$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft File: u3-5V71tGEoIkjFpTPg4nbaI_lM.mft (raw, json) Hash identifier: I/BISPUb9mJsWAsONW7LyZCBxrpPUrUmzyyrx45hm64= Subject key identifier: 82:3F:FC:04:73:6C:B9:70:BD:1F:22:3D:41:AE:70:1D:54:74:28:75 Authority key identifier: BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 Certificate issuer: /CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Certificate serial: 0455 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft Manifest number: 0450 Signing time: Sat 31 May 2025 00:25:33 +0000 Manifest this update: Sat 31 May 2025 00:25:33 +0000 Manifest next update: Sat 07 Jun 2025 00:25:33 +0000 Files and hashes: 1: u3-5V71tGEoIkjFpTPg4nbaI_lM.crl (hash: +H6+kD4i1F3AB5s+zCq0D0mKXLgUz+Jn/fUGYc3K2yQ=) 2: 12702794577711ECB7FD0C6FC4F9AE02.roa (hash: XOYLtUkvxxhHrcsvmr5WB+I6ZV608DvzcypTgdpZOb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1109 (0x455) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39A9, serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Validity Not Before: May 31 00:25:33 2025 GMT Not After : Jun 7 00:25:33 2025 GMT Subject: CN=683a4c7d-25e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9f:2e:5b:c7:a3:b6:5c:57:58:97:27:fe:de: 2d:e4:4c:e0:a4:06:36:a7:b6:e8:5d:43:90:15:63: f2:5e:29:ca:07:e0:b4:7d:09:b8:44:bf:2a:a2:c7: c5:64:2a:d9:5e:bb:50:f5:8f:11:68:65:16:d3:a2: 82:8f:77:ce:85:60:63:87:16:cb:4e:1e:44:91:cc: 37:c5:47:a5:9e:82:88:6c:73:0a:98:9c:7d:46:2c: 2b:b1:24:5a:c1:f4:b6:45:69:a6:59:1c:30:e9:a5: 91:19:37:d3:a5:92:e9:25:ef:9c:a7:ff:7d:6f:98: f6:05:7f:02:b4:37:2c:33:2e:ed:ab:96:40:f4:d9: 9c:e0:d5:a1:96:f0:dd:d9:59:da:8e:4e:3f:4c:93: 4e:40:bf:09:da:d3:26:d8:03:75:bf:20:9e:60:98: 31:9f:eb:88:d7:9f:5c:d1:c3:77:25:86:3d:49:80: 48:53:fd:09:1c:2c:df:ee:60:9a:9a:e8:e9:e3:26: 2e:0c:a7:5d:6e:37:d4:50:2c:60:96:18:d4:40:c6: 89:9f:68:83:68:5c:83:c2:c6:a7:59:a3:5b:fe:47: 64:3a:e9:3d:55:16:4f:e3:ad:37:98:6f:49:c1:94: 0c:64:ed:95:b1:0c:2c:ee:7f:66:2f:29:6c:f1:c6: fa:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3F:FC:04:73:6C:B9:70:BD:1F:22:3D:41:AE:70:1D:54:74:28:75 X509v3 Authority Key Identifier: keyid:BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:22:78:b4:85:47:b8:82:ae:e5:dd:fb:88:42:d7:04:17:ec: 50:86:44:56:d7:bb:7a:fe:d0:f2:58:df:7e:21:d3:de:70:be: 4a:00:58:a0:bc:09:1e:67:de:16:6f:39:1f:ed:49:df:3f:1d: 9b:f1:74:77:ba:89:bf:d9:bc:d6:5e:a8:64:85:12:de:0d:42: 10:32:b9:38:89:86:5b:c5:76:ee:19:ff:a1:d6:df:48:0f:42: fb:cc:e6:99:5c:d3:56:61:5c:15:83:a3:07:41:ab:91:0a:c5: e5:6e:80:86:6f:66:bf:b7:24:73:c2:3d:a9:c1:5d:0f:09:4f: ec:e3:8f:26:ef:ce:82:8a:e4:c2:68:88:cb:3d:f9:b4:4a:8f: ab:46:ae:25:ae:f4:fb:df:9a:c5:6e:e5:5a:04:8e:45:f8:bd: 71:cb:4c:4e:b9:8f:56:b7:35:89:02:1f:40:1c:35:97:a9:d6: 79:2f:64:b9:36:3f:aa:cb:34:23:89:c8:5f:95:be:d5:4c:ad: 5d:51:02:00:eb:59:42:a1:0d:07:c3:7d:01:4e:de:c1:31:7a: f9:d9:29:7a:3c:20:ad:a2:89:2b:81:25:f7:34:a6:d0:b3:c6: f6:11:e4:e5:66:eb:f9:e3:7e:53:5a:32:87:83:c7:51:88:fa: 47:12:66:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5QTkxMTAvBgNVBAUTKEJCN0ZCOTU3QkQ2RDE4NEEwODkyMzE2OTRDRjgzODlE QjY4OEZFNTMwHhcNMjUwNTMxMDAyNTMzWhcNMjUwNjA3MDAyNTMzWjAYMRYwFAYD VQQDEw02ODNhNGM3ZC0yNWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp58uW8ejtlxXWJcn/t4t5EzgpAY2p7boXUOQFWPyXinKB+C0fQm4RL8qosfF ZCrZXrtQ9Y8RaGUW06KCj3fOhWBjhxbLTh5Ekcw3xUelnoKIbHMKmJx9RiwrsSRa wfS2RWmmWRww6aWRGTfTpZLpJe+cp/99b5j2BX8CtDcsMy7tq5ZA9Nmc4NWhlvDd 2Vnajk4/TJNOQL8J2tMm2AN1vyCeYJgxn+uI159c0cN3JYY9SYBIU/0JHCzf7mCa mujp4yYuDKddbjfUUCxglhjUQMaJn2iDaFyDwsanWaNb/kdkOuk9VRZP4603mG9J wZQMZO2VsQws7n9mLyls8cb6ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFII//ARz bLlwvR8iPUGucB1UdCh1MB8GA1UdIwQYMBaAFLt/uVe9bRhKCJIxaUz4OJ22iP5T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlBOS81MjU0ODZCODU2 NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdFb0lrakZwVFBnNG5iYUlf bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UzLTVWNzF0R0VvSWtqRnBUUGc0bmJhSV9sTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlBOS81MjU0ODZCODU2NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdF b0lrakZwVFBnNG5iYUlfbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlIni0hUe4gq7l3fuIQtcEF+xQhkRW17t6/tDyWN9+IdPecL5KAFig vAkeZ94Wbzkf7UnfPx2b8XR3uom/2bzWXqhkhRLeDUIQMrk4iYZbxXbuGf+h1t9I D0L7zOaZXNNWYVwVg6MHQauRCsXlboCGb2a/tyRzwj2pwV0PCU/s448m786CiuTC aIjLPfm0So+rRq4lrvT735rFbuVaBI5F+L1xy0xOuY9WtzWJAh9AHDWXqdZ5L2S5 Nj+qyzQjichflb7VTK1dUQIA61lCoQ0Hw30BTt7BMXr52Sl6PCCtookrgSX3NKbQ s8b2EeTlZuv5435TWjKHg8dRiPpHEmZV -----END CERTIFICATE-----Generated at Sat May 31 17:39:23 2025 by rpki-client