$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft File: umn8tA4zSXV_ok-OM1eRxfAEXVg.mft (raw, json) Hash identifier: P8FSe5ODiERbIPafrh/EvUr7eyXbiqJFE6t+Id0qYMQ= Subject key identifier: A2:4E:68:D8:B5:C0:E4:CC:36:A5:74:06:FA:3A:D5:6C:79:FF:38:43 Authority key identifier: BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58 Certificate issuer: /CN=A91EBA81/serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58 Certificate serial: 0445 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft Manifest number: 043A Signing time: Sat 23 Aug 2025 00:33:16 +0000 Manifest this update: Sat 23 Aug 2025 00:33:15 +0000 Manifest next update: Sat 30 Aug 2025 00:33:15 +0000 Files and hashes: 1: umn8tA4zSXV_ok-OM1eRxfAEXVg.crl (hash: n7OXFO4+xYof5Q8oyE6VbzukSSLLgz+twRXiQn7tAbU=) 2: 159DA092E9B711EFB8454123C4F9AE02.roa (hash: tjoX2rKURmmp0SIpilUWla3AD/nRXhfocceVz0iL1og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1093 (0x445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA81, serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58 Validity Not Before: Aug 23 00:33:15 2025 GMT Not After : Aug 30 00:33:15 2025 GMT Subject: CN=68a90c4b-7dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9f:55:b2:8c:3a:b1:29:7d:ee:b6:97:25:32: 84:14:ba:39:53:75:d5:85:5d:bd:69:b5:b7:76:b0: 7f:3f:98:f6:ab:e4:95:53:e4:26:12:d7:53:67:40: 51:c5:92:74:c6:71:00:83:81:36:a8:a1:03:3c:9f: c9:1f:75:16:16:ad:b5:8f:58:41:6c:b0:d4:d8:3d: 20:69:96:d3:f5:0d:84:92:03:e8:1f:0d:51:cb:1a: cf:9d:aa:29:0e:83:01:15:5d:ea:e8:07:0a:ac:a8: 53:30:98:08:46:c3:96:6e:b1:fc:19:73:79:d5:96: 4b:da:2d:e8:4a:e9:66:69:be:5e:78:55:28:d0:4b: d6:f5:54:55:2d:60:2e:c8:88:47:47:e1:ee:c8:35: b6:9d:27:6a:da:03:9c:93:e1:56:6d:f2:be:e9:74: 74:9f:9f:e4:ed:d2:7e:38:a1:b8:6c:eb:ab:ea:98: 04:64:60:39:44:7d:87:ec:28:9b:ac:27:31:52:09: 54:f4:c6:e9:85:41:96:20:31:c3:07:68:b5:b7:ad: eb:20:95:df:1a:cd:2f:58:fc:80:dc:98:92:a2:8d: d0:5f:fe:2c:38:3c:a9:6d:7b:9b:05:28:2f:ee:0d: 29:73:2b:4c:3d:94:34:e4:1a:6d:06:ba:4a:bc:7f: 6e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4E:68:D8:B5:C0:E4:CC:36:A5:74:06:FA:3A:D5:6C:79:FF:38:43 X509v3 Authority Key Identifier: keyid:BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:64:2e:0f:b1:8e:b9:bd:d9:2b:1a:6c:3c:3b:35:fd:fc:20: b3:ef:45:b2:7f:3e:1e:ee:14:a3:38:c5:fb:70:11:be:27:f3: f1:85:26:bd:3a:a2:c9:a4:1c:59:72:ee:68:4b:35:d5:92:f0: 16:9f:92:81:37:12:5b:b8:6e:c0:18:9a:5f:4e:55:fd:07:4a: 0f:f2:82:4a:39:68:e7:7b:d5:3d:0b:d6:61:52:1b:52:7e:ab: 5a:a8:6d:fa:ef:61:3c:a5:38:ec:a2:f3:67:43:ee:d3:95:eb: 10:31:e4:56:b5:f0:0f:00:4c:4b:24:b9:eb:6f:43:c9:e0:3a: a5:e4:85:09:c6:46:ff:29:8c:48:ca:c8:e9:98:62:0a:b8:99: 6b:52:f1:cb:cf:ee:39:2b:7a:33:7e:44:ab:b1:52:4a:cb:bb: c5:f1:8b:4e:b3:03:67:36:74:d4:57:59:0d:ee:ee:bc:8e:44: 85:42:60:6b:46:e9:03:62:ce:f8:da:60:58:5d:29:2b:cc:14: 56:34:e8:c6:0f:39:66:67:e4:85:6a:81:87:38:ef:b9:38:fd: ef:04:54:fe:8b:d2:0b:3a:1c:92:49:f4:de:00:b5:88:af:46: fb:39:80:02:31:98:45:b5:0a:c0:b9:15:fb:a4:33:3e:01:b4: 62:e7:c8:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBODExMTAvBgNVBAUTKEJBNjlGQ0I0MEUzMzQ5NzU3RkEyNEY4RTMzNTc5MUM1 RjAwNDVENTgwHhcNMjUwODIzMDAzMzE1WhcNMjUwODMwMDAzMzE1WjAYMRYwFAYD VQQDEw02OGE5MGM0Yi03ZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA359Vsow6sSl97raXJTKEFLo5U3XVhV29abW3drB/P5j2q+SVU+QmEtdTZ0BR xZJ0xnEAg4E2qKEDPJ/JH3UWFq21j1hBbLDU2D0gaZbT9Q2EkgPoHw1RyxrPnaop DoMBFV3q6AcKrKhTMJgIRsOWbrH8GXN51ZZL2i3oSulmab5eeFUo0EvW9VRVLWAu yIhHR+HuyDW2nSdq2gOck+FWbfK+6XR0n5/k7dJ+OKG4bOur6pgEZGA5RH2H7Cib rCcxUglU9MbphUGWIDHDB2i1t63rIJXfGs0vWPyA3JiSoo3QX/4sODypbXubBSgv 7g0pcytMPZQ05BptBrpKvH9uWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJOaNi1 wOTMNqV0Bvo61Wx5/zhDMB8GA1UdIwQYMBaAFLpp/LQOM0l1f6JPjjNXkcXwBF1Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE4MS9DRTEzNkJEMDc0 NTcxMUVDQjM5ODc1MThDNEY5QUUwMi91bW44dEE0elNYVl9vay1PTTFlUnhmQUVY VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vtbjh0QTR6U1hWX29rLU9NMWVSeGZBRVhWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE4MS9DRTEzNkJEMDc0NTcxMUVDQjM5ODc1MThDNEY5QUUwMi91bW44dEE0elNY Vl9vay1PTTFlUnhmQUVYVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9ZC4PsY65vdkrGmw8OzX9/CCz70Wyfz4e7hSjOMX7cBG+J/PxhSa9 OqLJpBxZcu5oSzXVkvAWn5KBNxJbuG7AGJpfTlX9B0oP8oJKOWjne9U9C9ZhUhtS fqtaqG3672E8pTjsovNnQ+7TlesQMeRWtfAPAExLJLnrb0PJ4Dql5IUJxkb/KYxI ysjpmGIKuJlrUvHLz+45K3ozfkSrsVJKy7vF8YtOswNnNnTUV1kN7u68jkSFQmBr RukDYs742mBYXSkrzBRWNOjGDzlmZ+SFaoGHOO+5OP3vBFT+i9ILOhySSfTeALWI r0b7OYACMZhFtQrAuRX7pDM+AbRi58jR -----END CERTIFICATE-----Generated at Sun Aug 24 22:18:31 2025 by rpki-client