$ rpki-client -vvf rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft File: uMGYUq7H2lGkUL59p9lYc77eNzQ.mft (raw, json) Hash identifier: bBYjdFNeH3hkbQNERSCxHhtmyv5v3PMtxj3TuSG3xPg= Subject key identifier: F5:E1:D8:5E:E2:C0:66:9D:EC:67:93:02:9E:F1:7C:5F:5C:32:7B:2D Authority key identifier: B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34 Certificate issuer: /CN=A917C78E/serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft Manifest number: 8B Signing time: Thu 03 Jul 2025 06:44:15 +0000 Manifest this update: Thu 03 Jul 2025 06:44:14 +0000 Manifest next update: Thu 10 Jul 2025 06:44:14 +0000 Files and hashes: 1: uMGYUq7H2lGkUL59p9lYc77eNzQ.crl (hash: 91s6fiNSYV4l6j7HnPNMBgn9urkMQlT6Bu5Qhcf2/uQ=) 2: 91F29F5E86DD11EFB3D7A929C4F9AE02.roa (hash: ZCgG7FYX4Z+FrZu/NpwbDBG7rLXKjEvv9WpnC42UALI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C78E, serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734 Validity Not Before: Jul 3 06:44:14 2025 GMT Not After : Jul 10 06:44:14 2025 GMT Subject: CN=686626be-3332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:62:3c:29:88:b4:36:24:9a:35:4f:46:30:39: ea:54:d3:7b:a1:63:02:a1:3d:ed:e8:9c:2e:ed:bc: 0b:ca:f2:de:fe:e6:41:97:bb:b1:30:54:8f:3d:2b: ae:bb:f6:b7:1a:53:3e:ca:a5:8d:52:a6:4c:b8:f5: 5a:38:e7:31:cb:46:d9:9a:5d:98:74:cb:83:d5:59: ee:66:db:b4:da:ce:25:a3:df:e2:b3:ba:7d:5d:0a: 32:02:55:34:fa:2d:5d:d7:a4:1e:73:e5:dc:6b:65: 67:46:6e:f6:11:ee:d9:aa:18:17:40:35:e6:09:8a: b8:5c:5b:92:d3:c4:06:4b:71:bd:40:79:d3:c9:d2: 92:dd:57:07:bc:2e:45:48:f5:58:0e:c7:9f:c6:f5: ec:b8:15:b3:d1:1a:9c:39:71:7c:bd:89:05:aa:81: 41:17:8a:ad:a2:e0:33:84:54:83:95:66:bf:23:72: 0f:3d:4d:62:20:6e:56:5e:59:5d:df:a7:4c:a4:25: 1c:95:12:c1:51:ed:45:3d:b5:17:8c:89:9f:0e:57: 54:96:41:4e:cb:9d:a6:4b:d4:df:23:a3:4e:0e:e7: 74:be:da:24:c8:07:8d:fc:54:32:d8:60:14:01:1d: 83:a2:7f:65:92:1e:2f:c0:88:da:44:fc:8c:9b:1c: bb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E1:D8:5E:E2:C0:66:9D:EC:67:93:02:9E:F1:7C:5F:5C:32:7B:2D X509v3 Authority Key Identifier: keyid:B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:ae:ff:cd:3b:c9:bf:84:7e:83:59:d3:f2:fc:6c:aa:5e:00: c4:e9:59:b7:e0:c1:23:5c:51:28:d5:5a:35:5d:4f:22:27:25: 64:41:23:ae:52:9f:0a:5e:79:b7:3f:59:da:ee:fe:65:95:8b: 73:78:69:71:b2:d4:75:12:38:58:e0:8a:94:7d:86:c4:86:e9: c6:6a:8b:b1:ca:b2:e5:29:a0:8b:a2:af:bc:be:1c:66:49:24: a7:3a:42:bb:f8:1d:59:bb:99:00:a9:a0:ca:39:a4:03:14:19: 7e:50:10:7a:3f:bc:13:a5:2f:7c:bb:b8:81:45:2e:f5:d0:18: 68:c2:3d:bf:f2:fc:22:ad:58:41:9c:d2:72:56:dd:e3:d5:7b: 0d:80:6c:cf:b3:00:4f:db:0d:79:8f:97:23:2a:f0:1b:77:57: a5:69:ca:72:01:15:1e:fe:48:de:38:29:47:80:2b:99:d1:d6: c5:c1:82:24:fe:55:45:32:78:a4:42:ac:9b:cc:26:72:45:05: 00:58:72:7c:67:99:1b:2b:58:f6:58:19:bc:20:26:41:47:b5: 6b:28:38:8c:56:ba:d1:fa:df:cc:a5:d6:62:2c:01:26:68:b9: 8c:0f:ff:8c:09:a7:e8:a0:2d:b8:f9:e0:bb:81:5a:12:a9:cc: a2:1d:85:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3OEUxMTAvBgNVBAUTKEI4QzE5ODUyQUVDN0RBNTFBNDUwQkU3REE3RDk1ODcz QkVERTM3MzQwHhcNMjUwNzAzMDY0NDE0WhcNMjUwNzEwMDY0NDE0WjAYMRYwFAYD VQQDEw02ODY2MjZiZS0zMzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWI8KYi0NiSaNU9GMDnqVNN7oWMCoT3t6Jwu7bwLyvLe/uZBl7uxMFSPPSuu u/a3GlM+yqWNUqZMuPVaOOcxy0bZml2YdMuD1VnuZtu02s4lo9/is7p9XQoyAlU0 +i1d16Qec+Xca2VnRm72Ee7ZqhgXQDXmCYq4XFuS08QGS3G9QHnTydKS3VcHvC5F SPVYDsefxvXsuBWz0RqcOXF8vYkFqoFBF4qtouAzhFSDlWa/I3IPPU1iIG5WXlld 36dMpCUclRLBUe1FPbUXjImfDldUlkFOy52mS9TfI6NODud0vtokyAeN/FQy2GAU AR2Don9lkh4vwIjaRPyMmxy73QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXh2F7i wGad7GeTAp7xfF9cMnstMB8GA1UdIwQYMBaAFLjBmFKux9pRpFC+fafZWHO+3jc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Qzc4RS9BMDIwMUIyMDg2 REMxMUVGQjlFQUQwMjdDNEY5QUUwMi91TUdZVXE3SDJsR2tVTDU5cDlsWWM3N2VO elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VNR1lVcTdIMmxHa1VMNTlwOWxZYzc3ZU56US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Qzc4RS9BMDIwMUIyMDg2REMxMUVGQjlFQUQwMjdDNEY5QUUwMi91TUdZVXE3SDJs R2tVTDU5cDlsWWM3N2VOelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGrv/NO8m/hH6DWdPy/GyqXgDE6Vm34MEjXFEo1Vo1XU8iJyVkQSOu Up8KXnm3P1na7v5llYtzeGlxstR1EjhY4IqUfYbEhunGaouxyrLlKaCLoq+8vhxm SSSnOkK7+B1Zu5kAqaDKOaQDFBl+UBB6P7wTpS98u7iBRS710Bhowj2/8vwirVhB nNJyVt3j1XsNgGzPswBP2w15j5cjKvAbd1elacpyARUe/kjeOClHgCuZ0dbFwYIk /lVFMnikQqybzCZyRQUAWHJ8Z5kbK1j2WBm8ICZBR7VrKDiMVrrR+t/MpdZiLAEm aLmMD/+MCafooC24+eC7gVoSqcyiHYUN -----END CERTIFICATE-----Generated at Thu Jul 3 08:29:42 2025 by rpki-client