$ rpki-client -vvf rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft File: uMMvxNeTGtQkFAcwaguZasjJn-s.mft (raw, json) Hash identifier: PkvDXgj1JspDo1SDb1vXdb7q9Ds+P1aPtwxtstYCQfw= Subject key identifier: 6D:53:34:8C:BF:FB:12:9A:05:B4:A1:A0:A5:C8:E8:06:0A:79:E4:8D Authority key identifier: B8:C3:2F:C4:D7:93:1A:D4:24:14:07:30:6A:0B:99:6A:C8:C9:9F:EB Certificate issuer: /CN=A9140467/serialNumber=B8C32FC4D7931AD4241407306A0B996AC8C99FEB Certificate serial: 07DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft Manifest number: 07D8 Signing time: Thu 12 Jun 2025 20:45:54 +0000 Manifest this update: Thu 12 Jun 2025 20:45:53 +0000 Manifest next update: Thu 19 Jun 2025 20:45:53 +0000 Files and hashes: 1: uMMvxNeTGtQkFAcwaguZasjJn-s.crl (hash: OTVUvnklr8309nTJpt3qaRCztgDN9OfEMtJ6p1P3EzE=) 2: 02E60C72F1E211EAA2361B34C4F9AE02.roa (hash: NVCXbcFvHq2CdsPgLWHDiKusyLYs2euJqKNXNgfWerU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.crl rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2014 (0x7de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140467, serialNumber=B8C32FC4D7931AD4241407306A0B996AC8C99FEB Validity Not Before: Jun 12 20:45:53 2025 GMT Not After : Jun 19 20:45:53 2025 GMT Subject: CN=684b3c81-6ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5b:71:d5:f6:45:e5:dd:60:89:f5:23:79:97: 20:63:50:fd:18:c4:80:20:1e:da:40:a0:09:9e:23: 62:23:b2:01:7f:47:cf:9f:61:d6:cf:19:4a:af:ad: ae:45:5a:ea:0e:99:0c:b4:cc:83:87:5a:6a:77:bf: 96:54:82:4d:40:20:55:bc:ae:67:28:49:b6:d3:f2: 45:3d:31:83:f5:70:6a:6e:3d:1b:bf:ce:7c:b5:15: e2:16:31:a9:96:f2:d7:9d:ef:f8:99:7a:98:41:53: 09:9d:3d:0f:96:7e:80:08:17:47:4d:09:e0:8d:57: 84:63:6b:bd:ea:1a:4d:f6:57:26:99:a7:a9:9e:04: 58:1d:e5:73:97:a3:c1:8f:09:d0:95:17:a2:75:68: a0:7e:f7:4e:d0:ba:04:80:b4:9a:bc:e9:e0:11:08: 39:b8:ec:a2:2b:bd:09:9a:f4:65:ae:80:cc:3b:75: 57:88:c3:9d:96:3a:47:17:df:f9:ac:85:93:fe:9b: 0f:fb:49:ca:c3:87:74:26:25:b4:35:b0:66:48:49: e1:32:24:b0:e9:b6:32:87:52:1b:98:c0:b8:b9:a0: c2:af:0d:29:ba:e2:a7:69:a6:79:e9:13:2d:9d:db: 82:11:15:8d:80:8b:7d:e5:65:e2:f0:06:ed:f7:d2: b2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:53:34:8C:BF:FB:12:9A:05:B4:A1:A0:A5:C8:E8:06:0A:79:E4:8D X509v3 Authority Key Identifier: keyid:B8:C3:2F:C4:D7:93:1A:D4:24:14:07:30:6A:0B:99:6A:C8:C9:9F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:d3:d4:9c:84:59:2c:a3:7b:86:ff:de:3a:0a:40:95:13:d0: 1d:b9:d0:dc:d8:71:18:e0:03:6c:fb:32:d0:32:53:83:1b:7e: 92:ff:6b:00:b6:26:8c:6b:17:3a:e3:6e:4c:57:1a:88:2c:35: e1:51:1d:39:47:21:26:ae:07:27:65:86:3b:7c:c4:58:91:75: 78:56:df:80:ed:33:46:66:7b:ba:15:1e:d2:98:cb:bd:c5:47: 97:f2:7f:1b:07:ef:82:f1:56:8e:55:10:44:c8:8e:14:69:0f: e0:17:25:0c:d6:10:88:64:1f:b0:85:29:40:55:72:c4:7e:ab: 29:d9:d8:1e:af:fb:18:c8:4c:32:47:f1:aa:c7:39:83:78:ed: 57:8a:52:72:2f:0c:7d:c0:42:fd:3e:a4:23:66:3e:12:a1:e0: 34:30:0e:e4:79:f1:cf:46:ef:80:6b:0c:bb:ef:78:3a:34:0b: 9b:98:42:94:a6:9d:79:f9:20:d0:82:4e:c9:4a:a6:01:d4:6b: 92:a4:54:bf:8b:dc:21:56:ac:b9:43:3d:b0:fe:c1:9e:1d:9a: f1:56:39:2d:ec:ec:8d:33:fc:42:3a:5e:5e:bd:a8:f2:26:d5: b8:f0:68:54:df:af:b0:2e:51:9c:7c:93:1b:f9:39:53:86:88: 70:ea:44:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA0NjcxMTAvBgNVBAUTKEI4QzMyRkM0RDc5MzFBRDQyNDE0MDczMDZBMEI5OTZB QzhDOTlGRUIwHhcNMjUwNjEyMjA0NTUzWhcNMjUwNjE5MjA0NTUzWjAYMRYwFAYD VQQDEw02ODRiM2M4MS02Y2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1tx1fZF5d1gifUjeZcgY1D9GMSAIB7aQKAJniNiI7IBf0fPn2HWzxlKr62u RVrqDpkMtMyDh1pqd7+WVIJNQCBVvK5nKEm20/JFPTGD9XBqbj0bv858tRXiFjGp lvLXne/4mXqYQVMJnT0Pln6ACBdHTQngjVeEY2u96hpN9lcmmaepngRYHeVzl6PB jwnQlReidWigfvdO0LoEgLSavOngEQg5uOyiK70JmvRlroDMO3VXiMOdljpHF9/5 rIWT/psP+0nKw4d0JiW0NbBmSEnhMiSw6bYyh1IbmMC4uaDCrw0puuKnaaZ56RMt nduCERWNgIt95WXi8Abt99Ky+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1TNIy/ +xKaBbShoKXI6AYKeeSNMB8GA1UdIwQYMBaAFLjDL8TXkxrUJBQHMGoLmWrIyZ/r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDQ2Ny85QUE5ODBENkYx RTAxMUVBOEQ0QTlFMzJDNEY5QUUwMi91TU12eE5lVEd0UWtGQWN3YWd1WmFzakpu LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VNTXZ4TmVUR3RRa0ZBY3dhZ3VaYXNqSm4tcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDQ2Ny85QUE5ODBENkYxRTAxMUVBOEQ0QTlFMzJDNEY5QUUwMi91TU12eE5lVEd0 UWtGQWN3YWd1WmFzakpuLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt09SchFkso3uG/946CkCVE9AdudDc2HEY4ANs+zLQMlODG36S/2sA tiaMaxc6425MVxqILDXhUR05RyEmrgcnZYY7fMRYkXV4Vt+A7TNGZnu6FR7SmMu9 xUeX8n8bB++C8VaOVRBEyI4UaQ/gFyUM1hCIZB+whSlAVXLEfqsp2dger/sYyEwy R/GqxzmDeO1XilJyLwx9wEL9PqQjZj4SoeA0MA7kefHPRu+Aawy773g6NAubmEKU pp15+SDQgk7JSqYB1GuSpFS/i9whVqy5Qz2w/sGeHZrxVjkt7OyNM/xCOl5evajy JtW48GhU36+wLlGcfJMb+TlThohw6kQR -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:22 2025 by rpki-client