$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft File: u3-5V71tGEoIkjFpTPg4nbaI_lM.mft (raw, json) Hash identifier: Hu4NndQT54j9W+Bcv6US0aOndIA3dAF/GuxGh4pFOKo= Subject key identifier: A2:35:EA:64:9D:E5:7A:7C:6D:ED:76:D2:ED:1A:57:69:EC:FF:4C:E6 Authority key identifier: BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 Certificate issuer: /CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Certificate serial: 0471 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft Manifest number: 046B Signing time: Sat 19 Jul 2025 00:31:56 +0000 Manifest this update: Sat 19 Jul 2025 00:31:56 +0000 Manifest next update: Sat 26 Jul 2025 00:31:56 +0000 Files and hashes: 1: u3-5V71tGEoIkjFpTPg4nbaI_lM.crl (hash: ljp3WcW+zme85IlbzYb27sdlPpT0rESaSeFCIq9BjOM=) 2: 12702794577711ECB7FD0C6FC4F9AE02.roa (hash: 7OgpQvkBU6+tUiHR/xeuBjYzt4Evz4MreUzB4Ql4bWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1137 (0x471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39A9, serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Validity Not Before: Jul 19 00:31:56 2025 GMT Not After : Jul 26 00:31:56 2025 GMT Subject: CN=687ae77c-ca1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e7:e2:10:f8:25:02:24:08:85:68:4b:cc:d8: f9:ce:8a:a2:ca:35:f7:82:d0:35:7e:d6:75:cb:24: 46:5a:79:46:6a:04:13:9a:14:76:46:0b:a3:34:f7: 82:08:e8:ba:bb:01:1f:54:7e:ed:00:7e:72:c2:ab: 4f:87:c5:4f:15:7b:ae:3f:20:ee:d7:ec:6e:3f:24: ae:a3:4a:6e:e7:83:fe:f2:65:ea:c2:fe:fe:b6:41: 59:16:35:8a:84:4d:26:be:b5:90:02:17:59:07:c2: 55:5b:ce:6d:fb:e9:3d:c0:8c:16:d0:e9:ab:69:ee: 9f:ed:c3:63:12:21:87:50:06:6f:4a:a7:c6:c1:e2: c7:e6:cb:fc:1c:c8:7a:7f:89:0f:7f:c7:03:41:4c: 94:11:e0:e1:da:0e:07:02:98:e0:c4:94:f9:48:53: 7a:53:30:c9:37:3d:f8:eb:a5:eb:9d:dd:7f:fa:9e: 8c:75:d2:b8:f5:f2:5f:3d:da:df:38:74:24:cc:79: 2e:d8:0c:22:a8:48:e8:d6:ff:43:48:fb:a5:b6:75: 27:ae:70:28:51:cb:fb:76:05:e6:69:26:2b:dc:ac: 46:3e:9d:c7:11:c3:d7:39:72:3b:2e:0f:b6:21:db: 30:b9:1c:32:67:81:10:fa:86:c8:0d:b3:20:f0:1f: a6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:35:EA:64:9D:E5:7A:7C:6D:ED:76:D2:ED:1A:57:69:EC:FF:4C:E6 X509v3 Authority Key Identifier: keyid:BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:af:93:64:ce:79:c0:d7:b8:50:db:7e:d2:8b:fb:2b:a5:96: cb:98:2e:14:d3:34:73:c3:7d:d2:21:b9:68:d9:60:14:58:92: ee:5d:29:33:5e:8a:42:4a:d9:f3:7a:62:81:68:39:35:5e:b4: 18:52:69:b8:28:98:97:45:7f:c8:71:c8:94:66:07:b1:da:33: 4f:f6:d5:15:f7:3b:5d:84:16:48:91:90:2d:d6:95:d4:38:52: f6:c4:79:3a:d4:ac:44:bc:51:53:10:c2:79:97:29:ad:96:37: 44:fc:99:e8:62:61:f2:6c:d9:b1:23:69:a6:1f:04:5c:5b:b0: c6:7c:1e:58:08:88:06:6a:17:c1:f5:83:47:07:14:bb:7c:dd: 8b:55:d1:f8:da:fc:39:9f:8b:b9:d7:ce:1f:df:7a:6b:b2:78: d5:cb:84:b2:25:e2:5e:2b:0e:d8:12:47:9f:81:58:03:f7:1e: 77:ed:81:f5:aa:c8:36:11:f7:14:e4:d4:a9:e1:d3:62:ef:b4: d7:b1:e4:0d:3d:f0:40:58:30:00:78:4a:b6:6e:10:09:f2:42: c5:ed:ff:b0:c9:3d:c9:a4:52:3a:9f:c2:19:09:86:17:85:b5: f2:f5:91:87:f4:cc:bb:21:35:29:84:48:5f:3c:8e:84:b0:bb: 7c:59:a1:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5QTkxMTAvBgNVBAUTKEJCN0ZCOTU3QkQ2RDE4NEEwODkyMzE2OTRDRjgzODlE QjY4OEZFNTMwHhcNMjUwNzE5MDAzMTU2WhcNMjUwNzI2MDAzMTU2WjAYMRYwFAYD VQQDEw02ODdhZTc3Yy1jYTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOfiEPglAiQIhWhLzNj5zoqiyjX3gtA1ftZ1yyRGWnlGagQTmhR2RgujNPeC COi6uwEfVH7tAH5ywqtPh8VPFXuuPyDu1+xuPySuo0pu54P+8mXqwv7+tkFZFjWK hE0mvrWQAhdZB8JVW85t++k9wIwW0Omrae6f7cNjEiGHUAZvSqfGweLH5sv8HMh6 f4kPf8cDQUyUEeDh2g4HApjgxJT5SFN6UzDJNz3466Xrnd1/+p6MddK49fJfPdrf OHQkzHku2AwiqEjo1v9DSPultnUnrnAoUcv7dgXmaSYr3KxGPp3HEcPXOXI7Lg+2 IdswuRwyZ4EQ+obIDbMg8B+mcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKI16mSd 5Xp8be120u0aV2ns/0zmMB8GA1UdIwQYMBaAFLt/uVe9bRhKCJIxaUz4OJ22iP5T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlBOS81MjU0ODZCODU2 NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdFb0lrakZwVFBnNG5iYUlf bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UzLTVWNzF0R0VvSWtqRnBUUGc0bmJhSV9sTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlBOS81MjU0ODZCODU2NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdF b0lrakZwVFBnNG5iYUlfbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIr5NkznnA17hQ237Si/srpZbLmC4U0zRzw33SIblo2WAUWJLuXSkz XopCStnzemKBaDk1XrQYUmm4KJiXRX/IcciUZgex2jNP9tUV9ztdhBZIkZAt1pXU OFL2xHk61KxEvFFTEMJ5lymtljdE/JnoYmHybNmxI2mmHwRcW7DGfB5YCIgGahfB 9YNHBxS7fN2LVdH42vw5n4u5184f33prsnjVy4SyJeJeKw7YEkefgVgD9x537YH1 qsg2EfcU5NSp4dNi77TXseQNPfBAWDAAeEq2bhAJ8kLF7f+wyT3JpFI6n8IZCYYX hbXy9ZGH9My7ITUphEhfPI6EsLt8WaFT -----END CERTIFICATE-----Generated at Sun Jul 20 10:23:40 2025 by rpki-client