$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft File: UMP9EvajMVgZtSurzBmPsNv9QTo.mft (raw, json) Hash identifier: xyd4wqX4mKASw2bmadvjAXvScwRD4dzz0FCp7x62iYY= Subject key identifier: B2:8C:D2:37:2E:40:72:3E:B4:27:EA:54:79:0F:EE:78:C7:CD:BD:AE Authority key identifier: 50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A Certificate issuer: /CN=A91CE616/serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A Certificate serial: 03CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft Manifest number: 03C5 Signing time: Fri 25 Apr 2025 00:24:50 +0000 Manifest this update: Fri 25 Apr 2025 00:24:50 +0000 Manifest next update: Fri 02 May 2025 00:24:50 +0000 Files and hashes: 1: UMP9EvajMVgZtSurzBmPsNv9QTo.crl (hash: btfsK6sQZS927D+C2TuLxzK4ufRDyzf9Cmsu3IKOQjo=) 2: 296C190484AD11EC9C3F837CC4F9AE02.roa (hash: /RxOlV3ierU9U8XUpOrcDZ1BfZBiiZXrWx/RXW8pGyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 970 (0x3ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE616, serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A Validity Not Before: Apr 25 00:24:50 2025 GMT Not After : May 2 00:24:50 2025 GMT Subject: CN=680ad652-98ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e0:e2:4d:cd:02:af:07:45:27:16:bf:5d:e5: 6f:06:61:00:96:c3:8b:73:4f:c7:33:95:2d:29:e0: bb:12:ab:9e:4c:89:93:8f:99:e5:6e:eb:6c:ca:8f: af:1e:31:09:03:0b:b2:b6:45:63:d4:06:f9:76:cb: 16:cb:94:77:f9:d1:2c:6e:4e:70:6d:29:03:de:4b: e7:aa:be:6c:37:77:39:36:b0:da:43:e5:61:6a:99: 3e:29:2e:3e:ee:4e:cd:b7:67:b3:e2:0d:4b:42:cd: b4:e9:72:90:c8:e2:48:92:87:55:2b:fb:24:64:ee: eb:de:c7:61:27:22:95:2e:4c:33:35:b9:7b:68:e0: c0:63:e4:f4:ec:cb:e6:c7:ab:94:4d:ca:2d:e7:cd: 87:1c:2c:8b:6d:36:3e:d1:a5:36:b9:a3:39:70:64: 6e:70:cc:96:7e:6e:95:80:a3:a2:55:a5:94:19:81: 56:78:47:2e:9c:0c:07:f4:f8:11:c3:f1:87:5b:33: 35:9e:4a:46:ec:c1:d4:85:2e:f9:dd:4e:38:38:55: a7:57:c2:5d:66:ec:e7:56:ca:02:8f:56:3b:8b:4e: 97:7d:08:67:44:68:d0:3a:b0:08:6b:cf:65:a8:bc: fe:96:08:2a:64:5a:b9:db:58:0b:00:62:6c:db:32: cb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8C:D2:37:2E:40:72:3E:B4:27:EA:54:79:0F:EE:78:C7:CD:BD:AE X509v3 Authority Key Identifier: keyid:50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a7:7f:2e:a8:1d:af:a1:71:de:2d:06:c2:67:5a:a6:f9:56: 15:af:34:e2:c2:48:87:ba:23:6e:ac:a7:f4:b1:23:b2:08:70: 0d:b0:56:0c:4e:e8:d9:30:ba:6a:62:ac:33:26:0a:42:13:44: ef:13:0b:fb:00:43:49:dc:59:3a:83:2d:56:aa:36:15:79:33: 6d:c5:de:70:9b:70:bf:73:28:a7:47:05:44:7f:c1:fd:e5:2b: 7f:fa:32:9f:8d:7f:4b:a9:32:76:21:43:96:13:c7:26:c1:81: 1d:b2:6a:aa:e1:e9:16:1a:c0:e5:95:91:0e:3a:d7:a1:bd:ce: 76:5b:6d:21:7f:34:4b:6c:0c:92:87:a7:d2:eb:17:10:3a:3d: 79:03:15:9a:5d:65:af:13:17:43:9e:ba:2d:8f:03:9a:e2:4d: 4d:42:04:62:3e:00:35:08:fb:b3:bc:77:b1:da:44:72:73:3a: 9c:97:15:58:da:45:ee:00:0d:c0:35:0e:b1:a6:15:9d:6b:f7: 35:db:74:66:bf:bc:00:56:00:04:a8:18:14:7d:e8:52:dc:8d: af:e0:cb:a5:d2:b0:57:00:ec:86:6e:64:9b:fd:93:2a:6a:bc: d0:4c:bd:ad:b6:ec:ec:05:ab:ef:91:39:e6:0f:7a:07:0d:6e: f3:cf:88:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2MTYxMTAvBgNVBAUTKDUwQzNGRDEyRjZBMzMxNTgxOUI1MkJBQkNDMTk4RkIw REJGRDQxM0EwHhcNMjUwNDI1MDAyNDUwWhcNMjUwNTAyMDAyNDUwWjAYMRYwFAYD VQQDEw02ODBhZDY1Mi05OGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteDiTc0CrwdFJxa/XeVvBmEAlsOLc0/HM5UtKeC7EqueTImTj5nlbutsyo+v HjEJAwuytkVj1Ab5dssWy5R3+dEsbk5wbSkD3kvnqr5sN3c5NrDaQ+Vhapk+KS4+ 7k7Nt2ez4g1LQs206XKQyOJIkodVK/skZO7r3sdhJyKVLkwzNbl7aODAY+T07Mvm x6uUTcot582HHCyLbTY+0aU2uaM5cGRucMyWfm6VgKOiVaWUGYFWeEcunAwH9PgR w/GHWzM1nkpG7MHUhS753U44OFWnV8JdZuznVsoCj1Y7i06XfQhnRGjQOrAIa89l qLz+lggqZFq521gLAGJs2zLLEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKM0jcu QHI+tCfqVHkP7njHzb2uMB8GA1UdIwQYMBaAFFDD/RL2ozFYGbUrq8wZj7Db/UE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTYxNi9BN0U0MjkxNjg0 QTgxMUVDQjI1MDA4NzFDNEY5QUUwMi9VTVA5RXZhak1WZ1p0U3VyekJtUHNOdjlR VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VNUDlFdmFqTVZnWnRTdXJ6Qm1Qc052OVFUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTYxNi9BN0U0MjkxNjg0QTgxMUVDQjI1MDA4NzFDNEY5QUUwMi9VTVA5RXZhak1W Z1p0U3VyekJtUHNOdjlRVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8p38uqB2voXHeLQbCZ1qm+VYVrzTiwkiHuiNurKf0sSOyCHANsFYM TujZMLpqYqwzJgpCE0TvEwv7AENJ3Fk6gy1WqjYVeTNtxd5wm3C/cyinRwVEf8H9 5St/+jKfjX9LqTJ2IUOWE8cmwYEdsmqq4ekWGsDllZEOOtehvc52W20hfzRLbAyS h6fS6xcQOj15AxWaXWWvExdDnrotjwOa4k1NQgRiPgA1CPuzvHex2kRyczqclxVY 2kXuAA3ANQ6xphWda/c123Rmv7wAVgAEqBgUfehS3I2v4Mul0rBXAOyGbmSb/ZMq arzQTL2ttuzsBavvkTnmD3oHDW7zz4iH -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:59 2025 by rpki-client