$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft File: UmRCqpPf8MUTmmF7DeZFtznmvs0.mft (raw, json) Hash identifier: u+qhXgXgiIq/u7kejSy6m+fEdmEQ0oljmUwM+h4QWAo= Subject key identifier: 1D:DF:A4:A5:DD:FB:8D:AA:6F:63:60:EC:B7:EB:6A:91:C5:2C:D2:8A Authority key identifier: 52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD Certificate issuer: /CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Certificate serial: 0A16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft Manifest number: 0A0C Signing time: Fri 22 Aug 2025 19:59:44 +0000 Manifest this update: Fri 22 Aug 2025 19:59:44 +0000 Manifest next update: Fri 29 Aug 2025 19:59:44 +0000 Files and hashes: 1: UmRCqpPf8MUTmmF7DeZFtznmvs0.crl (hash: o8K6fWwWoaDqrbCFiYLS3+evUrJOO2Qdwr7ZKcRaaU4=) 2: 1C9AB3F67D6711EA90858415C4F9AE02.roa (hash: oi91Qfh6vx3udOQFWmZQlAlwWv2n7sWukG/Y5qWMZrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2582 (0xa16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D7D, serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Validity Not Before: Aug 22 19:59:44 2025 GMT Not After : Aug 29 19:59:44 2025 GMT Subject: CN=68a8cc30-d896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:dc:bd:00:40:1d:5d:d9:ea:3d:89:37:10:a2: dd:2f:f4:06:44:5d:c6:08:8a:1b:21:1e:c4:eb:6e: 74:5f:08:69:40:06:01:bc:cc:93:a4:70:62:67:91: 00:cb:a6:d9:37:d9:ab:d2:c6:33:34:c6:df:8e:6e: fa:2e:ac:e8:ef:f4:4a:82:fe:7a:41:30:9e:79:b8: 1a:6f:7c:1b:db:d3:82:5b:cb:3c:fa:56:e9:c0:95: 8a:ca:5e:e7:e5:63:89:6a:b4:ce:35:fe:24:b1:6b: f6:97:ed:b3:44:b2:d7:78:2d:ef:29:8e:04:02:6e: 32:dd:c9:1f:b7:e3:a4:f5:0f:57:0f:1b:f5:9e:99: 2f:39:f4:b5:41:63:70:39:aa:e4:ae:44:f6:7e:97: b7:11:7e:fb:80:f7:e1:ac:83:64:1e:3c:48:cd:b4: 8c:21:c4:7f:88:c1:a4:db:81:1f:3c:07:e2:fa:2f: 18:f0:67:af:3a:b2:0b:89:8a:19:bc:7f:19:1f:21: 4b:39:f9:74:73:7f:2c:ab:8d:8f:c8:ba:c9:3a:c5: 86:be:d3:f1:d3:94:15:e3:a3:89:60:bc:af:e7:a3: 5c:7c:dd:e1:63:32:69:c7:43:8e:70:cd:05:52:f6: 2a:2e:53:3c:19:fd:a3:30:48:f9:1e:bd:a9:ea:a1: e5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DF:A4:A5:DD:FB:8D:AA:6F:63:60:EC:B7:EB:6A:91:C5:2C:D2:8A X509v3 Authority Key Identifier: keyid:52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:30:88:7c:c5:19:dc:70:5c:65:94:97:67:b5:33:41:35:1a: 7f:4e:c8:64:35:44:f2:59:60:da:22:b0:64:a2:ba:0b:34:6e: 13:74:4d:17:3e:35:b3:4a:8c:51:cc:e1:bc:3f:67:07:ef:df: 7f:d8:d9:2f:81:72:b6:6b:34:4d:77:69:b1:69:a8:38:42:ab: f0:e0:11:4d:7b:6f:b0:0a:a4:58:15:3c:d0:fe:60:1c:2c:67: 04:3e:6f:1c:ef:ba:c0:63:5a:1a:52:36:b0:69:e9:77:e4:d4: 53:0f:16:5a:bb:05:a3:d6:02:9b:df:fc:3f:d9:c8:47:d1:90: 37:8e:e8:ff:c7:df:93:42:92:38:03:69:cd:37:fd:eb:e9:54: cd:59:af:c1:b5:d5:4c:47:ff:72:a6:ce:8e:e6:8f:a6:4d:6a: 33:8d:b0:53:32:4d:92:ec:f9:70:a1:29:56:cb:89:7c:4f:b3: a0:5a:47:bd:91:03:8c:0a:82:c4:e3:25:e2:a4:49:a6:45:1c: 14:c7:e6:38:3d:cf:27:d2:2e:fc:00:67:3a:b9:82:9c:d2:23: 94:fd:47:62:e3:b1:c7:71:73:3d:55:c3:33:38:44:69:81:ab: bd:49:59:d7:b5:ba:cc:53:32:4a:66:3d:e4:4b:aa:ac:22:fc: 91:6e:17:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEN0QxMTAvBgNVBAUTKDUyNjQ0MkFBOTNERkYwQzUxMzlBNjE3QjBERTY0NUI3 MzlFNkJFQ0QwHhcNMjUwODIyMTk1OTQ0WhcNMjUwODI5MTk1OTQ0WjAYMRYwFAYD VQQDEw02OGE4Y2MzMC1kODk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5dy9AEAdXdnqPYk3EKLdL/QGRF3GCIobIR7E6250XwhpQAYBvMyTpHBiZ5EA y6bZN9mr0sYzNMbfjm76Lqzo7/RKgv56QTCeebgab3wb29OCW8s8+lbpwJWKyl7n 5WOJarTONf4ksWv2l+2zRLLXeC3vKY4EAm4y3ckft+Ok9Q9XDxv1npkvOfS1QWNw OarkrkT2fpe3EX77gPfhrINkHjxIzbSMIcR/iMGk24EfPAfi+i8Y8GevOrILiYoZ vH8ZHyFLOfl0c38sq42PyLrJOsWGvtPx05QV46OJYLyv56NcfN3hYzJpx0OOcM0F UvYqLlM8Gf2jMEj5Hr2p6qHlfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3fpKXd +42qb2Ng7LfrapHFLNKKMB8GA1UdIwQYMBaAFFJkQqqT3/DFE5phew3mRbc55r7N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ3RC83MTZEMkYzNjdE NjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhNVVRtbUY3RGVaRnR6bm12 czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VtUkNxcFBmOE1VVG1tRjdEZVpGdHpubXZzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ3RC83MTZEMkYzNjdENjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhN VVRtbUY3RGVaRnR6bm12czAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOMIh8xRnccFxllJdntTNBNRp/TshkNUTyWWDaIrBkoroLNG4TdE0X PjWzSoxRzOG8P2cH799/2NkvgXK2azRNd2mxaag4Qqvw4BFNe2+wCqRYFTzQ/mAc LGcEPm8c77rAY1oaUjawael35NRTDxZauwWj1gKb3/w/2chH0ZA3juj/x9+TQpI4 A2nNN/3r6VTNWa/BtdVMR/9yps6O5o+mTWozjbBTMk2S7PlwoSlWy4l8T7OgWke9 kQOMCoLE4yXipEmmRRwUx+Y4Pc8n0i78AGc6uYKc0iOU/Udi47HHcXM9VcMzOERp gau9SVnXtbrMUzJKZj3kS6qsIvyRbhdk -----END CERTIFICATE-----Generated at Sat Aug 23 19:36:30 2025 by rpki-client