$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft File: UMP9EvajMVgZtSurzBmPsNv9QTo.mft (raw, json) Hash identifier: 1U+2QltyyrTQPwpin7yVM5FLbL2GPZkfNKBatu+jOuk= Subject key identifier: E9:F7:D9:2C:02:91:D2:49:5F:CD:CC:88:F6:40:F0:64:98:D4:5A:84 Authority key identifier: 50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A Certificate issuer: /CN=A91CE616/serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A Certificate serial: 03FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft Manifest number: 03F9 Signing time: Thu 07 Aug 2025 01:02:01 +0000 Manifest this update: Thu 07 Aug 2025 01:02:01 +0000 Manifest next update: Thu 14 Aug 2025 01:02:01 +0000 Files and hashes: 1: UMP9EvajMVgZtSurzBmPsNv9QTo.crl (hash: kMeVT/inrtK3d87fPI68YZOjpML4EB7Obuzttq0gUpg=) 2: 296C190484AD11EC9C3F837CC4F9AE02.roa (hash: /RxOlV3ierU9U8XUpOrcDZ1BfZBiiZXrWx/RXW8pGyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1022 (0x3fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE616, serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A Validity Not Before: Aug 7 01:02:01 2025 GMT Not After : Aug 14 01:02:01 2025 GMT Subject: CN=6893fb09-d350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:e3:eb:4d:0a:ce:aa:3d:b2:14:53:23:d9: cd:6f:92:f2:08:58:df:65:2f:22:01:2c:95:d8:ee: 94:4e:f0:f2:5f:ae:c1:cf:02:b5:08:a8:08:41:fc: 7e:7f:9a:98:07:ac:ea:af:c1:b8:9b:f2:a0:b7:97: dd:ec:92:48:67:2b:65:b0:ca:fe:f0:48:bd:89:b9: 72:b7:68:2f:60:c1:30:40:fd:3b:8c:6c:66:b4:bd: c5:63:1f:33:92:3c:10:b8:28:65:3c:25:c0:24:31: 18:36:26:2b:dd:20:77:50:fd:a1:cf:6b:da:f1:7a: 3d:e8:ba:cb:74:5f:e9:68:fe:6e:81:39:78:02:b5: 40:78:97:98:a1:20:e1:eb:e3:0c:66:6c:20:4f:6e: 5f:02:a5:f3:ed:2a:39:fd:e9:28:27:cd:57:d4:15: cf:2d:30:df:6d:b1:2f:3e:64:da:50:61:1a:a2:e1: 1e:08:36:88:86:72:52:f4:43:47:24:40:8b:28:0f: 99:9f:96:c0:5f:5e:93:13:39:68:f5:d4:97:84:c3: 0f:d4:53:90:3b:ca:97:2d:71:a1:11:f3:e7:cf:0e: 86:bc:19:53:53:a9:4c:93:9a:71:2f:9f:7b:18:f6: 63:bf:f5:27:ad:57:7b:ea:cd:ce:ed:d6:fa:02:04: 35:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F7:D9:2C:02:91:D2:49:5F:CD:CC:88:F6:40:F0:64:98:D4:5A:84 X509v3 Authority Key Identifier: keyid:50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:c0:8a:e0:2a:08:b0:97:23:91:cd:09:0d:d8:5e:a1:b2:09: 94:18:0a:9a:57:d9:36:74:74:6d:71:81:bb:c4:3c:0c:9c:c7: c1:09:96:24:6d:e0:1c:56:81:e6:b0:0d:2c:dc:c7:9d:01:4d: db:78:af:a1:76:10:04:4b:44:11:28:6b:77:e5:68:a8:5d:ed: 09:12:9b:dc:13:c6:d8:f5:d7:0f:67:39:28:7c:a6:e8:57:db: 6b:b5:14:3a:ac:e8:f0:63:8b:66:cb:a3:9a:9f:35:e6:8b:5e: 20:26:3f:0d:9d:6e:bb:81:78:c9:81:27:e8:f7:31:be:8f:eb: 11:44:e0:6b:20:c2:af:0d:88:c2:4a:b0:cd:8f:47:24:b1:ea: 02:59:eb:5e:ef:d7:13:14:2c:44:dd:67:bc:8c:9c:4f:b0:f4: 1b:2c:9e:b6:36:91:89:f6:23:0c:30:7b:28:4e:28:89:fc:91: 94:e2:9a:22:f2:a4:00:0a:65:55:8b:93:3e:f3:c3:49:1a:ea: fa:79:64:b3:69:b0:a6:a3:a3:d7:41:28:1c:0a:2e:02:62:0b: d7:9a:5b:50:94:98:aa:b8:79:6b:c7:dd:40:3c:cd:63:98:e9: 1f:20:57:93:fd:9c:26:db:22:05:1a:7f:d9:31:a9:1c:eb:3c: c2:52:6a:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2MTYxMTAvBgNVBAUTKDUwQzNGRDEyRjZBMzMxNTgxOUI1MkJBQkNDMTk4RkIw REJGRDQxM0EwHhcNMjUwODA3MDEwMjAxWhcNMjUwODE0MDEwMjAxWjAYMRYwFAYD VQQDEw02ODkzZmIwOS1kMzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArurj600Kzqo9shRTI9nNb5LyCFjfZS8iASyV2O6UTvDyX67BzwK1CKgIQfx+ f5qYB6zqr8G4m/Kgt5fd7JJIZytlsMr+8Ei9iblyt2gvYMEwQP07jGxmtL3FYx8z kjwQuChlPCXAJDEYNiYr3SB3UP2hz2va8Xo96LrLdF/paP5ugTl4ArVAeJeYoSDh 6+MMZmwgT25fAqXz7So5/ekoJ81X1BXPLTDfbbEvPmTaUGEaouEeCDaIhnJS9ENH JECLKA+Zn5bAX16TEzlo9dSXhMMP1FOQO8qXLXGhEfPnzw6GvBlTU6lMk5pxL597 GPZjv/UnrVd76s3O7db6AgQ1nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOn32SwC kdJJX83MiPZA8GSY1FqEMB8GA1UdIwQYMBaAFFDD/RL2ozFYGbUrq8wZj7Db/UE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTYxNi9BN0U0MjkxNjg0 QTgxMUVDQjI1MDA4NzFDNEY5QUUwMi9VTVA5RXZhak1WZ1p0U3VyekJtUHNOdjlR VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VNUDlFdmFqTVZnWnRTdXJ6Qm1Qc052OVFUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTYxNi9BN0U0MjkxNjg0QTgxMUVDQjI1MDA4NzFDNEY5QUUwMi9VTVA5RXZhak1W Z1p0U3VyekJtUHNOdjlRVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0wIrgKgiwlyORzQkN2F6hsgmUGAqaV9k2dHRtcYG7xDwMnMfBCZYk beAcVoHmsA0s3MedAU3beK+hdhAES0QRKGt35WioXe0JEpvcE8bY9dcPZzkofKbo V9trtRQ6rOjwY4tmy6OanzXmi14gJj8NnW67gXjJgSfo9zG+j+sRROBrIMKvDYjC SrDNj0ckseoCWete79cTFCxE3We8jJxPsPQbLJ62NpGJ9iMMMHsoTiiJ/JGU4poi 8qQACmVVi5M+88NJGur6eWSzabCmo6PXQSgcCi4CYgvXmltQlJiquHlrx91APM1j mOkfIFeT/Zwm2yIFGn/ZMakc6zzCUmqt -----END CERTIFICATE-----Generated at Sat Aug 9 01:22:20 2025 by rpki-client