$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft File: US3AbkHAiZokofyIXrNG5FMH80c.mft (raw, json) Hash identifier: DQxQXhIG83WI4HL12/JfcVifuBB16y9IW1tU5+vtf8U= Subject key identifier: C1:4D:A0:BB:12:D8:12:9B:13:3F:C2:83:63:8D:12:9B:1D:E0:F0:D8 Authority key identifier: 51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 Certificate issuer: /CN=A91BA4F2/serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Certificate serial: 0986 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft Manifest number: 097F Signing time: Fri 22 Aug 2025 20:15:08 +0000 Manifest this update: Fri 22 Aug 2025 20:15:08 +0000 Manifest next update: Fri 29 Aug 2025 20:15:08 +0000 Files and hashes: 1: US3AbkHAiZokofyIXrNG5FMH80c.crl (hash: GfpTdQ3M7W8uc9i2JvnJCP4i/+O21iX/Ar2j1anUHW4=) 2: 9EEA3006979411EA8C6FC25AC4F9AE02.roa (hash: Y4bw++TnnqHhnQXoIqONS+4c30WzzpJSk4du/GajLxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2438 (0x986) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA4F2, serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Validity Not Before: Aug 22 20:15:08 2025 GMT Not After : Aug 29 20:15:08 2025 GMT Subject: CN=68a8cfcc-0509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:34:9c:3d:b5:78:b4:b6:ac:15:38:ce:f2:69: 77:e7:1d:36:c4:d0:52:d8:3a:b3:26:7d:4a:56:9c: c5:b5:94:81:da:00:3b:46:12:8f:5d:7e:af:a8:23: 84:33:f0:06:7e:3e:a7:0b:10:6c:67:cb:4c:8d:39: d2:30:43:28:58:60:34:ee:77:a4:5c:dd:cf:41:77: 55:92:39:4b:f8:ee:1a:64:ba:ff:9e:9e:24:d9:4c: db:6a:b4:32:c5:54:c4:fb:46:5d:74:47:ab:31:d4: a7:e1:2b:fb:9b:fa:6c:29:d5:d4:36:d3:c6:ef:da: e7:29:09:14:e6:4a:e3:80:21:51:8c:db:91:46:5d: 1f:91:7d:59:29:98:0e:d9:ea:3c:95:41:67:55:d5: aa:47:30:81:21:1f:55:93:e0:6b:99:e5:e4:5b:0e: 09:e5:60:15:fc:65:5e:50:2c:45:ce:94:cb:9d:d2: a7:42:81:16:df:29:09:59:42:09:5f:e5:c3:ed:dd: ae:b6:c1:46:69:5b:56:92:2e:28:a2:5e:f7:5c:a3: 30:d1:db:26:00:9d:b2:73:0b:ef:47:c9:4e:71:df: 9c:06:91:ff:4f:75:d2:e3:3c:4a:01:6a:4b:6d:ee: 1d:32:9b:3f:ee:5a:73:76:e7:60:16:e4:e4:4a:ec: ab:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4D:A0:BB:12:D8:12:9B:13:3F:C2:83:63:8D:12:9B:1D:E0:F0:D8 X509v3 Authority Key Identifier: keyid:51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:0a:ff:c4:d5:2d:89:de:b8:65:b5:88:ca:f4:17:dc:a7:a4: 23:1b:38:70:c4:26:fc:cf:ae:3e:79:7f:51:1e:fc:fc:fe:f6: 42:39:a3:53:66:d9:88:d3:fe:fc:b1:1a:54:9a:06:1f:69:29: 73:87:af:92:76:fe:c2:84:71:ed:1c:54:af:cc:13:da:54:9f: ea:c8:51:6a:de:cc:58:f7:e7:f1:72:6e:91:28:db:2b:14:0f: f8:52:e7:0c:ba:6b:9c:8d:0e:e0:73:2b:19:80:3f:27:ce:2b: d9:07:4a:2f:1a:e5:33:17:0e:08:6e:47:81:65:07:ae:6c:4d: b8:a9:aa:88:98:12:15:17:0a:95:50:3c:ae:2d:b1:cb:ce:48: e4:99:09:97:c9:1b:cc:03:ee:1b:52:39:a4:40:b6:9a:31:00: 8d:f7:6d:27:3f:e7:d4:6a:ff:16:12:e4:33:99:1a:b0:7a:dd: 4e:21:36:44:db:43:8e:68:26:e3:62:b1:8a:c8:7a:2d:c0:e1: 9c:64:8c:a0:5b:56:c5:6b:9e:81:f1:ca:be:fa:9f:ea:33:2f: f4:5b:69:f6:c6:00:f6:d1:cc:aa:36:ae:bd:05:dd:26:40:44: 43:df:41:44:4f:7f:1d:c3:1f:05:de:ff:33:da:2d:67:3c:c2: 94:7b:cc:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE0RjIxMTAvBgNVBAUTKDUxMkRDMDZFNDFDMDg5OUEyNEExRkM4ODVFQjM0NkU0 NTMwN0YzNDcwHhcNMjUwODIyMjAxNTA4WhcNMjUwODI5MjAxNTA4WjAYMRYwFAYD VQQDEw02OGE4Y2ZjYy0wNTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzScPbV4tLasFTjO8ml35x02xNBS2DqzJn1KVpzFtZSB2gA7RhKPXX6vqCOE M/AGfj6nCxBsZ8tMjTnSMEMoWGA07nekXN3PQXdVkjlL+O4aZLr/np4k2UzbarQy xVTE+0ZddEerMdSn4Sv7m/psKdXUNtPG79rnKQkU5krjgCFRjNuRRl0fkX1ZKZgO 2eo8lUFnVdWqRzCBIR9Vk+BrmeXkWw4J5WAV/GVeUCxFzpTLndKnQoEW3ykJWUIJ X+XD7d2utsFGaVtWki4ool73XKMw0dsmAJ2ycwvvR8lOcd+cBpH/T3XS4zxKAWpL be4dMps/7lpzdudgFuTkSuyrhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFNoLsS 2BKbEz/Cg2ONEpsd4PDYMB8GA1UdIwQYMBaAFFEtwG5BwImaJKH8iF6zRuRTB/NH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTRGMi8yQUVERUY5QTk3 OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWlab2tvZnlJWHJORzVGTUg4 MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTM0Fia0hBaVpva29meUlYck5HNUZNSDgwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTRGMi8yQUVERUY5QTk3OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWla b2tvZnlJWHJORzVGTUg4MGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkCv/E1S2J3rhltYjK9Bfcp6QjGzhwxCb8z64+eX9RHvz8/vZCOaNT ZtmI0/78sRpUmgYfaSlzh6+Sdv7ChHHtHFSvzBPaVJ/qyFFq3sxY9+fxcm6RKNsr FA/4UucMumucjQ7gcysZgD8nzivZB0ovGuUzFw4IbkeBZQeubE24qaqImBIVFwqV UDyuLbHLzkjkmQmXyRvMA+4bUjmkQLaaMQCN920nP+fUav8WEuQzmRqwet1OITZE 20OOaCbjYrGKyHotwOGcZIygW1bFa56B8cq++p/qMy/0W2n2xgD20cyqNq69Bd0m QERD30FET38dwx8F3v8z2i1nPMKUe8yE -----END CERTIFICATE-----Generated at Sat Aug 23 20:15:34 2025 by rpki-client