$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft File: rUMyA4JywtsyFd2jrfsBU1QVaRM.mft (raw, json) Hash identifier: uDsMh1Db2u8CjAJVGcQ3Lk/0oCOu5grC3jT6SOi+gbw= Subject key identifier: 62:96:D5:32:07:B9:F9:4D:EA:AB:1E:69:35:63:2C:57:FD:76:44:87 Authority key identifier: AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13 Certificate issuer: /CN=A91CF064/serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft Manifest number: B1 Signing time: Thu 19 Jun 2025 05:25:10 +0000 Manifest this update: Thu 19 Jun 2025 05:25:09 +0000 Manifest next update: Thu 26 Jun 2025 05:25:09 +0000 Files and hashes: 1: rUMyA4JywtsyFd2jrfsBU1QVaRM.crl (hash: 1mIsJbxgpaDCOeqTOfjn8+RREMKdsSjpKQzD7mXXUOY=) 2: F74324B0464511EFA4CCFA6DC4F9AE02.roa (hash: JKn9arrhKIKLCkrCm7PBh/6X6a8i3r2H/xvsTIl/UOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF064, serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913 Validity Not Before: Jun 19 05:25:09 2025 GMT Not After : Jun 26 05:25:09 2025 GMT Subject: CN=68539f35-d4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:df:49:83:2d:55:08:d0:4d:ab:28:ab:57:4b: b3:c1:6e:17:dc:b7:8b:95:9e:e9:9f:bf:68:9d:45: 81:8a:91:38:28:b5:85:f5:36:a0:f6:5b:68:95:81: 0e:c4:95:ed:35:35:8b:22:62:6b:56:e1:3d:81:7f: ad:e7:b2:39:6b:69:fb:61:88:43:2c:78:24:6b:06: 86:5f:49:60:a0:76:00:a3:79:64:4d:a2:6e:be:de: 95:0e:e7:7e:b7:86:8c:92:d4:cf:4f:68:60:5b:4f: e4:61:56:5b:90:f6:5d:1e:cf:ef:ac:8d:91:b8:7c: bb:76:20:02:68:b0:6b:c5:7c:de:30:43:03:e4:38: 23:4a:04:2b:63:c4:49:7c:b3:34:9e:75:49:ef:36: a6:c8:4f:b8:d6:4e:35:0f:eb:ba:53:f4:e1:be:7e: 3b:f6:b1:a0:2e:1a:d1:7a:f0:05:9b:a0:77:17:75: 9f:78:54:84:26:2a:ad:40:a4:9b:f4:f0:91:65:f0: 5c:4d:68:52:06:50:4d:71:3d:da:2e:40:dc:cd:96: d4:47:95:d2:9f:fc:f1:f4:38:20:d4:8f:6e:c3:dd: 85:d1:dc:12:78:f7:df:62:6a:38:0e:e9:ee:e0:cf: 40:6b:7a:18:d4:4d:6e:8f:d3:79:76:9e:9d:10:fd: 15:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:96:D5:32:07:B9:F9:4D:EA:AB:1E:69:35:63:2C:57:FD:76:44:87 X509v3 Authority Key Identifier: keyid:AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:03:0c:75:04:1d:70:43:4d:7f:e7:6d:88:77:da:cb:ba:28: 36:6b:33:ea:5c:a1:b8:4f:b3:6b:b8:26:13:d7:88:bd:40:d9: 75:87:18:60:1c:e9:dd:0c:2b:c7:77:aa:a3:7a:bc:85:9d:55: b3:73:64:26:e3:ae:30:02:b1:5a:54:17:9e:30:4a:57:75:7f: 94:19:7c:f7:9d:76:c3:03:04:15:de:b6:b7:bf:c4:43:60:5a: be:df:87:03:1e:5f:da:87:8c:58:96:f5:02:ab:85:f4:00:ea: d9:4c:37:44:f6:63:a9:c1:54:fb:01:ae:54:bd:23:e3:ff:20: ac:8f:71:dd:7c:41:ce:e2:ff:9f:4f:ba:96:b1:bb:ce:55:60: 7d:ac:42:69:4d:13:35:ec:c6:e9:5a:eb:5f:45:7d:51:ba:d2: 5b:47:cf:50:7f:6c:d4:ad:08:8f:74:67:1b:e1:d5:26:a2:5e: 67:7e:7a:51:c0:3a:9c:43:4f:c7:e8:7b:bc:5b:8a:95:49:f1: 86:78:60:27:a6:39:0a:ae:62:90:01:93:e5:d1:d2:dc:91:c1: 46:fb:8d:ab:64:bf:52:d2:b5:b8:f6:35:98:ee:6e:60:00:3b: 15:30:72:43:8f:43:79:a8:65:9e:f9:12:d9:d4:9c:8d:6a:4c: ed:fb:4e:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YwNjQxMTAvBgNVBAUTKEFENDMzMjAzODI3MkMyREIzMjE1RERBM0FERkIwMTUz NTQxNTY5MTMwHhcNMjUwNjE5MDUyNTA5WhcNMjUwNjI2MDUyNTA5WjAYMRYwFAYD VQQDEw02ODUzOWYzNS1kNGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn99Jgy1VCNBNqyirV0uzwW4X3LeLlZ7pn79onUWBipE4KLWF9Tag9ltolYEO xJXtNTWLImJrVuE9gX+t57I5a2n7YYhDLHgkawaGX0lgoHYAo3lkTaJuvt6VDud+ t4aMktTPT2hgW0/kYVZbkPZdHs/vrI2RuHy7diACaLBrxXzeMEMD5DgjSgQrY8RJ fLM0nnVJ7zamyE+41k41D+u6U/Thvn479rGgLhrRevAFm6B3F3WfeFSEJiqtQKSb 9PCRZfBcTWhSBlBNcT3aLkDczZbUR5XSn/zx9Dgg1I9uw92F0dwSePffYmo4Dunu 4M9Aa3oY1E1uj9N5dp6dEP0VDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKW1TIH uflN6qseaTVjLFf9dkSHMB8GA1UdIwQYMBaAFK1DMgOCcsLbMhXdo637AVNUFWkT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjA2NC9GM0NBNjE3MjQ0 RTIxMUVGQjEzRjIyMTRDNEY5QUUwMi9yVU15QTRKeXd0c3lGZDJqcmZzQlUxUVZh Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JVTXlBNEp5d3RzeUZkMmpyZnNCVTFRVmFSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjA2NC9GM0NBNjE3MjQ0RTIxMUVGQjEzRjIyMTRDNEY5QUUwMi9yVU15QTRKeXd0 c3lGZDJqcmZzQlUxUVZhUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDAwx1BB1wQ01/522Id9rLuig2azPqXKG4T7NruCYT14i9QNl1hxhg HOndDCvHd6qjeryFnVWzc2Qm464wArFaVBeeMEpXdX+UGXz3nXbDAwQV3ra3v8RD YFq+34cDHl/ah4xYlvUCq4X0AOrZTDdE9mOpwVT7Aa5UvSPj/yCsj3HdfEHO4v+f T7qWsbvOVWB9rEJpTRM17MbpWutfRX1RutJbR89Qf2zUrQiPdGcb4dUmol5nfnpR wDqcQ0/H6Hu8W4qVSfGGeGAnpjkKrmKQAZPl0dLckcFG+42rZL9S0rW49jWY7m5g ADsVMHJDj0N5qGWe+RLZ1JyNakzt+05y -----END CERTIFICATE-----Generated at Fri Jun 20 20:56:31 2025 by rpki-client