$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft File: US3AbkHAiZokofyIXrNG5FMH80c.mft (raw, json) Hash identifier: HW//yLV/W/bUsgB/7tav5wu+gaZqUwaP3lsTm0gTRIw= Subject key identifier: A8:DB:FB:02:75:DB:9A:08:9A:81:5B:F9:80:79:17:B6:18:6B:63:6C Authority key identifier: 51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 Certificate issuer: /CN=A91BA4F2/serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Certificate serial: 096B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft Manifest number: 0964 Signing time: Mon 30 Jun 2025 20:21:20 +0000 Manifest this update: Mon 30 Jun 2025 20:21:20 +0000 Manifest next update: Mon 07 Jul 2025 20:21:20 +0000 Files and hashes: 1: US3AbkHAiZokofyIXrNG5FMH80c.crl (hash: k7V42b7e6Z3RoWT4aDpwllH8TfBg8dfSgg3gS6kmkiU=) 2: 9EEA3006979411EA8C6FC25AC4F9AE02.roa (hash: Y4bw++TnnqHhnQXoIqONS+4c30WzzpJSk4du/GajLxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2411 (0x96b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA4F2, serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Validity Not Before: Jun 30 20:21:20 2025 GMT Not After : Jul 7 20:21:20 2025 GMT Subject: CN=6862f1c0-aa8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:00:c1:f8:09:c1:78:5d:5f:c5:71:ef:49:57: 3a:ef:c7:0d:90:bd:52:1d:f1:31:83:12:d5:1a:fd: 8d:40:a4:a3:d0:40:f7:27:8e:b1:dd:27:e0:66:40: 28:cb:47:2a:09:21:05:c0:4f:de:75:18:95:86:0a: 36:f8:4b:d9:25:c4:fc:eb:2d:33:e4:25:b0:98:bf: ee:1e:d4:7f:2d:99:23:7f:ce:23:c2:32:27:f9:38: 63:96:46:83:56:33:3e:bd:ef:11:19:11:55:9d:10: 9e:4d:ca:4c:fe:65:57:bc:04:12:f3:cb:14:1d:62: a9:a2:d8:e1:2b:d4:76:c9:dc:73:e6:e2:a7:66:cb: c4:27:e5:85:6f:73:ac:26:f5:12:1c:72:ef:8e:b8: ff:5b:72:82:dd:e8:25:3b:7c:13:0c:40:23:3c:d4: 7b:d0:ba:f5:38:cf:06:57:fd:8c:17:58:5a:57:7e: 33:6f:cd:a1:a7:4a:11:10:65:c9:ce:57:4b:54:d2: 55:09:3d:3b:c9:c7:77:ea:24:f7:e9:97:a8:0a:92: 5e:5e:e4:6b:e3:69:99:4d:b5:dc:fa:42:7e:23:75: 87:9b:80:fe:ef:78:77:73:b0:7d:78:18:7c:25:23: ff:89:3b:2e:82:1b:12:8f:40:fd:aa:c0:f6:a9:3e: 7b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DB:FB:02:75:DB:9A:08:9A:81:5B:F9:80:79:17:B6:18:6B:63:6C X509v3 Authority Key Identifier: keyid:51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:2c:93:8e:47:dd:d3:92:6e:20:dd:e4:9f:04:d3:16:2f:3f: 11:ef:39:90:6f:5f:1b:1a:b9:9f:57:76:ba:0c:a0:41:fe:82: ff:87:61:13:5b:c9:9c:4b:34:39:71:e6:29:a1:89:e9:1f:d0: ce:43:9d:5f:41:7c:c1:9f:36:56:f5:d2:a2:00:53:40:76:93: 39:e8:2b:00:9b:f7:f3:03:d9:67:b4:9c:e0:5f:45:5d:fe:78: 66:5d:bf:9b:ce:27:d9:7e:3d:f7:d2:9a:f1:93:bf:01:5f:80: 19:2c:5b:0c:ad:45:af:17:04:65:76:24:b3:84:49:fd:5a:da: 4b:fc:33:f1:70:79:9e:f4:f3:0b:26:e1:6d:69:db:d5:ed:11: 4f:f5:8d:ca:2d:4f:66:f6:d6:b0:1c:7c:14:5f:cc:1c:ed:38: f4:a8:ab:cd:74:a7:0a:8f:30:b5:6e:4d:d1:6a:fe:7b:0f:9a: 29:db:1b:9e:72:cf:97:f4:52:71:9d:14:75:bb:9f:14:9f:04: ad:26:16:a6:4b:9c:c4:5c:c7:ef:2c:0e:5b:5f:65:a2:9d:d2: 29:25:8f:49:66:ab:2a:aa:1e:29:42:f6:5f:df:6f:53:69:43: e6:e8:62:b4:68:4f:06:74:bb:79:6a:c6:a2:42:77:be:09:d0: 3e:85:0e:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE0RjIxMTAvBgNVBAUTKDUxMkRDMDZFNDFDMDg5OUEyNEExRkM4ODVFQjM0NkU0 NTMwN0YzNDcwHhcNMjUwNjMwMjAyMTIwWhcNMjUwNzA3MjAyMTIwWjAYMRYwFAYD VQQDEw02ODYyZjFjMC1hYThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wDB+AnBeF1fxXHvSVc678cNkL1SHfExgxLVGv2NQKSj0ED3J46x3SfgZkAo y0cqCSEFwE/edRiVhgo2+EvZJcT86y0z5CWwmL/uHtR/LZkjf84jwjIn+ThjlkaD VjM+ve8RGRFVnRCeTcpM/mVXvAQS88sUHWKpotjhK9R2ydxz5uKnZsvEJ+WFb3Os JvUSHHLvjrj/W3KC3eglO3wTDEAjPNR70Lr1OM8GV/2MF1haV34zb82hp0oREGXJ zldLVNJVCT07ycd36iT36ZeoCpJeXuRr42mZTbXc+kJ+I3WHm4D+73h3c7B9eBh8 JSP/iTsughsSj0D9qsD2qT57wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjb+wJ1 25oImoFb+YB5F7YYa2NsMB8GA1UdIwQYMBaAFFEtwG5BwImaJKH8iF6zRuRTB/NH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTRGMi8yQUVERUY5QTk3 OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWlab2tvZnlJWHJORzVGTUg4 MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTM0Fia0hBaVpva29meUlYck5HNUZNSDgwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTRGMi8yQUVERUY5QTk3OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWla b2tvZnlJWHJORzVGTUg4MGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuLJOOR93Tkm4g3eSfBNMWLz8R7zmQb18bGrmfV3a6DKBB/oL/h2ET W8mcSzQ5ceYpoYnpH9DOQ51fQXzBnzZW9dKiAFNAdpM56CsAm/fzA9lntJzgX0Vd /nhmXb+bzifZfj330prxk78BX4AZLFsMrUWvFwRldiSzhEn9WtpL/DPxcHme9PML JuFtadvV7RFP9Y3KLU9m9tawHHwUX8wc7Tj0qKvNdKcKjzC1bk3Rav57D5op2xue cs+X9FJxnRR1u58UnwStJhamS5zEXMfvLA5bX2WindIpJY9JZqsqqh4pQvZf329T aUPm6GK0aE8GdLt5asaiQne+CdA+hQ5d -----END CERTIFICATE-----Generated at Tue Jul 1 00:33:19 2025 by rpki-client