$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft File: UmRCqpPf8MUTmmF7DeZFtznmvs0.mft (raw, json) Hash identifier: tJ7LRKRj1rShqB81VvNiVI1DdoBfEzGPJGmkUY23ODQ= Subject key identifier: 0E:E6:98:F7:23:70:11:AC:92:99:2A:7B:2C:6E:EC:7B:C8:3A:6E:93 Authority key identifier: 52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD Certificate issuer: /CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Certificate serial: 09F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft Manifest number: 09F0 Signing time: Wed 02 Jul 2025 20:07:01 +0000 Manifest this update: Wed 02 Jul 2025 20:07:00 +0000 Manifest next update: Wed 09 Jul 2025 20:07:00 +0000 Files and hashes: 1: UmRCqpPf8MUTmmF7DeZFtznmvs0.crl (hash: sQdYQJ82dwgq0AGY3L2A2tW3SIqX7pBnKCj1Ez32Z3I=) 2: 1C9AB3F67D6711EA90858415C4F9AE02.roa (hash: +nZj7ZJlhXeCQW5EI9e0cOVa9PmOL785t8ILeM0SUHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2553 (0x9f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D7D, serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Validity Not Before: Jul 2 20:07:00 2025 GMT Not After : Jul 9 20:07:00 2025 GMT Subject: CN=68659165-8f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bf:97:8a:a8:87:ce:d3:88:cd:19:fc:4a:c7: 27:3f:ad:66:01:f3:20:a4:16:4c:43:c5:57:34:eb: 37:6e:71:1a:78:61:de:d5:6d:b0:ea:1d:e6:dc:c9: c2:78:00:83:16:4f:0a:a3:87:53:8a:a8:2c:a6:01: db:6c:f9:9c:11:0c:80:5e:9f:de:1a:0e:8f:06:10: 65:e7:48:a1:49:b4:2d:c9:95:02:d4:d7:08:94:23: be:74:5b:80:0b:4d:22:32:d6:0b:0f:cd:4e:0f:f9: f7:84:f7:d7:08:84:3e:c5:7f:c2:9d:b6:29:42:d8: ff:8f:56:bb:59:09:f4:8e:89:f3:04:c7:7c:65:b5: b8:25:72:fa:81:ef:c5:75:81:26:54:5d:6c:86:7b: a5:cf:3d:8c:b5:66:01:5a:8f:8c:4a:d0:9d:fc:71: 2b:98:6e:1c:f0:f5:73:23:5f:27:db:b4:3e:86:a3: 13:81:4a:36:5c:a4:f2:dd:ca:10:75:ab:3a:c4:60: 98:a1:cd:13:ed:c2:1c:db:67:d3:22:4e:38:fa:88: 59:04:a4:89:b1:d6:44:7a:4e:33:12:b0:0a:ec:8e: 29:7f:63:9d:fe:13:8b:41:98:28:d5:ab:44:5d:0d: 41:f5:13:a4:29:df:0f:ab:aa:22:e8:6d:b3:77:e7: 58:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E6:98:F7:23:70:11:AC:92:99:2A:7B:2C:6E:EC:7B:C8:3A:6E:93 X509v3 Authority Key Identifier: keyid:52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:7a:6a:8a:dc:f2:3a:e3:d8:fa:ec:11:1c:27:75:1d:38:a2: 66:19:df:f4:25:0d:3a:dd:78:76:dc:be:17:11:e3:66:74:21: 09:92:ea:56:e5:89:19:e8:a3:73:48:cc:09:74:43:86:02:0d: 8e:31:d9:d3:25:a7:c8:d4:f2:9d:f3:5c:7d:13:a8:5e:dd:ee: 98:c7:07:64:b9:b7:43:6c:39:37:b0:d7:fd:cf:d1:16:8e:65: e6:2c:6b:bc:56:6e:68:f1:ef:fa:c7:66:be:ee:d5:56:88:b9: 94:a5:66:68:0c:e9:24:0e:f4:30:d7:5c:cd:f5:7f:25:9b:02: 51:6d:02:99:7b:77:9d:c1:9d:a8:33:3d:7c:19:6a:7b:0a:3f: 61:57:c5:1d:c6:72:58:74:2e:79:5e:e2:ca:65:f0:02:6b:2e: fc:81:fb:19:08:72:bc:04:c1:7a:5b:dc:fe:aa:4a:08:57:dc: 61:93:cb:1f:66:c9:3e:a3:22:cf:29:18:17:56:8e:cb:a6:bd: ad:1d:e5:95:52:e7:79:74:24:fb:9d:06:48:0a:58:99:f1:0f: d3:d8:b7:cf:5a:94:09:55:ed:2d:9d:09:2f:78:5d:fb:d2:6b: 89:cb:8e:d1:53:22:f1:3c:10:c6:25:3a:23:6f:bc:bf:84:29: 72:d7:4b:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEN0QxMTAvBgNVBAUTKDUyNjQ0MkFBOTNERkYwQzUxMzlBNjE3QjBERTY0NUI3 MzlFNkJFQ0QwHhcNMjUwNzAyMjAwNzAwWhcNMjUwNzA5MjAwNzAwWjAYMRYwFAYD VQQDEw02ODY1OTE2NS04Zjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3b+XiqiHztOIzRn8SscnP61mAfMgpBZMQ8VXNOs3bnEaeGHe1W2w6h3m3MnC eACDFk8Ko4dTiqgspgHbbPmcEQyAXp/eGg6PBhBl50ihSbQtyZUC1NcIlCO+dFuA C00iMtYLD81OD/n3hPfXCIQ+xX/CnbYpQtj/j1a7WQn0jonzBMd8ZbW4JXL6ge/F dYEmVF1shnulzz2MtWYBWo+MStCd/HErmG4c8PVzI18n27Q+hqMTgUo2XKTy3coQ das6xGCYoc0T7cIc22fTIk44+ohZBKSJsdZEek4zErAK7I4pf2Od/hOLQZgo1atE XQ1B9ROkKd8Pq6oi6G2zd+dYfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7mmPcj cBGskpkqeyxu7HvIOm6TMB8GA1UdIwQYMBaAFFJkQqqT3/DFE5phew3mRbc55r7N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ3RC83MTZEMkYzNjdE NjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhNVVRtbUY3RGVaRnR6bm12 czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VtUkNxcFBmOE1VVG1tRjdEZVpGdHpubXZzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ3RC83MTZEMkYzNjdENjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhN VVRtbUY3RGVaRnR6bm12czAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDemqK3PI649j67BEcJ3UdOKJmGd/0JQ063Xh23L4XEeNmdCEJkupW 5YkZ6KNzSMwJdEOGAg2OMdnTJafI1PKd81x9E6he3e6YxwdkubdDbDk3sNf9z9EW jmXmLGu8Vm5o8e/6x2a+7tVWiLmUpWZoDOkkDvQw11zN9X8lmwJRbQKZe3edwZ2o Mz18GWp7Cj9hV8UdxnJYdC55XuLKZfACay78gfsZCHK8BMF6W9z+qkoIV9xhk8sf Zsk+oyLPKRgXVo7Lpr2tHeWVUud5dCT7nQZICliZ8Q/T2LfPWpQJVe0tnQkveF37 0muJy47RUyLxPBDGJTojb7y/hCly10tl -----END CERTIFICATE-----Generated at Thu Jul 3 02:11:11 2025 by rpki-client