$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft File: UMP9EvajMVgZtSurzBmPsNv9QTo.mft (raw, json) Hash identifier: rUoigFDr7fezb58qL8gN8m6XnKpAtfWcUmwbhJT7n/k= Subject key identifier: A1:1B:58:BB:46:C3:A0:E1:FB:4F:DC:DB:83:E0:ED:89:51:4C:3F:B3 Authority key identifier: 50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A Certificate issuer: /CN=A91CE616/serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A Certificate serial: 03E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft Manifest number: 03DF Signing time: Tue 17 Jun 2025 00:09:42 +0000 Manifest this update: Tue 17 Jun 2025 00:09:41 +0000 Manifest next update: Tue 24 Jun 2025 00:09:41 +0000 Files and hashes: 1: UMP9EvajMVgZtSurzBmPsNv9QTo.crl (hash: Jjnb+mnZ8TKy266jqwWK4A8vm/lozkw/mStEu7lsepE=) 2: 296C190484AD11EC9C3F837CC4F9AE02.roa (hash: /RxOlV3ierU9U8XUpOrcDZ1BfZBiiZXrWx/RXW8pGyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 996 (0x3e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE616, serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A Validity Not Before: Jun 17 00:09:41 2025 GMT Not After : Jun 24 00:09:41 2025 GMT Subject: CN=6850b246-8d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a3:93:6e:ba:16:7a:d4:37:9a:2a:ed:cb:ff: 4d:84:fc:82:49:68:32:dc:b3:67:0b:e6:81:e6:fd: cf:15:5d:b3:15:f3:a2:4f:e8:a9:4b:27:e4:c7:2e: d3:2c:bb:36:9a:a4:e9:8f:2d:2e:92:c8:09:9d:c6: e8:43:b6:9d:55:58:24:7d:ec:5f:03:61:06:1a:13: 4e:c9:d6:61:b6:16:9c:62:35:dc:ec:31:f2:d8:3f: 32:b8:a4:25:30:df:65:f5:ca:f9:70:15:c6:ee:8d: a8:07:90:7f:ac:46:06:4c:9d:8c:bb:db:68:34:80: 53:f3:37:3b:eb:1d:88:a6:e7:06:94:ca:a7:b9:98: d5:46:dd:f4:c6:9a:64:77:75:11:4f:71:99:4b:65: b7:2f:8d:f5:a2:7d:87:60:7d:72:a7:a2:ad:f0:a3: 08:7d:1f:2d:3f:cb:29:ac:71:84:00:55:5d:26:67: d8:de:b4:cb:e7:13:fb:82:b2:6e:e5:40:f9:2e:83: 8b:e7:c0:77:3e:a9:56:d5:3a:46:9a:a8:32:0f:71: 2f:92:bf:f8:b6:ba:40:09:97:10:b6:ab:12:7f:15: 7b:47:71:b2:98:f3:a8:b4:c9:93:e8:74:10:fa:ae: eb:30:c3:98:45:0f:a6:e7:0c:2b:fe:40:79:b9:3b: 68:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1B:58:BB:46:C3:A0:E1:FB:4F:DC:DB:83:E0:ED:89:51:4C:3F:B3 X509v3 Authority Key Identifier: keyid:50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:8f:7d:8f:57:3d:4a:1b:cf:e7:a8:3e:78:e1:98:40:07:ff: a9:f5:53:f1:a3:98:f1:4c:f5:78:aa:20:18:df:68:ee:d3:70: 0f:54:be:06:44:a4:d1:19:ae:5b:43:22:fe:5f:e3:03:f4:16: 57:1f:c9:96:04:ee:43:ea:18:62:b2:f3:66:03:cb:18:89:12: 35:bc:fd:f6:08:7c:41:89:28:f3:04:e0:6c:42:fe:c5:ff:72: 10:83:bb:96:29:c3:30:8a:6d:d7:54:f8:b7:eb:89:df:bc:43: be:5f:2f:dd:a2:e6:10:61:2f:c7:6d:59:22:91:74:9a:7c:1c: 46:20:52:26:78:2d:5e:9f:5a:cd:54:d9:53:42:ec:48:b7:8b: ad:dd:61:7a:57:39:4e:fe:e3:73:6e:4b:e8:9a:f2:7a:14:ff: 5f:35:7f:7d:2f:22:5e:1e:40:f7:94:8a:ca:8b:cf:e7:01:c5: 5e:4e:e5:bc:e2:8c:ea:e3:51:82:71:0e:28:53:d6:79:53:07: 89:3c:ba:da:53:10:2c:44:65:b7:87:52:d9:83:f7:d0:b8:c5: 41:89:a0:f2:12:28:65:98:2e:90:d1:c9:ad:d3:f7:5c:ac:62: 54:15:d8:51:fb:3a:0a:25:6d:df:f4:2a:e1:14:20:08:8c:d6: ca:cb:96:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2MTYxMTAvBgNVBAUTKDUwQzNGRDEyRjZBMzMxNTgxOUI1MkJBQkNDMTk4RkIw REJGRDQxM0EwHhcNMjUwNjE3MDAwOTQxWhcNMjUwNjI0MDAwOTQxWjAYMRYwFAYD VQQDEw02ODUwYjI0Ni04ZDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKOTbroWetQ3mirty/9NhPyCSWgy3LNnC+aB5v3PFV2zFfOiT+ipSyfkxy7T LLs2mqTpjy0uksgJncboQ7adVVgkfexfA2EGGhNOydZhthacYjXc7DHy2D8yuKQl MN9l9cr5cBXG7o2oB5B/rEYGTJ2Mu9toNIBT8zc76x2IpucGlMqnuZjVRt30xppk d3URT3GZS2W3L431on2HYH1yp6Kt8KMIfR8tP8sprHGEAFVdJmfY3rTL5xP7grJu 5UD5LoOL58B3PqlW1TpGmqgyD3Evkr/4trpACZcQtqsSfxV7R3GymPOotMmT6HQQ +q7rMMOYRQ+m5wwr/kB5uTtoowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEbWLtG w6Dh+0/c24Pg7YlRTD+zMB8GA1UdIwQYMBaAFFDD/RL2ozFYGbUrq8wZj7Db/UE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTYxNi9BN0U0MjkxNjg0 QTgxMUVDQjI1MDA4NzFDNEY5QUUwMi9VTVA5RXZhak1WZ1p0U3VyekJtUHNOdjlR VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VNUDlFdmFqTVZnWnRTdXJ6Qm1Qc052OVFUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTYxNi9BN0U0MjkxNjg0QTgxMUVDQjI1MDA4NzFDNEY5QUUwMi9VTVA5RXZhak1W Z1p0U3VyekJtUHNOdjlRVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQj32PVz1KG8/nqD544ZhAB/+p9VPxo5jxTPV4qiAY32ju03APVL4G RKTRGa5bQyL+X+MD9BZXH8mWBO5D6hhisvNmA8sYiRI1vP32CHxBiSjzBOBsQv7F /3IQg7uWKcMwim3XVPi364nfvEO+Xy/douYQYS/HbVkikXSafBxGIFImeC1en1rN VNlTQuxIt4ut3WF6VzlO/uNzbkvomvJ6FP9fNX99LyJeHkD3lIrKi8/nAcVeTuW8 4ozq41GCcQ4oU9Z5UweJPLraUxAsRGW3h1LZg/fQuMVBiaDyEihlmC6Q0cmt0/dc rGJUFdhR+zoKJW3f9CrhFCAIjNbKy5bu -----END CERTIFICATE-----Generated at Tue Jun 17 13:45:45 2025 by rpki-client