$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft File: UM3WDPjzEj_evOkIgq83u-PvXEg.mft (raw, json) Hash identifier: vqH5dVBTpSrZ2peg16h7OOgLT35h6NZK+N+mwAY6G64= Subject key identifier: 46:02:31:21:6A:0F:7A:BF:06:63:0B:F5:E1:44:5C:8F:19:5D:94:74 Authority key identifier: 50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48 Certificate issuer: /CN=A9122C94/serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48 Certificate serial: 0774 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft Manifest number: 076E Signing time: Sat 14 Jun 2025 21:18:51 +0000 Manifest this update: Sat 14 Jun 2025 21:18:51 +0000 Manifest next update: Sat 21 Jun 2025 21:18:51 +0000 Files and hashes: 1: UM3WDPjzEj_evOkIgq83u-PvXEg.crl (hash: WzqtrXwuchbLrVDKy7bglXlEZz3lSZP1YyQ+IdN5ens=) 2: 5BF797081CF411EBB5ADE642C4F9AE02.roa (hash: AwRksKXITHLfRHPDls3Dox6LPqS08ltsptsGuhqXo1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1908 (0x774) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122C94, serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48 Validity Not Before: Jun 14 21:18:51 2025 GMT Not After : Jun 21 21:18:51 2025 GMT Subject: CN=684de73b-6b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a8:08:28:65:73:99:4f:31:c0:16:1a:37:fd: 82:c4:49:95:d5:ae:6b:d1:67:79:12:03:cb:d6:a4: e1:c6:da:e9:5f:71:26:cd:a4:76:5f:73:d6:60:ea: 18:cb:24:c9:a8:e2:a4:0b:64:30:40:e0:29:93:bd: e6:e7:69:b5:10:fe:1e:29:96:62:30:28:b1:73:80: e9:75:ae:05:c4:a8:ec:37:7f:31:68:04:76:4e:68: 01:53:f2:da:26:91:59:36:8a:5e:01:53:f3:0b:e9: da:05:ef:8e:ba:e1:44:51:84:c5:4a:23:56:30:25: a7:5f:1d:e6:29:63:08:5a:53:76:0e:41:e9:d6:96: 22:92:70:a4:75:58:57:70:a8:a1:6e:13:26:63:50: d4:c2:52:74:c2:08:12:b4:b6:c9:38:c9:68:76:61: d4:ed:48:b1:a5:d2:cf:92:d5:fe:f9:be:8f:00:54: a9:68:5a:b1:0a:c2:fa:03:1b:23:38:55:c5:f2:2b: b9:96:49:c9:e3:73:71:d6:e7:e4:be:04:49:e4:54: 92:50:a3:14:e5:42:c8:0e:d2:0c:e8:93:54:38:81: 6a:c6:ce:63:1e:f5:c1:57:28:17:58:23:fd:df:c1: 64:3f:0e:4b:a5:98:a9:87:57:b7:0e:43:ea:4b:e9: 75:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:02:31:21:6A:0F:7A:BF:06:63:0B:F5:E1:44:5C:8F:19:5D:94:74 X509v3 Authority Key Identifier: keyid:50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:ff:85:7f:a0:85:19:eb:6e:13:db:f6:ee:b1:e6:8b:ff:dd: 99:1b:b3:00:42:6e:9c:a6:ff:05:c9:21:d1:c8:f6:f4:af:75: 14:58:b8:fb:bb:a7:d0:54:42:37:fa:d9:0c:27:0f:14:4b:51: e1:59:15:c4:02:fe:5f:ef:92:a2:d7:6f:0c:fe:08:7a:d6:86: 35:6c:cc:24:12:ca:51:1d:74:5c:42:f2:50:95:39:2a:14:03: 76:b7:2a:84:66:11:91:ae:ce:b0:61:a2:6b:98:4c:af:ea:a6: 0b:f7:09:fa:9b:b9:05:c5:46:38:58:6f:33:2c:25:d6:a1:4a: 20:eb:82:9b:c8:74:fd:44:90:5d:47:12:ca:32:03:f7:13:1d: 3f:29:0c:df:d0:cc:0c:cf:27:71:08:32:00:4a:3d:1e:b5:60: 04:90:28:4f:0e:9f:02:9a:ba:93:72:47:93:a3:fb:d3:db:90: 56:9d:cb:4d:80:c9:02:53:8c:be:ba:46:33:bf:31:94:2a:49: df:fe:35:4e:f0:7f:1f:9d:1c:88:9b:b5:fd:de:7b:7b:ea:5c: fc:7c:23:ec:b3:43:5c:b7:82:fb:08:c5:fb:a3:3e:c3:f2:f3: 4e:11:30:b6:a6:98:a1:60:10:6e:c1:4b:0a:6d:1d:8a:f4:f7: 91:d9:a6:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDOTQxMTAvBgNVBAUTKDUwQ0RENjBDRjhGMzEyM0ZERUJDRTkwODgyQUYzN0JC RTNFRjVDNDgwHhcNMjUwNjE0MjExODUxWhcNMjUwNjIxMjExODUxWjAYMRYwFAYD VQQDEw02ODRkZTczYi02YjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqgIKGVzmU8xwBYaN/2CxEmV1a5r0Wd5EgPL1qThxtrpX3EmzaR2X3PWYOoY yyTJqOKkC2QwQOApk73m52m1EP4eKZZiMCixc4Dpda4FxKjsN38xaAR2TmgBU/La JpFZNopeAVPzC+naBe+OuuFEUYTFSiNWMCWnXx3mKWMIWlN2DkHp1pYiknCkdVhX cKihbhMmY1DUwlJ0wggStLbJOMlodmHU7UixpdLPktX++b6PAFSpaFqxCsL6Axsj OFXF8iu5lknJ43Nx1ufkvgRJ5FSSUKMU5ULIDtIM6JNUOIFqxs5jHvXBVygXWCP9 38FkPw5LpZiph1e3DkPqS+l1swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYCMSFq D3q/BmML9eFEXI8ZXZR0MB8GA1UdIwQYMBaAFFDN1gz48xI/3rzpCIKvN7vj71xI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC84MjIyQzI3RTFD RjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVqX2V2T2tJZ3E4M3UtUHZY RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VNM1dEUGp6RWpfZXZPa0lncTgzdS1QdlhFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkM5NC84MjIyQzI3RTFDRjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVq X2V2T2tJZ3E4M3UtUHZYRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY/4V/oIUZ624T2/buseaL/92ZG7MAQm6cpv8FySHRyPb0r3UUWLj7 u6fQVEI3+tkMJw8US1HhWRXEAv5f75Ki128M/gh61oY1bMwkEspRHXRcQvJQlTkq FAN2tyqEZhGRrs6wYaJrmEyv6qYL9wn6m7kFxUY4WG8zLCXWoUog64KbyHT9RJBd RxLKMgP3Ex0/KQzf0MwMzydxCDIASj0etWAEkChPDp8CmrqTckeTo/vT25BWnctN gMkCU4y+ukYzvzGUKknf/jVO8H8fnRyIm7X93nt76lz8fCPss0Nct4L7CMX7oz7D 8vNOETC2ppihYBBuwUsKbR2K9PeR2aaT -----END CERTIFICATE-----Generated at Sun Jun 15 09:45:19 2025 by rpki-client