$ rpki-client -vvf rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft File: f3UA8ZRiBwd03Is7S5avThubtUU.mft (raw, json) Hash identifier: lfhi/mO4dqsLmK220ciI9Q/7DOTMlL7NRrIvdAWNUVU= Subject key identifier: E4:50:70:1F:3E:AC:7C:35:E9:BC:DB:28:17:2C:0E:EB:73:F0:FB:A2 Authority key identifier: 7F:75:00:F1:94:62:07:07:74:DC:8B:3B:4B:96:AF:4E:1B:9B:B5:45 Certificate issuer: /CN=A91A840E/serialNumber=7F7500F19462070774DC8B3B4B96AF4E1B9BB545 Certificate serial: 2E37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft Manifest number: 2E37 Signing time: Fri 22 Aug 2025 15:32:12 +0000 Manifest this update: Fri 22 Aug 2025 15:32:12 +0000 Manifest next update: Fri 29 Aug 2025 15:32:12 +0000 Files and hashes: 1: f3UA8ZRiBwd03Is7S5avThubtUU.crl (hash: w3Nw76uaBpgXf/WgzjNZIWnp/883IRC0S7JLmlFjxl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.crl rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11831 (0x2e37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A840E, serialNumber=7F7500F19462070774DC8B3B4B96AF4E1B9BB545 Validity Not Before: Aug 22 15:32:12 2025 GMT Not After : Aug 29 15:32:12 2025 GMT Subject: CN=68a88d7c-9b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:25:94:89:af:a3:74:7b:7a:89:2c:c8:ff:13: 0c:e3:95:f8:d1:1c:4e:59:e9:36:aa:cb:7f:56:14: f7:92:26:9b:44:9b:62:66:75:2a:98:10:f1:69:28: e4:79:4e:35:0b:ea:ac:73:dd:28:05:f2:56:6d:93: a4:c8:ed:48:7b:21:49:49:af:47:a7:b9:28:69:f2: f1:e0:4f:2a:77:fa:a4:95:17:df:5f:a9:17:d0:64: 0a:eb:27:96:18:8f:1b:b5:01:ed:9f:ff:13:93:0a: 3a:19:c5:02:64:03:c3:af:99:71:b6:6d:79:2e:d4: 17:08:e3:d9:d1:ef:b9:0c:6c:e0:76:73:a6:19:fe: e5:ec:8a:ae:9f:b4:37:17:ad:c6:39:66:a6:6c:bb: 52:af:44:bf:00:78:72:e0:24:4d:19:76:d1:55:40: 57:9e:e6:5a:d3:9f:34:75:13:38:20:07:9e:e2:69: dc:c2:3f:ef:5e:ef:3a:39:57:7a:2d:9e:6c:85:61: 12:c4:d8:14:9a:ea:0a:4a:32:42:76:4f:87:8e:c8: 58:97:64:06:c4:de:92:fa:4a:b6:1a:70:ee:b5:75: 97:7b:dd:59:e4:57:41:00:32:ea:84:1f:0f:6c:27: 17:b4:5e:90:fa:95:a9:58:98:36:ea:67:82:f9:84: b8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:50:70:1F:3E:AC:7C:35:E9:BC:DB:28:17:2C:0E:EB:73:F0:FB:A2 X509v3 Authority Key Identifier: keyid:7F:75:00:F1:94:62:07:07:74:DC:8B:3B:4B:96:AF:4E:1B:9B:B5:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:7a:f1:df:29:50:eb:bc:f1:62:ed:ba:0a:e8:a6:5d:42:bd: 03:c4:5d:6d:9f:73:07:1b:0d:21:c8:20:99:64:40:53:b6:91: b2:fc:27:6f:03:24:d2:fe:cd:1a:04:30:b3:34:26:c1:5b:11: c8:1b:8d:0c:06:41:92:b1:7e:bd:b3:ad:05:e6:2b:11:60:ef: 40:19:73:fa:06:6f:81:51:c0:86:8e:d1:2c:57:b5:1e:6d:70: db:57:bd:a4:c1:c0:a0:a7:7b:cc:6c:b3:fd:fe:46:a1:71:b3: 54:9a:13:cf:f7:ae:22:63:66:33:30:cd:67:89:be:a5:ed:95: f3:21:03:d8:10:38:d8:20:19:83:90:33:33:a1:48:32:d0:f9: 1f:c3:2f:9b:11:1f:aa:22:20:88:dc:c2:3b:12:4a:11:f7:d1: 11:8b:78:70:b7:72:af:25:df:e8:73:a1:13:43:29:a2:cc:a2: e6:59:dd:e3:49:50:82:38:ce:4e:eb:d0:87:d1:d9:7d:79:5e: 40:1f:45:ec:a7:31:07:9a:26:ec:c1:4f:58:f1:d9:d6:f5:17: 77:a7:ff:3d:c1:cf:33:cb:c4:3f:c1:7e:03:6f:35:90:ef:c1: 63:a6:b1:e1:e6:a5:5f:fc:ba:90:3a:74:b8:c8:7b:ba:af:a1: 80:d1:2e:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0MEUxMTAvBgNVBAUTKDdGNzUwMEYxOTQ2MjA3MDc3NERDOEIzQjRCOTZBRjRF MUI5QkI1NDUwHhcNMjUwODIyMTUzMjEyWhcNMjUwODI5MTUzMjEyWjAYMRYwFAYD VQQDEw02OGE4OGQ3Yy05YjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSWUia+jdHt6iSzI/xMM45X40RxOWek2qst/VhT3kiabRJtiZnUqmBDxaSjk eU41C+qsc90oBfJWbZOkyO1IeyFJSa9Hp7koafLx4E8qd/qklRffX6kX0GQK6yeW GI8btQHtn/8Tkwo6GcUCZAPDr5lxtm15LtQXCOPZ0e+5DGzgdnOmGf7l7Iqun7Q3 F63GOWambLtSr0S/AHhy4CRNGXbRVUBXnuZa0580dRM4IAee4mncwj/vXu86OVd6 LZ5shWESxNgUmuoKSjJCdk+HjshYl2QGxN6S+kq2GnDutXWXe91Z5FdBADLqhB8P bCcXtF6Q+pWpWJg26meC+YS4PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORQcB8+ rHw16bzbKBcsDutz8PuiMB8GA1UdIwQYMBaAFH91APGUYgcHdNyLO0uWr04bm7VF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwRS9EQTEwRkY2NjYy RUUxMUUzQUFEOTlGODM1OTExRUEzMi9mM1VBOFpSaUJ3ZDAzSXM3UzVhdlRodWJ0 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YzVUE4WlJpQndkMDNJczdTNWF2VGh1YnRVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODQwRS9EQTEwRkY2NjYyRUUxMUUzQUFEOTlGODM1OTExRUEzMi9mM1VBOFpSaUJ3 ZDAzSXM3UzVhdlRodWJ0VVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfevHfKVDrvPFi7boK6KZdQr0DxF1tn3MHGw0hyCCZZEBTtpGy/Cdv AyTS/s0aBDCzNCbBWxHIG40MBkGSsX69s60F5isRYO9AGXP6Bm+BUcCGjtEsV7Ue bXDbV72kwcCgp3vMbLP9/kahcbNUmhPP964iY2YzMM1nib6l7ZXzIQPYEDjYIBmD kDMzoUgy0Pkfwy+bER+qIiCI3MI7EkoR99ERi3hwt3KvJd/oc6ETQymizKLmWd3j SVCCOM5O69CH0dl9eV5AH0XspzEHmibswU9Y8dnW9Rd3p/89wc8zy8Q/wX4DbzWQ 78FjprHh5qVf/LqQOnS4yHu6r6GA0S5w -----END CERTIFICATE-----Generated at Sat Aug 23 19:33:29 2025 by rpki-client