$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft File: rUMyA4JywtsyFd2jrfsBU1QVaRM.mft (raw, json) Hash identifier: 6wbS96wYp6SzSjZKvbalFWeOrbCk3acP5fsuz7ESiY4= Subject key identifier: 49:26:AE:7D:9D:23:31:A7:72:DF:9B:E4:8B:F7:CD:41:A9:D4:75:43 Authority key identifier: AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13 Certificate issuer: /CN=A91CF064/serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft Manifest number: B8 Signing time: Thu 03 Jul 2025 06:10:11 +0000 Manifest this update: Thu 03 Jul 2025 06:10:11 +0000 Manifest next update: Thu 10 Jul 2025 06:10:11 +0000 Files and hashes: 1: rUMyA4JywtsyFd2jrfsBU1QVaRM.crl (hash: 87ceZE0F3JlEPAdpT5mTKtCXRePOoMeYQcUb+9tMCCE=) 2: F74324B0464511EFA4CCFA6DC4F9AE02.roa (hash: JKn9arrhKIKLCkrCm7PBh/6X6a8i3r2H/xvsTIl/UOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF064, serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913 Validity Not Before: Jul 3 06:10:11 2025 GMT Not After : Jul 10 06:10:11 2025 GMT Subject: CN=68661ec3-c435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:8b:a2:f4:dd:53:da:fb:06:8f:5d:a1:f4: 09:29:36:08:d6:f6:a0:a4:d6:a4:c9:19:b9:ba:3a: 01:34:2a:bb:72:fa:00:5a:1a:e7:59:bb:1a:1e:48: a3:6b:c7:7e:6f:f9:a0:b2:ce:89:40:bd:cd:34:71: 81:ef:7b:cd:61:e8:7a:f2:d3:43:7d:64:66:50:d4: 68:73:c9:8c:1e:b1:be:3f:58:5f:b8:a5:65:11:0c: db:5c:0d:ac:04:e8:1b:cf:83:c8:42:04:6a:f1:fa: d8:75:06:3f:7d:f6:c2:54:da:19:ab:68:a6:7b:98: 82:8b:59:eb:71:7f:a7:c2:0a:2d:2d:dd:ab:a1:80: 30:fc:fd:ba:54:03:09:69:44:12:ad:cb:c3:51:32: 09:21:41:d8:4b:6c:0d:d1:29:b5:9e:51:7b:2d:10: e0:30:37:2f:61:fc:b1:bd:9d:da:15:8c:c4:cc:17: fd:7d:57:ea:e3:88:93:fb:d3:85:c1:a8:10:d6:5b: 72:8c:a5:35:83:89:27:7f:2b:47:b2:9e:69:74:41: 1d:74:47:43:bc:c7:12:ec:d3:19:2e:1b:ee:57:7f: 6a:06:25:64:1e:20:b6:46:f5:b5:69:4f:f3:67:f0: d5:e2:2c:89:87:8b:b5:f7:b1:f1:95:ad:a0:3d:f0: be:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:26:AE:7D:9D:23:31:A7:72:DF:9B:E4:8B:F7:CD:41:A9:D4:75:43 X509v3 Authority Key Identifier: keyid:AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:66:14:c3:e7:69:b9:de:a1:b7:34:c1:7b:82:e8:5b:a4:71: 10:cc:5d:c5:d3:8e:ff:83:c6:6b:8c:63:30:88:f6:66:66:ac: 8f:a1:0f:d0:30:de:fb:ff:15:4c:b7:fb:b1:93:5d:68:a3:ca: 0e:e1:41:f4:da:f3:8a:3f:3b:7d:9a:38:38:42:6a:46:50:a5: 6c:35:de:a7:f4:59:ab:e3:6f:42:50:f7:00:d1:bf:39:03:8e: 74:09:86:b7:8f:cb:85:82:db:ce:4c:a9:da:a3:28:c4:92:5f: 17:9f:00:ae:c2:45:79:64:02:36:05:4b:c0:28:1e:cc:7b:67: 29:66:6f:44:28:f3:c6:6c:9f:0a:3e:83:20:54:f9:52:98:53: 6f:3b:34:1d:4a:a0:fa:1b:eb:28:27:d1:ec:4c:ec:d9:7b:08: 6f:3a:ff:0b:0d:f2:d7:d7:e1:64:3d:82:81:22:61:0f:40:83: 13:0c:28:d7:1d:05:a2:a2:78:29:66:6c:87:6e:bf:a1:1b:af: db:50:b1:ac:06:fc:f1:e5:82:76:3a:d9:eb:41:08:61:d9:00: 84:82:91:c4:71:6a:cc:f0:42:fd:4e:a8:5c:47:2a:a7:1e:3d: 79:79:87:d3:2e:6b:23:3c:3f:29:dd:12:a4:92:b8:50:a1:3d: e1:71:51:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YwNjQxMTAvBgNVBAUTKEFENDMzMjAzODI3MkMyREIzMjE1RERBM0FERkIwMTUz NTQxNTY5MTMwHhcNMjUwNzAzMDYxMDExWhcNMjUwNzEwMDYxMDExWjAYMRYwFAYD VQQDEw02ODY2MWVjMy1jNDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqI+LovTdU9r7Bo9dofQJKTYI1vagpNakyRm5ujoBNCq7cvoAWhrnWbsaHkij a8d+b/mgss6JQL3NNHGB73vNYeh68tNDfWRmUNRoc8mMHrG+P1hfuKVlEQzbXA2s BOgbz4PIQgRq8frYdQY/ffbCVNoZq2ime5iCi1nrcX+nwgotLd2roYAw/P26VAMJ aUQSrcvDUTIJIUHYS2wN0Sm1nlF7LRDgMDcvYfyxvZ3aFYzEzBf9fVfq44iT+9OF wagQ1ltyjKU1g4knfytHsp5pdEEddEdDvMcS7NMZLhvuV39qBiVkHiC2RvW1aU/z Z/DV4iyJh4u197Hxla2gPfC+CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkmrn2d IzGnct+b5Iv3zUGp1HVDMB8GA1UdIwQYMBaAFK1DMgOCcsLbMhXdo637AVNUFWkT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjA2NC9GM0NBNjE3MjQ0 RTIxMUVGQjEzRjIyMTRDNEY5QUUwMi9yVU15QTRKeXd0c3lGZDJqcmZzQlUxUVZh Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JVTXlBNEp5d3RzeUZkMmpyZnNCVTFRVmFSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjA2NC9GM0NBNjE3MjQ0RTIxMUVGQjEzRjIyMTRDNEY5QUUwMi9yVU15QTRKeXd0 c3lGZDJqcmZzQlUxUVZhUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtZhTD52m53qG3NMF7guhbpHEQzF3F047/g8ZrjGMwiPZmZqyPoQ/Q MN77/xVMt/uxk11oo8oO4UH02vOKPzt9mjg4QmpGUKVsNd6n9Fmr429CUPcA0b85 A450CYa3j8uFgtvOTKnaoyjEkl8XnwCuwkV5ZAI2BUvAKB7Me2cpZm9EKPPGbJ8K PoMgVPlSmFNvOzQdSqD6G+soJ9HsTOzZewhvOv8LDfLX1+FkPYKBImEPQIMTDCjX HQWiongpZmyHbr+hG6/bULGsBvzx5YJ2OtnrQQhh2QCEgpHEcWrM8EL9TqhcRyqn Hj15eYfTLmsjPD8p3RKkkrhQoT3hcVGT -----END CERTIFICATE-----Generated at Fri Jul 4 14:58:57 2025 by rpki-client