$ rpki-client -vvf rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft File: xUMJ3BErZYYnvTagMHLnXQYDZNM.mft (raw, json) Hash identifier: b3NWeynrTL9lz/fGFBhQ7Fe9fQ4Lt3QLFRhHLPh7yAw= Subject key identifier: 39:93:E2:74:92:B2:14:00:40:3B:A2:67:DE:6F:DD:1C:9B:60:DC:B6 Authority key identifier: C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3 Certificate issuer: /CN=A9199836/serialNumber=C54309DC112B658627BD36A03072E75D060364D3 Certificate serial: 04A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft Manifest number: 049E Signing time: Tue 03 Jun 2025 00:11:01 +0000 Manifest this update: Tue 03 Jun 2025 00:11:01 +0000 Manifest next update: Tue 10 Jun 2025 00:11:01 +0000 Files and hashes: 1: xUMJ3BErZYYnvTagMHLnXQYDZNM.crl (hash: KgsBPeluN4IfITjP4QVluTlcR9pwmlba4ne8OwM1RB8=) 2: 029F318A366F11ECA773E263C4F9AE02.roa (hash: oSdvyorGuPv/5QDTLowUDTHEVLVsXYxy04DwT+pQi58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 00:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1186 (0x4a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199836, serialNumber=C54309DC112B658627BD36A03072E75D060364D3 Validity Not Before: Jun 3 00:11:01 2025 GMT Not After : Jun 10 00:11:01 2025 GMT Subject: CN=683e3d95-e4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:41:f1:65:c3:0d:db:83:bb:b3:d1:b7:5e:4e: e6:58:40:52:96:ac:24:97:77:7d:8a:ba:2d:39:86: a4:10:95:bf:cf:51:cd:36:1e:db:26:7b:0c:79:b5: f9:4f:87:ff:16:89:c1:0b:d6:2f:09:de:ef:b5:76: bb:d8:9d:45:b5:7f:6c:38:6e:dc:b3:a5:ff:de:69: 8b:e7:ef:28:71:6e:52:99:d6:97:06:94:9f:6d:31: 05:3e:bc:13:fc:4d:2e:7e:17:5a:fb:68:57:99:06: d9:2b:df:3d:27:12:c5:e8:33:c6:c3:13:e1:51:5f: dc:f8:b2:8b:22:1d:b9:98:aa:5e:63:60:ba:1d:d1: c9:c1:94:a4:c7:54:c0:78:ee:34:dc:21:07:f0:fc: 0f:b5:af:02:75:0e:38:a2:a5:cb:5c:72:8a:a2:30: 77:2f:0d:1d:98:41:2d:cf:4c:81:13:9f:ef:43:28: 08:18:3b:18:92:f6:60:88:cd:86:2d:ee:35:01:45: 13:87:36:db:bb:bf:87:a1:6c:25:99:c0:db:cd:b0: 8a:5d:71:45:03:59:49:59:83:3e:d4:86:22:97:b5: 9e:db:52:3c:37:53:49:a4:28:67:29:38:25:a2:91: e2:de:b3:fa:e9:7f:8b:eb:53:a2:56:98:ce:a5:be: 98:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:93:E2:74:92:B2:14:00:40:3B:A2:67:DE:6F:DD:1C:9B:60:DC:B6 X509v3 Authority Key Identifier: keyid:C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:f8:68:72:92:b3:3c:f1:96:8e:7b:5f:0a:04:fb:61:ec:bd: 41:d0:af:e4:01:a7:70:60:39:d8:f9:01:b0:52:51:7d:61:db: f0:ac:49:5e:a2:2e:c2:a5:a9:11:66:08:08:b5:e7:7d:71:7e: e9:33:e7:9d:d5:8d:4e:fc:4a:5f:ac:4b:ca:9d:d5:12:6b:af: d7:84:ad:4b:06:4d:64:ff:78:9a:28:0b:fd:e8:ba:22:91:70: 45:33:23:b1:3d:7e:61:88:7f:a3:39:7e:f4:d2:54:43:8e:20: 84:60:98:ee:fb:5c:28:54:d4:fa:e0:af:7c:f9:9f:14:a3:f3: b3:95:d1:25:5b:c5:88:2e:ae:01:60:57:27:94:1c:87:6f:42: 11:3e:e3:28:56:c3:da:9d:34:95:1c:9b:2b:f0:33:da:12:87: 9d:75:3a:28:d5:ea:c8:ee:e0:35:84:9e:14:b5:2d:6b:91:7d: 8f:fa:35:bc:2d:c6:c2:cc:a8:47:70:f3:80:42:9b:75:69:4b: 54:8e:e3:a7:1c:53:e5:fd:d7:c4:66:99:a9:af:fd:1e:a3:46: 02:06:f1:8c:fc:43:cd:ef:9b:df:45:b8:bf:12:8a:54:0c:a8: 09:07:a1:48:f4:93:bc:73:90:20:5e:82:66:f4:9c:52:a2:59: 75:c6:3b:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4MzYxMTAvBgNVBAUTKEM1NDMwOURDMTEyQjY1ODYyN0JEMzZBMDMwNzJFNzVE MDYwMzY0RDMwHhcNMjUwNjAzMDAxMTAxWhcNMjUwNjEwMDAxMTAxWjAYMRYwFAYD VQQDEw02ODNlM2Q5NS1lNGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykHxZcMN24O7s9G3Xk7mWEBSlqwkl3d9irotOYakEJW/z1HNNh7bJnsMebX5 T4f/FonBC9YvCd7vtXa72J1FtX9sOG7cs6X/3mmL5+8ocW5SmdaXBpSfbTEFPrwT /E0ufhda+2hXmQbZK989JxLF6DPGwxPhUV/c+LKLIh25mKpeY2C6HdHJwZSkx1TA eO403CEH8PwPta8CdQ44oqXLXHKKojB3Lw0dmEEtz0yBE5/vQygIGDsYkvZgiM2G Le41AUUThzbbu7+HoWwlmcDbzbCKXXFFA1lJWYM+1IYil7We21I8N1NJpChnKTgl opHi3rP66X+L61OiVpjOpb6Y5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmT4nSS shQAQDuiZ95v3RybYNy2MB8GA1UdIwQYMBaAFMVDCdwRK2WGJ702oDBy510GA2TT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTgzNi8yOTM2RkZCMjM2 MkUxMUVDODkwOUU4NkZDNEY5QUUwMi94VU1KM0JFclpZWW52VGFnTUhMblhRWURa Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVTUozQkVyWllZbnZUYWdNSExuWFFZRFpOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTgzNi8yOTM2RkZCMjM2MkUxMUVDODkwOUU4NkZDNEY5QUUwMi94VU1KM0JFclpZ WW52VGFnTUhMblhRWURaTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0+GhykrM88ZaOe18KBPth7L1B0K/kAadwYDnY+QGwUlF9YdvwrEle oi7CpakRZggIted9cX7pM+ed1Y1O/EpfrEvKndUSa6/XhK1LBk1k/3iaKAv96Loi kXBFMyOxPX5hiH+jOX700lRDjiCEYJju+1woVNT64K98+Z8Uo/OzldElW8WILq4B YFcnlByHb0IRPuMoVsPanTSVHJsr8DPaEoeddToo1erI7uA1hJ4UtS1rkX2P+jW8 LcbCzKhHcPOAQpt1aUtUjuOnHFPl/dfEZpmpr/0eo0YCBvGM/EPN75vfRbi/EopU DKgJB6FI9JO8c5AgXoJm9JxSoll1xjuR -----END CERTIFICATE-----Generated at Tue Jun 3 23:58:49 2025 by rpki-client