$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft File: 3UAamS3TKfk027INWAtMpyeQ37E.mft (raw, json) Hash identifier: k5gSfGXJCugwYa2rPSh2XsCHy1CIxj8HMotlLlVVE6c= Subject key identifier: D3:9D:7F:00:A4:20:6F:E2:52:36:04:1F:B9:67:54:0A:CC:0E:E4:3D Authority key identifier: DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 Certificate issuer: /CN=A91EAB64/serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Certificate serial: 03E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft Manifest number: 059B Signing time: Thu 21 Aug 2025 00:41:40 +0000 Manifest this update: Thu 21 Aug 2025 00:41:40 +0000 Manifest next update: Thu 28 Aug 2025 00:41:40 +0000 Files and hashes: 1: 3UAamS3TKfk027INWAtMpyeQ37E.crl (hash: XoT8Q8eTJkILRvWh9TYtIRc9F4ugIo0ioq+GXpm3TIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1001 (0x3e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAB64, serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Validity Not Before: Aug 21 00:41:40 2025 GMT Not After : Aug 28 00:41:40 2025 GMT Subject: CN=68a66b44-a3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ea:9e:d4:5d:a9:68:45:f1:64:f8:5d:bc:5b: 7f:fb:f4:25:41:63:79:5a:bc:04:90:c1:b1:cc:ad: 40:b6:ea:e3:ce:46:95:d5:04:3b:76:8d:4d:26:33: 2a:5e:0d:67:d3:38:0a:4d:af:bc:88:e9:b2:8d:72: cc:a7:1e:69:e5:02:fb:f7:ea:da:8e:00:30:11:10: 06:6f:c7:38:87:39:73:62:c3:73:a3:8d:ff:3a:1f: e5:0c:e7:b6:57:9e:51:32:f7:5d:9d:37:b8:c4:32: 8d:8c:c0:0b:fb:40:5f:52:e4:6f:7c:1d:8a:83:18: 98:d5:2c:d1:10:03:ed:a3:e6:57:67:11:36:72:94: 5a:dc:fd:12:a7:be:17:1f:f4:ff:32:31:4c:88:17: e8:cb:3c:58:43:11:b0:f5:5f:aa:9b:be:75:93:62: f7:0b:48:78:ee:7c:67:f4:1f:4e:6d:4d:26:84:54: 9e:99:29:22:55:36:a6:c3:22:9f:8d:f2:10:00:e6: a2:fb:1f:67:c2:0d:8c:17:e7:2c:4b:12:cf:66:77: c8:02:da:af:94:ca:4a:41:aa:30:23:db:59:3b:08: 96:64:79:28:a7:4a:4d:74:4b:ed:6d:8c:c6:d3:63: 3c:5e:67:9b:41:3d:d0:b5:53:d1:7e:12:f1:da:19: 45:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9D:7F:00:A4:20:6F:E2:52:36:04:1F:B9:67:54:0A:CC:0E:E4:3D X509v3 Authority Key Identifier: keyid:DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:87:ae:d0:ae:4e:77:73:4c:6b:34:f5:9d:f3:83:9d:2e:d4: 6b:8b:92:44:f0:a7:41:ba:04:28:b9:ca:aa:bd:a6:40:d2:66: ae:02:10:89:15:1e:22:24:ba:8c:df:01:73:47:50:51:cd:d2: 23:a4:96:cb:e8:cf:39:54:82:18:2a:cc:5e:bc:9e:12:1c:c1: 88:8f:ae:dd:b6:6b:d5:72:c1:c9:df:b0:be:b7:43:7b:1c:86: 15:70:be:f1:a4:e8:d0:2d:a2:a7:05:db:55:65:2b:3d:dd:e1: 56:f0:b0:c2:36:7b:63:ef:b9:f4:b8:10:75:c7:22:8e:b6:91: 02:36:e6:20:7b:23:6b:e2:81:77:af:f4:82:0b:c0:f6:7c:81: 38:96:37:5c:f5:b5:d0:8f:84:bc:bc:d6:81:cb:a9:8c:20:4c: 51:67:1f:45:d9:04:07:e3:f7:15:37:b0:b0:17:79:54:e0:c2: f3:0f:a1:dd:6e:cd:49:8e:06:c1:18:6f:68:a5:57:82:ba:57: 66:36:13:57:4d:8c:f4:67:e0:65:fe:51:4d:6b:16:4a:13:fd: 0f:ea:56:e1:57:35:af:a4:45:e4:c2:56:e2:20:d1:2a:ae:0e: c6:4b:f7:d0:44:96:2a:1d:30:4d:73:81:1b:bf:4c:26:1e:e8: 5a:85:f5:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCNjQxMTAvBgNVBAUTKERENDAxQTk5MkREMzI5RjkzNERCQjIwRDU4MEI0Q0E3 Mjc5MERGQjEwHhcNMjUwODIxMDA0MTQwWhcNMjUwODI4MDA0MTQwWjAYMRYwFAYD VQQDEw02OGE2NmI0NC1hM2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Oqe1F2paEXxZPhdvFt/+/QlQWN5WrwEkMGxzK1AturjzkaV1QQ7do1NJjMq Xg1n0zgKTa+8iOmyjXLMpx5p5QL79+rajgAwERAGb8c4hzlzYsNzo43/Oh/lDOe2 V55RMvddnTe4xDKNjMAL+0BfUuRvfB2KgxiY1SzREAPto+ZXZxE2cpRa3P0Sp74X H/T/MjFMiBfoyzxYQxGw9V+qm751k2L3C0h47nxn9B9ObU0mhFSemSkiVTamwyKf jfIQAOai+x9nwg2MF+csSxLPZnfIAtqvlMpKQaowI9tZOwiWZHkop0pNdEvtbYzG 02M8XmebQT3QtVPRfhLx2hlFdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOdfwCk IG/iUjYEH7lnVArMDuQ9MB8GA1UdIwQYMBaAFN1AGpkt0yn5NNuyDVgLTKcnkN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtmazAyN0lOV0F0TXB5ZVEz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNVQWFtUzNUS2ZrMDI3SU5XQXRNcHllUTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUI2NC85QjQ0RUI3NDhGMjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtm azAyN0lOV0F0TXB5ZVEzN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOh67Qrk53c0xrNPWd84OdLtRri5JE8KdBugQoucqqvaZA0mauAhCJ FR4iJLqM3wFzR1BRzdIjpJbL6M85VIIYKsxevJ4SHMGIj67dtmvVcsHJ37C+t0N7 HIYVcL7xpOjQLaKnBdtVZSs93eFW8LDCNntj77n0uBB1xyKOtpECNuYgeyNr4oF3 r/SCC8D2fIE4ljdc9bXQj4S8vNaBy6mMIExRZx9F2QQH4/cVN7CwF3lU4MLzD6Hd bs1JjgbBGG9opVeCuldmNhNXTYz0Z+Bl/lFNaxZKE/0P6lbhVzWvpEXkwlbiINEq rg7GS/fQRJYqHTBNc4Ebv0wmHuhahfV+ -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:35 2025 by rpki-client