$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft File: umDC9ghXfO5rvRSTcht6rsoodis.mft (raw, json) Hash identifier: TkIRiY7WEGBVjnKDZzU4PZNXIp8f5wDb5kaMj/RfRPA= Subject key identifier: F2:DE:CF:4A:F8:45:5D:1E:91:AD:C3:9D:F0:A7:C1:7F:BA:4C:D0:A5 Authority key identifier: BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B Certificate issuer: /CN=A91326FF/serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft Manifest number: 99 Signing time: Sun 15 Jun 2025 05:26:34 +0000 Manifest this update: Sun 15 Jun 2025 05:26:33 +0000 Manifest next update: Sun 22 Jun 2025 05:26:33 +0000 Files and hashes: 1: umDC9ghXfO5rvRSTcht6rsoodis.crl (hash: m9e+HyY4uoBBWhrZfuEvgRqOQ00TTG9iWVFtvg5HpKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326FF, serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B Validity Not Before: Jun 15 05:26:33 2025 GMT Not After : Jun 22 05:26:33 2025 GMT Subject: CN=684e598a-6136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:14:10:c8:98:bd:47:22:0d:55:99:75:d8:e1: d9:c3:08:c6:f2:78:35:e2:c1:d3:34:31:85:06:51: 17:5c:53:36:50:bb:39:ee:5e:88:0d:c1:67:d7:0b: 83:42:13:49:a2:31:f4:e1:38:86:fa:90:f7:88:6a: 7b:29:43:d8:b8:70:3b:13:d3:f0:23:71:3f:21:a0: 9c:e8:9d:e7:54:82:71:22:72:fd:d7:60:8f:6c:ac: 0f:35:4e:50:e9:9b:32:6a:2e:ff:0f:67:5c:fa:d7: 14:a2:49:e9:5d:55:b4:3c:b3:ce:93:78:c3:8d:19: e5:c7:98:d8:61:65:32:c5:32:3a:36:4a:80:88:b3: 1a:96:fa:8c:c8:8e:d6:91:5b:f1:eb:1c:17:2e:01: 7a:b9:b1:0b:cc:54:c6:f1:ab:6f:cc:1c:20:12:28: ca:0a:82:48:42:d7:40:68:8e:af:cd:0d:d5:11:12: d4:60:a2:9c:86:86:56:8b:d5:91:13:df:26:33:2f: 6c:e1:bd:9f:88:db:59:2b:2a:47:7f:85:a1:e9:ac: 91:1d:14:31:09:11:3e:26:83:f5:1e:78:b2:73:9b: 83:c3:d0:49:e4:52:d5:1a:79:e7:06:c2:91:b9:d7: 4b:cd:cd:43:38:6f:58:07:a6:57:d9:3b:6c:c2:e7: 5b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DE:CF:4A:F8:45:5D:1E:91:AD:C3:9D:F0:A7:C1:7F:BA:4C:D0:A5 X509v3 Authority Key Identifier: keyid:BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:19:59:5f:62:f1:43:73:2f:57:0e:0c:c7:ca:5d:d1:8e:c0: b6:7b:ea:d8:94:c1:42:67:cb:f8:01:66:91:eb:77:13:88:d5: b0:d7:64:26:dd:bd:cd:72:11:07:b2:ee:bc:dd:af:ca:66:01: f9:c1:02:6e:ec:af:3f:f9:45:a3:b5:52:50:d4:a9:7a:e9:82: f7:9f:d8:59:42:84:f3:b4:59:9a:68:45:38:ea:eb:0a:dc:08: bd:f2:6e:91:ab:87:4c:46:7f:14:93:e0:63:f5:a6:19:a8:15: da:a3:a5:36:7a:2b:51:f2:b5:33:84:a3:8c:c2:7d:eb:ef:e4: 4f:cd:79:db:ef:59:bd:41:96:09:43:3b:84:01:a3:8b:4a:06: 27:a6:e1:d0:7e:68:4c:ae:87:b3:10:c0:92:84:b2:25:dc:fc: 7a:f4:98:df:e2:3e:e1:e5:b9:79:4e:74:7c:09:a6:13:b4:d8: 64:20:15:54:56:cb:86:e5:bd:db:65:b0:64:01:0b:74:e9:c6: d6:b0:e9:44:3e:a8:5d:03:84:f8:fa:82:e1:c5:8d:17:a9:05: 7b:eb:29:3e:ca:b9:1d:19:b7:ab:73:1e:f1:3e:ee:8a:12:b3: 1b:1d:a1:05:52:3b:3b:45:5f:e0:ab:36:c0:bf:cc:ef:ce:af: 8a:04:21:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI2RkYxMTAvBgNVBAUTKEJBNjBDMkY2MDg1NzdDRUU2QkJEMTQ5MzcyMUI3QUFF Q0EyODc2MkIwHhcNMjUwNjE1MDUyNjMzWhcNMjUwNjIyMDUyNjMzWjAYMRYwFAYD VQQDEw02ODRlNTk4YS02MTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBQQyJi9RyINVZl12OHZwwjG8ng14sHTNDGFBlEXXFM2ULs57l6IDcFn1wuD QhNJojH04TiG+pD3iGp7KUPYuHA7E9PwI3E/IaCc6J3nVIJxInL912CPbKwPNU5Q 6Zsyai7/D2dc+tcUoknpXVW0PLPOk3jDjRnlx5jYYWUyxTI6NkqAiLMalvqMyI7W kVvx6xwXLgF6ubELzFTG8atvzBwgEijKCoJIQtdAaI6vzQ3VERLUYKKchoZWi9WR E98mMy9s4b2fiNtZKypHf4Wh6ayRHRQxCRE+JoP1Hniyc5uDw9BJ5FLVGnnnBsKR uddLzc1DOG9YB6ZX2TtswudbSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLez0r4 RV0eka3DnfCnwX+6TNClMB8GA1UdIwQYMBaAFLpgwvYIV3zua70Uk3Ibeq7KKHYr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZGRi85Q0YwNEQzQzVG OEUxMUVGQjIzRTc5NDVDNEY5QUUwMi91bURDOWdoWGZPNXJ2UlNUY2h0NnJzb29k aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VtREM5Z2hYZk81cnZSU1RjaHQ2cnNvb2Rpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjZGRi85Q0YwNEQzQzVGOEUxMUVGQjIzRTc5NDVDNEY5QUUwMi91bURDOWdoWGZP NXJ2UlNUY2h0NnJzb29kaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+GVlfYvFDcy9XDgzHyl3RjsC2e+rYlMFCZ8v4AWaR63cTiNWw12Qm 3b3NchEHsu683a/KZgH5wQJu7K8/+UWjtVJQ1Kl66YL3n9hZQoTztFmaaEU46usK 3Ai98m6Rq4dMRn8Uk+Bj9aYZqBXao6U2eitR8rUzhKOMwn3r7+RPzXnb71m9QZYJ QzuEAaOLSgYnpuHQfmhMroezEMCShLIl3Px69Jjf4j7h5bl5TnR8CaYTtNhkIBVU VsuG5b3bZbBkAQt06cbWsOlEPqhdA4T4+oLhxY0XqQV76yk+yrkdGbercx7xPu6K ErMbHaEFUjs7RV/gqzbAv8zvzq+KBCGZ -----END CERTIFICATE-----Generated at Sun Jun 15 10:09:56 2025 by rpki-client