$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft File: UmRCqpPf8MUTmmF7DeZFtznmvs0.mft (raw, json) Hash identifier: /gypSicTh+8mXId9XRHhsjXtbFDN3PWbm3tLwObq4Oo= Subject key identifier: D7:02:9D:4D:2A:3B:38:F4:0D:45:D5:67:DC:7B:80:04:01:7C:A0:12 Authority key identifier: 52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD Certificate issuer: /CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Certificate serial: 09D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft Manifest number: 09D0 Signing time: Fri 02 May 2025 20:06:26 +0000 Manifest this update: Fri 02 May 2025 20:06:25 +0000 Manifest next update: Fri 09 May 2025 20:06:25 +0000 Files and hashes: 1: UmRCqpPf8MUTmmF7DeZFtznmvs0.crl (hash: jcJ9l7Uu3vpgl4Dlzqe82GOm8uiIxZPLAGMR8z8wPnY=) 2: 1C9AB3F67D6711EA90858415C4F9AE02.roa (hash: 32MI8zjp+omn2pz5wQODlf3/KMVL7tiwkuXJGcfvP+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 20:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2520 (0x9d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D7D, serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Validity Not Before: May 2 20:06:25 2025 GMT Not After : May 9 20:06:25 2025 GMT Subject: CN=681525c2-05ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:11:61:68:a8:05:4e:46:30:21:d0:7c:00: 7d:6d:b5:93:a8:15:6b:b2:9a:81:a5:5f:b3:01:5e: b2:4f:b3:d2:0e:fc:29:03:35:a9:62:7e:b4:65:be: ca:ec:f2:42:09:ad:1b:c0:79:42:ce:31:91:e3:e8: 01:e3:e0:63:e3:21:2e:11:7b:f7:fe:6f:65:f0:da: bb:f2:a9:f2:39:70:a4:21:d5:28:dc:a6:09:7e:bd: 8a:02:5f:9d:a4:83:06:ad:16:bd:6d:18:d9:2e:c7: 81:c0:97:43:b8:ad:c9:8e:bd:7a:48:a6:ce:16:77: 9a:12:e3:2d:f2:50:4e:cd:09:99:59:47:cd:30:08: 75:1c:82:f2:4b:39:0c:52:0d:1b:93:38:61:21:a0: 95:c0:9c:98:8e:28:45:5c:c8:61:6f:59:50:53:e3: d9:79:26:56:21:a8:e1:da:9d:c2:87:77:3f:2a:0d: cb:90:9f:d0:43:b7:8e:7e:5d:fc:a7:b6:94:67:99: 25:07:76:87:60:ae:a4:8d:e5:a6:8b:a4:09:41:27: e0:fb:63:70:ac:c1:7e:11:bb:55:11:3f:4f:08:e0: 41:96:1d:9c:98:64:98:0b:24:1b:86:69:b5:8b:04: 94:d4:11:31:a4:d0:ea:c7:56:a4:ab:5f:61:87:8c: d7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:02:9D:4D:2A:3B:38:F4:0D:45:D5:67:DC:7B:80:04:01:7C:A0:12 X509v3 Authority Key Identifier: keyid:52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:2e:61:f6:4c:4f:48:61:7d:04:d0:f1:c5:61:e2:50:54:28: 6d:06:0e:ac:ab:b5:4b:bb:fd:08:f5:cb:48:d4:77:6d:cd:98: f6:10:3d:06:e8:49:8f:db:00:25:2a:46:4c:ba:ad:5f:b5:8a: 71:6a:3f:b9:50:a1:f7:ef:bc:47:e8:07:e2:84:e6:13:5b:b9: aa:79:29:44:d1:1d:60:f9:90:22:df:05:f9:ac:19:d3:81:ef: 07:52:15:6d:78:a7:53:36:f4:de:bd:e7:02:ee:c7:39:f1:17: 21:37:ee:45:97:4f:49:95:4c:a9:ab:05:f6:83:70:79:7b:47: 5c:64:b1:54:11:8e:0a:a1:1e:9c:e8:ac:c4:ff:bb:6b:7b:f0: af:88:31:a2:01:f9:3f:76:56:4a:d0:ab:30:e2:87:27:73:01: 85:df:16:52:f9:c8:f0:b0:c3:a5:07:32:db:80:93:8f:b3:2f: 45:6f:a7:73:d9:85:45:0b:78:78:31:bf:7a:60:34:82:62:d3: e0:92:3b:45:d4:cd:2c:67:ee:de:a0:cd:38:4d:87:53:88:9a: 9c:5e:81:04:72:3e:de:53:52:9d:ed:92:b4:da:bc:82:11:78: 0b:43:64:c2:0e:08:40:52:05:34:aa:52:13:68:c5:7f:75:da: aa:08:a5:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEN0QxMTAvBgNVBAUTKDUyNjQ0MkFBOTNERkYwQzUxMzlBNjE3QjBERTY0NUI3 MzlFNkJFQ0QwHhcNMjUwNTAyMjAwNjI1WhcNMjUwNTA5MjAwNjI1WjAYMRYwFAYD VQQDEw02ODE1MjVjMi0wNWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttkRYWioBU5GMCHQfAB9bbWTqBVrspqBpV+zAV6yT7PSDvwpAzWpYn60Zb7K 7PJCCa0bwHlCzjGR4+gB4+Bj4yEuEXv3/m9l8Nq78qnyOXCkIdUo3KYJfr2KAl+d pIMGrRa9bRjZLseBwJdDuK3Jjr16SKbOFneaEuMt8lBOzQmZWUfNMAh1HILySzkM Ug0bkzhhIaCVwJyYjihFXMhhb1lQU+PZeSZWIajh2p3Ch3c/Kg3LkJ/QQ7eOfl38 p7aUZ5klB3aHYK6kjeWmi6QJQSfg+2NwrMF+EbtVET9PCOBBlh2cmGSYCyQbhmm1 iwSU1BExpNDqx1akq19hh4zXAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcCnU0q Ozj0DUXVZ9x7gAQBfKASMB8GA1UdIwQYMBaAFFJkQqqT3/DFE5phew3mRbc55r7N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ3RC83MTZEMkYzNjdE NjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhNVVRtbUY3RGVaRnR6bm12 czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VtUkNxcFBmOE1VVG1tRjdEZVpGdHpubXZzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ3RC83MTZEMkYzNjdENjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhN VVRtbUY3RGVaRnR6bm12czAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjLmH2TE9IYX0E0PHFYeJQVChtBg6sq7VLu/0I9ctI1HdtzZj2ED0G 6EmP2wAlKkZMuq1ftYpxaj+5UKH377xH6AfihOYTW7mqeSlE0R1g+ZAi3wX5rBnT ge8HUhVteKdTNvTevecC7sc58RchN+5Fl09JlUypqwX2g3B5e0dcZLFUEY4KoR6c 6KzE/7tre/CviDGiAfk/dlZK0Ksw4ocncwGF3xZS+cjwsMOlBzLbgJOPsy9Fb6dz 2YVFC3h4Mb96YDSCYtPgkjtF1M0sZ+7eoM04TYdTiJqcXoEEcj7eU1Kd7ZK02ryC EXgLQ2TCDghAUgU0qlITaMV/ddqqCKVh -----END CERTIFICATE-----Generated at Sat May 3 12:01:57 2025 by rpki-client