$ rpki-client -vvf rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft File: f3UA8ZRiBwd03Is7S5avThubtUU.mft (raw, json) Hash identifier: V0o7MhI2egLpouvqLblgjSUZlZS+38shDK9VxYLmr3o= Subject key identifier: 6F:C5:00:74:FA:C9:A6:92:60:09:CA:76:89:01:CE:56:8E:A4:76:B9 Authority key identifier: 7F:75:00:F1:94:62:07:07:74:DC:8B:3B:4B:96:AF:4E:1B:9B:B5:45 Certificate issuer: /CN=A91A840E/serialNumber=7F7500F19462070774DC8B3B4B96AF4E1B9BB545 Certificate serial: 2E1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft Manifest number: 2E1D Signing time: Wed 02 Jul 2025 15:36:15 +0000 Manifest this update: Wed 02 Jul 2025 15:36:15 +0000 Manifest next update: Wed 09 Jul 2025 15:36:15 +0000 Files and hashes: 1: f3UA8ZRiBwd03Is7S5avThubtUU.crl (hash: NIJ5RuJrOxgHfKPLrsn4rm1YwTa3Bkxjg9C6YHHNyVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.crl rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11805 (0x2e1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A840E, serialNumber=7F7500F19462070774DC8B3B4B96AF4E1B9BB545 Validity Not Before: Jul 2 15:36:15 2025 GMT Not After : Jul 9 15:36:15 2025 GMT Subject: CN=686551ef-e238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a4:2a:46:60:c0:83:5f:ba:d7:0b:c8:8d:57: f4:bc:5f:66:69:de:b3:91:cd:0e:52:44:00:b6:46: 87:19:c2:46:fb:15:1a:8d:3f:fa:67:f0:de:fa:1d: c4:57:6c:85:d6:11:36:fc:98:cd:80:cf:c2:45:e1: 93:41:97:72:e3:a5:59:77:c1:e1:0b:40:de:e2:0a: 76:13:f8:68:7d:3b:aa:11:8f:0c:c2:c1:c7:0a:70: 56:80:32:b4:5f:d0:53:55:fd:f2:b0:83:58:06:d6: 35:dd:16:a2:a2:10:36:a5:41:a1:f7:57:d6:d3:79: f8:30:9f:43:05:bf:dc:3e:f2:e2:fb:77:bc:92:a9: dd:0d:6d:85:58:d2:60:06:00:1d:d0:a0:fc:4f:e8: c8:cc:b7:77:57:2a:c9:c9:f1:72:d6:4f:d9:e4:bc: 7b:ec:40:f6:52:f7:3d:54:2f:0f:4f:63:e8:ed:04: 5f:e4:63:fc:ee:4c:0d:ed:8d:7f:86:5e:a0:a6:46: 5a:90:56:c9:24:92:84:e6:39:1f:80:3b:94:87:6b: 77:b3:06:54:47:a0:e6:ee:cd:99:bc:55:5c:ef:e2: 50:f0:55:ed:30:05:9d:66:39:54:7f:2a:9a:a0:6b: 6c:5b:66:5d:89:7c:d1:bf:30:51:ec:e4:22:6f:7c: 58:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C5:00:74:FA:C9:A6:92:60:09:CA:76:89:01:CE:56:8E:A4:76:B9 X509v3 Authority Key Identifier: keyid:7F:75:00:F1:94:62:07:07:74:DC:8B:3B:4B:96:AF:4E:1B:9B:B5:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:19:67:48:24:e9:6e:ae:a6:55:e2:43:53:d3:a0:d7:7f:87: 19:0c:2c:a4:8d:08:a4:83:2f:84:32:7e:0a:7e:ec:80:7b:a7: 80:6c:56:a6:7e:94:31:a9:3b:db:ae:d6:7b:af:be:d6:eb:0e: 0e:95:9f:8d:89:60:01:6c:df:ac:14:f0:e7:17:fa:f3:c6:d7: 19:c2:74:b3:08:f9:29:fd:eb:96:69:6d:c5:89:55:aa:22:7b: cf:3c:1d:b1:16:04:f9:35:e9:a9:42:d9:b4:52:53:73:75:64: 13:99:83:34:58:12:e6:0e:1d:e8:f7:7f:9e:77:ee:56:a1:7a: 7a:ab:5e:87:40:ae:32:1e:7f:cb:e6:e3:d2:2e:54:11:b9:f6: 66:57:23:c5:1b:83:4a:70:df:b5:a1:d1:ab:7c:d0:33:67:15: 9b:38:c5:37:d2:5e:6d:a4:e7:17:36:d0:13:66:7a:3d:9c:0f: de:22:94:09:4a:d1:87:c3:a8:89:a2:39:9f:68:7c:31:35:99: 8a:24:4c:50:fb:15:31:f6:bd:42:06:05:59:75:db:ec:68:e5: 02:ae:95:ad:03:00:ce:5b:d9:45:b0:9b:51:a0:61:b9:9f:af: 8c:b5:82:b1:d5:b3:43:b7:4e:f1:d1:62:b8:15:57:97:76:e6: a6:cd:00:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0MEUxMTAvBgNVBAUTKDdGNzUwMEYxOTQ2MjA3MDc3NERDOEIzQjRCOTZBRjRF MUI5QkI1NDUwHhcNMjUwNzAyMTUzNjE1WhcNMjUwNzA5MTUzNjE1WjAYMRYwFAYD VQQDEw02ODY1NTFlZi1lMjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqQqRmDAg1+61wvIjVf0vF9mad6zkc0OUkQAtkaHGcJG+xUajT/6Z/De+h3E V2yF1hE2/JjNgM/CReGTQZdy46VZd8HhC0De4gp2E/hofTuqEY8MwsHHCnBWgDK0 X9BTVf3ysINYBtY13RaiohA2pUGh91fW03n4MJ9DBb/cPvLi+3e8kqndDW2FWNJg BgAd0KD8T+jIzLd3VyrJyfFy1k/Z5Lx77ED2Uvc9VC8PT2Po7QRf5GP87kwN7Y1/ hl6gpkZakFbJJJKE5jkfgDuUh2t3swZUR6Dm7s2ZvFVc7+JQ8FXtMAWdZjlUfyqa oGtsW2ZdiXzRvzBR7OQib3xYBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/FAHT6 yaaSYAnKdokBzlaOpHa5MB8GA1UdIwQYMBaAFH91APGUYgcHdNyLO0uWr04bm7VF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwRS9EQTEwRkY2NjYy RUUxMUUzQUFEOTlGODM1OTExRUEzMi9mM1VBOFpSaUJ3ZDAzSXM3UzVhdlRodWJ0 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YzVUE4WlJpQndkMDNJczdTNWF2VGh1YnRVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODQwRS9EQTEwRkY2NjYyRUUxMUUzQUFEOTlGODM1OTExRUEzMi9mM1VBOFpSaUJ3 ZDAzSXM3UzVhdlRodWJ0VVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9GWdIJOlurqZV4kNT06DXf4cZDCykjQikgy+EMn4KfuyAe6eAbFam fpQxqTvbrtZ7r77W6w4OlZ+NiWABbN+sFPDnF/rzxtcZwnSzCPkp/euWaW3FiVWq InvPPB2xFgT5NempQtm0UlNzdWQTmYM0WBLmDh3o93+ed+5WoXp6q16HQK4yHn/L 5uPSLlQRufZmVyPFG4NKcN+1odGrfNAzZxWbOMU30l5tpOcXNtATZno9nA/eIpQJ StGHw6iJojmfaHwxNZmKJExQ+xUx9r1CBgVZddvsaOUCrpWtAwDOW9lFsJtRoGG5 n6+MtYKx1bNDt07x0WK4FVeXduamzQDX -----END CERTIFICATE-----Generated at Thu Jul 3 00:32:18 2025 by rpki-client