$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft File: UmRCqpPf8MUTmmF7DeZFtznmvs0.mft (raw, json) Hash identifier: Hxqpn4KjV0TWJU9fExBoZyRBmphxZcfzg7+BUYyratY= Subject key identifier: C6:23:83:14:E3:C8:69:A1:FC:7E:34:71:7B:49:73:27:BB:5C:BF:CF Authority key identifier: 52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD Certificate issuer: /CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Certificate serial: 09DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft Manifest number: 09D6 Signing time: Wed 14 May 2025 20:03:15 +0000 Manifest this update: Wed 14 May 2025 20:03:14 +0000 Manifest next update: Wed 21 May 2025 20:03:14 +0000 Files and hashes: 1: UmRCqpPf8MUTmmF7DeZFtznmvs0.crl (hash: IQVzZXpevEKoO46f25zpBGW5KID1duSS15LOuI3LkaI=) 2: 1C9AB3F67D6711EA90858415C4F9AE02.roa (hash: 32MI8zjp+omn2pz5wQODlf3/KMVL7tiwkuXJGcfvP+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2526 (0x9de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D7D, serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Validity Not Before: May 14 20:03:14 2025 GMT Not After : May 21 20:03:14 2025 GMT Subject: CN=6824f702-8131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:93:4e:6a:ad:7b:c1:17:ba:d8:d9:e7:9c:bc: a6:ce:7b:2c:a8:81:9e:6f:ae:1f:91:bd:1e:73:57: 92:f6:10:be:1d:05:80:a8:51:ac:0e:ff:10:35:c5: 4a:5b:ed:aa:fd:17:5e:95:2b:0c:6c:2e:13:98:57: b0:7b:1d:fd:f8:bd:63:44:e6:b9:7a:81:4f:41:64: dc:3b:68:5d:d6:16:12:6b:6e:0d:3f:15:4b:45:fc: 60:dd:e4:d0:79:fa:61:22:f4:f0:56:18:b9:4d:5c: d0:bb:07:27:e1:6d:73:7d:f2:6c:f5:7d:48:ee:9e: 4f:fa:cd:36:bd:e5:94:7a:e9:de:e8:01:8b:ec:81: b4:79:2b:c9:f0:49:8f:3f:1f:45:3a:26:8d:6a:fa: 21:8a:6f:fd:73:2c:b5:45:54:7a:eb:2c:04:82:ca: df:7e:a0:5c:b9:60:71:ea:b2:49:58:12:62:2a:3f: e1:59:15:d9:17:f0:25:df:cd:1b:73:64:d4:b8:71: 6e:c0:48:46:ad:db:d8:78:3e:b9:ea:12:66:43:8d: 08:92:c1:fe:6f:b8:af:54:3b:22:c4:3e:2f:95:13: 7e:24:a8:0c:40:4c:f0:8a:6b:79:a2:4e:90:ef:8e: c4:bf:8e:59:ab:1f:bc:26:3f:72:aa:f7:50:f1:65: 53:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:23:83:14:E3:C8:69:A1:FC:7E:34:71:7B:49:73:27:BB:5C:BF:CF X509v3 Authority Key Identifier: keyid:52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:5b:48:9d:82:74:4f:df:62:da:eb:33:a8:b4:2b:e2:8e:d2: b9:0d:70:77:a0:cc:9a:f4:89:23:f2:e3:8b:f9:5f:61:2b:3b: 47:05:39:db:33:28:99:be:f9:69:1f:9a:ac:b0:84:31:ad:0a: c0:20:eb:0b:aa:53:26:b6:d5:28:29:0e:4d:81:92:dc:5d:68: 7a:15:12:ad:a5:b0:63:6f:08:3c:58:29:21:6e:47:f9:58:6a: 70:3f:51:8c:7d:b1:b9:d1:d4:de:8d:5c:98:8a:67:a1:ae:4a: 33:e2:7f:d1:ef:7c:08:76:71:1d:c3:81:c2:cd:cf:bb:f7:cc: e9:f3:aa:2f:8b:a3:d6:50:92:2c:b8:46:41:3f:fd:82:10:53: c6:b7:88:0d:64:20:45:e8:85:ac:8a:5d:4d:eb:cd:52:7e:42: 0a:43:e8:6a:96:4d:b0:85:aa:a6:93:13:3b:05:f3:0e:b4:f7: df:9b:62:38:b8:7d:69:9b:ee:d1:22:6d:f4:71:b0:77:c3:7b: 50:63:d6:78:bd:04:db:84:bb:15:e1:64:90:ab:64:13:68:4e: 8d:ef:ec:35:b3:03:a7:36:11:04:14:9d:6f:ba:98:43:60:be: 3a:78:e3:db:ed:89:31:59:5e:3f:2c:00:44:0d:9b:b2:d1:3b: 4d:3c:ca:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEN0QxMTAvBgNVBAUTKDUyNjQ0MkFBOTNERkYwQzUxMzlBNjE3QjBERTY0NUI3 MzlFNkJFQ0QwHhcNMjUwNTE0MjAwMzE0WhcNMjUwNTIxMjAwMzE0WjAYMRYwFAYD VQQDEw02ODI0ZjcwMi04MTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJNOaq17wRe62NnnnLymznssqIGeb64fkb0ec1eS9hC+HQWAqFGsDv8QNcVK W+2q/RdelSsMbC4TmFewex39+L1jROa5eoFPQWTcO2hd1hYSa24NPxVLRfxg3eTQ efphIvTwVhi5TVzQuwcn4W1zffJs9X1I7p5P+s02veWUeune6AGL7IG0eSvJ8EmP Px9FOiaNavohim/9cyy1RVR66ywEgsrffqBcuWBx6rJJWBJiKj/hWRXZF/Al380b c2TUuHFuwEhGrdvYeD656hJmQ40IksH+b7ivVDsixD4vlRN+JKgMQEzwimt5ok6Q 747Ev45Zqx+8Jj9yqvdQ8WVTAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYjgxTj yGmh/H40cXtJcye7XL/PMB8GA1UdIwQYMBaAFFJkQqqT3/DFE5phew3mRbc55r7N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ3RC83MTZEMkYzNjdE NjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhNVVRtbUY3RGVaRnR6bm12 czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VtUkNxcFBmOE1VVG1tRjdEZVpGdHpubXZzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ3RC83MTZEMkYzNjdENjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhN VVRtbUY3RGVaRnR6bm12czAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjW0idgnRP32La6zOotCvijtK5DXB3oMya9Ikj8uOL+V9hKztHBTnb MyiZvvlpH5qssIQxrQrAIOsLqlMmttUoKQ5NgZLcXWh6FRKtpbBjbwg8WCkhbkf5 WGpwP1GMfbG50dTejVyYimehrkoz4n/R73wIdnEdw4HCzc+798zp86ovi6PWUJIs uEZBP/2CEFPGt4gNZCBF6IWsil1N681SfkIKQ+hqlk2whaqmkxM7BfMOtPffm2I4 uH1pm+7RIm30cbB3w3tQY9Z4vQTbhLsV4WSQq2QTaE6N7+w1swOnNhEEFJ1vuphD YL46eOPb7YkxWV4/LABEDZuy0TtNPMoS -----END CERTIFICATE-----Generated at Thu May 15 06:47:28 2025 by rpki-client