$ rpki-client -vvf rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft File: xUMJ3BErZYYnvTagMHLnXQYDZNM.mft (raw, json) Hash identifier: HXg7xKMwCcL/l1JUPCiyl0xr14CmbVfHSDFKE3bdyWs= Subject key identifier: 85:56:8D:BE:A9:44:6E:75:23:93:2F:E5:F7:5C:FA:F4:9E:4D:3C:DA Authority key identifier: C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3 Certificate issuer: /CN=A9199836/serialNumber=C54309DC112B658627BD36A03072E75D060364D3 Certificate serial: 048F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft Manifest number: 048B Signing time: Thu 24 Apr 2025 23:47:41 +0000 Manifest this update: Thu 24 Apr 2025 23:47:40 +0000 Manifest next update: Thu 01 May 2025 23:47:40 +0000 Files and hashes: 1: xUMJ3BErZYYnvTagMHLnXQYDZNM.crl (hash: G62hlH0nybtd72yBIpMuF1c0O6misLwYe/ddlMF+mqE=) 2: 029F318A366F11ECA773E263C4F9AE02.roa (hash: oSdvyorGuPv/5QDTLowUDTHEVLVsXYxy04DwT+pQi58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1167 (0x48f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199836, serialNumber=C54309DC112B658627BD36A03072E75D060364D3 Validity Not Before: Apr 24 23:47:40 2025 GMT Not After : May 1 23:47:40 2025 GMT Subject: CN=680acd9d-bda4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9f:5f:c8:ac:44:54:65:66:56:88:8a:bf:11: b4:df:34:b4:ac:79:ca:42:a6:e6:b3:b2:4c:d9:f3: ce:21:84:c6:10:58:8a:55:f2:8c:a1:d6:3e:c4:8e: a7:43:51:1d:af:f3:45:62:a5:54:68:01:b0:ae:58: 21:d6:3c:fe:c4:82:47:f4:cc:2d:b7:63:b9:b7:59: 86:29:1a:92:36:5e:d1:ff:04:66:d5:20:07:3d:92: 40:4a:e7:41:f4:f7:fe:77:d7:c4:b0:7e:fa:e8:ee: 75:6d:ab:fc:b0:75:41:ae:4a:38:37:47:82:1d:d1: d8:fa:a0:4e:d2:9f:6b:98:e8:22:ba:1c:12:0f:4e: bd:a6:24:b6:9c:6f:d5:ed:17:5c:de:d1:d5:31:ec: 3e:49:94:f9:00:b7:8e:b4:e6:08:43:5c:51:5c:e2: d7:6a:3e:cf:e9:ed:2d:5f:b1:5a:ad:e6:75:6a:cc: 9f:26:e8:a2:2e:d4:b9:8e:2e:7c:b1:50:4d:23:3d: 09:fa:0b:e5:d0:dc:71:36:4b:a4:85:f8:c8:cf:09: f6:b7:be:b8:48:84:23:68:66:71:f7:14:32:3c:41: f1:a7:90:55:31:8a:0d:f5:79:5a:98:33:7c:93:c4: 5d:0b:7d:ce:cc:3e:28:6a:6a:00:d3:a0:c1:e0:56: bf:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:56:8D:BE:A9:44:6E:75:23:93:2F:E5:F7:5C:FA:F4:9E:4D:3C:DA X509v3 Authority Key Identifier: keyid:C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:2c:c3:49:db:7f:31:df:6e:c3:d0:de:87:83:af:2d:10:e8: 3f:4c:32:c4:dd:ef:fe:f4:61:8c:f2:4e:47:90:33:fd:cc:ba: 0d:45:15:6b:3d:a8:52:3c:b3:8e:61:78:5f:6a:d2:98:26:53: 7f:14:dd:b7:93:15:f8:11:0d:c7:f2:b1:c8:87:aa:43:92:c0: 90:f3:83:ab:46:b5:06:00:9a:09:6c:e4:9d:13:5c:fe:d9:91: f1:86:b4:46:30:1a:42:91:47:77:8f:60:f4:ff:1c:1a:ff:e5: 17:64:d2:73:2a:a1:bb:0b:f4:f7:15:ae:07:f4:1f:f8:89:06: af:d2:63:d2:05:24:1a:98:a7:f4:2b:d2:19:9c:11:33:30:28: 79:63:5e:6c:5a:d9:04:45:e8:db:90:87:5a:24:de:ec:5c:55: 8f:21:e0:12:df:29:96:4b:78:03:86:ed:1d:80:7e:35:94:a3: 18:09:d1:5b:42:b7:a3:06:4e:5e:49:10:56:2f:77:a9:e8:78: 3f:70:80:e6:81:f2:23:f0:73:13:47:c0:77:5e:4b:48:47:9a: d1:f1:24:07:a3:f8:ef:8d:18:53:fa:d4:36:95:c7:3f:a9:ad: eb:4c:c3:3a:c7:89:3f:ed:9c:d1:32:36:a8:5f:fd:a4:a0:49: 6f:b2:af:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4MzYxMTAvBgNVBAUTKEM1NDMwOURDMTEyQjY1ODYyN0JEMzZBMDMwNzJFNzVE MDYwMzY0RDMwHhcNMjUwNDI0MjM0NzQwWhcNMjUwNTAxMjM0NzQwWjAYMRYwFAYD VQQDEw02ODBhY2Q5ZC1iZGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3p9fyKxEVGVmVoiKvxG03zS0rHnKQqbms7JM2fPOIYTGEFiKVfKModY+xI6n Q1Edr/NFYqVUaAGwrlgh1jz+xIJH9Mwtt2O5t1mGKRqSNl7R/wRm1SAHPZJASudB 9Pf+d9fEsH766O51bav8sHVBrko4N0eCHdHY+qBO0p9rmOgiuhwSD069piS2nG/V 7Rdc3tHVMew+SZT5ALeOtOYIQ1xRXOLXaj7P6e0tX7FareZ1asyfJuiiLtS5ji58 sVBNIz0J+gvl0NxxNkukhfjIzwn2t764SIQjaGZx9xQyPEHxp5BVMYoN9XlamDN8 k8RdC33OzD4oamoA06DB4Fa/GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVWjb6p RG51I5Mv5fdc+vSeTTzaMB8GA1UdIwQYMBaAFMVDCdwRK2WGJ702oDBy510GA2TT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTgzNi8yOTM2RkZCMjM2 MkUxMUVDODkwOUU4NkZDNEY5QUUwMi94VU1KM0JFclpZWW52VGFnTUhMblhRWURa Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVTUozQkVyWllZbnZUYWdNSExuWFFZRFpOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTgzNi8yOTM2RkZCMjM2MkUxMUVDODkwOUU4NkZDNEY5QUUwMi94VU1KM0JFclpZ WW52VGFnTUhMblhRWURaTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4LMNJ238x327D0N6Hg68tEOg/TDLE3e/+9GGM8k5HkDP9zLoNRRVr PahSPLOOYXhfatKYJlN/FN23kxX4EQ3H8rHIh6pDksCQ84OrRrUGAJoJbOSdE1z+ 2ZHxhrRGMBpCkUd3j2D0/xwa/+UXZNJzKqG7C/T3Fa4H9B/4iQav0mPSBSQamKf0 K9IZnBEzMCh5Y15sWtkERejbkIdaJN7sXFWPIeAS3ymWS3gDhu0dgH41lKMYCdFb QrejBk5eSRBWL3ep6Hg/cIDmgfIj8HMTR8B3XktIR5rR8SQHo/jvjRhT+tQ2lcc/ qa3rTMM6x4k/7ZzRMjaoX/2koElvsq9e -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:32 2025 by rpki-client