$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft File: UmRCqpPf8MUTmmF7DeZFtznmvs0.mft (raw, json) Hash identifier: V4QJJECdZsgiRU3OXGFGELKle+YGgQUFyyCYtwgOlSY= Subject key identifier: 08:73:E3:29:AD:DE:25:7B:83:34:70:C5:80:EA:61:D6:04:94:9D:AF Authority key identifier: 52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD Certificate issuer: /CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Certificate serial: 0A0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft Manifest number: 0A03 Signing time: Fri 08 Aug 2025 20:10:06 +0000 Manifest this update: Fri 08 Aug 2025 20:10:06 +0000 Manifest next update: Fri 15 Aug 2025 20:10:06 +0000 Files and hashes: 1: UmRCqpPf8MUTmmF7DeZFtznmvs0.crl (hash: nrkL1p3m/1vYGdnNcesfgkIEBWSbBX42nhjpgkgBXe8=) 2: 1C9AB3F67D6711EA90858415C4F9AE02.roa (hash: +nZj7ZJlhXeCQW5EI9e0cOVa9PmOL785t8ILeM0SUHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2572 (0xa0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D7D, serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Validity Not Before: Aug 8 20:10:06 2025 GMT Not After : Aug 15 20:10:06 2025 GMT Subject: CN=6896599e-5cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:af:71:16:b4:97:df:1a:b5:81:7e:34:5f:53: 41:23:13:8c:5e:16:42:a2:dc:c1:09:24:8c:84:a0: ed:8d:dd:11:e0:14:13:d5:3a:04:04:7e:5b:d4:14: 7d:f4:d0:94:3e:2e:c6:54:a9:07:62:37:a1:38:40: 1d:92:02:9f:8c:fe:b6:a1:26:de:83:34:48:89:f9: 6b:0b:ac:03:ee:f2:8a:b2:2d:8d:72:2b:39:b1:ec: af:a3:5f:6e:33:6c:73:3d:3b:56:e4:0b:8c:5a:4f: 17:4f:31:ab:ce:43:5d:ee:60:b4:3c:40:01:a1:1b: 5e:d7:1c:9f:64:99:89:93:17:0a:57:85:c9:af:3d: 35:8d:ec:dd:8a:73:ad:8f:64:18:2d:0b:ab:1e:b3: 72:12:07:ac:1c:08:7b:3c:50:38:dc:c4:3f:03:4a: 62:6c:48:72:28:28:2b:e2:93:7e:e8:18:ff:16:20: 27:d9:ee:81:e1:62:ee:91:cc:f4:c6:db:53:a6:6c: 0b:b8:29:91:17:7a:1e:b8:c5:8d:43:1f:16:ea:60: 30:3c:ce:67:37:2c:5b:bc:52:3b:8f:f0:58:87:be: 27:ea:42:24:82:fe:74:b1:39:e6:bd:a8:e1:bf:20: f1:b1:c9:71:1d:61:ed:50:1f:0a:cd:49:b9:89:c2: 1f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:73:E3:29:AD:DE:25:7B:83:34:70:C5:80:EA:61:D6:04:94:9D:AF X509v3 Authority Key Identifier: keyid:52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:a2:32:c1:07:cf:8d:66:91:83:4f:a1:79:fc:3c:24:cd:ac: cc:60:d6:c9:0f:76:5a:73:5c:4b:89:1f:b3:75:da:d5:4d:59: 59:10:e6:53:36:62:a4:f1:80:6e:42:f3:17:69:ba:26:66:5a: 56:94:63:b1:22:0b:70:07:9b:6f:51:b0:91:40:cd:55:1e:b0: ba:9e:31:7f:0e:5b:49:97:17:6e:80:f5:7e:fd:41:dc:30:a5: 4e:ff:73:10:e4:8e:ec:50:14:e3:13:0e:e6:63:2e:60:03:7d: 76:7c:61:23:5e:b1:0a:1f:d6:be:9c:6d:ce:19:79:e1:bc:64: 2f:df:e7:4b:2a:93:c0:97:54:8b:31:14:19:8a:bc:0a:25:b9: c4:3f:06:2c:ae:f0:17:bf:8d:93:66:13:44:8d:e7:28:2a:02: 28:b3:a8:10:2b:a7:24:d3:ae:1c:22:e6:41:45:80:9e:28:f4: 52:e1:56:b7:63:f4:c1:c7:cc:16:2f:32:44:de:35:53:9b:fe: 47:c6:1d:7b:4b:5b:46:8e:1c:9a:58:d1:22:6d:75:96:26:64: 11:ae:a6:4e:00:d9:3b:18:cd:f7:09:c3:e2:03:a2:77:d2:78: 4b:da:f9:ee:6b:a6:93:ce:1a:7b:24:4f:54:b2:a4:0c:41:c2: 9f:c8:8f:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEN0QxMTAvBgNVBAUTKDUyNjQ0MkFBOTNERkYwQzUxMzlBNjE3QjBERTY0NUI3 MzlFNkJFQ0QwHhcNMjUwODA4MjAxMDA2WhcNMjUwODE1MjAxMDA2WjAYMRYwFAYD VQQDEw02ODk2NTk5ZS01Y2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApa9xFrSX3xq1gX40X1NBIxOMXhZCotzBCSSMhKDtjd0R4BQT1ToEBH5b1BR9 9NCUPi7GVKkHYjehOEAdkgKfjP62oSbegzRIiflrC6wD7vKKsi2Ncis5seyvo19u M2xzPTtW5AuMWk8XTzGrzkNd7mC0PEABoRte1xyfZJmJkxcKV4XJrz01jezdinOt j2QYLQurHrNyEgesHAh7PFA43MQ/A0pibEhyKCgr4pN+6Bj/FiAn2e6B4WLukcz0 xttTpmwLuCmRF3oeuMWNQx8W6mAwPM5nNyxbvFI7j/BYh74n6kIkgv50sTnmvajh vyDxsclxHWHtUB8KzUm5icIfSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhz4ymt 3iV7gzRwxYDqYdYElJ2vMB8GA1UdIwQYMBaAFFJkQqqT3/DFE5phew3mRbc55r7N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ3RC83MTZEMkYzNjdE NjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhNVVRtbUY3RGVaRnR6bm12 czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VtUkNxcFBmOE1VVG1tRjdEZVpGdHpubXZzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ3RC83MTZEMkYzNjdENjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhN VVRtbUY3RGVaRnR6bm12czAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApojLBB8+NZpGDT6F5/DwkzazMYNbJD3Zac1xLiR+zddrVTVlZEOZT NmKk8YBuQvMXabomZlpWlGOxIgtwB5tvUbCRQM1VHrC6njF/DltJlxdugPV+/UHc MKVO/3MQ5I7sUBTjEw7mYy5gA312fGEjXrEKH9a+nG3OGXnhvGQv3+dLKpPAl1SL MRQZirwKJbnEPwYsrvAXv42TZhNEjecoKgIos6gQK6ck064cIuZBRYCeKPRS4Va3 Y/TBx8wWLzJE3jVTm/5Hxh17S1tGjhyaWNEibXWWJmQRrqZOANk7GM33CcPiA6J3 0nhL2vnua6aTzhp7JE9UsqQMQcKfyI93 -----END CERTIFICATE-----Generated at Sun Aug 10 05:43:44 2025 by rpki-client