzRV16V2KwOYvMGCmZsP1yCHf UK1AuKeMpiphfeFl/bmZdP09RfX8hd0E7XYcol6x5d7krrw9Pq2maXeP4wlzjUra 9KJZ8ZzUD+okqmn8h2ERCcCEMK+cvmkGwvXfdJCTZdR5mVWQJ/DbxuqUVjqvJt+0 mcqpJursXVVoh3ZWiDH7RP68ucAwCa4FawJbFMdk4IimZYC6LuvkgPhNjlNQT+Iw U6D6C1/qKD+w0NvBrgEVgqbD3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2O46GC fZKEG9BhsIEWqYO5oH4mMB8GA1UdIwQYMBaAFFJkQqqT3/DFE5phew3mRbc55r7N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ3RC83MTZEMkYzNjdE NjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhNVVRtbUY3RGVaRnR6bm12 czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VtUkNxcFBmOE1VVG1tRjdEZVpGdHpubXZzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ3RC83MTZEMkYzNjdENjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhN VVRtbUY3RGVaRnR6bm12czAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj4K7Hmb46DoMJ5J0srbFdV1i5HfkqmBPPZ/IVly2aM8JXQr2ryHU+ K0qcCUnPCI5wu3QyLRdegGlgIn453UkBGCVQ8hFf7dROjyF0iSOW/PHXVAGF8Xxk j2/DdOPJx32zAO3AUrL2SYNWuiMd0EBaNqw5MZTvjMvSempwVcrQV5YjV0MLikvK PHTMKyb+AaVvdibfkxdZQ4NzNqZJFmgREPSkTJQC9o3wE2VYPnU/q/6dHfP/MRJS py/v7v+0Q3kh2ZaUAjcpfduvnvRjOHdmOg05BRelI6sNUMIFvXUV2AbAoJLayDv4 087HDB05kbzw8V9nv+R1yWxvYipJNaR/ -----END CERTIFICATE-----Generated at Mon Jun 9 19:48:05 2025 by rpki-client