$ rpki-client -vvf rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft File: xUMJ3BErZYYnvTagMHLnXQYDZNM.mft (raw, json) Hash identifier: A+exq7lqksOcO5HwGSuAWooT2BI2GE6B6PU+i12ali8= Subject key identifier: B9:9B:28:13:BC:84:80:14:7D:27:BA:11:8A:28:7A:58:50:19:E5:DF Authority key identifier: C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3 Certificate issuer: /CN=A9199836/serialNumber=C54309DC112B658627BD36A03072E75D060364D3 Certificate serial: 04AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft Manifest number: 04A6 Signing time: Sun 15 Jun 2025 00:03:58 +0000 Manifest this update: Sun 15 Jun 2025 00:03:57 +0000 Manifest next update: Sun 22 Jun 2025 00:03:57 +0000 Files and hashes: 1: xUMJ3BErZYYnvTagMHLnXQYDZNM.crl (hash: 6U8WJf1+M/uEuFR4viZKcJK3z3/5WUvzeoGqVvsoffM=) 2: 029F318A366F11ECA773E263C4F9AE02.roa (hash: XUaIWvSjvHJx2WjE0nq5LCjXyTsCoEUciSF2lpWLzf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:03:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1195 (0x4ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199836, serialNumber=C54309DC112B658627BD36A03072E75D060364D3 Validity Not Before: Jun 15 00:03:57 2025 GMT Not After : Jun 22 00:03:57 2025 GMT Subject: CN=684e0ded-f85d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4d:75:b6:47:aa:79:b1:59:10:6e:7e:e5:1a: 2b:c0:60:a1:5c:ad:0d:f8:43:f9:c0:40:35:f1:17: cc:66:3a:5c:4d:d3:a1:bd:d3:4b:6f:b7:f3:da:d3: be:6c:0d:56:f5:34:71:4e:90:2c:d8:2f:e4:ee:ee: b7:61:2f:f5:b1:a0:67:7a:29:25:77:c0:c0:96:0e: ff:de:52:9e:af:b0:10:8e:61:d2:cf:58:42:f3:ed: f5:ed:ae:b3:48:54:15:64:e5:18:6d:43:37:d0:44: 09:bb:ed:f1:6f:a6:f2:0b:99:8f:1a:4f:78:65:af: ee:6e:81:6e:49:81:03:86:7e:cb:1e:8e:84:7e:34: 2b:3b:bb:d8:00:c5:b4:7e:98:9c:dc:ca:1a:a8:e8: e3:12:1c:9f:dc:25:4b:82:48:98:b7:a9:df:5d:1d: 2a:fd:2b:c2:a1:e8:9f:ee:65:23:65:e9:16:42:3f: 16:98:ba:60:5e:5a:28:df:fd:d3:9e:c3:6b:85:3c: 34:cc:0f:9f:ba:51:49:16:88:81:65:7b:c0:a3:c2: 11:03:ec:ec:37:2f:d3:7f:20:ce:b5:44:4b:47:4f: 69:81:2f:d6:b0:a1:98:11:81:65:a2:c9:18:b2:ff: 92:8f:d4:16:e0:da:87:74:17:55:a9:51:ee:d0:ad: 37:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9B:28:13:BC:84:80:14:7D:27:BA:11:8A:28:7A:58:50:19:E5:DF X509v3 Authority Key Identifier: keyid:C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:29:85:37:25:92:ec:b4:93:49:12:c1:e6:2f:61:ee:06:8a: 3c:c5:6b:00:33:b1:28:94:e2:de:cd:d6:bf:08:09:de:a0:11: b5:7f:70:2e:e4:ef:59:8a:a1:b0:f1:bf:b0:23:ec:4f:2f:55: c7:9e:31:76:76:60:1a:32:09:75:c1:12:03:d2:30:93:0f:60: 59:70:d3:74:8a:5e:8c:84:f9:e8:f5:c3:30:fb:60:70:57:d2: d1:6e:fe:e4:17:ce:14:d0:d2:94:c4:af:15:94:22:38:f2:d6: cc:9c:e1:46:72:c1:2a:e2:e1:51:e6:a2:b2:20:31:b5:06:40: bd:36:e7:4a:c6:81:64:35:f7:46:f9:36:95:c7:23:9c:29:da: 13:7a:4f:89:fa:1d:66:0b:14:22:41:11:3c:f6:ce:12:5a:63: c6:87:d0:20:55:3e:ae:66:9c:26:38:b3:20:1d:94:f6:18:ae: 8a:bc:3e:09:c8:29:a3:2a:33:4c:98:31:05:f1:5b:81:7d:64: 41:c3:77:ad:f9:01:7b:56:8a:a3:13:3b:cc:11:a1:0f:be:96: 07:9f:8e:a5:ef:c3:e7:f6:36:c5:ec:65:c4:59:08:6a:8b:7e: 73:a1:08:46:0e:7d:fe:67:40:31:37:c1:27:22:64:e9:90:35: 9d:4e:d5:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4MzYxMTAvBgNVBAUTKEM1NDMwOURDMTEyQjY1ODYyN0JEMzZBMDMwNzJFNzVE MDYwMzY0RDMwHhcNMjUwNjE1MDAwMzU3WhcNMjUwNjIyMDAwMzU3WjAYMRYwFAYD VQQDEw02ODRlMGRlZC1mODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzU11tkeqebFZEG5+5RorwGChXK0N+EP5wEA18RfMZjpcTdOhvdNLb7fz2tO+ bA1W9TRxTpAs2C/k7u63YS/1saBneikld8DAlg7/3lKer7AQjmHSz1hC8+317a6z SFQVZOUYbUM30EQJu+3xb6byC5mPGk94Za/uboFuSYEDhn7LHo6EfjQrO7vYAMW0 fpic3MoaqOjjEhyf3CVLgkiYt6nfXR0q/SvCoeif7mUjZekWQj8WmLpgXloo3/3T nsNrhTw0zA+fulFJFoiBZXvAo8IRA+zsNy/TfyDOtURLR09pgS/WsKGYEYFloskY sv+Sj9QW4NqHdBdVqVHu0K03QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmbKBO8 hIAUfSe6EYooelhQGeXfMB8GA1UdIwQYMBaAFMVDCdwRK2WGJ702oDBy510GA2TT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTgzNi8yOTM2RkZCMjM2 MkUxMUVDODkwOUU4NkZDNEY5QUUwMi94VU1KM0JFclpZWW52VGFnTUhMblhRWURa Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVTUozQkVyWllZbnZUYWdNSExuWFFZRFpOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTgzNi8yOTM2RkZCMjM2MkUxMUVDODkwOUU4NkZDNEY5QUUwMi94VU1KM0JFclpZ WW52VGFnTUhMblhRWURaTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiKYU3JZLstJNJEsHmL2HuBoo8xWsAM7EolOLezda/CAneoBG1f3Au 5O9ZiqGw8b+wI+xPL1XHnjF2dmAaMgl1wRID0jCTD2BZcNN0il6MhPno9cMw+2Bw V9LRbv7kF84U0NKUxK8VlCI48tbMnOFGcsEq4uFR5qKyIDG1BkC9NudKxoFkNfdG +TaVxyOcKdoTek+J+h1mCxQiQRE89s4SWmPGh9AgVT6uZpwmOLMgHZT2GK6KvD4J yCmjKjNMmDEF8VuBfWRBw3et+QF7VoqjEzvMEaEPvpYHn46l78Pn9jbF7GXEWQhq i35zoQhGDn3+Z0AxN8EnImTpkDWdTtWE -----END CERTIFICATE-----Generated at Sun Jun 15 08:38:50 2025 by rpki-client