$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft File: umn8tA4zSXV_ok-OM1eRxfAEXVg.mft (raw, json) Hash identifier: m157hssmgeh7SDGlMGVyRDX/JVK3yu+aYPFU5prZ6Nk= Subject key identifier: 45:59:D2:E3:84:CC:36:18:06:6A:13:2F:51:0A:0D:55:AE:80:AB:AF Authority key identifier: BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58 Certificate issuer: /CN=A91EBA81/serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58 Certificate serial: 041A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft Manifest number: 040F Signing time: Sat 31 May 2025 00:39:21 +0000 Manifest this update: Sat 31 May 2025 00:39:21 +0000 Manifest next update: Sat 07 Jun 2025 00:39:21 +0000 Files and hashes: 1: umn8tA4zSXV_ok-OM1eRxfAEXVg.crl (hash: 2pFS7KUfe9Y8t12En520i8KqOEYjt4fbnM3oTu+Me1M=) 2: 159DA092E9B711EFB8454123C4F9AE02.roa (hash: tjoX2rKURmmp0SIpilUWla3AD/nRXhfocceVz0iL1og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1050 (0x41a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA81, serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58 Validity Not Before: May 31 00:39:21 2025 GMT Not After : Jun 7 00:39:21 2025 GMT Subject: CN=683a4fb9-8d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:90:65:16:0b:98:cf:17:02:f1:4b:05:44:b5: 39:d9:2f:63:91:9f:90:fd:08:e0:19:1c:d4:18:51: 82:f2:72:bf:c4:d9:b2:60:46:74:38:a2:9e:ba:27: 9f:ff:a6:d4:15:8f:dd:c2:8d:a8:3e:3d:92:5d:a5: e6:8f:3a:ef:aa:22:8a:3e:56:17:51:22:e7:fc:8f: 91:0f:5f:67:40:d0:fe:3f:b2:c9:00:05:7b:7d:3a: 40:4a:9d:8f:85:cc:59:56:ff:c4:a7:9c:14:79:3c: 50:6d:81:ce:c2:2f:52:96:81:e1:e6:81:d8:ac:70: a2:9a:2f:10:4d:d1:4a:27:64:25:2d:bf:a1:05:93: 0c:1a:33:8c:29:cc:ee:94:cc:40:11:29:ab:09:dc: 4c:a0:36:c6:4a:a5:d1:e7:f5:92:a5:de:d0:ae:b7: b8:47:60:8e:b0:6d:8e:76:13:d9:30:97:93:0a:9e: a6:bf:1b:96:30:23:61:e2:f8:9f:33:80:d3:d4:2e: 4e:b1:67:27:82:6e:30:7f:11:98:9d:a6:5d:b3:a1: 9d:54:30:f2:30:a3:a2:2d:b8:89:4d:43:e2:9c:af: d6:5e:21:e9:75:ae:1f:60:8b:0e:6c:3f:f4:be:ac: b5:0b:ac:95:aa:de:bc:03:06:7e:e7:a0:f6:68:06: 3c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:59:D2:E3:84:CC:36:18:06:6A:13:2F:51:0A:0D:55:AE:80:AB:AF X509v3 Authority Key Identifier: keyid:BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:3b:b9:58:81:1e:5c:d2:b6:85:dd:33:cb:b9:0b:01:76:8e: 64:e7:4b:00:af:ac:ae:28:0a:a7:5f:23:3a:5d:13:9b:01:eb: 93:26:6e:24:e9:50:3b:52:c9:b1:d2:49:41:45:34:0d:63:70: 2e:55:83:d1:38:c4:45:ff:6c:f2:09:52:2f:1c:52:f8:be:97: fb:48:bb:7b:4e:77:b1:6d:11:3f:09:f0:49:05:c0:99:5d:9b: 87:86:13:50:a2:fd:a0:28:f7:fd:c4:f3:8f:88:9a:0e:21:5d: 0e:bd:88:bb:ec:a0:77:68:b9:ce:9d:08:cc:08:dc:0d:4c:70: f2:c2:0a:5c:0d:88:15:92:37:a2:5a:38:a0:be:f7:af:2f:f9: 22:80:44:00:2d:df:81:5a:24:d5:a5:7b:ff:53:78:d9:26:b8: 40:3c:f1:68:5b:16:11:e3:e0:0d:9e:68:0a:6b:8f:8f:35:30: 56:e4:2d:e9:e8:3c:01:66:bf:d1:a2:96:26:aa:0e:ad:03:6c: e0:8f:87:d3:bc:e2:bb:55:93:52:79:a2:f6:39:4e:5b:9c:7c: 22:75:1d:32:a4:ed:8f:1d:80:d9:02:df:85:89:1b:d0:0e:2b: d8:61:60:b6:c9:55:4d:46:90:b2:0a:7f:23:90:67:6d:f7:0c: 6b:83:64:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBODExMTAvBgNVBAUTKEJBNjlGQ0I0MEUzMzQ5NzU3RkEyNEY4RTMzNTc5MUM1 RjAwNDVENTgwHhcNMjUwNTMxMDAzOTIxWhcNMjUwNjA3MDAzOTIxWjAYMRYwFAYD VQQDEw02ODNhNGZiOS04ZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZBlFguYzxcC8UsFRLU52S9jkZ+Q/QjgGRzUGFGC8nK/xNmyYEZ0OKKeuief /6bUFY/dwo2oPj2SXaXmjzrvqiKKPlYXUSLn/I+RD19nQND+P7LJAAV7fTpASp2P hcxZVv/Ep5wUeTxQbYHOwi9SloHh5oHYrHCimi8QTdFKJ2QlLb+hBZMMGjOMKczu lMxAESmrCdxMoDbGSqXR5/WSpd7Qrre4R2COsG2OdhPZMJeTCp6mvxuWMCNh4vif M4DT1C5OsWcngm4wfxGYnaZds6GdVDDyMKOiLbiJTUPinK/WXiHpda4fYIsObD/0 vqy1C6yVqt68AwZ+56D2aAY8EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVZ0uOE zDYYBmoTL1EKDVWugKuvMB8GA1UdIwQYMBaAFLpp/LQOM0l1f6JPjjNXkcXwBF1Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE4MS9DRTEzNkJEMDc0 NTcxMUVDQjM5ODc1MThDNEY5QUUwMi91bW44dEE0elNYVl9vay1PTTFlUnhmQUVY VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vtbjh0QTR6U1hWX29rLU9NMWVSeGZBRVhWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE4MS9DRTEzNkJEMDc0NTcxMUVDQjM5ODc1MThDNEY5QUUwMi91bW44dEE0elNY Vl9vay1PTTFlUnhmQUVYVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDO7lYgR5c0raF3TPLuQsBdo5k50sAr6yuKAqnXyM6XRObAeuTJm4k 6VA7Usmx0klBRTQNY3AuVYPROMRF/2zyCVIvHFL4vpf7SLt7TnexbRE/CfBJBcCZ XZuHhhNQov2gKPf9xPOPiJoOIV0OvYi77KB3aLnOnQjMCNwNTHDywgpcDYgVkjei WjigvvevL/kigEQALd+BWiTVpXv/U3jZJrhAPPFoWxYR4+ANnmgKa4+PNTBW5C3p 6DwBZr/RopYmqg6tA2zgj4fTvOK7VZNSeaL2OU5bnHwidR0ypO2PHYDZAt+FiRvQ DivYYWC2yVVNRpCyCn8jkGdt9wxrg2Rc -----END CERTIFICATE-----Generated at Sat May 31 17:39:23 2025 by rpki-client