$ rpki-client -vvf rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft File: uK3V-E0RutdH--lY1GutO6kTGQM.mft (raw, json) Hash identifier: A+PAfUkQorsAAkTf0NFomRc9rl2MAZEDvTVLw944bA0= Subject key identifier: 49:50:B1:1F:42:50:37:27:42:A1:0A:D8:FF:E2:69:F6:D0:D2:8C:4D Authority key identifier: B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03 Certificate issuer: /CN=A91F86D2/serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903 Certificate serial: 03B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft Manifest number: 03AC Signing time: Thu 21 Aug 2025 00:55:35 +0000 Manifest this update: Thu 21 Aug 2025 00:55:35 +0000 Manifest next update: Thu 28 Aug 2025 00:55:35 +0000 Files and hashes: 1: uK3V-E0RutdH--lY1GutO6kTGQM.crl (hash: FjalSYJgIM+mJqs8a3ZaEBjkUxSXe2QFaBJwBAkyuAA=) 2: 1A377B907A7811EF9D5ED47CC4F9AE02.roa (hash: 2FKrneZIYdwek2LQDep+qpyFwMcW7v1PTDAdjyafS0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 951 (0x3b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F86D2, serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903 Validity Not Before: Aug 21 00:55:35 2025 GMT Not After : Aug 28 00:55:35 2025 GMT Subject: CN=68a66e87-6aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:57:85:60:98:94:01:a0:13:35:9b:e3:e7:e8: c2:c1:8e:41:7d:dc:a9:1c:1a:2d:91:ed:2c:71:50: 5c:39:0d:ed:e7:4c:8b:bf:98:12:0d:76:99:59:fd: a2:f4:bd:6c:ef:56:16:65:80:45:b4:ad:e3:b4:e5: 1b:4c:39:50:2b:f6:86:c5:72:a8:dd:17:9d:7c:15: f4:5a:6a:bd:b6:5a:1d:6e:9d:c2:3e:6a:f5:89:bc: b9:62:0c:3c:4f:dc:f1:31:50:cc:df:85:d8:b0:ce: 45:ea:dd:14:9e:fd:09:ab:22:10:46:46:d1:90:2a: ea:9e:70:01:29:8c:28:57:be:34:ab:73:70:9c:4b: 62:4b:3d:fe:ad:ab:b2:a5:78:0d:0d:cb:41:41:85: 5a:09:eb:b2:35:69:a2:6e:ec:b6:61:52:d7:0b:a5: 80:fa:a0:7d:89:ad:b2:7c:51:6b:6e:9c:09:5c:c4: 84:a3:d6:48:9e:85:86:eb:28:e9:e7:13:e9:4d:a7: 54:5f:36:0c:2f:98:a3:42:e8:f8:2d:a6:30:0f:16: a6:b1:69:4a:57:d8:9f:22:7f:66:2c:da:a3:24:b4: 74:29:36:58:f1:ce:7a:b7:c0:ad:33:12:ab:ec:69: 13:cf:b9:e2:23:bc:53:17:39:1d:a2:de:42:7d:db: a4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:50:B1:1F:42:50:37:27:42:A1:0A:D8:FF:E2:69:F6:D0:D2:8C:4D X509v3 Authority Key Identifier: keyid:B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:d6:8f:bb:99:f1:8b:f7:70:b0:bd:aa:66:44:95:17:dd:b6: 39:9c:b3:2c:06:3f:49:27:44:b8:14:29:5f:a3:9f:3c:62:5c: 4a:1b:6b:33:f4:93:fb:26:22:cf:29:9c:bc:20:35:f6:64:fd: 5a:7a:97:81:dd:d9:89:63:72:7a:00:a8:0b:24:ec:77:24:f0: 6c:80:f9:76:fc:60:e3:a7:e9:83:2f:0a:76:89:ec:2b:bb:84: 5f:f6:38:ae:2e:f3:d1:56:40:f0:e7:de:ff:f2:87:8e:f2:d2: 83:2d:23:2b:02:65:85:02:34:7d:2d:f8:82:5b:e5:14:38:5b: 78:38:50:f3:a5:25:ba:bb:72:6b:21:6e:8f:23:88:0d:3e:9f: e1:db:20:0e:18:25:cc:0b:4d:9b:d7:3a:9c:98:02:4a:11:c9: 39:4a:e0:dd:6a:44:91:48:b8:8b:ad:80:78:22:ad:ca:e6:7a: 46:d3:c2:47:39:9e:e8:cb:4a:2e:d6:03:22:d8:0f:3d:7f:b8: 70:60:77:4c:a3:22:9b:be:73:4e:16:35:7b:fa:99:eb:d7:3c: 4b:7d:20:40:55:af:47:12:2f:2f:b4:cb:ef:92:44:cb:09:2a: 31:8f:57:ea:56:c2:9d:f3:45:7a:fe:65:bb:fc:68:6c:56:b4: ca:52:6b:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg2RDIxMTAvBgNVBAUTKEI4QURENUY4NEQxMUJBRDc0N0ZCRTk1OEQ0NkJBRDNC QTkxMzE5MDMwHhcNMjUwODIxMDA1NTM1WhcNMjUwODI4MDA1NTM1WjAYMRYwFAYD VQQDEw02OGE2NmU4Ny02YWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFeFYJiUAaATNZvj5+jCwY5BfdypHBotke0scVBcOQ3t50yLv5gSDXaZWf2i 9L1s71YWZYBFtK3jtOUbTDlQK/aGxXKo3RedfBX0Wmq9tlodbp3CPmr1iby5Ygw8 T9zxMVDM34XYsM5F6t0Unv0JqyIQRkbRkCrqnnABKYwoV740q3NwnEtiSz3+rauy pXgNDctBQYVaCeuyNWmibuy2YVLXC6WA+qB9ia2yfFFrbpwJXMSEo9ZInoWG6yjp 5xPpTadUXzYML5ijQuj4LaYwDxamsWlKV9ifIn9mLNqjJLR0KTZY8c56t8CtMxKr 7GkTz7niI7xTFzkdot5CfdukcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElQsR9C UDcnQqEK2P/iafbQ0oxNMB8GA1UdIwQYMBaAFLit1fhNEbrXR/vpWNRrrTupExkD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODZEMi8zOUREQ0NEQ0E5 NzUxMUVDQkE1QkRDMzNDNEY5QUUwMi91SzNWLUUwUnV0ZEgtLWxZMUd1dE82a1RH UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VLM1YtRTBSdXRkSC0tbFkxR3V0TzZrVEdRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODZEMi8zOUREQ0NEQ0E5NzUxMUVDQkE1QkRDMzNDNEY5QUUwMi91SzNWLUUwUnV0 ZEgtLWxZMUd1dE82a1RHUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD1o+7mfGL93CwvapmRJUX3bY5nLMsBj9JJ0S4FClfo588YlxKG2sz 9JP7JiLPKZy8IDX2ZP1aepeB3dmJY3J6AKgLJOx3JPBsgPl2/GDjp+mDLwp2iewr u4Rf9jiuLvPRVkDw597/8oeO8tKDLSMrAmWFAjR9LfiCW+UUOFt4OFDzpSW6u3Jr IW6PI4gNPp/h2yAOGCXMC02b1zqcmAJKEck5SuDdakSRSLiLrYB4Iq3K5npG08JH OZ7oy0ou1gMi2A89f7hwYHdMoyKbvnNOFjV7+pnr1zxLfSBAVa9HEi8vtMvvkkTL CSoxj1fqVsKd80V6/mW7/GhsVrTKUmuL -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:12 2025 by rpki-client