$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft File: 3UAamS3TKfk027INWAtMpyeQ37E.mft (raw, json) Hash identifier: +ta5HBnjxExN0OY5Nu27JZvnftECoCi+acxs6Zo7qFA= Subject key identifier: 1C:E3:00:B5:3E:6E:92:7C:8B:6F:5D:97:68:23:26:B2:EC:31:17:FB Authority key identifier: DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 Certificate issuer: /CN=A91EAB64/serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Certificate serial: 03CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft Manifest number: 0567 Signing time: Tue 01 Jul 2025 01:12:37 +0000 Manifest this update: Tue 01 Jul 2025 01:12:37 +0000 Manifest next update: Tue 08 Jul 2025 01:12:37 +0000 Files and hashes: 1: 3UAamS3TKfk027INWAtMpyeQ37E.crl (hash: Y32So27dmAsjQbinqJLym2zq+G+IRIQT3Mtp9U5kuys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 975 (0x3cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAB64, serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Validity Not Before: Jul 1 01:12:37 2025 GMT Not After : Jul 8 01:12:37 2025 GMT Subject: CN=68633605-0f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:32:b8:34:85:fa:df:de:ef:02:3f:b3:3b:6a: 19:4a:a4:25:c2:1a:4e:ba:86:3c:2b:5a:47:55:c1: a2:f6:96:af:5f:12:55:ff:b3:f6:90:12:e1:c3:f5: 38:11:28:eb:a2:ec:e7:1f:16:c8:a8:36:7e:1a:e8: 45:8d:73:b4:ab:bc:29:08:7e:b9:2d:49:fd:34:2f: 85:41:a1:41:a2:68:9b:8e:12:cf:2f:18:21:ca:0a: 24:27:ba:a1:c5:2c:0d:81:03:e0:4f:36:1e:de:06: 96:99:a7:cc:e5:a0:7d:65:aa:3e:63:5a:be:76:ff: 8c:0b:85:9b:b2:06:70:5d:82:e7:7d:11:09:41:1c: b2:c6:39:17:dd:13:97:4d:57:92:4b:d6:79:c0:ea: 66:2a:ff:a8:5d:fe:cd:65:55:09:7d:50:64:34:f4: 0d:4a:c1:f7:82:89:48:88:87:80:75:e1:89:7e:d0: 90:e3:92:29:8d:bd:bb:c6:af:59:7d:b9:20:42:a9: 42:7a:2b:99:d5:e7:49:39:e5:e5:de:3f:56:f1:a3: a8:4b:7a:47:3e:c0:67:72:e0:e0:4d:b7:4b:e3:4f: a3:06:34:ca:d2:88:d7:89:9d:ba:2b:52:2a:da:f7: 5f:c7:3a:96:5d:6f:3d:f4:62:71:b6:80:28:fb:99: 1d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E3:00:B5:3E:6E:92:7C:8B:6F:5D:97:68:23:26:B2:EC:31:17:FB X509v3 Authority Key Identifier: keyid:DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:05:38:b8:fe:03:7f:16:c2:72:11:a1:a2:8c:16:0f:80:89: c4:e4:0d:6d:dc:42:de:f4:c9:a8:df:22:ff:8c:1c:8f:2a:b5: 7e:ff:44:1b:cf:2f:27:06:2e:10:c9:ef:c0:35:c3:02:25:06: 76:2e:d5:40:a1:a8:9f:53:4e:72:60:f2:b4:24:24:d9:ad:0b: 1a:73:61:67:3d:23:09:47:e8:69:7c:b5:0c:52:1c:de:69:56: 6a:fb:a5:ec:37:65:31:07:ca:de:14:9b:d9:ce:4a:2b:2d:af: 70:90:81:07:14:20:da:40:cd:8e:cf:98:7b:93:4c:ea:4f:b1: 38:e2:46:5e:7b:08:59:9b:d3:76:5e:59:77:9e:21:2d:32:10: f9:cb:9f:c5:e1:bf:ef:87:35:85:32:5d:ce:14:dd:aa:33:5b: 6e:d3:26:a7:bf:d6:05:df:6f:da:3a:42:92:4f:c9:05:b4:68: ec:47:a6:83:62:4f:ce:96:75:39:b7:1f:e6:21:ec:d2:2b:45: 84:8a:3b:3e:23:87:4a:45:6c:f9:71:68:3f:40:fd:49:f5:4a: 1c:d4:63:3c:ef:f7:6f:16:5b:5c:30:6a:4a:97:00:65:d6:88: fc:9d:73:36:15:f5:ac:87:11:60:24:95:5b:f4:ba:43:96:81: 4f:ac:12:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCNjQxMTAvBgNVBAUTKERENDAxQTk5MkREMzI5RjkzNERCQjIwRDU4MEI0Q0E3 Mjc5MERGQjEwHhcNMjUwNzAxMDExMjM3WhcNMjUwNzA4MDExMjM3WjAYMRYwFAYD VQQDEw02ODYzMzYwNS0wZjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4zK4NIX6397vAj+zO2oZSqQlwhpOuoY8K1pHVcGi9pavXxJV/7P2kBLhw/U4 ESjrouznHxbIqDZ+GuhFjXO0q7wpCH65LUn9NC+FQaFBomibjhLPLxghygokJ7qh xSwNgQPgTzYe3gaWmafM5aB9Zao+Y1q+dv+MC4WbsgZwXYLnfREJQRyyxjkX3ROX TVeSS9Z5wOpmKv+oXf7NZVUJfVBkNPQNSsH3golIiIeAdeGJftCQ45Ipjb27xq9Z fbkgQqlCeiuZ1edJOeXl3j9W8aOoS3pHPsBncuDgTbdL40+jBjTK0ojXiZ26K1Iq 2vdfxzqWXW899GJxtoAo+5kdawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzjALU+ bpJ8i29dl2gjJrLsMRf7MB8GA1UdIwQYMBaAFN1AGpkt0yn5NNuyDVgLTKcnkN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtmazAyN0lOV0F0TXB5ZVEz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNVQWFtUzNUS2ZrMDI3SU5XQXRNcHllUTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUI2NC85QjQ0RUI3NDhGMjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtm azAyN0lOV0F0TXB5ZVEzN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1BTi4/gN/FsJyEaGijBYPgInE5A1t3ELe9Mmo3yL/jByPKrV+/0Qb zy8nBi4Qye/ANcMCJQZ2LtVAoaifU05yYPK0JCTZrQsac2FnPSMJR+hpfLUMUhze aVZq+6XsN2UxB8reFJvZzkorLa9wkIEHFCDaQM2Oz5h7k0zqT7E44kZeewhZm9N2 Xll3niEtMhD5y5/F4b/vhzWFMl3OFN2qM1tu0yanv9YF32/aOkKST8kFtGjsR6aD Yk/OlnU5tx/mIezSK0WEijs+I4dKRWz5cWg/QP1J9Uoc1GM87/dvFltcMGpKlwBl 1oj8nXM2FfWshxFgJJVb9LpDloFPrBKu -----END CERTIFICATE-----Generated at Tue Jul 1 19:53:30 2025 by rpki-client