$ rpki-client -vvf rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft File: uMGYUq7H2lGkUL59p9lYc77eNzQ.mft (raw, json) Hash identifier: Wz7/uvMm/D4FDkFL8pQf2Ual2P7LhYQsjyX5eM6nDPY= Subject key identifier: 3C:80:FA:68:00:1F:D7:6E:F3:A3:92:1B:F2:14:40:D5:71:DB:A7:57 Authority key identifier: B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34 Certificate issuer: /CN=A917C78E/serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft Manifest number: 78 Signing time: Sat 31 May 2025 06:19:06 +0000 Manifest this update: Sat 31 May 2025 06:19:05 +0000 Manifest next update: Sat 07 Jun 2025 06:19:05 +0000 Files and hashes: 1: uMGYUq7H2lGkUL59p9lYc77eNzQ.crl (hash: snEC2CLDMsaxBB5bHWd4KPk4pulMxTKnejOU9m697g0=) 2: 91F29F5E86DD11EFB3D7A929C4F9AE02.roa (hash: YiOcP7W7AOtNltDYNBm9P2k2HnzTcQ0cTjwg3ge15m4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C78E, serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734 Validity Not Before: May 31 06:19:05 2025 GMT Not After : Jun 7 06:19:05 2025 GMT Subject: CN=683a9f5a-c109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:75:a2:a4:af:74:4e:87:d5:23:e6:13:99:c6: 39:78:2d:c0:7b:3f:0f:a5:4e:28:f2:11:3b:0b:9e: e7:01:b2:8a:bb:e4:a0:ac:96:d5:99:03:73:66:3a: 0f:d9:63:1d:46:43:87:4c:08:0b:81:5a:6f:63:40: d8:f2:ee:35:6c:9d:7e:00:98:5e:3a:9e:32:17:d7: ce:08:16:55:83:1b:9d:20:c8:ac:4a:f1:1c:41:ae: 3c:4d:a8:7b:f6:0f:5e:43:20:e3:af:3d:5c:6a:8b: 96:09:5f:97:8d:8d:c4:e4:56:26:58:cd:ef:19:0a: 1f:76:0d:e0:ad:cd:19:b4:71:00:6d:3f:bd:3d:39: b3:7a:5d:a3:db:12:d3:f7:a8:52:8b:ba:b6:ed:04: 32:00:cc:39:fd:da:42:2c:35:20:6a:80:5a:1f:cc: e0:96:41:87:51:55:ca:7d:50:f8:b3:fd:7f:dd:5c: 27:23:0c:f4:5d:ee:6e:e0:e0:c9:05:b0:f1:64:f0: 78:a4:f5:95:a8:5e:96:8c:fb:da:b1:53:fb:5b:d7: 5e:a3:fa:a6:96:2d:87:6d:16:33:22:ca:fa:53:53: fe:55:78:22:f8:e7:62:c4:8d:64:d8:77:0b:71:ca: 97:49:57:36:b3:8a:c9:55:72:d4:a9:0e:b5:7d:b9: 92:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:80:FA:68:00:1F:D7:6E:F3:A3:92:1B:F2:14:40:D5:71:DB:A7:57 X509v3 Authority Key Identifier: keyid:B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:12:ea:15:d8:91:35:61:0a:b6:94:b7:d3:35:05:33:2d:a5: 9f:22:8b:39:47:0f:73:46:50:d5:42:14:79:d3:0d:75:8a:75: a3:5c:72:49:e3:87:e2:89:66:dc:76:fe:f7:09:0d:20:97:52: 34:e7:de:48:16:32:80:b8:7f:bf:20:39:6a:c2:fd:de:56:c0: 56:f3:f4:ec:87:5e:42:94:2b:1e:f6:f9:82:9f:c5:a9:0e:67: 48:9c:f1:77:65:87:df:a7:18:f6:59:8c:65:d5:8f:69:f9:f3: ec:38:78:b6:cb:5c:b9:49:f2:04:7b:71:5e:43:f5:fb:e8:82: 27:ea:ed:76:f9:cd:f0:be:70:67:a6:60:5d:4d:90:cc:e3:29: 7b:2b:21:30:74:ad:3a:65:b5:4e:f5:28:aa:ee:04:b5:30:8e: d1:4f:5b:11:1e:88:b5:05:77:89:fa:86:7e:4a:b8:36:5d:a9: 59:fd:83:34:b4:a3:9c:2e:59:2c:35:10:cc:0c:e5:1d:ec:64: 31:fb:42:58:77:c3:c1:b2:cd:cb:d1:f4:f5:11:69:3b:1c:82: c8:7a:00:7f:93:22:68:3c:14:25:7b:48:95:20:7c:4d:d4:2a: 81:ef:fd:ec:90:c3:e4:41:55:f1:84:f9:e3:33:d2:50:fd:94: 73:d5:9e:64 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Qzc4RTExMC8GA1UEBRMoQjhDMTk4NTJBRUM3REE1MUE0NTBCRTdEQTdEOTU4NzNC RURFMzczNDAeFw0yNTA1MzEwNjE5MDVaFw0yNTA2MDcwNjE5MDVaMBgxFjAUBgNV BAMTDTY4M2E5ZjVhLWMxMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCodaKkr3ROh9Uj5hOZxjl4LcB7Pw+lTijyETsLnucBsoq75KCsltWZA3NmOg/Z Yx1GQ4dMCAuBWm9jQNjy7jVsnX4AmF46njIX184IFlWDG50gyKxK8RxBrjxNqHv2 D15DIOOvPVxqi5YJX5eNjcTkViZYze8ZCh92DeCtzRm0cQBtP709ObN6XaPbEtP3 qFKLurbtBDIAzDn92kIsNSBqgFofzOCWQYdRVcp9UPiz/X/dXCcjDPRd7m7g4MkF sPFk8Hik9ZWoXpaM+9qxU/tb116j+qaWLYdtFjMiyvpTU/5VeCL452LEjWTYdwtx ypdJVzazislVctSpDrV9uZLRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPID6aAAf 127zo5Ib8hRA1XHbp1cwHwYDVR0jBBgwFoAUuMGYUq7H2lGkUL59p9lYc77eNzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDNzhFL0EwMjAxQjIwODZE QzExRUZCOUVBRDAyN0M0RjlBRTAyL3VNR1lVcTdIMmxHa1VMNTlwOWxZYzc3ZU56 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdU1HWVVxN0gybEdrVUw1OXA5bFljNzdlTnpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD NzhFL0EwMjAxQjIwODZEQzExRUZCOUVBRDAyN0M0RjlBRTAyL3VNR1lVcTdIMmxH a1VMNTlwOWxZYzc3ZU56US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJwS6hXYkTVhCraUt9M1BTMtpZ8iizlHD3NGUNVCFHnTDXWKdaNccknj h+KJZtx2/vcJDSCXUjTn3kgWMoC4f78gOWrC/d5WwFbz9OyHXkKUKx72+YKfxakO Z0ic8Xdlh9+nGPZZjGXVj2n58+w4eLbLXLlJ8gR7cV5D9fvogifq7Xb5zfC+cGem YF1NkMzjKXsrITB0rTpltU71KKruBLUwjtFPWxEeiLUFd4n6hn5KuDZdqVn9gzS0 o5wuWSw1EMwM5R3sZDH7Qlh3w8GyzcvR9PURaTscgsh6AH+TImg8FCV7SJUgfE3U KoHv/eyQw+RBVfGE+eMz0lD9lHPVnmQ= -----END CERTIFICATE-----Generated at Sat May 31 17:28:53 2025 by rpki-client