$ rpki-client -vvf rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft File: xUMJ3BErZYYnvTagMHLnXQYDZNM.mft (raw, json) Hash identifier: /+CXeQUdOLurj6CGyXEDX3wFgdN8wtii12c7H6Y5kj8= Subject key identifier: E9:3D:E2:A6:64:75:23:92:3A:3C:79:32:CF:73:AE:45:DF:60:C6:5B Authority key identifier: C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3 Certificate issuer: /CN=A9199836/serialNumber=C54309DC112B658627BD36A03072E75D060364D3 Certificate serial: 04C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft Manifest number: 04C2 Signing time: Sat 09 Aug 2025 00:20:25 +0000 Manifest this update: Sat 09 Aug 2025 00:20:25 +0000 Manifest next update: Sat 16 Aug 2025 00:20:25 +0000 Files and hashes: 1: xUMJ3BErZYYnvTagMHLnXQYDZNM.crl (hash: CPVz1UQ6xGAOwOxmJ1C9170aFdjPnyQZ5fqU4x9E3EA=) 2: 029F318A366F11ECA773E263C4F9AE02.roa (hash: XUaIWvSjvHJx2WjE0nq5LCjXyTsCoEUciSF2lpWLzf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1223 (0x4c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199836, serialNumber=C54309DC112B658627BD36A03072E75D060364D3 Validity Not Before: Aug 9 00:20:25 2025 GMT Not After : Aug 16 00:20:25 2025 GMT Subject: CN=68969449-cdee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a2:a1:d4:cc:9e:be:e3:28:02:8b:6f:b3:57: 02:69:3d:dc:f8:01:3d:c4:cc:12:e5:9d:4a:7d:2b: 29:db:a5:68:27:fb:59:bb:7a:52:4a:e9:dc:ab:3f: d1:c4:b5:f7:88:aa:c8:a1:1f:e2:0b:63:99:d6:9f: ae:af:91:f7:ef:ed:42:58:74:f4:98:27:f6:d0:20: d5:1e:a0:1b:17:a1:97:c5:1b:e0:dd:c6:b7:ae:eb: 41:d7:86:dd:62:ae:3e:a7:56:ce:52:24:21:64:f6: 8d:7f:47:7c:48:16:5d:04:4b:0b:58:43:a9:aa:46: ed:24:54:0c:df:48:5b:ec:11:39:02:0f:db:1f:2c: 11:2d:c3:a7:2c:dc:1d:7e:34:61:83:38:02:11:f7: a1:0f:c3:dd:cb:60:11:c5:a5:b8:5c:f0:64:72:11: 93:32:8e:c6:c9:5e:fb:f6:e0:92:52:3d:e3:07:13: 8b:4f:f8:77:b7:25:ab:a7:13:b5:16:12:2f:b0:db: fe:a0:00:67:80:62:11:ed:03:1f:85:64:86:b2:9b: d8:bd:e6:87:d1:dd:06:6b:5e:85:06:18:e6:77:64: c5:31:9a:31:cb:72:54:34:2c:ea:85:db:1b:83:b2: 37:84:de:66:1f:ae:c1:48:8a:30:15:16:91:65:10: e9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3D:E2:A6:64:75:23:92:3A:3C:79:32:CF:73:AE:45:DF:60:C6:5B X509v3 Authority Key Identifier: keyid:C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ca:ac:c2:0c:66:6f:a4:9b:04:94:ce:24:7e:32:f2:c0:49: ca:b4:4d:3d:8b:39:ba:52:9f:65:32:f7:50:20:f3:01:89:a9: eb:8a:3e:dd:c4:31:00:80:a8:c8:70:65:14:5c:d3:a0:26:98: 86:c6:c4:27:d2:8e:ff:1d:59:d1:43:be:27:c6:50:53:a0:df: 86:c9:0c:39:c3:fc:fb:b2:4b:88:15:f3:84:9c:1e:b6:a9:5d: 94:a6:52:05:9d:a8:ea:6e:b3:46:2a:1c:65:44:89:6b:26:b4: 2c:e3:ff:4a:c3:d6:de:51:e1:63:0e:9f:4e:0f:55:a6:03:9f: 39:83:51:f4:64:04:d8:38:d0:b9:71:03:c8:7b:0a:3d:7d:9d: d6:c6:52:93:29:c4:5e:03:9d:b0:d8:b4:86:3c:58:27:b5:a4: 0c:f7:6f:2e:47:e9:f6:28:70:d2:38:23:8a:d2:56:0d:6c:e6: 7f:4b:80:52:0f:e8:a9:c8:21:ac:9a:17:a0:b8:07:cf:f8:d6: dd:d9:7e:96:e6:bc:f7:e0:5f:a5:99:16:4a:44:d7:54:76:12: 52:28:9f:e5:c5:e0:f5:e3:b6:d0:f3:28:eb:21:2f:18:4f:66: da:b0:77:06:4e:e7:c8:f8:ca:1b:3e:5d:bb:32:36:38:22:98: 51:50:6d:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4MzYxMTAvBgNVBAUTKEM1NDMwOURDMTEyQjY1ODYyN0JEMzZBMDMwNzJFNzVE MDYwMzY0RDMwHhcNMjUwODA5MDAyMDI1WhcNMjUwODE2MDAyMDI1WjAYMRYwFAYD VQQDEw02ODk2OTQ0OS1jZGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qKh1MyevuMoAotvs1cCaT3c+AE9xMwS5Z1KfSsp26VoJ/tZu3pSSuncqz/R xLX3iKrIoR/iC2OZ1p+ur5H37+1CWHT0mCf20CDVHqAbF6GXxRvg3ca3rutB14bd Yq4+p1bOUiQhZPaNf0d8SBZdBEsLWEOpqkbtJFQM30hb7BE5Ag/bHywRLcOnLNwd fjRhgzgCEfehD8Pdy2ARxaW4XPBkchGTMo7GyV779uCSUj3jBxOLT/h3tyWrpxO1 FhIvsNv+oABngGIR7QMfhWSGspvYveaH0d0Ga16FBhjmd2TFMZoxy3JUNCzqhdsb g7I3hN5mH67BSIowFRaRZRDpZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOk94qZk dSOSOjx5Ms9zrkXfYMZbMB8GA1UdIwQYMBaAFMVDCdwRK2WGJ702oDBy510GA2TT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTgzNi8yOTM2RkZCMjM2 MkUxMUVDODkwOUU4NkZDNEY5QUUwMi94VU1KM0JFclpZWW52VGFnTUhMblhRWURa Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVTUozQkVyWllZbnZUYWdNSExuWFFZRFpOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTgzNi8yOTM2RkZCMjM2MkUxMUVDODkwOUU4NkZDNEY5QUUwMi94VU1KM0JFclpZ WW52VGFnTUhMblhRWURaTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLyqzCDGZvpJsElM4kfjLywEnKtE09izm6Up9lMvdQIPMBianrij7d xDEAgKjIcGUUXNOgJpiGxsQn0o7/HVnRQ74nxlBToN+GyQw5w/z7skuIFfOEnB62 qV2UplIFnajqbrNGKhxlRIlrJrQs4/9Kw9beUeFjDp9OD1WmA585g1H0ZATYONC5 cQPIewo9fZ3WxlKTKcReA52w2LSGPFgntaQM928uR+n2KHDSOCOK0lYNbOZ/S4BS D+ipyCGsmheguAfP+Nbd2X6W5rz34F+lmRZKRNdUdhJSKJ/lxeD147bQ8yjrIS8Y T2basHcGTufI+MobPl27MjY4IphRUG2P -----END CERTIFICATE-----Generated at Sat Aug 9 15:09:51 2025 by rpki-client