$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft File: u3-5V71tGEoIkjFpTPg4nbaI_lM.mft (raw, json) Hash identifier: pbfqkMgiEvX6SWZEE2LbQTt8REL8OLyXhnGmFEvxwSU= Subject key identifier: F2:11:FE:73:0D:A2:23:69:41:90:21:4F:F6:4C:1E:B1:0B:6E:39:FB Authority key identifier: BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 Certificate issuer: /CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Certificate serial: 048C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft Manifest number: 0486 Signing time: Tue 09 Sep 2025 00:07:45 +0000 Manifest this update: Tue 09 Sep 2025 00:07:44 +0000 Manifest next update: Tue 16 Sep 2025 00:07:44 +0000 Files and hashes: 1: u3-5V71tGEoIkjFpTPg4nbaI_lM.crl (hash: ALr+e4pNW2k1gbu4xiExtGodPjgMVXJ2Umkp/LDde/M=) 2: 12702794577711ECB7FD0C6FC4F9AE02.roa (hash: 7OgpQvkBU6+tUiHR/xeuBjYzt4Evz4MreUzB4Ql4bWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1164 (0x48c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39A9, serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Validity Not Before: Sep 9 00:07:44 2025 GMT Not After : Sep 16 00:07:44 2025 GMT Subject: CN=68bf6fd0-9eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9e:0b:02:8e:3b:30:40:93:7e:8c:84:bc:46: 08:6e:59:99:6d:48:c3:39:55:62:10:ae:b4:b6:6f: 3b:dd:53:13:14:8f:82:f0:20:6d:e6:87:85:3f:88: 11:f0:eb:1d:e5:4e:55:96:7d:ab:df:bf:fe:2b:3f: fa:d2:54:d9:58:d2:ad:29:e4:19:71:e2:09:d9:c2: b6:68:11:56:83:24:79:94:3a:d2:8a:dc:c1:81:06: 5b:33:d2:62:f4:b0:0b:13:14:77:0a:36:2a:f0:bb: c1:09:81:a8:28:97:9c:1e:f9:5c:52:6e:bb:f6:46: b1:de:0d:42:b7:c1:5c:c6:2e:05:85:d6:91:19:56: 62:e4:21:7c:3f:a8:15:c4:92:ac:fa:d1:23:79:7b: cb:67:67:4b:e3:22:7c:e5:b8:da:cc:2f:36:87:f2: 52:25:d5:6b:df:09:de:2e:50:f4:dd:dc:55:4f:f5: 2a:e2:9b:c2:d4:99:26:e7:d2:ac:ec:2e:d0:f0:13: 8e:f2:92:1a:b0:f8:b8:49:78:b6:aa:bd:2f:c4:15: de:32:7e:c4:7d:32:6c:34:2f:83:ab:28:e4:f9:2d: 72:cc:c5:76:58:e2:d5:7d:63:0e:c2:16:78:d7:09: 81:79:24:7a:0b:74:b6:99:f0:00:9c:97:ff:8e:76: 7a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:11:FE:73:0D:A2:23:69:41:90:21:4F:F6:4C:1E:B1:0B:6E:39:FB X509v3 Authority Key Identifier: keyid:BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:55:f4:a3:c0:52:e3:25:a6:36:26:81:b3:78:93:d6:a5:ec: b0:3d:03:bf:ee:e2:7a:18:40:d6:da:fc:e5:66:83:ad:0c:3d: 66:9c:80:85:67:6f:24:b9:ec:91:ed:59:ed:7b:1b:ec:75:24: 46:56:39:f4:45:50:33:ca:31:00:d4:30:69:a6:5e:19:46:26: 8d:51:e4:3a:0f:c7:d9:04:b8:0d:2b:55:ef:0e:c1:02:8a:6d: 81:98:d4:bc:ac:1d:7e:e0:46:98:c1:d9:6e:68:73:24:97:ad: b4:84:d7:58:98:9f:4d:f5:ee:a2:b1:77:7a:5b:c9:f6:f3:c2: 46:3b:ee:43:98:6f:0b:06:57:f7:ea:cf:fe:33:b6:be:0a:eb: 3f:3d:d1:b6:92:c5:43:a7:85:ff:e6:ce:a2:70:5f:ff:22:56: 11:63:15:37:7f:20:4b:e7:07:fc:76:d7:4b:b6:7a:63:c4:30: a6:0b:d4:09:77:1a:c2:70:e9:60:9d:cd:f6:fa:e5:19:f2:aa: c5:26:55:34:ff:15:eb:78:80:ee:9c:0f:d1:f8:43:0e:d6:5b: 8b:01:3a:94:12:41:c3:29:a1:a9:2f:0f:21:4d:b6:be:9b:a9: 57:d6:a9:cb:64:1d:02:d0:3b:ee:b8:41:5c:56:71:c9:df:12: 77:ab:f4:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5QTkxMTAvBgNVBAUTKEJCN0ZCOTU3QkQ2RDE4NEEwODkyMzE2OTRDRjgzODlE QjY4OEZFNTMwHhcNMjUwOTA5MDAwNzQ0WhcNMjUwOTE2MDAwNzQ0WjAYMRYwFAYD VQQDEw02OGJmNmZkMC05ZWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAup4LAo47MECTfoyEvEYIblmZbUjDOVViEK60tm873VMTFI+C8CBt5oeFP4gR 8Osd5U5Vln2r37/+Kz/60lTZWNKtKeQZceIJ2cK2aBFWgyR5lDrSitzBgQZbM9Ji 9LALExR3CjYq8LvBCYGoKJecHvlcUm679kax3g1Ct8Fcxi4FhdaRGVZi5CF8P6gV xJKs+tEjeXvLZ2dL4yJ85bjazC82h/JSJdVr3wneLlD03dxVT/Uq4pvC1Jkm59Ks 7C7Q8BOO8pIasPi4SXi2qr0vxBXeMn7EfTJsNC+Dqyjk+S1yzMV2WOLVfWMOwhZ4 1wmBeSR6C3S2mfAAnJf/jnZ6sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIR/nMN oiNpQZAhT/ZMHrELbjn7MB8GA1UdIwQYMBaAFLt/uVe9bRhKCJIxaUz4OJ22iP5T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlBOS81MjU0ODZCODU2 NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdFb0lrakZwVFBnNG5iYUlf bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UzLTVWNzF0R0VvSWtqRnBUUGc0bmJhSV9sTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlBOS81MjU0ODZCODU2NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdF b0lrakZwVFBnNG5iYUlfbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9VfSjwFLjJaY2JoGzeJPWpeywPQO/7uJ6GEDW2vzlZoOtDD1mnICF Z28kueyR7VntexvsdSRGVjn0RVAzyjEA1DBppl4ZRiaNUeQ6D8fZBLgNK1XvDsEC im2BmNS8rB1+4EaYwdluaHMkl620hNdYmJ9N9e6isXd6W8n288JGO+5DmG8LBlf3 6s/+M7a+Cus/PdG2ksVDp4X/5s6icF//IlYRYxU3fyBL5wf8dtdLtnpjxDCmC9QJ dxrCcOlgnc32+uUZ8qrFJlU0/xXreIDunA/R+EMO1luLATqUEkHDKaGpLw8hTba+ m6lX1qnLZB0C0DvuuEFcVnHJ3xJ3q/Te -----END CERTIFICATE-----Generated at Tue Sep 9 19:27:41 2025 by rpki-client