$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft File: umDC9ghXfO5rvRSTcht6rsoodis.mft (raw, json) Hash identifier: bZRvNmNvtrCmkUj1/nr8jFGadcauxL0xZgy5d/J4LHY= Subject key identifier: 3F:C7:D3:14:FE:E6:D3:FC:95:88:CC:42:F5:51:86:6E:33:59:A8:C5 Authority key identifier: BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B Certificate issuer: /CN=A91326FF/serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft Manifest number: 80 Signing time: Fri 25 Apr 2025 05:38:30 +0000 Manifest this update: Fri 25 Apr 2025 05:38:30 +0000 Manifest next update: Fri 02 May 2025 05:38:30 +0000 Files and hashes: 1: umDC9ghXfO5rvRSTcht6rsoodis.crl (hash: huQSDViUaxKYfZHU3xPzg07sg4PwOH7yJgN8rvCG1UY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326FF, serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B Validity Not Before: Apr 25 05:38:30 2025 GMT Not After : May 2 05:38:30 2025 GMT Subject: CN=680b1fd6-40dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:f8:47:e3:00:7d:bc:6e:28:a5:6f:de:79: 7a:78:4f:78:86:7d:32:41:da:18:28:d1:ef:9d:40: c4:92:cd:29:70:33:e4:1b:31:f4:11:bb:47:1a:56: 8c:10:c2:1f:1d:fd:3e:22:d9:d3:ea:80:39:77:e4: 85:39:62:bc:06:d1:02:82:a3:16:45:8b:7c:ea:a4: 33:d1:fe:0f:08:de:f7:0d:df:80:c9:32:2e:24:9a: cb:0b:46:48:e5:ae:97:8a:9f:fa:67:52:a7:78:1b: 55:fd:2d:a3:1c:5d:38:98:72:fe:03:69:e7:07:e6: 3a:b4:24:d0:38:54:0c:79:28:7a:d9:e8:5c:5d:9b: 53:52:57:a4:07:7f:97:0c:26:85:74:f9:72:e6:2f: 14:7f:c2:76:9c:eb:21:ea:86:5b:f9:31:3e:7d:1b: 05:86:3c:4d:df:5a:a4:3f:b6:7d:68:ec:09:c6:de: 3e:80:bc:e5:1d:86:8e:23:60:a7:f3:77:0a:f3:df: d6:2b:80:a2:de:77:bd:2a:a3:a2:df:d4:51:93:dc: 67:88:bd:d6:d2:65:6a:49:f2:0f:43:67:79:bc:99: bc:cd:df:67:b3:b0:cd:81:92:b5:d8:55:ca:87:f4: 9a:c3:73:88:3d:ed:35:45:fa:19:94:67:70:29:d2: 61:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C7:D3:14:FE:E6:D3:FC:95:88:CC:42:F5:51:86:6E:33:59:A8:C5 X509v3 Authority Key Identifier: keyid:BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:a1:37:f7:ae:81:56:ed:2d:45:7e:32:dc:1d:05:74:42:dc: 36:4a:ff:e2:19:46:9b:7e:76:82:36:61:83:e9:3a:af:ab:84: 14:a0:e0:f3:a5:15:0d:a9:01:67:01:9a:9b:54:7f:88:1e:55: f1:f9:f3:5b:ef:c6:d5:66:55:7d:dd:ac:b6:1f:01:cd:32:20: 9f:15:c4:c8:55:4e:b6:e2:fc:56:d6:5b:d2:35:33:78:a4:03: ed:87:0d:28:c0:ab:8c:80:77:c8:ab:5e:6c:5f:a2:54:0b:43: 8d:ae:7c:d8:11:01:e9:45:8a:08:32:cd:ab:e4:cc:5a:b0:92: 09:b1:1c:7c:f0:04:9e:fc:5d:59:48:08:a7:1f:78:07:8a:1f: b0:f9:b7:a9:a3:b3:92:6c:86:f1:e4:bb:c8:3e:69:15:62:14: 84:92:1b:a0:5c:a8:86:e6:6c:77:8f:9a:14:1e:f3:08:f1:fb: 1e:cf:6e:2e:b3:2e:65:13:67:52:e5:68:ae:6a:71:3e:6d:02: 75:a1:cd:4a:13:22:d1:3c:b1:b9:90:69:ed:fd:d6:d1:d5:9d: f6:f0:b5:42:a9:72:8b:46:05:e4:d3:85:d1:c7:48:37:3d:a9: 30:38:cc:00:a2:d6:41:89:b0:9d:95:88:4e:93:80:59:31:4f: 05:4e:48:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI2RkYxMTAvBgNVBAUTKEJBNjBDMkY2MDg1NzdDRUU2QkJEMTQ5MzcyMUI3QUFF Q0EyODc2MkIwHhcNMjUwNDI1MDUzODMwWhcNMjUwNTAyMDUzODMwWjAYMRYwFAYD VQQDEw02ODBiMWZkNi00MGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4X4R+MAfbxuKKVv3nl6eE94hn0yQdoYKNHvnUDEks0pcDPkGzH0EbtHGlaM EMIfHf0+ItnT6oA5d+SFOWK8BtECgqMWRYt86qQz0f4PCN73Dd+AyTIuJJrLC0ZI 5a6Xip/6Z1KneBtV/S2jHF04mHL+A2nnB+Y6tCTQOFQMeSh62ehcXZtTUlekB3+X DCaFdPly5i8Uf8J2nOsh6oZb+TE+fRsFhjxN31qkP7Z9aOwJxt4+gLzlHYaOI2Cn 83cK89/WK4Ci3ne9KqOi39RRk9xniL3W0mVqSfIPQ2d5vJm8zd9ns7DNgZK12FXK h/Saw3OIPe01RfoZlGdwKdJh4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/H0xT+ 5tP8lYjMQvVRhm4zWajFMB8GA1UdIwQYMBaAFLpgwvYIV3zua70Uk3Ibeq7KKHYr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZGRi85Q0YwNEQzQzVG OEUxMUVGQjIzRTc5NDVDNEY5QUUwMi91bURDOWdoWGZPNXJ2UlNUY2h0NnJzb29k aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VtREM5Z2hYZk81cnZSU1RjaHQ2cnNvb2Rpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjZGRi85Q0YwNEQzQzVGOEUxMUVGQjIzRTc5NDVDNEY5QUUwMi91bURDOWdoWGZP NXJ2UlNUY2h0NnJzb29kaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2oTf3roFW7S1FfjLcHQV0Qtw2Sv/iGUabfnaCNmGD6Tqvq4QUoODz pRUNqQFnAZqbVH+IHlXx+fNb78bVZlV93ay2HwHNMiCfFcTIVU624vxW1lvSNTN4 pAPthw0owKuMgHfIq15sX6JUC0ONrnzYEQHpRYoIMs2r5MxasJIJsRx88ASe/F1Z SAinH3gHih+w+bepo7OSbIbx5LvIPmkVYhSEkhugXKiG5mx3j5oUHvMI8fsez24u sy5lE2dS5WiuanE+bQJ1oc1KEyLRPLG5kGnt/dbR1Z328LVCqXKLRgXk04XRx0g3 PakwOMwAotZBibCdlYhOk4BZMU8FTkgn -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:47 2025 by rpki-client