$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft File: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json) Hash identifier: Akn30rV0LDmM6s4du450qB2yRsV0yBJdPA0s/0aGuNE= Subject key identifier: 97:64:ED:2C:91:D8:FC:32:23:C7:B6:3A:89:4A:55:15:AB:16:C6:D1 Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 Certificate issuer: /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Certificate serial: 2A41 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft Manifest number: 2A41 Signing time: Fri 22 Aug 2025 15:37:47 +0000 Manifest this update: Fri 22 Aug 2025 15:37:47 +0000 Manifest next update: Fri 29 Aug 2025 15:37:47 +0000 Files and hashes: 1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: rOzIsjtQQ2z14vEI6oKbA/9XUJOKJolwARPq2A38kyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10817 (0x2a41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Validity Not Before: Aug 22 15:37:47 2025 GMT Not After : Aug 29 15:37:47 2025 GMT Subject: CN=68a88ecb-b413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fb:bd:69:1e:52:14:e6:3b:0e:60:f2:4f:55: a7:8a:f2:f4:92:60:b6:3f:ac:8a:4c:79:b6:7c:ea: 49:a1:e5:29:45:75:70:a9:00:cd:33:f5:64:ae:fc: 59:04:2a:d9:47:d6:14:c4:05:1a:ed:18:8f:07:7f: 25:9c:a3:b2:65:d7:4c:10:2a:59:52:88:5f:cf:1b: 61:2d:19:34:e0:3f:3c:fe:88:70:41:8f:3d:da:8f: 1b:66:d9:95:88:11:81:2c:d0:93:15:22:59:54:2b: fa:b9:1f:9d:f3:91:b2:72:b8:54:4f:b9:0b:ec:e5: 73:5a:9f:90:6d:30:db:97:19:18:55:c1:6c:fb:b1: 60:5a:5a:bc:7d:12:df:43:bd:bc:cf:0c:f3:d0:07: b6:a3:10:74:7e:83:40:7d:72:8f:f8:19:eb:a7:82: 3e:b8:ac:46:ff:66:d6:1f:a4:f3:21:80:ad:83:f7: 76:c0:32:1a:61:38:d4:35:1c:ee:d3:be:d2:23:1f: 35:af:f0:2f:54:2c:45:12:1d:c1:39:43:b5:81:4f: 0e:b7:3e:ef:2a:5f:29:a9:09:0c:88:18:4c:e7:c9: fa:f5:37:e0:a7:69:09:9e:07:e1:26:30:d2:63:da: 1c:5a:5f:ab:d6:5f:f1:86:2c:32:51:ca:a3:27:50: 44:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:64:ED:2C:91:D8:FC:32:23:C7:B6:3A:89:4A:55:15:AB:16:C6:D1 X509v3 Authority Key Identifier: keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:76:99:ed:8a:fa:75:78:f6:63:3a:94:4d:e4:c5:dc:8c:a8: 2a:12:47:76:2a:0f:da:44:94:37:87:53:d0:33:d5:ec:84:d6: de:6d:5c:17:9c:a8:84:ab:87:c7:ca:18:71:ba:71:d0:c9:bd: 15:6f:a3:95:b3:34:a4:b0:c5:2b:d7:05:6f:4b:89:59:6b:92: 35:97:8f:4d:84:3a:80:1e:2c:0b:d1:42:98:7d:cd:d4:cb:f4: 96:e7:7e:e1:65:53:65:4f:28:de:8a:ff:8b:38:40:0a:83:78: 72:0b:7d:ef:5d:f4:0d:79:fd:b5:39:53:90:24:d7:ea:42:57: 1b:bb:a1:68:97:66:c9:73:d7:35:7b:d2:49:9c:77:14:33:fd: 45:a2:38:8f:31:60:d9:6c:0e:93:39:69:cc:ab:65:03:69:92: 9c:8d:bb:15:43:36:f0:e5:a7:6b:fc:2d:fb:7e:5b:ed:3b:ca: 47:56:84:4b:65:66:d5:43:63:99:e4:c8:a5:78:98:84:65:34: 27:f2:41:a7:15:c4:17:3d:e4:ee:de:4a:d6:ed:c2:e1:5f:ae: 9f:56:15:08:35:49:19:f6:27:8e:88:70:b2:bc:3f:3e:e4:af: 35:a2:ed:6a:e7:93:f3:f1:84:50:ea:32:cc:52:1b:02:93:fa: 0d:8f:4e:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKERENDkzMEUzRTQyREZFM0JGRkY0ODFCMTc5NzcwRDFB QjE1NzVCQzMwHhcNMjUwODIyMTUzNzQ3WhcNMjUwODI5MTUzNzQ3WjAYMRYwFAYD VQQDEw02OGE4OGVjYi1iNDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/u9aR5SFOY7DmDyT1WnivL0kmC2P6yKTHm2fOpJoeUpRXVwqQDNM/VkrvxZ BCrZR9YUxAUa7RiPB38lnKOyZddMECpZUohfzxthLRk04D88/ohwQY892o8bZtmV iBGBLNCTFSJZVCv6uR+d85GycrhUT7kL7OVzWp+QbTDblxkYVcFs+7FgWlq8fRLf Q728zwzz0Ae2oxB0foNAfXKP+Bnrp4I+uKxG/2bWH6TzIYCtg/d2wDIaYTjUNRzu 077SIx81r/AvVCxFEh3BOUO1gU8Otz7vKl8pqQkMiBhM58n69Tfgp2kJngfhJjDS Y9ocWl+r1l/xhiwyUcqjJ1BE8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdk7SyR 2PwyI8e2OolKVRWrFsbRMB8GA1UdIwQYMBaAFN1JMOPkLf47//SBsXl3DRqxV1vD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9ENzg1OTlCQzMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9qdl85SUd4ZVhjTkdyRlhX OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNVa3c0LVF0X2p2XzlJR3hlWGNOR3JGWFc4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjIxNC9ENzg1OTlCQzMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9q dl85SUd4ZVhjTkdyRlhXOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHdpntivp1ePZjOpRN5MXcjKgqEkd2Kg/aRJQ3h1PQM9XshNbebVwX nKiEq4fHyhhxunHQyb0Vb6OVszSksMUr1wVvS4lZa5I1l49NhDqAHiwL0UKYfc3U y/SW537hZVNlTyjeiv+LOEAKg3hyC33vXfQNef21OVOQJNfqQlcbu6Fol2bJc9c1 e9JJnHcUM/1FojiPMWDZbA6TOWnMq2UDaZKcjbsVQzbw5adr/C37flvtO8pHVoRL ZWbVQ2OZ5MileJiEZTQn8kGnFcQXPeTu3krW7cLhX66fVhUINUkZ9ieOiHCyvD8+ 5K81ou1q55Pz8YRQ6jLMUhsCk/oNj04q -----END CERTIFICATE-----Generated at Sat Aug 23 14:03:34 2025 by rpki-client